Report - ebbays.cc/

Report Overview

Submitted URL
ebbays.cc/
IP
172.67.193.172
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-19 16:35:17
Access
public
Website Title
ebay
Final URL
ebbays.cc/#/login
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
66

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ebbays.cc	unknown	2024-01-29	2024-01-29	2024-03-12	15 kB	2.9 MB	172.67.193.172

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.
2024-04-19	medium	ebbays.cc/	eBay Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	ebbays.cc/appAssets/js/chunk-vantUI.2b36710e.js	140 kB	2024-03-13	2024-04-19
Pretty URL ebbays.cc/appAssets/js/chunk-vantUI.2b36710e.js IP 172.67.193.172 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-13 04:57:50 Last Seen2024-04-19 18:35:18 Times Seen2 Hash 4ce97ff99f8842818809c19c092779a1 920af1bbbb441f47e835264add71e367764c634f 91a7e45eac4264ed8488e63e547fb4ed8f64adfc88a17eccb949f85834c359ca Loading...

	ebbays.cc/appAssets/js/chunk-libs.37ad16b5.js	555 kB	2023-11-28	2024-04-19
Pretty URL ebbays.cc/appAssets/js/chunk-libs.37ad16b5.js IP 172.67.193.172 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-28 23:23:14 Last Seen2024-04-19 18:35:18 Times Seen7 Hash b53396387a6443087e5bae6354a6d6c9 9a1429f89393ec5942d93fe39d5404276491e1fe 697ff1af0e9cc4d9cd80769a7156a1d0b2b14d3f7580ff9027be8874585ffa8a Loading...

	ebbays.cc/appAssets/js/app.53168932.js	798 kB	2024-03-13	2024-04-19
Pretty URL ebbays.cc/appAssets/js/app.53168932.js IP 172.67.193.172 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-13 04:57:50 Last Seen2024-04-19 18:35:18 Times Seen3 Hash ca22dd1bc1a3d4e7b2781a15c24d0b76 04e467e8e1cbd744776d8a4fc5906c2cdc4e9e59 ab0c1904d086e1e72f463ec63b9d434740968de2fb6db5d8f666525afcf839eb Loading...

	ebbays.cc/	309 B	2023-11-28	2024-04-19
Pretty URL ebbays.cc/ IP 172.67.193.172 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-28 23:23:14 Last Seen2024-04-19 18:35:18 Times Seen6 Hash 901c641471f916061d241d909ef4c2df eed66c3f4359959f888d12471f16c665a5d4984a e35122e6a4383100714b8fa7b2be8f4a0818d4cc5c7de9993dc88f8e4207a772 Loading...

	ebbays.cc/appAssets/js/runtime.5ba94eba.js	3.8 kB	2024-03-13	2024-04-19
Pretty URL ebbays.cc/appAssets/js/runtime.5ba94eba.js IP 172.67.193.172 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-13 04:57:50 Last Seen2024-04-19 18:35:18 Times Seen3 Hash 996b0cb463faac2812ba62866bdce4b0 578d292fff710a0a61de722e51b358be78d03f8f 7149cadda7c1674bc5619c50d3525e0c17325dfb4509423bed268fea1f66cbe8 Loading...

HTTP Transactions (34)

URL IP Response Size

ebbays.cc/appAssets/js/app.53168932.js

172.67.193.172

200 OK

534 kB

URL GET HTTP/3
ebbays.cc/appAssets/js/app.53168932.js
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
534 kB (534317 bytes)
Hash
ca22dd1bc1a3d4e7b2781a15c24d0b76
04e467e8e1cbd744776d8a4fc5906c2cdc4e9e59
ab0c1904d086e1e72f463ec63b9d434740968de2fb6db5d8f666525afcf839eb

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/js/app.53168932.js HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:51 GMT
content-type: application/javascript
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: W/"657168a0-c2c56"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DiBE7eP6jROrgBXi4oc7ZEKZGf7%2BvjMdN%2FtKEu1qfBlK2c2DbXvwSJpGluarrAEuA3L0T4yrY34CmyUW0jCqib1AbkzoedoVgn4Eg1qsHo6MzU6g26uC7f0j3ZY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4dee7a72712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/img/5.960046af.jpg

172.67.193.172

200 OK

61 kB

URL GET HTTP/3
ebbays.cc/appAssets/img/5.960046af.jpg
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 959x1280, components 3
Size
61 kB (61107 bytes)
Hash
9b7e2cb83d75969a9631ad6b704a6f61
51473de7c020c4f84f211dbea582d0ddcd52accc
0d7dcae6f7b5a8b221d8c267591145bed8f34a8413ae3f66a24282e408aca304

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/5.960046af.jpg HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: image/jpeg
content-length: 61107
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: "657168a0-eeb3"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lz2SFyTNr%2BZpzBF0hcLGuBggZoonGejYGsUywR7vJkHnSLzAyM5px98OIYsKST4arkOl%2F3KTfA5z44GwRMcWjE%2FSM51nGTZcQXM25redC1MwXrLXJqbtDdAc6Uk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df2dfee712f-OSL
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/js/chunk-libs.37ad16b5.js

172.67.193.172

200 OK

306 kB

URL GET HTTP/3
ebbays.cc/appAssets/js/chunk-libs.37ad16b5.js
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (25162)
Size
306 kB (305571 bytes)
Hash
b53396387a6443087e5bae6354a6d6c9
9a1429f89393ec5942d93fe39d5404276491e1fe
697ff1af0e9cc4d9cd80769a7156a1d0b2b14d3f7580ff9027be8874585ffa8a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/js/chunk-libs.37ad16b5.js HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:51 GMT
content-type: application/javascript
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: W/"657168a0-8775b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Bh9WsuOnNVasgJM%2FFuMJ%2FQmUhfBMhL7rrh8pORpBF0HyRFJ9uTPQ0lM6MUpwD0kG2WYbXOQDMky1%2BZfdr7BkH5R7h5vtowQpGuVFBVVkDi8FQLRtQFqCl3%2BTNk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4dee7a6f712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/img/1.06a2fdc6.jpg

172.67.193.172

200 OK

60 kB

URL GET HTTP/3
ebbays.cc/appAssets/img/1.06a2fdc6.jpg
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 958x1280, components 3
Size
60 kB (59690 bytes)
Hash
81ed2f46912ceec12442d58f50e3740e
849f7ffdb0fea4fc565d048c58c8ed0e0db9bfc4
0711251f5ca583bbdf32a9246c2d14d0b405805ccab4535303453e93d94a7e31

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/1.06a2fdc6.jpg HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: image/jpeg
content-length: 59690
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: "657168a0-e92a"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FfXBOplM1lvIDwQlUtu63EyXuG0Qp9kfypLWpHKCeHioH6Se7lPqJy18pYC6qSD6aNg52xwEeZC54MmDcFF3%2FNiIB6Coh%2Bs9x7imdc%2F0jDJcpxXG0jnX5%2FxQJJg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df2cfe1712f-OSL
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/img/2.13d1cfec.jpg

172.67.193.172

200 OK

46 kB

URL GET HTTP/3
ebbays.cc/appAssets/img/2.13d1cfec.jpg
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 959x1280, components 3
Size
46 kB (46100 bytes)
Hash
9960d24b0196518dac2efc8a5b00c78a
b33697b532809982797f0f85fb2e34eb681d904c
5431d343b869588c785fb022a600e2314fb87e05cd2c237a42f4776c4e9f1eed

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/2.13d1cfec.jpg HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: image/jpeg
content-length: 46100
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: "657168a0-b414"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4DTZzRBaSZlZ8JcS4F2Qhmi93I%2F8SOIJ1g67%2Fl3gNy6o41bwznsHfrOCwGaWR8YH4sLNZq8KP6UnnUJFIVsOrI7oRHW4KCooS1A6sYdX3HPUJfnIjbFFUPoqyQQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df2cfe5712f-OSL
alt-svc: h3=":443"; ma=86400

ebbays.cc/static/iconfont/iconfont.css

172.67.193.172

200 OK

66 kB

URL GET HTTP/3
ebbays.cc/static/iconfont/iconfont.css
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
ASCII text
Size
66 kB (66427 bytes)
Hash
d243303d55e66fcb073021a4ef0fc2cd
c78544197b83003d444ede6bf6bebcebacdbd3cd
291b18bd8b94f73d1b4269c976b4f041f12811e4722a832eb943ca18298e7264

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /static/iconfont/iconfont.css HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:51 GMT
content-type: text/css
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: W/"657168a0-7cf"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bD%2BexNhFuQ0r6vCU1kOik5WYEnQ0aRcrGFuFQ3IVJ1dmIRU4%2BvtXILCRpRZN16T2s3bRvgVPOyZ2cf1D1CM03ia%2BLQbuWmViKaf2pH45b584uXZ0JiH%2BScb5mIE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4dee7a65712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/img/4.7611767e.jpg

172.67.193.172

200 OK

75 kB

URL GET HTTP/3
ebbays.cc/appAssets/img/4.7611767e.jpg
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 959x1280, components 3
Size
75 kB (75111 bytes)
Hash
0e2054336db3db4dfdf11625d0eb2c3c
d48ad96b6eeeecf1f1444c66ae407cc80c073098
b184fa09e10ac6ede7e1da192b2afa103b0565c5aee340d38c09b14ec6851783

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/4.7611767e.jpg HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: image/jpeg
content-length: 75111
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: "657168a0-12567"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=prMbfCYvIEMEj0Vx%2B8jBuFlX%2BXGUHXKKrUBLC2hJZpXFOib1XAel7qzunr0rf3F6Zm1XmjWcRzz6IQeG2v3UCxfxXWJ8TyuR0aoNvNaYrLGOW7ieLeZQ4S4RJfI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df2cfea712f-OSL
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/img/6.4108fff8.jpg

172.67.193.172

200 OK

75 kB

URL GET HTTP/3
ebbays.cc/appAssets/img/6.4108fff8.jpg
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 959x1280, components 3
Size
75 kB (75448 bytes)
Hash
c2096b604952dc4c1f65aefed9426aac
70eeb05ed8fb44c3d306b8c4102c5317c8307df3
7b3e2d2bd2c15dac7ad2a3cec25e489a719874ac170fd638d587ea43903051b0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/6.4108fff8.jpg HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: image/jpeg
content-length: 75448
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: "657168a0-126b8"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TZJsR87yYwpOmLkRNzlbG05gYsXwEn9u%2B0M4BTQScc3ObXWuQdqQAcZmGNX0EYTvFBpmpXS3X370fSSCVtLSFddDCWVwd01D0ciZlg0BmY2tKupNHQjA2TwRlRE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df2dff6712f-OSL
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/js/runtime.5ba94eba.js

172.67.193.172

200 OK

157 kB

URL GET HTTP/3
ebbays.cc/appAssets/js/runtime.5ba94eba.js
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
JavaScript source, ASCII text, with very long lines (3814), with no line terminators
Size
157 kB (157071 bytes)
Hash
996b0cb463faac2812ba62866bdce4b0
578d292fff710a0a61de722e51b358be78d03f8f
7149cadda7c1674bc5619c50d3525e0c17325dfb4509423bed268fea1f66cbe8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/js/runtime.5ba94eba.js HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:51 GMT
content-type: application/javascript
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: W/"657168a0-ee6"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iDeclXYO1t77dE9TG8EtIBxD4knKy4tnPzZuBh0Lf0VhChugv5c2UX56szMkOQXrmtW%2F8CpidBlyu%2FjNKH%2FeFJdxdb1TKhOG%2FW20iFYnwEzWHeKFzBjfyQhWw8k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4dee7a6b712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/img/8.24250cf0.jpg

172.67.193.172

200 OK

83 kB

URL GET HTTP/3
ebbays.cc/appAssets/img/8.24250cf0.jpg
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 959x1280, components 3
Size
83 kB (82633 bytes)
Hash
fb9462857d53fd6febaef2c66e3d5db0
73fbdbf7f23005da34c22334e1b0a2eee06e7efa
3939622323df7f8f1f95640d8224a551d26de2a819713e4562953e629c3496c8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/8.24250cf0.jpg HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: image/jpeg
content-length: 82633
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: "657168a0-142c9"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6HHqRzHSSL3j8uND8awMLoi04A%2BsG3fIyjUJR2kyQPl7cwmXNxQ9Q0dtEqpyZUWMZxPZ5bi7MDK5gcvoAMrTREQtgtmt%2FQsibm4adwsZ6mV8as%2B2FWbJunyUbN4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df2e809712f-OSL
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/img/9.3ea03dc1.jpg

172.67.193.172

200 OK

71 kB

URL GET HTTP/3
ebbays.cc/appAssets/img/9.3ea03dc1.jpg
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 959x1280, components 3
Size
71 kB (71169 bytes)
Hash
13b594943ea38f0cfc39dcdf5714be76
54018fab3ad3a7fc9ca8a31fd11d3aabba10e594
213dd0d3945c4f31b375963ace20108f8ec3fd91c3e467f9bfbfff22a2c2e7cb

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/9.3ea03dc1.jpg HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: image/jpeg
content-length: 71169
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: "657168a0-11601"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mi2Z%2BR932AtYf7DWSeyjrx9DC2HBitmH3doI%2FFlA%2Fb%2FmKMvTtjPdjo9EjMOgKqyWWvUlbQ5jiQbAMhECe1UlO8RhXNRoH8Sz2Cc49K3VNWE4Oj3UnAnmoG5KKC0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df2f80f712f-OSL
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/img/10.8ccc70d5.jpg

172.67.193.172

200 OK

149 kB

URL GET HTTP/3
ebbays.cc/appAssets/img/10.8ccc70d5.jpg
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 959x1280, components 3
Size
149 kB (148718 bytes)
Hash
af8019a73f3f99969e62cf936ec847f3
872702fee2d9605a8d7f5bc237e5e36f7679c4e2
a6c673c0ec1d5674ab5d8db47d1bb338313d7986533b90fdd1c6a2355ee2ea3b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/10.8ccc70d5.jpg HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: image/jpeg
content-length: 148718
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: "657168a0-244ee"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9oHvSfctuCy4dc7p%2FxZLp0C%2FCLAiTTWJKIEdtS6WcK6cm2sE4PwFuPgCW8OxNLRXCC%2BCpLEJHpzlnSpemm0aSJ2Ec6%2BES46fpNujOUmtOO63jATe2WYGw4DGBzI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df2f819712f-OSL
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/img/asdsda.84eada8b.png

172.67.193.172

200 OK

156 kB

URL GET HTTP/3
ebbays.cc/appAssets/img/asdsda.84eada8b.png
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
PNG image data, 700 x 400, 8-bit/color RGBA, interlaced
Size
156 kB (155958 bytes)
Hash
5a38cc33eaab045228a266d3626276b9
bc091888177c25f8bba6d368fded464f8a39b12c
24a7b071e54b9ae57a24f5e3b1cdbe96276b61e9d3063b4e22889b2d83b19f59

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/asdsda.84eada8b.png HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: image/png
content-length: 155958
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: "657168a0-26136"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bX9JsvPIXd58wnf9Ac0mgEKAFoMx9QFLd9Qr0KwPyRhIQXz%2FWrRZu%2FrMe91rrIkYNr%2FugQIah%2FUW1gUeilGInzQMP%2BD35HjRXsV18%2BiVEAj59i%2FIzb%2FAJBA5ACY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df2f81c712f-OSL
alt-svc: h3=":443"; ma=86400

ebbays.cc/static/iconfont/iconfont.woff2?t=1625717306984

172.67.193.172

200 OK

5.1 kB

URL GET HTTP/3
ebbays.cc/static/iconfont/iconfont.woff2?t=1625717306984
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
Web Open Font Format (Version 2), TrueType, length 5092, version 1.0
Size
5.1 kB (5092 bytes)
Hash
d816f6e0bc87730d65953de96877892c
6ee86a6e6dfef28abfdfc0ad910df72d5fd56241
a78648d1a0abd1b4978f72eb1cf69c25f4550e8fec8d7ef2cf5be25af5b657db

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /static/iconfont/iconfont.woff2?t=1625717306984 HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/static/iconfont/iconfont.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: font/woff2
content-length: 5092
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: "657168a0-13e4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W24H%2FVxnK%2BC2CvpJg6jiJskoRX7PgEuS89fIwo9q0MsnVI0AxgpUPSimFCO6WGlm%2F9bTw8KggMG7F4kdBNqkI353SVjVap%2Byd162U%2FxxVNi79XzExIAXnkESwQk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df30858712f-OSL
alt-svc: h3=":443"; ma=86400

ebbays.cc/api//home/articles?type=help

172.67.193.172

200 OK

39 kB

URL GET HTTP/3
ebbays.cc/api//home/articles?type=help
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
JSON text data
Size
39 kB (38997 bytes)
Hash
3adc0db22e49ce185b39d80d607be3ce
7a2a54ff9e06c201ac4a3862cf1c75bfc3872e0f
8a8b8298aa5b8ef7364e93fc52c60b040c537d4250ad8ee56a4f087027640990

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /api//home/articles?type=help HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: VIE
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: text/html;charset=UTF-8
accept-charset: big5, big5-hkscs, cesu-8, euc-jp, euc-kr, gb18030, gb2312, gbk, ibm-thai, ibm00858, ibm01140, ibm01141, ibm01142, ibm01143, ibm01144, ibm01145, ibm01146, ibm01147, ibm01148, ibm01149, ibm037, ibm1026, ibm1047, ibm273, ibm277, ibm278, ibm280, ibm284, ibm285, ibm290, ibm297, ibm420, ibm424, ibm437, ibm500, ibm775, ibm850, ibm852, ibm855, ibm857, ibm860, ibm861, ibm862, ibm863, ibm864, ibm865, ibm866, ibm868, ibm869, ibm870, ibm871, ibm918, iso-2022-cn, iso-2022-jp, iso-2022-jp-2, iso-2022-kr, iso-8859-1, iso-8859-13, iso-8859-15, iso-8859-16, iso-8859-2, iso-8859-3, iso-8859-4, iso-8859-5, iso-8859-6, iso-8859-7, iso-8859-8, iso-8859-9, jis_x0201, jis_x0212-1990, koi8-r, koi8-u, shift_jis, tis-620, us-ascii, utf-16, utf-16be, utf-16le, utf-32, utf-32be, utf-32le, utf-8, windows-1250, windows-1251, windows-1252, windows-1253, windows-1254, windows-1255, windows-1256, windows-1257, windows-1258, windows-31j, x-big5-hkscs-2001, x-big5-solaris, x-euc-jp-linux, x-euc-tw, x-eucjp-open, x-ibm1006, x-ibm1025, x-ibm1046, x-ibm1097, x-ibm1098, x-ibm1112, x-ibm1122, x-ibm1123, x-ibm1124, x-ibm1166, x-ibm1364, x-ibm1381, x-ibm1383, x-ibm300, x-ibm33722, x-ibm737, x-ibm833, x-ibm834, x-ibm856, x-ibm874, x-ibm875, x-ibm921, x-ibm922, x-ibm930, x-ibm933, x-ibm935, x-ibm937, x-ibm939, x-ibm942, x-ibm942c, x-ibm943, x-ibm943c, x-ibm948, x-ibm949, x-ibm949c, x-ibm950, x-ibm964, x-ibm970, x-iscii91, x-iso-2022-cn-cns, x-iso-2022-cn-gb, x-iso-8859-11, x-jis0208, x-jisautodetect, x-johab, x-macarabic, x-maccentraleurope, x-maccroatian, x-maccyrillic, x-macdingbat, x-macgreek, x-machebrew, x-maciceland, x-macroman, x-macromania, x-macsymbol, x-macthai, x-macturkish, x-macukraine, x-ms932_0213, x-ms950-hkscs, x-ms950-hkscs-xp, x-mswin-936, x-pck, x-sjis_0213, x-utf-16le-bom, x-utf-32be-bom, x-utf-32le-bom, x-windows-50220, x-windows-50221, x-windows-874, x-windows-949, x-windows-950, x-windows-iso2022jp
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zg6KfJUuVIL%2FF%2F3ZcFsqYPwfveKezBPBWIwW17uyNNkv9l4kZe5TPsYNyj5otTbgcK8leTRag5mD%2FWoOnX89wwK1DE6J4kwvhyhu0SaZKvrkTogBcLVpNp9HEqI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e4df3489e712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/img/service.36da62cd.svg

172.67.193.172

200 OK

1.3 kB

URL GET HTTP/3
ebbays.cc/appAssets/img/service.36da62cd.svg
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
SVG Scalable Vector Graphics image
Size
1.3 kB (1267 bytes)
Hash
766f7da82f852d83dfd11f02c5a4278d
ce796b99b2b878c6c21112d757b6ea5b7f1f5a79
7296d9b42c0ed15a7f012f328e15df8b1bd3fda73f8d1785f7d6ebeaa4d1d14f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/service.36da62cd.svg HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: image/svg+xml
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: W/"657168a0-4f3"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w2uyIXWLgA1I1LPqo8qVpbvhl%2FIDgKcmhAdFV%2FQtBEju8LHm%2FD64Csih46vJu97pfAvNIus7buoqihXx3%2FdaVeh7oU6gu%2FPGpwGx7zmijO%2BdWeq%2By0nKZPWdQUk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df2bfc3712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/api//home/banner?type=app

172.67.193.172

200 OK

519 B

URL GET HTTP/3
ebbays.cc/api//home/banner?type=app
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (613), with no line terminators
Size
519 B (519 bytes)
Hash
853699ca91416ba8e870740fc26ef6c8
bbc83c3ba7ad7bc803ca19383a94965601fb14c3
48236c7e57b6d280542f51be5876daa7c905046a42e2d975353424d49f98f9de

HTTP Headers

GET /api//home/banner?type=app HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: VIE
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: text/html;charset=UTF-8
accept-charset: big5, big5-hkscs, cesu-8, euc-jp, euc-kr, gb18030, gb2312, gbk, ibm-thai, ibm00858, ibm01140, ibm01141, ibm01142, ibm01143, ibm01144, ibm01145, ibm01146, ibm01147, ibm01148, ibm01149, ibm037, ibm1026, ibm1047, ibm273, ibm277, ibm278, ibm280, ibm284, ibm285, ibm290, ibm297, ibm420, ibm424, ibm437, ibm500, ibm775, ibm850, ibm852, ibm855, ibm857, ibm860, ibm861, ibm862, ibm863, ibm864, ibm865, ibm866, ibm868, ibm869, ibm870, ibm871, ibm918, iso-2022-cn, iso-2022-jp, iso-2022-jp-2, iso-2022-kr, iso-8859-1, iso-8859-13, iso-8859-15, iso-8859-16, iso-8859-2, iso-8859-3, iso-8859-4, iso-8859-5, iso-8859-6, iso-8859-7, iso-8859-8, iso-8859-9, jis_x0201, jis_x0212-1990, koi8-r, koi8-u, shift_jis, tis-620, us-ascii, utf-16, utf-16be, utf-16le, utf-32, utf-32be, utf-32le, utf-8, windows-1250, windows-1251, windows-1252, windows-1253, windows-1254, windows-1255, windows-1256, windows-1257, windows-1258, windows-31j, x-big5-hkscs-2001, x-big5-solaris, x-euc-jp-linux, x-euc-tw, x-eucjp-open, x-ibm1006, x-ibm1025, x-ibm1046, x-ibm1097, x-ibm1098, x-ibm1112, x-ibm1122, x-ibm1123, x-ibm1124, x-ibm1166, x-ibm1364, x-ibm1381, x-ibm1383, x-ibm300, x-ibm33722, x-ibm737, x-ibm833, x-ibm834, x-ibm856, x-ibm874, x-ibm875, x-ibm921, x-ibm922, x-ibm930, x-ibm933, x-ibm935, x-ibm937, x-ibm939, x-ibm942, x-ibm942c, x-ibm943, x-ibm943c, x-ibm948, x-ibm949, x-ibm949c, x-ibm950, x-ibm964, x-ibm970, x-iscii91, x-iso-2022-cn-cns, x-iso-2022-cn-gb, x-iso-8859-11, x-jis0208, x-jisautodetect, x-johab, x-macarabic, x-maccentraleurope, x-maccroatian, x-maccyrillic, x-macdingbat, x-macgreek, x-machebrew, x-maciceland, x-macroman, x-macromania, x-macsymbol, x-macthai, x-macturkish, x-macukraine, x-ms932_0213, x-ms950-hkscs, x-ms950-hkscs-xp, x-mswin-936, x-pck, x-sjis_0213, x-utf-16le-bom, x-utf-32be-bom, x-utf-32le-bom, x-windows-50220, x-windows-50221, x-windows-874, x-windows-949, x-windows-950, x-windows-iso2022jp
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JrDsxzniyMHlqo3WVJaS0w8V4E4SgDI%2BhxXiP6wGdgkHlU1zSyXJU4C0d03M0plepWyxHSJPHkk%2FegF%2FBIjdBThBfzdDvGOkY%2BWPVceZftwD0ODpyStpSoFcOtI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e4df3489a712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/css/app.95f2e802.css

172.67.193.172

200 OK

48 kB

URL GET HTTP/3
ebbays.cc/appAssets/css/app.95f2e802.css
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
ASCII text, with very long lines (48165), with no line terminators
Size
48 kB (48165 bytes)
Hash
7f31beeb27a6bb7a61831700a780ccc2
bfaf6bcec9c5ba61644ad1ae17f839b6d5fc4cd9
5b22fa436f263d62227e49b604c8de39bfeae2c891c72835a29d6b0b6efaafb9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/css/app.95f2e802.css HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:51 GMT
content-type: text/css
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: W/"657168a0-bc25"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IpzEtK9WINn6Hvr%2BW1OelJXN3hc3RZyjRTlivscRfZJYA0giUc5RjEsfhbbaWneXbaXmGVPi1Ch7NgLaIsepVC7reMsk9MyaM1YqwROalJUGPRn9ANXfMz2kRHU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4dee7a69712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/api//account/myAccount

172.67.193.172

200 OK

59 B

URL GET HTTP/3
ebbays.cc/api//account/myAccount
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
troff or preprocessor input, Unicode text, UTF-8 text, with no line terminators
Size
59 B (59 bytes)
Hash
e334901f42238e4e18d6c0f5061ca892
3d9ea0ff7e7cf3a781022e56e8f077c9c10fe15b
688488daeb2c42f84467c14242f66825a06b8663d8450e3bdace8fd6132e2a26

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /api//account/myAccount HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: VIE
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: text/html;charset=UTF-8
accept-charset: big5, big5-hkscs, cesu-8, euc-jp, euc-kr, gb18030, gb2312, gbk, ibm-thai, ibm00858, ibm01140, ibm01141, ibm01142, ibm01143, ibm01144, ibm01145, ibm01146, ibm01147, ibm01148, ibm01149, ibm037, ibm1026, ibm1047, ibm273, ibm277, ibm278, ibm280, ibm284, ibm285, ibm290, ibm297, ibm420, ibm424, ibm437, ibm500, ibm775, ibm850, ibm852, ibm855, ibm857, ibm860, ibm861, ibm862, ibm863, ibm864, ibm865, ibm866, ibm868, ibm869, ibm870, ibm871, ibm918, iso-2022-cn, iso-2022-jp, iso-2022-jp-2, iso-2022-kr, iso-8859-1, iso-8859-13, iso-8859-15, iso-8859-16, iso-8859-2, iso-8859-3, iso-8859-4, iso-8859-5, iso-8859-6, iso-8859-7, iso-8859-8, iso-8859-9, jis_x0201, jis_x0212-1990, koi8-r, koi8-u, shift_jis, tis-620, us-ascii, utf-16, utf-16be, utf-16le, utf-32, utf-32be, utf-32le, utf-8, windows-1250, windows-1251, windows-1252, windows-1253, windows-1254, windows-1255, windows-1256, windows-1257, windows-1258, windows-31j, x-big5-hkscs-2001, x-big5-solaris, x-euc-jp-linux, x-euc-tw, x-eucjp-open, x-ibm1006, x-ibm1025, x-ibm1046, x-ibm1097, x-ibm1098, x-ibm1112, x-ibm1122, x-ibm1123, x-ibm1124, x-ibm1166, x-ibm1364, x-ibm1381, x-ibm1383, x-ibm300, x-ibm33722, x-ibm737, x-ibm833, x-ibm834, x-ibm856, x-ibm874, x-ibm875, x-ibm921, x-ibm922, x-ibm930, x-ibm933, x-ibm935, x-ibm937, x-ibm939, x-ibm942, x-ibm942c, x-ibm943, x-ibm943c, x-ibm948, x-ibm949, x-ibm949c, x-ibm950, x-ibm964, x-ibm970, x-iscii91, x-iso-2022-cn-cns, x-iso-2022-cn-gb, x-iso-8859-11, x-jis0208, x-jisautodetect, x-johab, x-macarabic, x-maccentraleurope, x-maccroatian, x-maccyrillic, x-macdingbat, x-macgreek, x-machebrew, x-maciceland, x-macroman, x-macromania, x-macsymbol, x-macthai, x-macturkish, x-macukraine, x-ms932_0213, x-ms950-hkscs, x-ms950-hkscs-xp, x-mswin-936, x-pck, x-sjis_0213, x-utf-16le-bom, x-utf-32be-bom, x-utf-32le-bom, x-windows-50220, x-windows-50221, x-windows-874, x-windows-949, x-windows-950, x-windows-iso2022jp
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U3V%2FpCIP8oaz1rzN5MFOTMJFgA8KmhFbU7TDt3VnhujWuJdkrKVm469hKtfSQWnMF5voILRe2YhY4FZjufl1WrNS6y8lD%2FTkVtoWNkJMhJe%2BzB3OOvNPphA%2FJG8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e4df33898712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/api//home/articles?type=notice

172.67.193.172

200 OK

1.4 kB

URL GET HTTP/3
ebbays.cc/api//home/articles?type=notice
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (1239), with no line terminators
Size
1.4 kB (1357 bytes)
Hash
bfe5057e1b425ac1d45fd844516ca1e2
5d949363f46fc32ba00dd16b5a594456b889e95f
948f9c6f622598b65d80a297ac2f9455543c5cd33b80a4e7f4b789c58d394a95

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /api//home/articles?type=notice HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: VIE
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: text/html;charset=UTF-8
accept-charset: big5, big5-hkscs, cesu-8, euc-jp, euc-kr, gb18030, gb2312, gbk, ibm-thai, ibm00858, ibm01140, ibm01141, ibm01142, ibm01143, ibm01144, ibm01145, ibm01146, ibm01147, ibm01148, ibm01149, ibm037, ibm1026, ibm1047, ibm273, ibm277, ibm278, ibm280, ibm284, ibm285, ibm290, ibm297, ibm420, ibm424, ibm437, ibm500, ibm775, ibm850, ibm852, ibm855, ibm857, ibm860, ibm861, ibm862, ibm863, ibm864, ibm865, ibm866, ibm868, ibm869, ibm870, ibm871, ibm918, iso-2022-cn, iso-2022-jp, iso-2022-jp-2, iso-2022-kr, iso-8859-1, iso-8859-13, iso-8859-15, iso-8859-16, iso-8859-2, iso-8859-3, iso-8859-4, iso-8859-5, iso-8859-6, iso-8859-7, iso-8859-8, iso-8859-9, jis_x0201, jis_x0212-1990, koi8-r, koi8-u, shift_jis, tis-620, us-ascii, utf-16, utf-16be, utf-16le, utf-32, utf-32be, utf-32le, utf-8, windows-1250, windows-1251, windows-1252, windows-1253, windows-1254, windows-1255, windows-1256, windows-1257, windows-1258, windows-31j, x-big5-hkscs-2001, x-big5-solaris, x-euc-jp-linux, x-euc-tw, x-eucjp-open, x-ibm1006, x-ibm1025, x-ibm1046, x-ibm1097, x-ibm1098, x-ibm1112, x-ibm1122, x-ibm1123, x-ibm1124, x-ibm1166, x-ibm1364, x-ibm1381, x-ibm1383, x-ibm300, x-ibm33722, x-ibm737, x-ibm833, x-ibm834, x-ibm856, x-ibm874, x-ibm875, x-ibm921, x-ibm922, x-ibm930, x-ibm933, x-ibm935, x-ibm937, x-ibm939, x-ibm942, x-ibm942c, x-ibm943, x-ibm943c, x-ibm948, x-ibm949, x-ibm949c, x-ibm950, x-ibm964, x-ibm970, x-iscii91, x-iso-2022-cn-cns, x-iso-2022-cn-gb, x-iso-8859-11, x-jis0208, x-jisautodetect, x-johab, x-macarabic, x-maccentraleurope, x-maccroatian, x-maccyrillic, x-macdingbat, x-macgreek, x-machebrew, x-maciceland, x-macroman, x-macromania, x-macsymbol, x-macthai, x-macturkish, x-macukraine, x-ms932_0213, x-ms950-hkscs, x-ms950-hkscs-xp, x-mswin-936, x-pck, x-sjis_0213, x-utf-16le-bom, x-utf-32be-bom, x-utf-32le-bom, x-windows-50220, x-windows-50221, x-windows-874, x-windows-949, x-windows-950, x-windows-iso2022jp
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cS0CEA6EOjC2ScPFaEMpdVkPV4QOcz7pAJbXXeD9PVxdC%2Bi69GxS38ekfrNO29juudj1Foc5x062gkA7tc7fzfS7csBKUAPOvgz4RscBXashlOueD3UPEJW6Pos%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e4df3489b712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/static/apple-touch-icon-precomposed-144x144.png

172.67.193.172

200 OK

39 kB

URL GET HTTP/3
ebbays.cc/static/apple-touch-icon-precomposed-144x144.png
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
PNG image data, 144 x 144, 8-bit/color RGBA, interlaced
Size
39 kB (38948 bytes)
Hash
fd120c21150dc5ca192d457f98221bd2
3291433f9964e5756f005ace743fec62dbdbe177
b5f6dd209369f8528eb85fd62b2026c604ca75a23392d35fb52b8aa25d4a0b42

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /static/apple-touch-icon-precomposed-144x144.png HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:53 GMT
content-type: image/png
content-length: 38948
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: "657168a0-9824"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f92nBz0m1W%2FVdJEwW5jMPV1KXls96BM9jJEnmY0uiArnxmpDbuQQccVPDQU0yfOYp4vY0qNolfOj9XN0qob1w5wSpArjn2ZKkQ5NHmFOsAoS3zl8CxMAxlYaRl4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df7bcea712f-OSL
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/js/chunk-vantUI.2b36710e.js

172.67.193.172

200 OK

140 kB

URL GET HTTP/3
ebbays.cc/appAssets/js/chunk-vantUI.2b36710e.js
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type

Size
140 kB (140154 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/js/chunk-vantUI.2b36710e.js HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:51 GMT
content-type: application/javascript
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: W/"657168a0-2237a"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P6ar1bW7NWIfOZ2ztb%2F6Nk8Flxf9XN6S2FnArTZ6Jir%2BnirC%2FbgBWexpr7tfnBt2bmnHwTuVVmmVYFlF%2FHeDGhLYyE16kXhazZxcU1isQ%2Bfiv8vQ0mWXTzv1a3g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4dee7a6e712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/api/user/get_type_value?type=KF_ADDRESS_H5

172.67.193.172

200 OK

111 B

URL GET HTTP/3
ebbays.cc/api/user/get_type_value?type=KF_ADDRESS_H5
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
111 B (111 bytes)
Hash
3dd4a404681586469e5ff838c161a5c5
4e7fd6f1986221ed4cf48a58c436c97d45a9d81a
50847cb7e73559459e0423ae85a8bec44810fecc100fe4c5a1ff62975149aa2c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /api/user/get_type_value?type=KF_ADDRESS_H5 HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebbays.cc/
Content-Type: text/plain;charset=UTF-8
token: 
locale: EN
type: KF_ADDRESS_H5
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: text/html;charset=UTF-8
accept-charset: big5, big5-hkscs, cesu-8, euc-jp, euc-kr, gb18030, gb2312, gbk, ibm-thai, ibm00858, ibm01140, ibm01141, ibm01142, ibm01143, ibm01144, ibm01145, ibm01146, ibm01147, ibm01148, ibm01149, ibm037, ibm1026, ibm1047, ibm273, ibm277, ibm278, ibm280, ibm284, ibm285, ibm290, ibm297, ibm420, ibm424, ibm437, ibm500, ibm775, ibm850, ibm852, ibm855, ibm857, ibm860, ibm861, ibm862, ibm863, ibm864, ibm865, ibm866, ibm868, ibm869, ibm870, ibm871, ibm918, iso-2022-cn, iso-2022-jp, iso-2022-jp-2, iso-2022-kr, iso-8859-1, iso-8859-13, iso-8859-15, iso-8859-16, iso-8859-2, iso-8859-3, iso-8859-4, iso-8859-5, iso-8859-6, iso-8859-7, iso-8859-8, iso-8859-9, jis_x0201, jis_x0212-1990, koi8-r, koi8-u, shift_jis, tis-620, us-ascii, utf-16, utf-16be, utf-16le, utf-32, utf-32be, utf-32le, utf-8, windows-1250, windows-1251, windows-1252, windows-1253, windows-1254, windows-1255, windows-1256, windows-1257, windows-1258, windows-31j, x-big5-hkscs-2001, x-big5-solaris, x-euc-jp-linux, x-euc-tw, x-eucjp-open, x-ibm1006, x-ibm1025, x-ibm1046, x-ibm1097, x-ibm1098, x-ibm1112, x-ibm1122, x-ibm1123, x-ibm1124, x-ibm1166, x-ibm1364, x-ibm1381, x-ibm1383, x-ibm300, x-ibm33722, x-ibm737, x-ibm833, x-ibm834, x-ibm856, x-ibm874, x-ibm875, x-ibm921, x-ibm922, x-ibm930, x-ibm933, x-ibm935, x-ibm937, x-ibm939, x-ibm942, x-ibm942c, x-ibm943, x-ibm943c, x-ibm948, x-ibm949, x-ibm949c, x-ibm950, x-ibm964, x-ibm970, x-iscii91, x-iso-2022-cn-cns, x-iso-2022-cn-gb, x-iso-8859-11, x-jis0208, x-jisautodetect, x-johab, x-macarabic, x-maccentraleurope, x-maccroatian, x-maccyrillic, x-macdingbat, x-macgreek, x-machebrew, x-maciceland, x-macroman, x-macromania, x-macsymbol, x-macthai, x-macturkish, x-macukraine, x-ms932_0213, x-ms950-hkscs, x-ms950-hkscs-xp, x-mswin-936, x-pck, x-sjis_0213, x-utf-16le-bom, x-utf-32be-bom, x-utf-32le-bom, x-windows-50220, x-windows-50221, x-windows-874, x-windows-949, x-windows-950, x-windows-iso2022jp
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wpSWkMTxPqwd1%2FDFUmvJeC1%2BXpq4mo9oyrqhGXGH9HRwoKEb1rHK4fZAB8HmpmvBR5TIHjYObNOeOUSYlCSnxwmMGP%2FcXamgZiKQS%2FuuKIBzvazkkwGD24FCZAs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e4df3388f712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/css/chunk-vantUI.73ac2ae9.css

172.67.193.172

200 OK

142 kB

URL GET HTTP/3
ebbays.cc/appAssets/css/chunk-vantUI.73ac2ae9.css
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
142 kB (141639 bytes)
Hash
00a4b518dc74be50db6331496612ed3d
1a846ebcb78cb23101c9fa93134f6f049b8e89b3
edf3d9687cab8d62dd6903b56110edda96d7f16936fa8de326cd45f333c7118d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/css/chunk-vantUI.73ac2ae9.css HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:51 GMT
content-type: text/css
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: W/"657168a0-22947"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e%2B30%2BNmjkeD1TU73kL5lIpFyPEOvqHsVCEDIGgT10nzz9xk5Lnky2PBlkSHBFgPkx%2B9az9MjX3pW7zQcKiesB5IpHtEwkrsTV7VE5gBsyJdBFNAEAEgRyd1ECLE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4dee7a67712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/img/user.91c85a19.svg

172.67.193.172

200 OK

938 B

URL GET HTTP/3
ebbays.cc/appAssets/img/user.91c85a19.svg
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
SVG Scalable Vector Graphics image
Size
938 B (938 bytes)
Hash
4c5d1ce4ccb86170b30516be25b99c09
9771cade4c9820ff56a6d5061b1481059f81005a
8a643ea0b94fcf799571ef2719e4ff7c8b03f59f0bc6fd6cbf36eba1f6d2b991

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/user.91c85a19.svg HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: image/svg+xml
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: W/"657168a0-3aa"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fvj%2F17Nf7dRM9K7L%2BsVWoEDeXzbhNEhen39eXr0Q7UQyG%2BKOf%2BkRY6tgrPUcUJtmfBm8LJLkOq6vfHJrU4bVdhkg9jdKmSeBmyTkH9SKEHWvyh4wGY3zv1I0RuI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df2bfbf712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/img/3.aaa42b6d.jpg

172.67.193.172

200 OK

66 kB

URL GET HTTP/3
ebbays.cc/appAssets/img/3.aaa42b6d.jpg
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 959x1280, components 3
Size
66 kB (65940 bytes)
Hash
a54eed7f5d790e46ad97916552fe19b1
73c2776eb6bbb2bb5925395abb939a88c7139756
c6b73407000bc656b5a66a152d47a1f58a0f48709094d47a9f6463079c5e3c13

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/3.aaa42b6d.jpg HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: image/jpeg
content-length: 65940
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: "657168a0-10194"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hyuDdDVXXYKM95t1dryz%2B1rXQZhjHkh3l1iuMbaUWhqoFrixRrv8BfUFRZFwidCiF6tP0597ltalbkto%2FKhPgXjv9FQ%2FhgPmu%2BkxADM4Q5Sytw%2Fy7Wg9fHKgrHA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df2cfe7712f-OSL
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/img/arrow-left.1fb301a9.svg

172.67.193.172

200 OK

875 B

URL GET HTTP/3
ebbays.cc/appAssets/img/arrow-left.1fb301a9.svg
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
SVG Scalable Vector Graphics image
Size
875 B (875 bytes)
Hash
a961f2d20216754483c643c21ca87c9e
88bff01433ab46d884234d1a32011ceb5ba872c7
9250714fe1d08c98341f1a3b88c0ff70b62c5fc720d347c6b52a139ad1e3552d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/arrow-left.1fb301a9.svg HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:53 GMT
content-type: image/svg+xml
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: W/"657168a0-36b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0IEpc63ZNeG%2BcVwHHev8aWP%2BOjKW83YvHpboL38ilQz%2BSSK6LYUUT3JWhwmethAbtN4bh542NLX2sLMkDSWtx0yxkOSSYZpfN84i9gU3oBx5w5%2F8Oi311Lhq0vw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df7dcff712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/img/7.ea300842.jpg

172.67.193.172

200 OK

155 kB

URL GET HTTP/3
ebbays.cc/appAssets/img/7.ea300842.jpg
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 959x1280, components 3
Size
155 kB (155377 bytes)
Hash
8a64ad46c1e606b7d44eba60136f20e2
757385cab9a8d4eb1e26612b1ab576a450bfbe69
a92945c8a7c0eb5179e0768f3cf2b9e503567d0dbe57e5026be2b46936f42b10

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/7.ea300842.jpg HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: image/jpeg
content-length: 155377
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: "657168a0-25ef1"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=geDrS0rqubuMFYtZm5c84%2BD0ACXiieqZmbwobhgBqmZSLDuRrPZISaILL4vnyf%2Fp4OOR7U4YQq%2BWKoQ7h1WxTITN1k9NMjpVaoL11c5AeCNr4lRBqAlZCL8BwIg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df2effd712f-OSL
alt-svc: h3=":443"; ma=86400

ebbays.cc/appAssets/img/banner.d93f93bd.png

172.67.193.172

200 OK

139 kB

URL GET HTTP/3
ebbays.cc/appAssets/img/banner.d93f93bd.png
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
PNG image data, 340 x 200, 8-bit/color RGBA, non-interlaced
Size
139 kB (139070 bytes)
Hash
eaf4d625095caf7f63e0adf6fd548f4c
728c18f9d848a73c0ab74ee4082b9b6d66e2f85b
cbf0cc3f62034fe71b824a469e1e3d39ab5aa7c13dce8c090b1a49edecf02b48

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/banner.d93f93bd.png HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: image/png
content-length: 139070
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: "657168a0-21f3e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mzDgRTfGB%2BG8WccLPcjTuxPxsdeqV3I%2FmLJexKEHsV%2Bu4Tyf3IM1Ak8TmWLrnApLfXzKzrot5YwQFKEmvvMiEJ71SMfrZDxSyhkk4gALqkvPkWdJiAND84hdXdo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df2bfd0712f-OSL
alt-svc: h3=":443"; ma=86400

ebbays.cc/api//home/areaCode

172.67.193.172

200 OK

19 kB

URL GET HTTP/3
ebbays.cc/api//home/areaCode
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type

Size
19 kB (19181 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /api//home/areaCode HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: VIE
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:53 GMT
content-type: text/html;charset=UTF-8
accept-charset: big5, big5-hkscs, cesu-8, euc-jp, euc-kr, gb18030, gb2312, gbk, ibm-thai, ibm00858, ibm01140, ibm01141, ibm01142, ibm01143, ibm01144, ibm01145, ibm01146, ibm01147, ibm01148, ibm01149, ibm037, ibm1026, ibm1047, ibm273, ibm277, ibm278, ibm280, ibm284, ibm285, ibm290, ibm297, ibm420, ibm424, ibm437, ibm500, ibm775, ibm850, ibm852, ibm855, ibm857, ibm860, ibm861, ibm862, ibm863, ibm864, ibm865, ibm866, ibm868, ibm869, ibm870, ibm871, ibm918, iso-2022-cn, iso-2022-jp, iso-2022-jp-2, iso-2022-kr, iso-8859-1, iso-8859-13, iso-8859-15, iso-8859-16, iso-8859-2, iso-8859-3, iso-8859-4, iso-8859-5, iso-8859-6, iso-8859-7, iso-8859-8, iso-8859-9, jis_x0201, jis_x0212-1990, koi8-r, koi8-u, shift_jis, tis-620, us-ascii, utf-16, utf-16be, utf-16le, utf-32, utf-32be, utf-32le, utf-8, windows-1250, windows-1251, windows-1252, windows-1253, windows-1254, windows-1255, windows-1256, windows-1257, windows-1258, windows-31j, x-big5-hkscs-2001, x-big5-solaris, x-euc-jp-linux, x-euc-tw, x-eucjp-open, x-ibm1006, x-ibm1025, x-ibm1046, x-ibm1097, x-ibm1098, x-ibm1112, x-ibm1122, x-ibm1123, x-ibm1124, x-ibm1166, x-ibm1364, x-ibm1381, x-ibm1383, x-ibm300, x-ibm33722, x-ibm737, x-ibm833, x-ibm834, x-ibm856, x-ibm874, x-ibm875, x-ibm921, x-ibm922, x-ibm930, x-ibm933, x-ibm935, x-ibm937, x-ibm939, x-ibm942, x-ibm942c, x-ibm943, x-ibm943c, x-ibm948, x-ibm949, x-ibm949c, x-ibm950, x-ibm964, x-ibm970, x-iscii91, x-iso-2022-cn-cns, x-iso-2022-cn-gb, x-iso-8859-11, x-jis0208, x-jisautodetect, x-johab, x-macarabic, x-maccentraleurope, x-maccroatian, x-maccyrillic, x-macdingbat, x-macgreek, x-machebrew, x-maciceland, x-macroman, x-macromania, x-macsymbol, x-macthai, x-macturkish, x-macukraine, x-ms932_0213, x-ms950-hkscs, x-ms950-hkscs-xp, x-mswin-936, x-pck, x-sjis_0213, x-utf-16le-bom, x-utf-32be-bom, x-utf-32le-bom, x-windows-50220, x-windows-50221, x-windows-874, x-windows-949, x-windows-950, x-windows-iso2022jp
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j5dwcuC%2BPttI%2B7Z6%2BAnLpo6sRteJZeWscLXFX38WTArvgQ7J2ILHf%2Fv%2BgLROpIJ2HePSBXha9kfCKLto%2BJzw%2BuU%2BwhSR7dNBdOMxpWeQiOOESkIZb%2BXJ959cdBM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e4df7fd1a712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/

172.67.193.172

200 OK

4.3 kB

URL User Request GET HTTP/2
ebbays.cc/
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (4373), with no line terminators
Size
4.3 kB (4338 bytes)
Hash
555d68f17e97f96dc27a633b58085d26
0c022fbaf6f4e4a70eaf5c4b519214965e8c63f1
813c0ec1241f1eb6f637d612431e5b3849d47641c3ccd5323afd4d7fe97751b5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET / HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 16:34:51 GMT
content-type: text/html
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cgoSQLXGDFSysp9L%2B131DSnEED9gK7q485y2Y%2FDmrOGctcJT%2BmfKN%2BQ6uQiWV6OrCfX94su60IkgWA9QyQPPiT8ctdvlZk%2F8IcDw6O6mHNFpTo7dplxD%2BWhVsAs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e4deaaecd1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ebbays.cc/appAssets/img/production.9c56b23b.png

172.67.193.172

200 OK

157 kB

URL GET HTTP/3
ebbays.cc/appAssets/img/production.9c56b23b.png
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
PNG image data, 345 x 345, 8-bit/color RGBA, non-interlaced
Size
157 kB (156628 bytes)
Hash
4be3c4141de67bf64d1817135c29cc35
60f81e68d5bcbb5fc2bd3f7eed14ec4789d63cf1
8fc6fc1ce81cfa7ab89c20de17325bd1cf4341d865419676fac6ec3c2c81598b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /appAssets/img/production.9c56b23b.png HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: image/png
content-length: 156628
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: "657168a0-263d4"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tX0HN%2FNiQRm10ZEiDPFf6UiInN3FQYUWMhrmxbP1PMQ%2F9tacnP24%2FSkDE0w9r%2BRBQlSgxSVuf0s1icMKVxFoTpIRXsNsEAWPPHIH%2FiIgubwoq3sZToEdN3I80mQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df2f81b712f-OSL
alt-svc: h3=":443"; ma=86400

ebbays.cc/api//rush/viplevList?page=1&limit=20

172.67.193.172

200 OK

1.2 kB

URL GET HTTP/3
ebbays.cc/api//rush/viplevList?page=1&limit=20
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (1358), with no line terminators
Size
1.2 kB (1156 bytes)
Hash
ab950b180c8361339a0914c8e025c584
98af82b9967bf9f9e95d3b9da59c330bc1698098
bb5a119ffa2e2518cb9254770947eb0c812a57b8ff22ced6d29004b28436b9c7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /api//rush/viplevList?page=1&limit=20 HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: VIE
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:52 GMT
content-type: text/html;charset=UTF-8
accept-charset: big5, big5-hkscs, cesu-8, euc-jp, euc-kr, gb18030, gb2312, gbk, ibm-thai, ibm00858, ibm01140, ibm01141, ibm01142, ibm01143, ibm01144, ibm01145, ibm01146, ibm01147, ibm01148, ibm01149, ibm037, ibm1026, ibm1047, ibm273, ibm277, ibm278, ibm280, ibm284, ibm285, ibm290, ibm297, ibm420, ibm424, ibm437, ibm500, ibm775, ibm850, ibm852, ibm855, ibm857, ibm860, ibm861, ibm862, ibm863, ibm864, ibm865, ibm866, ibm868, ibm869, ibm870, ibm871, ibm918, iso-2022-cn, iso-2022-jp, iso-2022-jp-2, iso-2022-kr, iso-8859-1, iso-8859-13, iso-8859-15, iso-8859-16, iso-8859-2, iso-8859-3, iso-8859-4, iso-8859-5, iso-8859-6, iso-8859-7, iso-8859-8, iso-8859-9, jis_x0201, jis_x0212-1990, koi8-r, koi8-u, shift_jis, tis-620, us-ascii, utf-16, utf-16be, utf-16le, utf-32, utf-32be, utf-32le, utf-8, windows-1250, windows-1251, windows-1252, windows-1253, windows-1254, windows-1255, windows-1256, windows-1257, windows-1258, windows-31j, x-big5-hkscs-2001, x-big5-solaris, x-euc-jp-linux, x-euc-tw, x-eucjp-open, x-ibm1006, x-ibm1025, x-ibm1046, x-ibm1097, x-ibm1098, x-ibm1112, x-ibm1122, x-ibm1123, x-ibm1124, x-ibm1166, x-ibm1364, x-ibm1381, x-ibm1383, x-ibm300, x-ibm33722, x-ibm737, x-ibm833, x-ibm834, x-ibm856, x-ibm874, x-ibm875, x-ibm921, x-ibm922, x-ibm930, x-ibm933, x-ibm935, x-ibm937, x-ibm939, x-ibm942, x-ibm942c, x-ibm943, x-ibm943c, x-ibm948, x-ibm949, x-ibm949c, x-ibm950, x-ibm964, x-ibm970, x-iscii91, x-iso-2022-cn-cns, x-iso-2022-cn-gb, x-iso-8859-11, x-jis0208, x-jisautodetect, x-johab, x-macarabic, x-maccentraleurope, x-maccroatian, x-maccyrillic, x-macdingbat, x-macgreek, x-machebrew, x-maciceland, x-macroman, x-macromania, x-macsymbol, x-macthai, x-macturkish, x-macukraine, x-ms932_0213, x-ms950-hkscs, x-ms950-hkscs-xp, x-mswin-936, x-pck, x-sjis_0213, x-utf-16le-bom, x-utf-32be-bom, x-utf-32le-bom, x-windows-50220, x-windows-50221, x-windows-874, x-windows-949, x-windows-950, x-windows-iso2022jp
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qe3ePu2g9HIYmVLlavMoHen1auZ5ibIX%2BL1lkYC3ksyOe9A5IfVmR%2B6Xlrb%2F5ICKFoYwUyZ%2FX2yM0o%2B7lZovvZKvDa3CER%2FqTTnHeWsAD9CRrvu9GXICLw23Nzo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e4df33894712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ebbays.cc/static/favicon.ico

172.67.193.172

200 OK

20 kB

URL GET HTTP/3
ebbays.cc/static/favicon.ico
IP
172.67.193.172:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ebbays.cc/
Certificate
IssuerLet's Encrypt
Subjectebbays.cc
FingerprintC0:B7:D8:CC:44:88:83:6E:64:FC:77:1E:1F:6A:3F:38:AB:E9:9F:3B
ValidityThu, 28 Mar 2024 02:29:41 GMT - Wed, 26 Jun 2024 02:29:40 GMT

File type
PNG image data, 109 x 111, 8-bit/color RGB, interlaced
Size
20 kB (19817 bytes)
Hash
1388b473c7817747722c954d7b4489b7
e4ab356e31914bdc112bb992bf2dd71df4c31610
b88dc894453be57bc312a0d20905cf05246d8d7f74b0cc4f33a2dcf4f38eebf1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /static/favicon.ico HTTP/1.1
Host: ebbays.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebbays.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:34:53 GMT
content-type: image/x-icon
last-modified: Thu, 07 Dec 2023 06:39:28 GMT
etag: W/"657168a0-4d69"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TSaZKLqMM4xbgxuDnKg2OlUi6pJEztKtrK7InPfzcNe32Ms7x4KELeGnnTVwfpEqN0tTc8V8pEulrNWZZB9LWS%2FBx3bEX80zV2bCwOJtvyxt4NtEG762ODUUYDA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4df7bcec712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (34)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash