| roberthood.net/me/young/quak/bizmail.php |  72.18.194.32 | 200 OK | 844 B |
URL User Request GET HTTP/2roberthood.net/me/young/quak/bizmail.php IP72.18.194.32:443
CertificateIssuerLet's Encrypt Subjectroberthood.net Fingerprint38:18:3D:A9:26:5C:6F:C9:10:74:42:8C:28:AF:F8:37:51:9D:0F:D2 ValidityTue, 12 Mar 2024 21:46:10 GMT - Mon, 10 Jun 2024 21:46:09 GMT
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashd06abfb359ac6c91c986759370559251 496be551e13c4bcbdc7de87f9b75df5cd8cab05e fd2469cec0bf5a2d632fdde8ba2106e938d013a91d2dcbd8f476f4b90894a503
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | NetEase |
GET /me/young/quak/bizmail.php HTTP/1.1
Host: roberthood.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/7.3.33
content-type: text/html; charset=UTF-8
content-length: 844
content-encoding: br
vary: Accept-Encoding
date: Sat, 20 Apr 2024 16:20:46 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
| roberthood.net/me/young/quak/img/favicon.ico | 72.18.194.32 | 200 OK | 318 B |
URL GET HTTP/2roberthood.net/me/young/quak/img/favicon.ico IP72.18.194.32:443
Requested byhttps://roberthood.net/me/young/quak/bizmail.php CertificateIssuerLet's Encrypt Subjectroberthood.net Fingerprint38:18:3D:A9:26:5C:6F:C9:10:74:42:8C:28:AF:F8:37:51:9D:0F:D2 ValidityTue, 12 Mar 2024 21:46:10 GMT - Mon, 10 Jun 2024 21:46:09 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 16 colors Hasha14e5365cc2b27ec57e1ab7866c6a228 37fc3645c16a1cbd74d8a6b7ef8756bbf0a3e857 43c6594eb74940c6e0fb38d55c634425860093660f4eb0cb89334608dd9947eb
GET /me/young/quak/img/favicon.ico HTTP/1.1
Host: roberthood.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roberthood.net/me/young/quak/bizmail.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 27 Apr 2024 16:20:47 GMT
content-type: image/vnd.microsoft.icon
last-modified: Thu, 24 Sep 2020 23:37:39 GMT
etag: "13e-5f6d2dc3-89af28fd3f93a983;;;"
accept-ranges: bytes
content-length: 318
date: Sat, 20 Apr 2024 16:20:47 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
| roberthood.net/me/young/quak/img/qiye.png | 72.18.194.32 | 200 OK | 226 kB |
URL GET HTTP/2roberthood.net/me/young/quak/img/qiye.png IP72.18.194.32:443
Requested byhttps://roberthood.net/me/young/quak/bizmail.php CertificateIssuerLet's Encrypt Subjectroberthood.net Fingerprint38:18:3D:A9:26:5C:6F:C9:10:74:42:8C:28:AF:F8:37:51:9D:0F:D2 ValidityTue, 12 Mar 2024 21:46:10 GMT - Mon, 10 Jun 2024 21:46:09 GMT
File typePNG image data, 1349 x 884, 8-bit/color RGBA, non-interlaced Size226 kB (226372 bytes) Hash8663718ca1f2fe4e14a71ceb097d28c1 7b033eac7db67fbd16dc51dd9a408a3bd4e99b5c 6ef80e259546c736a95455bddf74a608f648db7a5d721dd3bd44fce794c7b9e8
GET /me/young/quak/img/qiye.png HTTP/1.1
Host: roberthood.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roberthood.net/me/young/quak/bizmail.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 27 Apr 2024 16:20:46 GMT
content-type: image/png
last-modified: Thu, 24 Sep 2020 23:37:39 GMT
etag: "37444-5f6d2dc3-771d4cf6496b9492;;;"
accept-ranges: bytes
content-length: 226372
date: Sat, 20 Apr 2024 16:20:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|