Report - www.whalesvip.online/index/ctrl/deposit/index/user/login.html/index/user/login.html/index/user/login.html/index/user/login.html

Report Overview

Submitted URL
www.whalesvip.online/index/ctrl/deposit/index/user/login.html/index/user/login.html/index/user/login.html/index/user/login.html
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-07 22:47:52
Access
public
Website Title
Sign in
Final URL
www.whalesvip.online/index/user/login.html
Tags
salesforce phishing
urlquery detections
Phishing - Salesforce

Detections

urlquery
26
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.whalesvip.online	unknown	unknown	No data	No data	13 kB	855 kB	188.114.96.1
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-07	1.6 kB	50 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-07	902 B	11 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	www.whalesvip.online/vue.js	344 kB	2023-03-12	2024-05-16
Pretty URL www.whalesvip.online/vue.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 17:52:29 Last Seen2024-05-16 11:03:10 Times Seen3812 Hash f5c020d18d70f21851364d0570d38127 5dba3f5cb7463e356310fc14e26d3358c1b00ed2 58692c4b6420c192dcf7620267b09183cf3c4bd6050b31843698e69a59c26e6c Loading...

	www.whalesvip.online/red/jquery-3.3.1.min.js	87 kB	2023-03-07	2024-05-19
Pretty URL www.whalesvip.online/red/jquery-3.3.1.min.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-05-19 20:03:51 Times Seen114928 Hash a09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef Loading...

	www.whalesvip.online/red/popper.min.js	21 kB	2023-03-07	2024-05-19
Pretty URL www.whalesvip.online/red/popper.min.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:27 Last Seen2024-05-19 16:11:41 Times Seen17694 Hash 56456db9d72a4b380ed3cb63095e6022 6dbce88aee15b42f29083df7a07513cf3b486ba0 66f3a07e1fa9b64a686b66381e4458dbc8abf3dbbff954720c4eec07b84411c2 Loading...

	www.whalesvip.online/static_new/js/dialog.min.js	28 kB	2023-04-07	2024-05-18
Pretty URL www.whalesvip.online/static_new/js/dialog.min.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-07 00:16:00 Last Seen2024-05-18 08:58:26 Times Seen2829 Hash 5b00205ad1fe51bf8f61bcb3de292faa 4b12f988964d29bd82b14e71b86104a1a91b667b d1eef2b2ff683e089b9d124aa8090e174252e0894af20ae6d78fed7dc69744d5 Loading...

	www.whalesvip.online/red/main.js?v=V1.24	10 kB	2023-03-07	2024-05-16
Pretty URL www.whalesvip.online/red/main.js?v=V1.24 IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:20:59 Last Seen2024-05-16 11:03:10 Times Seen3998 Hash b90b1e7f3effbe0945d51be2591e957a eb699dc823c7297a91317b3d97fde455caa52782 f5733054b0df915644a10c7c7bf9f4029dec903183464d982d2af0aab3336412 Loading...

	www.whalesvip.online/index/user/login.html	46 B	2023-07-20	2024-05-16
Pretty URL www.whalesvip.online/index/user/login.html IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-07-20 07:37:08 Last Seen2024-05-16 11:03:10 Times Seen7 Hash f368eaec999ad19dbc91d431bf196f66 d7992a9e5c0999e6facd5835be0c660a29cc7911 59c738c8b9f83ca4547618d467884ab7ae52fb7044483fb3fe1ee706f69f7d11 Loading...

	www.whalesvip.online/index/user/login.html	0 B	2023-03-07	2024-05-19
Pretty URL www.whalesvip.online/index/user/login.html IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-19 20:09:35 Times Seen37841218 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.whalesvip.online/red/bootstrap/js/bootstrap.min.js	64 kB	2023-03-07	2024-05-19
Pretty URL www.whalesvip.online/red/bootstrap/js/bootstrap.min.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:47 Last Seen2024-05-19 19:46:03 Times Seen9508 Hash f0c2bcf5ef0c4476508d79ec9cdcce07 3beed68ed7d753c6bf4f61c26386ddd7929ba030 edd03b96ae4ff7886406c59d7dfeeaa1b624a7da297bf2f92d0cb6b7f9633cba Loading...

	www.whalesvip.online/red/swiper/swiper-bundle.min.js	140 kB	2023-03-07	2024-05-18
Pretty URL www.whalesvip.online/red/swiper/swiper-bundle.min.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:20:59 Last Seen2024-05-18 08:58:26 Times Seen5339 Hash c4358cb63a4b96c5d71a2fb630871f30 be3b7d9d5bbd680d035f768345778d84eb08fe23 c26293076ae548cd0614c5946e9c16f34bd7810fd2f63deeaa28df61ce935229 Loading...

	www.whalesvip.online/red/jquery.cookie.js	3.1 kB	2023-03-07	2024-05-19
Pretty URL www.whalesvip.online/red/jquery.cookie.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:39 Last Seen2024-05-19 16:24:34 Times Seen9785 Hash d5528dde0006c78be04817327c2f9b6f 31e1bcc4cf805a2c2fee21f48ded1e598f64a2a8 b84161c9fbf7520cd14e7019f92120bd87a928a074156e91a992eba9fc9436e8 Loading...

	www.whalesvip.online/public/js/layer_mobile/layer.js	3.3 kB	2023-03-07	2024-05-17
Pretty URL www.whalesvip.online/public/js/layer_mobile/layer.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:34:12 Last Seen2024-05-17 06:56:02 Times Seen3634 Hash 79b7829af0bbfea5760aa606bf1a02c7 54c27862e41ef815009fca7b54d9d463cfb015bc 2fc4428e63cd5bd982210576674877bd1ba3eb59b9f4686d3668fd94530fa4b7 Loading...

	www.whalesvip.online/static_new/js/common.js	2.6 kB	2023-07-22	2024-05-16
Pretty URL www.whalesvip.online/static_new/js/common.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-22 22:30:25 Last Seen2024-05-16 11:03:10 Times Seen2322 Hash 4e3725bd66c9f142d4468799bd513bbd 85a79d2444f2efa6db1140edfdacb028ea0265b5 137ab52ea1f182be9d4c84d01110a7d54b4523c7f2a8b504737c138874f9a5b2 Loading...

HTTP Transactions (30)

URL IP Response Size

www.whalesvip.online/static/images/lang.png

188.114.96.1

200 OK

5.3 kB

URL GET HTTP/3
www.whalesvip.online/static/images/lang.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Size
5.3 kB (5281 bytes)
Hash
3235db6d09fd320c632b4cdfbfe76882
d112f4bfed9cfbe4ce2c3465fe668b11af9be311
32451d43c7ce3f4cabf3f951e0b602e56e8896a89cc5a5027af668b10502e878

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /static/images/lang.png HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:26 GMT
content-type: image/png
content-length: 5281
last-modified: Sat, 06 Apr 2024 08:32:39 GMT
etag: "661108a7-14a1"
expires: Thu, 06 Jun 2024 22:47:26 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TZv7bp6kHTgF1JYUiMhUJRxlNKdiCr3b4RPesQnMTbM7nODtxHPbxDaWq83NG0wcBKXyT%2BoFvqvoHBNp4CsjHz2jX3JaHKdwbsKTlYQiUetqmXtuJR%2FDNvvDU%2FLBR2AJ91zkVadyyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804c0757c8d569f-OSL
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/imgy/jt.png

188.114.96.1

200 OK

2.4 kB

URL GET HTTP/3
www.whalesvip.online/imgy/jt.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Size
2.4 kB (2375 bytes)
Hash
e964107220dbdd61e6b472795240444a
0408a43b2085287cc2443074c14844f0f2520fcf
d151a40c6e9c58773a8bf737a89a170daf644d3d2341ed48fc609d70cebdd448

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /imgy/jt.png HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:26 GMT
content-type: image/png
content-length: 2375
last-modified: Tue, 06 Sep 2022 00:12:36 GMT
etag: "63169074-947"
expires: Thu, 06 Jun 2024 22:47:26 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SN0IzrZgOx3WJ7dLPiy6xMgsG%2BxB67J4FTVJ97NHN0RtMOW0FTR6Ne08rIyoynXvzQ2dTWqHM6c%2B9v8WmYQonZX%2FTQR8565yQsHjEGYasMtInNog6RF6SHRIgviTeROtPuQ5kxGoWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804c0757c90569f-OSL
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/static_new/js/common.js

188.114.96.1

200 OK

6.0 kB

URL GET HTTP/3
www.whalesvip.online/static_new/js/common.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with CRLF, LF line terminators
Size
6.0 kB (5986 bytes)
Hash
4e3725bd66c9f142d4468799bd513bbd
85a79d2444f2efa6db1140edfdacb028ea0265b5
137ab52ea1f182be9d4c84d01110a7d54b4523c7f2a8b504737c138874f9a5b2

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /static_new/js/common.js HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:26 GMT
content-type: application/javascript
last-modified: Sun, 06 Nov 2022 20:24:30 GMT
vary: Accept-Encoding
etag: W/"636817fe-a32"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B1a4vJHPQgtmCskGQlD%2BGW42OCOuOJ%2BF9NVub3awkFgtSTrLDAuq4K%2BUuZyrw%2Fy1dkXy3j%2F55x%2FNZzCvOrMeB2RRAEaQ7HWFazDgRDP6aCIrdDiacFdz8NyVCmy91iRX2haoeIcAVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0758ca2569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/red/main.js?v=V1.24

188.114.96.1

200 OK

14 kB

URL GET HTTP/3
www.whalesvip.online/red/main.js?v=V1.24
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
14 kB (13835 bytes)
Hash
b90b1e7f3effbe0945d51be2591e957a
eb699dc823c7297a91317b3d97fde455caa52782
f5733054b0df915644a10c7c7bf9f4029dec903183464d982d2af0aab3336412

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /red/main.js?v=V1.24 HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:26 GMT
content-type: application/javascript
last-modified: Fri, 05 Mar 2021 16:35:18 GMT
vary: Accept-Encoding
etag: W/"60425dc6-27c0"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IfmzUkxOR8wUWVx4i18D1CC6Dhc1gRPOzboHIgTdl%2BG%2BEhU7NEWnzODOw%2FZVQ%2BBV38atoZ3dsHJSNB1JUqt9MKvQAQkgC6I%2FQOIeZJvnKq%2Fl1oBNdKBIaLbNjKxSM1SoA9L9yoXfdA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0759ca8569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/public/js/layer_mobile/need/layer.css

188.114.96.1

200 OK

11 kB

URL GET HTTP/3
www.whalesvip.online/public/js/layer_mobile/need/layer.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
ASCII text, with very long lines (5260), with no line terminators
Size
11 kB (11356 bytes)
Hash
633915e62d14a714594b95b974ee0836
e11ebb64a70272c4f35b92fea064f27c4b87efad
eecc7effcae5f246e6212c30c525cee9e11cadedc7d32aa6def213f1a90d98f6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /public/js/layer_mobile/need/layer.css HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:26 GMT
content-type: text/css
last-modified: Tue, 10 Dec 2019 03:14:46 GMT
vary: Accept-Encoding
etag: W/"5def0da6-148c"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Eiu3FeDhepKv1HnxnUcQuUxs%2B6dYFzrnTQt%2F30Dtpp3ZABhphM3xNBYrzo%2BsHeDS1T0DT9zCNq39w91vW7Eg%2B8fV28dnU%2B0pNHRpRi2b9cpIQ0uecb3Dg4RtJevtqgGUJUZnGNk3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0758ca0569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/static_new/js/dialog.min.js

188.114.96.1

200 OK

12 kB

URL GET HTTP/3
www.whalesvip.online/static_new/js/dialog.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
JavaScript source, Unicode text, UTF-8 text
Size
12 kB (12070 bytes)
Hash
e6a6c7b982fc5bb8487a990f1f848367
247ad7d3c2dc6973b615c39d33b1718cdc45322f
5acd06d1a462d957c80fe7b069f289c9b302ce3fd79e64f6666767c3fb36b40f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /static_new/js/dialog.min.js HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:26 GMT
content-type: application/javascript
last-modified: Sat, 15 Feb 2020 10:13:12 GMT
vary: Accept-Encoding
etag: W/"5e47c438-6cfa"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cq15G0BmqjcpfJmOz45o0p4%2FvTSBNK5Ki0Ar5Z4sCgcGy%2BT8iE2avW6dcHRxvqvn8sFi%2FNPnA1sBGh%2B4xCyctKVp0wgMQrHAnujK0bSYQjkWvLSxw2v0DVwzrIczBivDMq%2BL4H1rHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0758c9f569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/img/Icons/icon-15.png

188.114.96.1

200 OK

21 kB

URL GET HTTP/3
www.whalesvip.online/img/Icons/icon-15.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
PNG image data, 400 x 400, 8-bit colormap, non-interlaced
Size
21 kB (21002 bytes)
Hash
039a2cd46fb5029c8ce65eb2872d52c0
17999cde44a2cab266902e4ec0a232d910bc825c
1dcc87e99c0dc4b6aa560e5654ac343e5b4e5f2eb4d581531ca92791b9c8d891

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /img/Icons/icon-15.png HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:27 GMT
content-type: image/png
content-length: 21002
last-modified: Tue, 18 Oct 2022 12:59:58 GMT
etag: "634ea34e-520a"
expires: Thu, 06 Jun 2024 22:47:26 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JBOKh8dOkpuMngGmIdmTr9Y1juWEOz6Z02IsjFnHcJT0lsvYoVm3A2Ik5pCg3w%2FgOdZAM820BFpY0JBs2y5P19vPf6V2gT52tu4AFKJabDMTjE%2BUkbAWzq4z2EuY9sjebZWdc99sZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804c0757c8c569f-OSL
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/imgy/Tapptitude-logo-03.png

188.114.96.1

200 OK

20 kB

URL GET HTTP/3
www.whalesvip.online/imgy/Tapptitude-logo-03.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
PNG image data, 230 x 130, 8-bit/color RGBA, non-interlaced
Size
20 kB (20284 bytes)
Hash
57a782dd7aaebb8edde85dab6e31ef4b
dcc6e11e3684dc7ae2cac487640197be6064b8ef
af66b312fc34a901e48c4fbe8da58809a636cc711af75ebb33bb1741e6ae3f06

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /imgy/Tapptitude-logo-03.png HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:27 GMT
content-type: image/png
content-length: 20284
last-modified: Sun, 07 Apr 2024 08:18:27 GMT
etag: "661256d3-4f3c"
expires: Thu, 06 Jun 2024 22:47:26 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8cFZYfiQa4DiEwE1vAjTYao4fYvaS5abGqhG7t5m5uwI2tWKSlf3aRfB5rylg3vyRDeVFX2DQ9NOz%2FPsSpNYxKcKB57k0WhNh3MnSDluDxaisN6lBlddHYu1%2BUNxccne3%2B81rGgGKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804c0757c8f569f-OSL
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/vue.js

188.114.96.1

200 OK

93 kB

URL GET HTTP/3
www.whalesvip.online/vue.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
JavaScript source, ASCII text
Size
93 kB (93233 bytes)
Hash
f5c020d18d70f21851364d0570d38127
5dba3f5cb7463e356310fc14e26d3358c1b00ed2
58692c4b6420c192dcf7620267b09183cf3c4bd6050b31843698e69a59c26e6c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /vue.js HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:27 GMT
content-type: application/javascript
last-modified: Sun, 28 Aug 2022 23:13:22 GMT
vary: Accept-Encoding
etag: W/"630bf692-53fb4"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b0Q7yeBj3Kjf5wDaslbA0o7aZxD8b%2B8Kqu5fFcHWpOXG2Rv7Strcb8zhcJ0XUTauOEqHLxVbKsTRPjtORA9Zth4zBhSYYXSYr9PhVMdyFrDPS6iwacSk%2Bo%2BkkQnU6LrW1quDTueU9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0755c73569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.whalesvip.online
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 09:28:37 GMT
expires: Sun, 04 May 2025 09:28:37 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 307130
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.whalesvip.online
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:55:00 GMT
expires: Fri, 02 May 2025 01:55:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 507147
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Size
16 kB (15920 bytes)
Hash
3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.whalesvip.online
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:03:54 GMT
expires: Fri, 02 May 2025 02:03:54 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 506613
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/icon?family=Material+Icons

142.250.74.106

200 OK

812 B

URL GET HTTP/2
fonts.googleapis.com/icon?family=Material+Icons
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
gzip compressed data, max compression
Size
812 B (812 bytes)
Hash
101c1f05d8eb1a396fb726ce8e1712dd
4c78e25e874140bc34e0273723f4033d0eb10e3c
55576ec274385cca4774a54e5c76778aa94cda55b8b50c3a36cd081970670fd0

HTTP Headers

GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 May 2024 22:47:26 GMT
date: Tue, 07 May 2024 22:47:26 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.whalesvip.online/red/swiper/swiper-bundle.min.js

188.114.96.1

200 OK

64 kB

URL GET HTTP/3
www.whalesvip.online/red/swiper/swiper-bundle.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
JavaScript source, ASCII text, with very long lines (65278)
Size
64 kB (64496 bytes)
Hash
c4358cb63a4b96c5d71a2fb630871f30
be3b7d9d5bbd680d035f768345778d84eb08fe23
c26293076ae548cd0614c5946e9c16f34bd7810fd2f63deeaa28df61ce935229

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /red/swiper/swiper-bundle.min.js HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:27 GMT
content-type: application/javascript
last-modified: Fri, 05 Mar 2021 16:40:04 GMT
vary: Accept-Encoding
etag: W/"60425ee4-222b9"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F7%2BVWD121WNkBOE7jLA1%2B4vPR8TfHbDnNFM3FW3eet7hpcMNOxjQlL5OUN%2Fz5I7IGUgKrBlcilDyPFs32qkHJ3%2BTwjXCYRTARU92Up8Tv6p2%2Bg33DyGxXvHezPbefnofCZNKPCMbkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0758c97569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/red/bootstrap/css/bootstrap.min.css

188.114.96.1

200 OK

161 kB

URL GET HTTP/3
www.whalesvip.online/red/bootstrap/css/bootstrap.min.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
ASCII text, with very long lines (65326)
Size
161 kB (161409 bytes)
Hash
d432e4222814b62dd30c9513dcc29440
2cac4afc120983921411296bd4e8fd8a94ba237e
4ffcc598ee6cff4692c1cea272cd8a2f195f6dec32473e94370d6cdcfa5fe601

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /red/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:27 GMT
content-type: text/css
last-modified: Sat, 06 Mar 2021 03:08:24 GMT
vary: Accept-Encoding
etag: W/"6042f228-27681"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4KrArA9zVt9Je5GRze5jw4U0wwXvQfmVF3RuYgYRZ%2FoDAf4biMx7CBz9px4kGILaHt0EYc9qQ%2BF4Cebm9IJewVf%2Bc1QH2aBygU8malsd7Mca0yW6%2BLoqkYHgnrraWx0bFU74RPh%2BHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0755c7a569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/public/js/layer_mobile/need/layer.css?2.0

188.114.96.1

200 OK

5.3 kB

URL GET HTTP/3
www.whalesvip.online/public/js/layer_mobile/need/layer.css?2.0
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
ASCII text, with very long lines (5260), with no line terminators
Size
5.3 kB (5260 bytes)
Hash
633915e62d14a714594b95b974ee0836
e11ebb64a70272c4f35b92fea064f27c4b87efad
eecc7effcae5f246e6212c30c525cee9e11cadedc7d32aa6def213f1a90d98f6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /public/js/layer_mobile/need/layer.css?2.0 HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:28 GMT
content-type: text/css
last-modified: Tue, 10 Dec 2019 03:14:46 GMT
vary: Accept-Encoding
etag: W/"5def0da6-148c"
expires: Wed, 08 May 2024 10:47:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=93mX2CJ5Tj0XtcFFOBCuE4rbTioApXiFoKOe4bPsjCFxchI6l76uoXNJnhcgpbGfI0Oz%2FVKJgxrieQYFpG9VFBnuPCuYAEOKeZBeaJWrMwdfsczTsXjoNhd8gSiLTLXsa6RBMpHSMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c07e7a55569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/index/ctrl/deposit/index/user/login.html/index/user/login.html/index/user/login.html/index/user/login.html

188.114.96.1

301 Moved Permanently

11 kB

URL User Request GET HTTP/2
www.whalesvip.online/index/ctrl/deposit/index/user/login.html/index/user/login.html/index/user/login.html/index/user/login.html
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type

Size
11 kB (11048 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /index/ctrl/deposit/index/user/login.html/index/user/login.html/index/user/login.html/index/user/login.html HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Tue, 07 May 2024 22:47:25 GMT
content-type: text/html; charset=utf-8
set-cookie: think_var=en-us; expires=Tue, 07-May-2024 23:17:25 GMT; Max-Age=1800; path=/; HttpOnly
s263cfb8f=465qunchp60i6obtintphr9s37; path=/; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
cache-control: no-cache,must-revalidate
location: /index/user/login.html
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h7gq2%2F7cP%2BHiIkOLqJdRSy4IC4kMPg6akh6YUbuAHSuN%2FrQb63IsMiP9mbZvkU01wWkY%2BGcG5Lcr8OITLPhTgjWXCXb4574K%2Bf53us0L3ghfT7w2dT%2FS72vumW0P0int5iBxeIiUYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c06d1f5b712e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.whalesvip.online/red/swiper/swiper-bundle.min.css

188.114.96.1

200 OK

14 kB

URL GET HTTP/3
www.whalesvip.online/red/swiper/swiper-bundle.min.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
ASCII text, with very long lines (13663)
Size
14 kB (13921 bytes)
Hash
4d0619d7577a990881a0079718c5c92e
02553ae8ed1026ae5e1fe6cc5883fd42379e5e68
f9a55bcc80d6d8b2815299c5501cddaa8e5f3f697cdb8f5ce1e3e924097117ba

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /red/swiper/swiper-bundle.min.css HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:26 GMT
content-type: text/css
last-modified: Fri, 05 Mar 2021 16:40:04 GMT
vary: Accept-Encoding
etag: W/"60425ee4-3661"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AR3nka0StpVaYTKCSuDdSIq%2B0NLFHKAA1IcE6gUoG7ke%2Fnog4iejhKGTkmpPH8YDw%2BTZwHISgdHYT%2BH4ZpQnw1L5bWp0MY2Q7B0%2F83yz32YYB%2F5qnE9BOIO1VIOhbpr42gY%2FNoHUyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0755c7c569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/red/jquery-3.3.1.min.js

188.114.96.1

200 OK

87 kB

URL GET HTTP/3
www.whalesvip.online/red/jquery-3.3.1.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
87 kB (86927 bytes)
Hash
a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /red/jquery-3.3.1.min.js HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:27 GMT
content-type: application/javascript
last-modified: Fri, 05 Mar 2021 16:34:38 GMT
vary: Accept-Encoding
etag: W/"60425d9e-1538f"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SRjpWs%2Badlx3K2iOkZ3cdriPytDR0ZqpYHhSi%2BVPo1KyOX%2BdKUK70I%2Bxu2M7Q%2Ft%2B9%2BHvHrd9A9l7iUWEXjzwO0WkxksexLKZidmG1e%2BLrg7WJN5B%2BdBe4TdDgz%2FSWYIhNdjcKvTo1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0757c91569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/red/popper.min.js

188.114.96.1

200 OK

21 kB

URL GET HTTP/3
www.whalesvip.online/red/popper.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
JavaScript source, ASCII text, with very long lines (20831)
Size
21 kB (21004 bytes)
Hash
56456db9d72a4b380ed3cb63095e6022
6dbce88aee15b42f29083df7a07513cf3b486ba0
66f3a07e1fa9b64a686b66381e4458dbc8abf3dbbff954720c4eec07b84411c2

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /red/popper.min.js HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:26 GMT
content-type: application/javascript
last-modified: Fri, 05 Mar 2021 16:34:56 GMT
vary: Accept-Encoding
etag: W/"60425db0-520c"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UAiVY%2FasKl%2BpSvOcSg%2F3nAPDSWphKmPG3czlnwduSRvVvpyIR3QK405FSz%2BcAtrZlF3bOS8yU2zNI9h7soQJ4lUdThev%2Fj6XcdTmZ0mjin7KgrLTFZ6HwRfI4YsxAZ8Bwyf4So29XA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0757c92569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/imgy/BG-01.png

188.114.96.1

200 OK

27 kB

URL GET HTTP/3
www.whalesvip.online/imgy/BG-01.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
PNG image data, 800 x 900, 8-bit/color RGBA, non-interlaced
Size
27 kB (26585 bytes)
Hash
32e5a811d97ee090735b1b91c0504da8
eaeafca8c27de39c0445155e2098a45c9710d6e4
b4a732b2cfdf0b07576b5fafca34c485db75c90f3c466f54987f62c361c21082

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /imgy/BG-01.png HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:28 GMT
content-type: image/png
content-length: 26585
last-modified: Sun, 13 Nov 2022 09:55:19 GMT
etag: "6370bf07-67d9"
expires: Thu, 06 Jun 2024 22:47:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xjB5g%2BIgJxGQFjmqm1XeOxDdFOrnHZeEqH7xruetbvHkIolWJW8yRvjMjF4CmbadaXPF7%2FIdYOnTQJR616RXMrt%2Fvyh1jxin%2BVIjfGI%2Big1YfXc1NpVO5eg4R8wZtdqBIWHeuNaHEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804c07df9f9569f-OSL
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/index/user/login.html

188.114.96.1

200 OK

11 kB

URL User Request GET HTTP/2
www.whalesvip.online/index/user/login.html
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type

Size
11 kB (11048 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /index/user/login.html HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:47:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=flQDPoTieIqN%2Bo8d3rejAqIjO2NGJbPq02C3MUO6c2Mnekf%2F2EVy7yRedomRr3XGcX56B6s8jrFb8DRoPleFsGCKjaNqLUDXbO3uREEYdIUpUiXMkA6EwmdWGjmSSHivtSRZHhlzpg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c07189b8712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Roboto:300,400,500,700&display=swap

142.250.74.106

200 OK

9.3 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:300,400,500,700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
ASCII text, with very long lines (9600), with no line terminators
Size
9.3 kB (9348 bytes)
Hash
14947237ea2dd749ae125083525bd957
c5538d47cbd2b0959fee2e6837a1fc2e33563fbc
3cda3e604a3f1c5d1b7e5dd035dfacb996f1fe40e90e0279e9ee77ea01d5f944

HTTP Headers

GET /css?family=Roboto:300,400,500,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 May 2024 22:47:26 GMT
date: Tue, 07 May 2024 22:47:26 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.whalesvip.online/static_new/css/public.css?v=V1.24

188.114.96.1

200 OK

17 kB

URL GET HTTP/3
www.whalesvip.online/static_new/css/public.css?v=V1.24
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
ASCII text, with CRLF line terminators
Size
17 kB (17403 bytes)
Hash
169e4de5136bed51956394ccd4328122
3fca078ed53575c53e868fffa9be8cffe910684c
ce9c68517b2551c460aa4225e927dd8a58775df119518be2bdcc6532ea859fe7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /static_new/css/public.css?v=V1.24 HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:26 GMT
content-type: text/css
last-modified: Thu, 01 Sep 2022 14:01:26 GMT
vary: Accept-Encoding
etag: W/"6310bb36-43fb"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j7DiXZvD1ll%2FPj4yHsBBzL%2BGFX1QaC4ZlruYaztw%2F%2BqIFecuQWtnbj43WuaApyYIMgcdSVmbY4ak1BqS%2BhLYtcrXTijvMMHOyvSEGYoZ3%2FZ6aStGXCnkG37Wdr4E7NZsL95SuiI8SA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0756c80569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/public/js/layer_mobile/layer.js

188.114.96.1

200 OK

3.3 kB

URL GET HTTP/3
www.whalesvip.online/public/js/layer_mobile/layer.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (3435), with no line terminators
Size
3.3 kB (3304 bytes)
Hash
13fd3d5b0fb763160395abbad25d8e57
6bc56d44091c873f6b5496ef8be2ed9f36e5220b
f1757725deb30f2928f10e427b253f153b0466a60a1c399e9f6bb6cbf5908941

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /public/js/layer_mobile/layer.js HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:26 GMT
content-type: application/javascript
last-modified: Tue, 10 Dec 2019 03:14:46 GMT
vary: Accept-Encoding
etag: W/"5def0da6-ce8"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mg4GfPJWTpkBBL5XlmPN4oVh%2BEjg9FRnyUhBOeGQNTCaFw4%2BAn1%2F8CvDLOZDtJmuBn6T%2B%2FZ7PJ50%2FhN12poDOfohnE8Xod%2FJWxjcpNWKXm%2BtY9DHiDB34%2FrWpYQlGFo7kSU6cxnUvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0758ca1569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/red/style.css?v=V1.24

188.114.96.1

200 OK

126 kB

URL GET HTTP/3
www.whalesvip.online/red/style.css?v=V1.24
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type

Size
126 kB (125806 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /red/style.css?v=V1.24 HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:27 GMT
content-type: text/css
last-modified: Wed, 07 Sep 2022 15:17:36 GMT
vary: Accept-Encoding
etag: W/"6318b610-1eb6e"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FyxjTIJqnqnvgHn0KuFcmz2R%2Fo3jJciNzSiBd0NWWERS4NZoCM8OOVlYmR9o27n0rtWJlQcDMOkbIkgYAM7h53ZIJDIi41kP3si25Gwez%2FFFLiMavD4OQKm5tI9tc3tV%2F2VAdNapjw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0756c7f569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/css/app.css

188.114.96.1

200 OK

24 kB

URL GET HTTP/3
www.whalesvip.online/css/app.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type

Size
24 kB (24227 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /css/app.css HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:26 GMT
content-type: text/css
last-modified: Tue, 18 Oct 2022 13:16:50 GMT
vary: Accept-Encoding
etag: W/"634ea742-5ea3"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LqAtVFPmac5OlCJV7oKWF2TNUdctcJy5Cs%2FvCoTCiilxtjh1Tz4Dly28Yr8XchPygT1vioIYAkpoKkVAtHZG%2Fn2NvNaa0FkU0avWXGUN74hCwDKvmIP8tN%2B4UUBo7uwi2i5jW5qVOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0757c8b569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/red/jquery.cookie.js

188.114.96.1

200 OK

3.1 kB

URL GET HTTP/3
www.whalesvip.online/red/jquery.cookie.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
JavaScript source, ASCII text, with very long lines (3441), with no line terminators
Size
3.1 kB (3121 bytes)
Hash
c70a657c6ff1764a238929b6e46fb8e4
e2a8eb96b388abf14690ea14fe4af3f600296235
466840a5176a0d6bd70e2d5ade5928ad656ca6b9cd3040a241e33478c63f5813

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /red/jquery.cookie.js HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:26 GMT
content-type: application/javascript
last-modified: Fri, 05 Mar 2021 16:36:06 GMT
vary: Accept-Encoding
etag: W/"60425df6-c31"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VeauOW3KCTjbwJ5B2BWl5kP1YpiCElXmr7YOfSFE6CdYN2bmuwNjrK2VpTdnl%2FJuqFVTv0LhgtYeq0C4EVFYRaNteGb96daUvKSifRcDiJRC4yKcodUveu8hAFwd3FMxf%2ByWTTI5Aw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0758c9e569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/red/bootstrap/js/bootstrap.min.js

188.114.96.1

200 OK

64 kB

URL GET HTTP/3
www.whalesvip.online/red/bootstrap/js/bootstrap.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
JavaScript source, ASCII text, with very long lines (63188)
Size
64 kB (63467 bytes)
Hash
f0c2bcf5ef0c4476508d79ec9cdcce07
3beed68ed7d753c6bf4f61c26386ddd7929ba030
edd03b96ae4ff7886406c59d7dfeeaa1b624a7da297bf2f92d0cb6b7f9633cba

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /red/bootstrap/js/bootstrap.min.js HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:27 GMT
content-type: application/javascript
last-modified: Sat, 06 Mar 2021 03:08:34 GMT
vary: Accept-Encoding
etag: W/"6042f232-f7eb"
expires: Wed, 08 May 2024 10:47:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mtJKYuOT9DLhq8BfyYcTda17E9A5POPI1qI3fz3A6ao0m5eF2WEsWVw3PfgEwzXjcaLlncDoaDXq3fM4bSrZ9iQsAo8Kv28HJr4HgZLUeVgMGu0e0owcP3baqIs14YUffHK0IASw7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804c0757c95569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.whalesvip.online/favicon.ico

188.114.96.1

200 OK

12 kB

URL GET HTTP/3
www.whalesvip.online/favicon.ico
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.whalesvip.online/index/user/login.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwhalesvip.online
Fingerprint37:34:B3:6B:02:87:C9:CB:A7:ED:80:E4:E1:DF:2B:BA:0C:DA:73:09
ValidityTue, 16 Apr 2024 10:51:22 GMT - Mon, 15 Jul 2024 10:51:21 GMT

File type
PNG image data, 89 x 101, 8-bit/color RGBA, non-interlaced
Size
12 kB (11849 bytes)
Hash
d22689c044f347076d89a6ca4feec5fe
12c64d90cc1efcad4420de27dccae4535eefa8bc
f1eff40ca74ef3471e7a148f564bb74d95454885320df9ad51bc441c991ab1bb

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.whalesvip.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.whalesvip.online/index/user/login.html
Cookie: think_var=en-us; s263cfb8f=465qunchp60i6obtintphr9s37
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:47:28 GMT
content-type: image/x-icon
last-modified: Sun, 05 Jan 2020 13:07:52 GMT
etag: W/"5e11dfa8-2e49"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4D%2F3h5heJ21viUpPmM8%2Fq2%2FSznm7wjpnM3Z68hOGsuWhHseesoHm6JI23b%2BOS%2FhjSEQT77I76nVN1WP3OCZfvewUeav4paM1OuoUDC5p6q3BKdVGeNAhO3gS91OGi3jsjw%2B%2Fpz9nYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8804c0809bc6569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML