| ca3mijhnsg.download-soft.xyz/imTokenCommon/saved_re/imTokenCommon |  104.21.21.44 | 404 Not Found | 0 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/saved_re/imTokenCommon IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/saved_re/imTokenCommon HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sat, 04 May 2024 16:02:58 GMT
content-length: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fzdCY80hhp7oCpar%2F51vyWKYoQlc3z5CLDYNQGKvJNg9jTn0qVdEXB%2BWNPGWMMUl84Aip42R97JIEeyP38LroetrobiBEqigy%2BHW4mhtH7NamwrOoxF4OrMkEwnMeCwFu59tZBcr2ag1NbBsYQbt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d81808b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/vendor.ddc3f9c8.js | 104.21.21.44 | 404 Not Found | 0 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/vendor.ddc3f9c8.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/vendor.ddc3f9c8.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sat, 04 May 2024 16:02:58 GMT
content-length: 0
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=geAePystkWsTEhqkWn16UM%2FbJ%2Fq4KElYjTurWQF32GsUeR7VjFfYpmtwlkEXBibmCEOd1wYyHTI0IdkqfSv3BrAXiqQMLYw6y7gJSiVInwd7pRcK4ONuhnhSI%2Bb9OsEDEHfbxMgpoGUu%2FOpSsvz9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7d81ffbb4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/vendor.06c7227b(1).js | 104.21.21.44 | 404 Not Found | 0 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/vendor.06c7227b(1).js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/vendor.06c7227b(1).js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sat, 04 May 2024 16:02:58 GMT
content-length: 0
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6N8JkmDfvR63UpybH7FQs%2BCi54aitbmZOJehjs%2Bo2rcJOnYG6odQCw0slMT%2BG7ojwyDQVD9oms6DzQ%2BQtcDrefMoZlsDqi475OQiVze%2Btb7DTQD9Yg63R8x6xFZwZgxsTMEen4Qfpf2rOXZ1hKkw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7d82818b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/js | 104.21.21.44 | 404 Not Found | 0 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sat, 04 May 2024 16:02:58 GMT
content-length: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0iubC3UBnyspdg0eAJSwOTTsd75oY8709cLF6ui5AOovjxS06VPFQI%2BUQ9UHwx5furX5HlQ626nPn4dG%2BmAu%2F%2FFgvOc22YXwRQmAzj5E%2BThmXaE99UJMvdw3XlWuErWZ4K3KEOutilAJ7gAwGm95"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d82816b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/vendor.06c7227b.js | 104.21.21.44 | 404 Not Found | 0 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/vendor.06c7227b.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/vendor.06c7227b.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sat, 04 May 2024 16:02:58 GMT
content-length: 0
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MWDUWsX0dhiOkRrGCvVh67ZPSeMtAVjDN107gbm8rEaRdqonJJXTk9otKRMZHotcv7T645bAMFOVj3rOFaA7WqxCxgD%2FPbBGF4mH5Uv40RfOqb0WfCxpgnYwFHqFBIkK%2BtEamGCGhgFm52%2BzKmbJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7d81809b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/main.780c1936.js | 104.21.21.44 | 404 Not Found | 0 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/main.780c1936.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/main.780c1936.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sat, 04 May 2024 16:02:58 GMT
content-length: 0
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lnw9J1xQReL9euXJOxDD4r1vHiNc07tzXpzjHQPXMUTMImtVbjsar2Fxdr%2BsXy1oUF2IvTHA4RsO2NzJTNI4CIzUL7TbeISarRJ%2BRKyq8fsGZXZFOMvXrKCvsydDIhjPScJM61QYPPhJE3IyTV5P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7d82814b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/main.780c1936(1).js | 104.21.21.44 | 404 Not Found | 0 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/main.780c1936(1).js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/main.780c1936(1).js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sat, 04 May 2024 16:02:58 GMT
content-length: 0
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IL9DdK6M0rpNg7BcYUoGRw0x%2F5J4x8Bhm8xx1qeoE2MYILq0oqLbrw8SWrqEJnrtgqzQZtMkqFiO9YTgik4SB6uoJuPmaydE69Fd4DOtLqyCjBgweMwuXXmov4zmF5c%2FFhHNgy%2BUQBi7qL9kS%2F5f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7d8281ab4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/main-6d7666d16eba6ca8fdb6.js | 104.21.21.44 | 404 Not Found | 0 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/main-6d7666d16eba6ca8fdb6.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/main-6d7666d16eba6ca8fdb6.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sat, 04 May 2024 16:02:58 GMT
content-length: 0
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zCYeZYc7W39qWr0Jy4TTqJ%2FlXO%2B2vC2UZfga0YgzZj2v1YqvTedQPVwSqoGrSdYXtcTdjOw7WQJ5mQhEFON1jf1hlkKw0y58LxwHVxZ2QdiH8hyBlgHzjlFH48GywnxN8cjcOBvJD%2BoApJ2xxHIr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7d82830b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/index-8cb9403ec4cb3dc25907.js | 104.21.21.44 | 404 Not Found | 0 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/index-8cb9403ec4cb3dc25907.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/index-8cb9403ec4cb3dc25907.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sat, 04 May 2024 16:02:58 GMT
content-length: 0
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WNSjQ%2BGc%2BEKC2fAijfqOWMcxIlqLBpEjh%2BkC7zzrbljpHVi0Lml9VAybVDvugpY9aZhwL4hLJhkrTwnOnqbNnjKrRNVyQM1bte5WpvCVZCTz9KQh9Q45cJZSJWDwOYs%2BFjD7mLEQrdWqE5Or%2FVou"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7d8485ab4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/scrollreveal.min.js | 104.21.21.44 | 200 OK | 3.1 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/scrollreveal.min.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeJavaScript source, ASCII text, with very long lines (9095), with no line terminators Hash126cb7c432914f6c726ff146110dcb75 e5358bdb7769288dc7c2dc10508e98387e85b6e2 fd08659fe0f20fd14dcf4c3c5acdde64de96028174f59b0b3dc776b62be789b9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/scrollreveal.min.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:28 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g5yBqszO5dVLPLrb1tfyLzmPPPfm6SVtKmXlNVN8tFFqgA39djVODtfA1xhHwkz0QCRJH9nCMktgd3iylMDKuRWwAo2qAULsseMH%2BfrZEOnRu0QvpFBnqaeoe6bMGGoXZlwJaOWYuuUkVzmihhXl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d8281cb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/down/ozetAp | 104.21.21.44 | | 31 kB |
URL ca3mijhnsg.download-soft.xyz/down/ozetAp IP104.21.21.44:0
CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeHTML document, ASCII text Hashb8d4645a462bf094f6bed574c7dcd038 83209d05424525576c4a459fdbe7a8c165daf2cd ac8e83471ef074562dc789b289dfce85b5d84d0d599a70de1f067a5e0b9c4c08
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /down/ozetAp HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 16:02:57 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zoCIE%2B68vRxlXOA%2F5QdOUO7Hdo3EKl0kOKBOvUuaP5pTNh6C0E9FrjW%2Fs7MzyCJfTuLZH9Ocn9eTZRn68YNQ2%2Fhs28buc9pJiLcqWUHARAxL0p5qmo3p7uico%2FWnbtbCcrqLCYitEKItEE7hpLUm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7c8cbb40afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/main-6d7666d16eba6ca8fdb6.js | 104.21.21.44 | 404 Not Found | 0 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/main-6d7666d16eba6ca8fdb6.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/main-6d7666d16eba6ca8fdb6.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sat, 04 May 2024 16:02:58 GMT
content-length: 0
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cFX5jGBsi0ibGQs6YhNa1JyCwvAc5ctmeU2%2FMooWsp0H1kLuPcBYWGYRtNF8u52oRdE58ZaB2sYlcIOsysAs0PR7duxtFdh%2Bo6%2BTmroUrgXK%2FaB03OFTVegTf7eoPhPGlmbzoPAKPtlFMqcmpWgD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7dd1889b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/index-8cb9403ec4cb3dc25907.js | 104.21.21.44 | 404 Not Found | 0 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/index-8cb9403ec4cb3dc25907.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/index-8cb9403ec4cb3dc25907.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sat, 04 May 2024 16:02:58 GMT
content-length: 0
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e7%2FNbKgT5CRM00H1Pl0omuxJk7qoIBpQ21tYtOG8%2BFyGLd4rNMoIk58c5pveKHJIFVbSKDK6oiNjlAo%2BzW2s1S%2BjHtzqsBZCTD6ufu4rQv4hT6o4L4ui%2B1Gx0uByjt5k4xgEcLpr0Zkb6oS9ujQ4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7dd1890b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/saved_re/imTokenCommon | 104.21.21.44 | 404 Not Found | 0 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/saved_re/imTokenCommon IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/saved_re/imTokenCommon HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sat, 04 May 2024 16:02:58 GMT
content-length: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QIsJ2MFqcBMg99i0sdVKt9jZJadUiwriwnJWpLkPTxa1Pa37TxR3we36SraxwtAZfbF%2BSX0bmbmFFK7rW%2FNGEJxQfTvaDob6wf4hpdEac8UpkcMqpkJIEYqWQCpVZm%2FhMHLU0jMSVwMZNpFzFu0q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7dc4f48b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/js | 104.21.21.44 | 404 Not Found | 0 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sat, 04 May 2024 16:02:58 GMT
content-length: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j%2ByFsxzKy8oUM%2F7NXmQMMCa2NnlD8mo0zDKAK7MyULtZcjhNJOWk47fGwr0o8sCoSXTp6FnrmN%2FL1HbIkCLA2lIFcFw7I93ZMibgAs0F%2FchOkQX5bIvgdkBbtqEo2VkvAsamUiQCMlafU%2FOCEkKW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7dc7f87b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/banner.png | 104.21.21.44 | 200 OK | 46 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/banner.png IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typePNG image data, 1000 x 1000, 8-bit colormap, non-interlaced Hashad9792ead2ce10cf4db72cb8a5ad7abb 1eafd79d8630feebc01d806a4bf525b0c6b1e0e8 e075e1cdad6e176e330ac0f927da14388ba5ad54cc0888b39dd54051b9987e61
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/banner.png HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:59 GMT
content-type: image/png
content-length: 46178
last-modified: Wed, 21 Dec 2022 06:12:30 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PPE7fS4NOLcIm5zvrSZUrmCJKaopj0y5wSFx9OSRVdVa91sBUrPJFX3%2FoS4bNjNPWFFJtanndu7%2FHxFQFE9XmG3cloCjEjZN%2BkKq1L5hSOkoNydZex%2F3i%2F4u9dAuX%2Bdnyu%2B4gPHVxb%2BF8U9U9n33"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7d84867b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| beacon-v2.helpscout.net/ |  54.230.111.96 | 200 OK | 328 B |
IP54.230.111.96:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerAmazon Subject*.helpscout.net FingerprintFA:94:D9:61:74:FC:5D:96:59:8E:11:C7:73:8E:F3:84:B4:19:52:82 ValidityMon, 18 Mar 2024 00:00:00 GMT - Tue, 15 Apr 2025 23:59:59 GMT
File typeASCII text, with very long lines (458), with no line terminators Hash59d627b0dd43c1acb1a9df3c8b0196cf db6dc827bd940dccba1a786880f0c1d984247ef2 be20c5c0d38e8f821b824d88c5358ecbc794f000f7a6782586c91a0d489fa98c
GET / HTTP/1.1
Host: beacon-v2.helpscout.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 328
last-modified: Mon, 29 Apr 2024 09:02:06 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Sat, 04 May 2024 16:02:35 GMT
cache-control: max-age=120, s-maxage=120, public
etag: "6954bef8cfc6a6ab13d60d02135ad187"
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OplOO_85sdU4i9bry9Uqty3AYM58WOuv5PZFAR05P8Kpz-PSoABi0Q==
age: 25
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| beacon-v2.helpscout.net/static/js/vendor.0c11f266.js | 54.230.111.96 | 200 OK | 18 kB |
URL GET HTTP/2beacon-v2.helpscout.net/static/js/vendor.0c11f266.js IP54.230.111.96:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerAmazon Subject*.helpscout.net FingerprintFA:94:D9:61:74:FC:5D:96:59:8E:11:C7:73:8E:F3:84:B4:19:52:82 ValidityMon, 18 Mar 2024 00:00:00 GMT - Tue, 15 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (52037), with no line terminators Hash30808baf102d1e31fdd78d51c5d63ab1 aa6e2b75e99b14691e99782ae9e96cd2045ae04f 14d3eea2bbe24e151d544e67883a6635ce7d9b0cf6175517980fe444ad373f77
GET /static/js/vendor.0c11f266.js HTTP/1.1
Host: beacon-v2.helpscout.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 17765
last-modified: Mon, 29 Apr 2024 09:02:07 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Sat, 04 May 2024 15:55:25 GMT
cache-control: max-age=315360000, s-maxage=7200, public
etag: "e0eaa5e68d866fd2edde772ad7db7720"
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: p3jg71AoXo8cew6aqZ-hYskk48TM2sj_-XOmed7zjdGLt7D6kLbKRg==
age: 454
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| beacon-v2.helpscout.net/static/js/main.5db76a65.js | 54.230.111.96 | 200 OK | 13 kB |
URL GET HTTP/2beacon-v2.helpscout.net/static/js/main.5db76a65.js IP54.230.111.96:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerAmazon Subject*.helpscout.net FingerprintFA:94:D9:61:74:FC:5D:96:59:8E:11:C7:73:8E:F3:84:B4:19:52:82 ValidityMon, 18 Mar 2024 00:00:00 GMT - Tue, 15 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (31558) Hashec73056f8b4aeea585de5f4c9d3b0131 2246f10720b5b095df091473dca069485772fda9 7bdb4689706c8ae335d3753008d4863272ce46a5fe10caeaf0631ff87624818e
GET /static/js/main.5db76a65.js HTTP/1.1
Host: beacon-v2.helpscout.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 12630
last-modified: Mon, 29 Apr 2024 09:02:06 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Sat, 04 May 2024 15:35:35 GMT
cache-control: max-age=315360000, s-maxage=7200, public
etag: "a70c53131633dc37fdbf7a1a9d2d5363"
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: H7KUj_ap_5UkgqQykjO2RCMkI5u3ZOunVntjIMSe2qaQtBQ2PGQE6w==
age: 1648
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| www.token.im/img/favicon-16x16.png | 104.22.10.13 | 200 OK | 564 B |
URL GET HTTP/2www.token.im/img/favicon-16x16.png IP104.22.10.13:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerDigiCert Inc Subject*.token.im Fingerprint56:1C:F7:57:5D:CF:2D:A9:E5:C4:15:DC:CC:B3:09:F6:10:48:DB:87 ValidityWed, 07 Jun 2023 00:00:00 GMT - Fri, 07 Jun 2024 23:59:59 GMT
File typePNG image data, 16 x 17, 8-bit/color RGBA, non-interlaced Hasha9e72fde9756f0477fbdfce7b2725020 cb8208cd7824a287db8d97e8750cd0b0c7b9704c d292c48434ad9c30f4220e220c5cb53f8221acdf0e93e59de5659f7b4e735af6
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /img/favicon-16x16.png HTTP/1.1
Host: www.token.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 16:02:59 GMT
content-type: image/png
content-length: 564
last-modified: Thu, 18 Apr 2024 01:40:19 GMT
cache-control: max-age=31536
x-frame-options: SAMEORIGIN
x-from: gke-prod
x-xss-protection: 1; mode=block
x-geoip-city-country-code: NO
x-geoip-city-country-name: Norway
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
via: 1.1 google
cf-cache-status: EXPIRED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7df6ad95687-OSL
X-Firefox-Spdy: h2
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/484c840239a025432effd6ecc373d498fa764368.34ac5b45e5ac1c3a47cb.js | 104.21.21.44 | 200 OK | 65 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/484c840239a025432effd6ecc373d498fa764368.34ac5b45e5ac1c3a47cb.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeJavaScript source, ASCII text, with very long lines (65280), with no line terminators Hash0c2aa78fd53424b531b23019b0a41401 df5c37ac3c5e3fc2bc9dcbdea265d83cc4a37ead 4274c6c7974b1bfcbe1d03791149eb32934d159bc4d6bcc5174c0d02c46aabb3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/484c840239a025432effd6ecc373d498fa764368.34ac5b45e5ac1c3a47cb.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:44 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lyyWPyjckGksS%2BadW90DB%2BpP7kQUyXma5qJFuHDqecxxdEJ1MxbD6By3n7E2PiRe7T0N1E%2FlOOaA8JYQ3ps94p%2F4OFB6CW1WnQvkz1PO%2By709%2FWm7hERz6Fgprp82y3L5hIujmelVUFkXf0k2kWM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d8484cb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/framework.7425f7c0f2c0fa6b9f98.js | 104.21.21.44 | 200 OK | 129 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/framework.7425f7c0f2c0fa6b9f98.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size129 kB (129218 bytes) Hashe1ff77e618abd1dda42076059844b3bd ef903e1a9fd286d99fd2c12321258d23632ddd12 3b23efa8cbbe6cf291780e1677d4dde9d3e6f1394c1a188ece60c5726df76815
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/framework.7425f7c0f2c0fa6b9f98.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:40 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wb7XD95IPQluapta8oVzNOLQRn8czKTTFrvxPw1ZD8XaA1BVaRaF3lbLDGY5Ck81gFvEEaTB%2BtoSXrpAf4dLTI4TCuDdu5fWaboEALdsnvmoJ%2BJB6%2FESi69r4ACH9EQuP51G6iEha6REG8c3eY22"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d82834b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/484c840239a025432effd6ecc373d498fa764368_CSS.955cd01b185e91c5e5fc.js | 104.21.21.44 | 200 OK | 70 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/484c840239a025432effd6ecc373d498fa764368_CSS.955cd01b185e91c5e5fc.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeASCII text, with no line terminators Hash092922c847857276e09f07690ba228b6 58af57d706abde6c2cfc903e3159f31c56ab92a4 6883cd41cde71a856edc40ec217867277c437fe4c2434a6f78fdc341a3f3de5f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/484c840239a025432effd6ecc373d498fa764368_CSS.955cd01b185e91c5e5fc.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
last-modified: Wed, 21 Dec 2022 06:12:44 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WRduz9W5aMgiaITW7tUSIBmZqk1kmwFdUfN7w5CV3wBpaesSy9mn0qKCXBAZc6fZNj95jOZDTMR5CzhRIUtlDrivv4yCSUT8yke91Ox3r7kxvTW1XU5Kf5WjtbAT%2BBzBtZWYaR1seIJA44g6bF34"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7d8484fb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/1641eb77b9112ff2fb25bddeb2768b5acdab245a.ddfbf19e7603a37d6806.js | 104.21.21.44 | 200 OK | 26 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/1641eb77b9112ff2fb25bddeb2768b5acdab245a.ddfbf19e7603a37d6806.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeASCII text, with very long lines (26119), with no line terminators Hash552c5063233ad54261536138d4a076d0 778af6c5426f94f06f28719e903c23abb05f3e02 c4c517002a5b45885d582009e1d856936665f91680a2c7a349d48e7cb2a870b7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/1641eb77b9112ff2fb25bddeb2768b5acdab245a.ddfbf19e7603a37d6806.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:44 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GEdbDhaxooslcOFsCGjlWEt88b4Z8LjAVXnW%2BJLg%2Br7FlMGHps9UKYs81ijuLJQ716ZYIpHQ21m5XwX%2FXjdAcdQ8br9G5fkfhr7NRZhyS5k1hhIHq4ulP85NA95RcpbVcIuA4qwWU1UjOUk5NQmz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d8384bb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/_ssgManifest.js | 104.21.21.44 | 200 OK | 76 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/_ssgManifest.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeASCII text, with no line terminators Hashabee47769bf307639ace4945f9cfd4ff c0a0dc51ee8a2852baf5ff30c33b1478ff302585 653f3e53e89b4f8548ff86c19e92bb3c6b84b6be7485a320b1e00893ed877479
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/_ssgManifest.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
last-modified: Wed, 21 Dec 2022 06:12:46 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UMRd%2FKlFkInIDpmbqOjKbLRvWepVlgOqmP%2BnDHSjNz97pcnYsmpOLHh6cOJVi0rp%2F9IuOFE3PCnLC5AvoYHXK5GUcPYBKz0ZxRZ6Kmgg2CZdrNUeKE4pDkLEPcUAWStFoTnInQI%2BszqoEoK25xQ2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7d85873b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/_buildManifest.js | 104.21.21.44 | 200 OK | 4.3 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/_buildManifest.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeJavaScript source, ASCII text, with very long lines (4667), with no line terminators Hashad3dbc8588a0779acae9f0a1f39467da 2b02eddcebe59bd39e001792457a0d7c6e290f53 e1c0f4d35a1c419693ee88ffca6c001c7c2d1d13187d241e7d375c39931b4d8c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/_buildManifest.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:44 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W2Qzo5cdWptofjwvkkJEtsdYHxoNH8TLLjomjus7FTnw%2Bq0xb49uGLwpxGl7%2BgnAx2Oj1MAdr%2B3ApCe%2F0Mu9RNNsRleDuviCBpQ5RbhYeNspZ3NA0EjWR2YrX8ptagOoRCMPK6KRPdKtN%2B4Khno4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d8586fb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/_app-26afb46c84ae5083d2c8.js | 104.21.21.44 | 200 OK | 7.9 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/_app-26afb46c84ae5083d2c8.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeJavaScript source, ASCII text, with very long lines (8163), with no line terminators Hash15ee8c4a2060200619eeafc3c443aa29 f6f36cb0dd5e26da5a74730d42ba7bb06213af6e af47217f0900791c812c4605b1e14117a8ebfab66119514180310cdf5ce04eb8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/_app-26afb46c84ae5083d2c8.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:42 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=09g5vUop4iuxM1eRERMiY5hxW6rww2puA%2B6cJeEmEc3pidT54wNhWfyIm2OjSWRaOSFVKKJSIthQruBeeeutRx%2FXQdnW%2BIsftW2z0jriZCbNBafQHaPkQuD9uDVKAK3rgKUvekafnX2QZT2dz85s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d8383cb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/484c840239a025432effd6ecc373d498fa764368_CSS.4e604f4b.chunk.css | 104.21.21.44 | 200 OK | 81 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/484c840239a025432effd6ecc373d498fa764368_CSS.4e604f4b.chunk.css IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash26943ce7723571872e2b202442174f76 725ba1ec11662845e76f792fefa4c2d7e1377063 ac35043f4c19bd76511cb7553a66eeff8f21e4d0c6e518bedbbf3b270b6826e2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/484c840239a025432effd6ecc373d498fa764368_CSS.4e604f4b.chunk.css HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:30 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MckwgoE%2F9Vg%2FC%2FjcmuwJH7Cmil3WSkVxLOeb5HxE1Gun8KcBQjs5uejymG%2BqYHy6XCNWZO5NxcDnANkh8MW1FETg997BwMQRPsVsmniqn3mhfgSwkWhzZcdpcFN5n%2BFL0e4FsJAZxPlENuAXmYXX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d82822b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/alarm.svg | 104.21.21.44 | 200 OK | 533 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/alarm.svg IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeSVG Scalable Vector Graphics image Hashd21c434a402059b25e2c6b3380215449 031e251cd9e9da3aebdc38b649885113aa5ee582 9c014f0306734b9a72da79c4a03f516f519b8e5edaf2c38a2528b3a6b82b02ab
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/alarm.svg HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: image/svg+xml
last-modified: Wed, 21 Dec 2022 06:12:30 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MBasJG3fKDWQeoSis1BdE5FM%2FRxxSdEikTUyNzu%2ByzHcL33xGOYEQek6%2BBRvRFVMIyrpejO0QqqNUEA%2F6diNGlym%2FoBrRF0h2WrP%2BdaUD%2B%2BVKGzMms9x52%2BJR4m2XX8mhRL%2BkGtqjMcvVTMAhZXZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7d84860b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/a86f4b7efd9de9fd67c117702f5646c6a1b3c61d.fef06ab6fb43411cda49.js | 104.21.21.44 | 200 OK | 300 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/a86f4b7efd9de9fd67c117702f5646c6a1b3c61d.fef06ab6fb43411cda49.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size300 kB (299972 bytes) Hash9c8c7825994e08851a086391e4c87fe4 bd94c847928af5298e7a0ccf6354979c5d56eab6 656bc3b2ed785360eccfe3f73f6ee6bec4c0bb751dc8583e6e8d17f8f59d4fe7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/a86f4b7efd9de9fd67c117702f5646c6a1b3c61d.fef06ab6fb43411cda49.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:40 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DTBkp%2Fzp2ZwDQwvW4hi2auvvPhKgdeydgL1xQ%2F6%2Fr8N6Wbrd2xt1LNglqpyXbP3kicYdMiZaBeiuesDZnhvu%2Fd4esPDe09klEFY3S18Ocqj7OoGFsdjeO1Qozp1Ku8pSJYRr%2BeQfzG2w%2B%2FMiyWJF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d83838b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/ab7bdd0af29a081632cc65532d6eb4eb4926a6c8.0d9e96011bfadc9b0a01.js | 104.21.21.44 | 200 OK | 39 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/ab7bdd0af29a081632cc65532d6eb4eb4926a6c8.0d9e96011bfadc9b0a01.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeJavaScript source, ASCII text, with very long lines (38748), with no line terminators Hash7e066e22a6a2c3b69b1b3455c3d70577 c5af39dc067ef26e437c1651b2ce36816789bdc3 6134bcb96ea349a385a92afeda300484da848307c1fbea537b5e50af1586ab56
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/ab7bdd0af29a081632cc65532d6eb4eb4926a6c8.0d9e96011bfadc9b0a01.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:42 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qYxvbjtOol0PfD%2FRZn33Lnu5TNa0poT5ys3LYKngOu8kh1OXlZX1%2BU4WYbI5QJWGDMUbbyHqPE8IcdJF1EvrR67Blj%2BYLQ9XMqsTXeGaQiLqUXwPRySjOzpLz2X22%2BJ8OKe%2B1%2FA0YJwPetmNxVsv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d8383bb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/0b502bd7632b779787e7571ed7da626349d4848b_CSS.bca366718f045dbe8189.js | 104.21.21.44 | 200 OK | 69 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/0b502bd7632b779787e7571ed7da626349d4848b_CSS.bca366718f045dbe8189.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeASCII text, with no line terminators Hash7c1e88c4a68db82bfb3cbc3f81ac70c6 bacb2b2c74b3260235a5d5e950c5daec5fffbd6b 4c3a0d03a71141a5f6bbf5510a2c2f23566d1c9e292be0fe36e36a5fd7ae74eb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/0b502bd7632b779787e7571ed7da626349d4848b_CSS.bca366718f045dbe8189.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
last-modified: Wed, 21 Dec 2022 06:12:44 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RszgZW8VmewAE8DxKI1PFJ9wbjtiLKWZEHHqwTFdpSL1jm6psDRUN3sBKFwzaoj3HAVbA1jK96j3XMKTJGoHhaAlNFPFkCkdPcmSRT6Me1RE5ZPZ9VgS6iCe8IuZ0%2B54YjRoohjlMTGtLb%2BuF6MD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7d83848b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/help-zh.js | 104.21.21.44 | 200 OK | 768 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/help-zh.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeJavaScript source, ASCII text, with very long lines (788), with no line terminators Hash44a0cede239ae0e0123dc024e6f96300 0edcd20535cd127cfee769ed865deb86947d1222 9225cc51ff720f6f134ccbb270c16a193fea2d1df122aea368cfd84f7f9db3de
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/help-zh.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
last-modified: Wed, 21 Dec 2022 06:12:28 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zo9pG4qRFWEsYKqvOiscxmR0HYbwlc7BxDSTRoVMNAX4%2B7e5GKBCM0t%2BTPFqclRnEJWsLKA8vk8G3IbzeygiYiXd3YbxYSdVz%2FaH07wQc%2BjldQoe9meUPEO1xbvee4dz%2B%2BaPjCcTq4pVKXaQ1hjQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7d8281db4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/jquery.min.js | 104.21.21.44 | 200 OK | 87 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/jquery.min.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeJavaScript source, ASCII text, with very long lines (32058) Hashc9f5aeeca3ad37bf2aa006139b935f0a 1055018c28ab41087ef9ccefe411606893dabea2 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/jquery.min.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Mon, 06 Dec 2021 19:24:54 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5%2BjdSzg3c0sljb15lsNctl6DXx2XDCTbYk7amtyh8gwiwvyuFS7shbGbo06gSs%2FFu82jX36EAq1VsgLzPgzg7EFgv6gc%2BdHrTRDqAxWVL72Qya%2BEs7XU7jIJAk7Y2NVzoKL0B84Ne25HOS7wMwnE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d82820b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/0b502bd7632b779787e7571ed7da626349d4848b.bcbcabb596ea5f14546a.js | 104.21.21.44 | 200 OK | 356 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/0b502bd7632b779787e7571ed7da626349d4848b.bcbcabb596ea5f14546a.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size356 kB (355553 bytes) Hash0da05f58edf00873953ebc06e6cd1755 a042f03639f28b54b5bc951c51cbf04e3747ae72 4d47d02b1e8d21b51027610ebfddab9e222080afdf360be835562fe04a82b3af
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/0b502bd7632b779787e7571ed7da626349d4848b.bcbcabb596ea5f14546a.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:42 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xxj7e3n4SQ1pgg8LWICoajL54cNjV0tCvd0IU2bpwKrxzx2iy%2BbBjumF7h6EySrWYsg2gD1IzMUVEa%2FWwOF1P%2BjnSjR8z8HkXRSeRjnBDLncvRrTduKNYahv3LFMFh2P64M%2F3b8LSi7HOgy4pSHl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d83847b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/imTokenLogo.svg | 104.21.21.44 | 200 OK | 9.3 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/imTokenLogo.svg IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeSVG Scalable Vector Graphics image Hasha23a74486d8bb65b4a2f2abb2446f562 ad53016660ba3ed1f066c68a51179a7360efcbac d10be550eb64e47ed5762c452b4ba1ea558ec9e1ba77904cc6aa15d1c008ef11
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/imTokenLogo.svg HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: image/svg+xml
last-modified: Wed, 21 Dec 2022 06:12:30 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2RLknNUZaQJtmqOZw2M5SOAg5NXH0zd2%2FUb6wVZ2ACA0TKTp0E1aRgu%2B%2BEgcPmoe6ns4V%2BAz17ALur6eFc9sEoLTdJuh9NjGKk8XOBUVXXdufMsQnw4bTCzSrjBGP6YiiAYvDhIqPQFrfy6a9X9n"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7d8485db4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/styles.2224a2cf.chunk.css | 104.21.21.44 | 200 OK | 14 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/styles.2224a2cf.chunk.css IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeASCII text, with very long lines (14516), with no line terminators Hashfaaf5afd32b289c34bc0e1e9f2d43db8 b8e7f8ff0c107f28903e70ec103412afbf8e4d0e cf23c1a08436aa9ca2cbfdae42eb4979caa56f972b0c80caafe466a64956d6c8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/styles.2224a2cf.chunk.css HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:30 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1wia0oKjv0pfV19gjHoDfMPGczl5z1AnkMnZ3qJtKeBq0Y1KAXufDIF9m9iN083PDyt7x49MNoVtyehyEeHyk0Gl3C9sHqk93HQ7whOl0GcQV4Ge0gTfulVmpcoCCXI9mSlw4Qgit1XdlhAzZcr4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d8282db4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/29107295.6d4b8f5c00e5492aea21.js | 104.21.21.44 | 200 OK | 74 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/29107295.6d4b8f5c00e5492aea21.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash4d8225dc49f0ef650c322d2a4964177e 8704bb7a8a5cd075068c6d79e7d4b6c9aa08645c 03babc01567b1d9af291b4de0a070ef189685c333c948136a31aa08e7ed51a5a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/29107295.6d4b8f5c00e5492aea21.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:42 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JD3jTKJu5gQi88lie4%2Byq%2FYBCPpD6%2FUKTQGxA7UObwQS%2BkKhDxZDyhHNsZOnc32ZZsDnaRtzAeXr4Cz%2FACvRQGwnbWPhPH7NqWEGeGGIFaGglqHvyFYrv7Lk0ONoSY96UhC5g%2FXEqgpZ3sQtouQH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d83846b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/down/TAXSYKs | 104.21.21.44 | 200 OK | 11 kB |
URL User Request GET HTTP/3ca3mijhnsg.download-soft.xyz/down/TAXSYKs IP104.21.21.44:443
CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /down/TAXSYKs HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/ozetAp
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:57 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y8z1tVUH13Z9micV8L9ew1JL%2ByLOFmyZzMAJzs0f51C%2F2pCJrHJ9J7QmyTrDa20SlHzEf%2FdCHL1t%2BlpnrnABX0hqCqSyivWR7nZjv%2BhMFC0UsLxRH1ZZsbmIsjGs8sAsXKg9krsgXwWfb6KTl1P3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d41a5db4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/main.4963463c.js | 104.21.21.44 | 200 OK | 25 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/main.4963463c.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeJavaScript source, ASCII text, with very long lines (25072) Hash6e86da99f67bbab847e884f90031548d 50bb537f3f2f9830f372879a5e30ae44c57106a1 4437e8bd6766658472d2e8b715148244c08680ac84c4f6f9296cdac31371e9b1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/main.4963463c.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:26 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5c6K9Q1X1fS0wIUlTjJIaS34Y9gViHbqvkBoMA2Jq6HIBwZTw%2ByCfPf7fSsod%2B3YXt6qElpOmIlXEFDcvbYWSiYiTDj3nGfJomdNOzG4ClaHOlh3hyqeRB4wdYKTX3wpoJi5OAGyyOjILbuozD1P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d81805b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/styles.e97b3b41101980a26299.js | 104.21.21.44 | 200 OK | 210 B |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/styles.e97b3b41101980a26299.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeASCII text, with no line terminators Hash1f17f3c1363d98861692037b77137369 557230399174961cf827faaf6c6f0b8d5d6354bd e2ca34526847178bd3be7d1f69f434b403beb4392a56f6dc88ca7b131a46c408
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/styles.e97b3b41101980a26299.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
last-modified: Wed, 21 Dec 2022 06:12:44 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i55u8E43NrpOzvsMRMPhB2qVVZt4MtgnDgp8LkyX7aUfldF27f86MSeRG3xRpaaFt7A469VupXXpzUDhV0EM2btR8%2FlrIzk6IRG3hc6y%2F5cOomppTvaSOl4r4jxTB9i0ehNyI4AoOrlBYXLdxYce"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9b7d84850b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/0b502bd7632b779787e7571ed7da626349d4848b_CSS.b97c0dd0.chunk.css | 104.21.21.44 | 200 OK | 240 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/0b502bd7632b779787e7571ed7da626349d4848b_CSS.b97c0dd0.chunk.css IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size240 kB (239804 bytes) Hashd8e5b5c3db37ce1b77d13eda0e924de4 8dcf5a511b6144e23626a34361b3231e0c79c207 e757e495b4fea4cedf8962ae92bf79b4af5fcfc935290e6cd5fccda20f402234
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/0b502bd7632b779787e7571ed7da626349d4848b_CSS.b97c0dd0.chunk.css HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 28 Dec 2022 07:59:32 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tbxr8%2BEtOmqDvdWnaiQS0CVeRBZDJP0kKK9rXE0GY%2B4aEilFk3TF%2B5Og2XLjDT%2BNSXVoSFbzmxXoe22mp8g8Kkmh%2FhbyCmbdWB83I8x5SWjPgAE72eSr1avwcyOtmB67prjY%2BplgaHeJ5CKuXOeT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d82821b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/swiper.min.css | 104.21.21.44 | 200 OK | 20 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/swiper.min.css IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeASCII text, with very long lines (19513) Hash13e3477e9b99b8653e80def106e569e7 34a50a5848aea3d3b6345a2a29fea97d0b48e8c4 cbd3907ccf320bf09a971e16978df6d2293228febdbcffd158ce25011a6d68a1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/swiper.min.css HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:24 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RqIU8DatLmPbrLwRa5brsRm3w9J%2F9j8DeT6jZ6vmUNrpCuex1nvltRWfDvrG59%2FmPiVpArwZkVFhoIMbyp4hzLpxhW4QHYBd7ZIbpEdNqMgTDB6TE4SG16oXlQewXQCUUpriOwp4y0Qtj089ymmD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d80fe9b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/common.js | 104.21.21.44 | 200 OK | 2.7 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/common.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeJavaScript source, ASCII text, with very long lines (2782), with no line terminators Hashc7c03e96ee16dee3cf0c944ef6577ddf d365de73266979b466bce237e88aae5f01865f5d fae12dbacc5fa0181aede192b43f34fa6eb36bff7a8943e01c652b5cef5ffd8f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/common.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:28 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8ygSNqBzGf90FJFbXCswGH8e%2Fdm2zDLLcUq3bh3IwxANlKJN7ipR2gzRodeGo4TVqHjxvrZTJbVJRNnABjwkajesdqqtyA%2BiTjIWyIiRCoR1nHltaw5K5GHclSzJmXUD0RWqmUsLmnorJBxAnacJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d8281fb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/webpack-d7b2fb72fb7257504a38.js | 104.21.21.44 | 200 OK | 1.5 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/webpack-d7b2fb72fb7257504a38.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeJavaScript source, ASCII text, with very long lines (1555), with no line terminators Hashd90c4dddb198eaeaa4654f6ea11e29de 26c4a5b379609ee2da0a6c2ace46d7324126c0c3 a2107af143aeb5ab7ac2106bde56fc31a9d20f893810f234801713bd86b18254
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/webpack-d7b2fb72fb7257504a38.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:40 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TG6oTxGmBfwMpPsXltekeuoCZC12442GUAP7ObYr75QeRZJ5vpdm9dYpUkFMRyBF98%2F07%2FQ3zgKFqQ5jtACxnZbHw3d6i98u93pmvbGFeQnhmYDyWno4hpok93BnPYWJ%2FvS%2BCieTsDksL2DfPW3X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d82832b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ca3mijhnsg.download-soft.xyz/imTokenCommon/aec7d165.44f76719e6d61e47cc91.js | 104.21.21.44 | 200 OK | 494 kB |
URL GET HTTP/3ca3mijhnsg.download-soft.xyz/imTokenCommon/aec7d165.44f76719e6d61e47cc91.js IP104.21.21.44:443
Requested byhttps://ca3mijhnsg.download-soft.xyz/down/TAXSYKs CertificateIssuerLet's Encrypt Subjectdownload-soft.xyz Fingerprint1F:91:0B:E2:29:F1:14:F5:1E:CF:4D:95:36:17:E1:B3:0B:36:3E:BE ValidityThu, 14 Mar 2024 19:05:24 GMT - Wed, 12 Jun 2024 19:05:23 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size494 kB (494383 bytes) Hash7ae8c235677481585bdf3d6b434f5c06 1ede66c8886607919af97eacc115579f755c8106 8e35b1351f4e3fc99764db106847e307dead4715f743a146b35cc18e3e7c8a13
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /imTokenCommon/aec7d165.44f76719e6d61e47cc91.js HTTP/1.1
Host: ca3mijhnsg.download-soft.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ca3mijhnsg.download-soft.xyz/down/TAXSYKs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 16:02:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 21 Dec 2022 06:12:42 GMT
expires: Sun, 05 May 2024 04:02:58 GMT
cache-control: max-age=43200
x-cache: MISS
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jU2iHzs0mTMSy%2FH0zhw%2F40fI8Brb9pKRz2vs4Yr3GI9bRYf%2BcKsts7Mn8w0nLKV%2Bp%2BVhAqNnmEK%2FhUEOSr7oRz1dSEX05vty%2B5767PFKlpIvk26T35mPCenaJZCf4v4JIJhhJF6Qr%2F6EGlW%2BPSW%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9b7d8383eb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|