| msbcglobalnet-ook-f860.753purple.workers.dev/style.css | 188.114.96.1 | 200 OK | 12 kB |
URL GET HTTP/3msbcglobalnet-ook-f860.753purple.workers.dev/style.css IP188.114.96.1:443
Requested byhttps://msbcglobalnet-ook-f860.753purple.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subject753purple.workers.dev Fingerprint84:58:EE:E4:2E:14:A2:91:87:70:62:B1:26:FF:F6:10:DB:0A:28:91 ValidityTue, 16 Apr 2024 19:05:11 GMT - Mon, 15 Jul 2024 19:05:10 GMT
File typeHTML document, ASCII text, with very long lines (65525) Hashd45f59d3436d8a4810883536db7d7fce edd2e4ad68e5b34635d20a2c7a16173b39eb1ccc 849212ac14aa839ec5bba2431d96a5bcc7fc14c750d64f9eb05bebdd37cbb68b
Analyzer | Verdict | Alert | OpenPhish | phishing | AT&T Inc. |
GET /style.css HTTP/1.1
Host: msbcglobalnet-ook-f860.753purple.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://msbcglobalnet-ook-f860.753purple.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 17:47:46 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qrYdXK5jN%2BIA0uD%2BwSnY0FgM0GWJZ6q0HuMd4He%2FknssJRCg8bSwaJIr7xRui8L%2BVG9EsBWWOhdKo541Z8AS%2B7UVSp7STjJYxIVGuYLBbS1D38F%2FiTlPWFxj2jcr8i3KUYV1wOySeJRh5tW%2Fleasp76EhG9Bi9EDKrVIdf4Ytw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875e3e003e4eabcc-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| code.jquery.com/jquery-3.1.1.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL GET HTTP/2code.jquery.com/jquery-3.1.1.min.js IP151.101.66.137:443
Requested byhttps://msbcglobalnet-ook-f860.753purple.workers.dev/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32030) Hashe071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf
GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://msbcglobalnet-ook-f860.753purple.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 17 Apr 2024 17:47:46 GMT
age: 18575467
x-served-by: cache-lga21947-LGA, cache-hel1410033-HEL
x-cache: HIT, HIT
x-cache-hits: 118, 103203
x-timer: S1713376067.650362,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.3.1.js | 151.101.66.137 | 200 OK | 80 kB |
URL GET HTTP/2code.jquery.com/jquery-3.3.1.js IP151.101.66.137:443
Requested byhttps://msbcglobalnet-ook-f860.753purple.workers.dev/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash6a07da9fae934baf3f749e876bbfdd96 46a436eba01c79acdb225757ed80bf54bad6416b d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad
GET /jquery-3.3.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://msbcglobalnet-ook-f860.753purple.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://msbcglobalnet-ook-f860.753purple.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-42587"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 17 Apr 2024 17:47:46 GMT
age: 18575416
x-served-by: cache-lga21980-LGA, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 1249
x-timer: S1713376067.691683,VS0,VE0
vary: Accept-Encoding
content-length: 80268
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js | 142.250.74.42 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP142.250.74.42:443
Requested byhttps://msbcglobalnet-ook-f860.753purple.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://msbcglobalnet-ook-f860.753purple.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 13 Apr 2024 13:58:13 GMT
expires: Sun, 13 Apr 2025 13:58:13 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 359373
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| api.ipify.org/?format=jsonp&callback=getIP | 172.67.74.152 | 200 OK | 29 B |
URL GET HTTP/2api.ipify.org/?format=jsonp&callback=getIP IP172.67.74.152:443
Requested byhttps://msbcglobalnet-ook-f860.753purple.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subjectipify.org FingerprintC8:1A:05:47:C5:73:C6:CE:DF:1D:A6:DE:00:11:A9:9A:8C:DB:EF:A7 ValidityThu, 21 Mar 2024 19:56:02 GMT - Wed, 19 Jun 2024 19:56:01 GMT
File typeASCII text, with no line terminators Hash90a39389063c7c5716745c3b3bb4fba1 a0903c9a7e90fa3c6ddb04d0ce36abbd4c7a004f eaa6745d9d0a7698235cd6af53aad1551d975506c8405d8303282fb6d2f7ab69
GET /?format=jsonp&callback=getIP HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://msbcglobalnet-ook-f860.753purple.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 17:47:46 GMT
content-type: application/javascript
content-length: 29
vary: Origin
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 875e3e00cf1c60ee-LHR
X-Firefox-Spdy: h2
|
|
| msbcglobalnet-ook-f860.753purple.workers.dev/favicon.ico | 188.114.96.1 | 200 OK | 15 kB |
URL GET HTTP/3msbcglobalnet-ook-f860.753purple.workers.dev/favicon.ico IP188.114.96.1:443
Requested byhttps://msbcglobalnet-ook-f860.753purple.workers.dev/ CertificateIssuerGoogle Trust Services LLC Subject753purple.workers.dev Fingerprint84:58:EE:E4:2E:14:A2:91:87:70:62:B1:26:FF:F6:10:DB:0A:28:91 ValidityTue, 16 Apr 2024 19:05:11 GMT - Mon, 15 Jul 2024 19:05:10 GMT
File typeHTML document, ASCII text, with very long lines (65525) Hashd45f59d3436d8a4810883536db7d7fce edd2e4ad68e5b34635d20a2c7a16173b39eb1ccc 849212ac14aa839ec5bba2431d96a5bcc7fc14c750d64f9eb05bebdd37cbb68b
Analyzer | Verdict | Alert | OpenPhish | phishing | AT&T Inc. |
GET /favicon.ico HTTP/1.1
Host: msbcglobalnet-ook-f860.753purple.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://msbcglobalnet-ook-f860.753purple.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 17:47:48 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FHGSsPY0RPc4zFJkNlUaoxb%2BvvxhJJwcz9dV7qv2EckdXOzR7gYYCS%2B2FLcQJeXrlhA3Qznz6zKtrAOu7H56ivVHCmxl01qVvLtPerqNJbegU4N4jiM2nqBpGV%2FwcFNlNHpYaQcgXJxG1DetKAfcJvj18IbuY2qj%2FIlN2OzFYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875e3e0d9eb9abcc-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| msbcglobalnet-ook-f860.753purple.workers.dev/ | 188.114.96.1 | 200 OK | 78 kB |
URL User Request GET HTTP/2msbcglobalnet-ook-f860.753purple.workers.dev/ IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subject753purple.workers.dev Fingerprint84:58:EE:E4:2E:14:A2:91:87:70:62:B1:26:FF:F6:10:DB:0A:28:91 ValidityTue, 16 Apr 2024 19:05:11 GMT - Mon, 15 Jul 2024 19:05:10 GMT
File typeHTML document, ASCII text, with very long lines (65525) Hashd45f59d3436d8a4810883536db7d7fce edd2e4ad68e5b34635d20a2c7a16173b39eb1ccc 849212ac14aa839ec5bba2431d96a5bcc7fc14c750d64f9eb05bebdd37cbb68b
Analyzer | Verdict | Alert | urlquery | suspicious | Suspicious - Suspicious Javascript code | OpenPhish | phishing | AT&T Inc. |
GET / HTTP/1.1
Host: msbcglobalnet-ook-f860.753purple.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 17:47:46 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=58SPnXc8jrashzajpEOmhD3plsVD7j9XMr4GGc9%2F90KHYkjpFpF4oN5IMnMANSM24SYFEUbfLa5boUmVUb5aA7KPNvtO6cqqy4ENvvT0GIXHB1nHzzttdgSKj0n9KS03evrK3AoQB2biGWZQjNmzz4OM48Hb%2B5V1cS8ZHduhMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875e3dfe7b009312-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|