| fonts.googleapis.com/css2?family=Kanit:wght@400;600&display=swap |  142.250.74.106 | 200 OK | 986 B |
URL GET HTTP/2fonts.googleapis.com/css2?family=Kanit:wght@400;600&display=swap IP142.250.74.106:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Hash0fcc983e72a88c867fc06e794f0044dc c37ab9511cfd47285d695d5b7449a419f6518d9a 96a14a53fe24ec8572d688818eec00428de21749c612e736135574b2068c2381
GET /css2?family=Kanit:wght@400;600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 05:45:55 GMT
date: Thu, 18 Apr 2024 05:45:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/kanit/v15/nKKZ-Go6G5tXcraVGwA.woff2 | 216.58.207.227 | 200 OK | 19 kB |
URL GET HTTP/2fonts.gstatic.com/s/kanit/v15/nKKZ-Go6G5tXcraVGwA.woff2 IP216.58.207.227:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19388, version 1.0 Hashf816f16f297c801aaf01ff43c9fcd563 2e9e2c80bc5aa5f01f75cd486baa1769f53dea5e ae7b918efe7cd287651e014ed269c923e1a925c8eee1a474ad11184f04659d3e
GET /s/kanit/v15/nKKZ-Go6G5tXcraVGwA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19388
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:28:47 GMT
expires: Fri, 11 Apr 2025 17:28:47 GMT
cache-control: public, max-age=31536000
age: 562628
last-modified: Thu, 20 Jul 2023 20:53:09 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/logo.png | 76.76.21.9 | | 23 kB |
URL pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/logo.png IP76.76.21.9:0
File typePNG image data, 512 x 512, 8-bit colormap, non-interlaced Hash64b883944b59c73896ec40af9f94aab3 e0dfeea62f1ba1942c99d1e6cf14c2decb023d08 39c08d280e7f4636908c7648d8c779fa7b01a90ba04d869a94e461d4637de199
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /logo.png HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 380624
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="logo.png"
content-type: image/png
date: Thu, 18 Apr 2024 05:45:56 GMT
etag: "64b883944b59c73896ec40af9f94aab3"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /logo.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::bvpd5-1713419156298-fd9dd8f91f00
content-length: 22919
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/favicon.ico | 76.76.21.9 | 200 OK | 19 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/favicon.ico IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeMS Windows icon resource - 6 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hashfca50d530ea4525965eb6e11edde9601 9a975c80755a5deca6a0635e580c6dd5b57596a4 e11b366176c2f300801c5229aae56ebc008ccb5ccfd217c0aae0ebe4ae009f02
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /favicon.ico HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297280
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="favicon.ico"
content-encoding: br
content-type: image/vnd.microsoft.icon
date: Thu, 18 Apr 2024 05:45:56 GMT
etag: W/"fca50d530ea4525965eb6e11edde9601"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /favicon.ico
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419156299-bd73aa361cdd
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/css/f15ae5acfa72202a.css | 76.76.21.9 | 200 OK | 23 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/css/f15ae5acfa72202a.css IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash40eb3e05a48057f33a952ad321a0a9c5 dd84ac5bb29de4c4987f4b51f226488bb8f3bd34 4f9445c8e4d2c918dbe08691d7efd12dbc63b6c0c0c85846fb7c5d35e45bc3fd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/css/f15ae5acfa72202a.css HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="f15ae5acfa72202a.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Thu, 18 Apr 2024 05:45:55 GMT
etag: W/"40eb3e05a48057f33a952ad321a0a9c5"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/css/f15ae5acfa72202a.css
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::nqd2w-1713419155357-390d8bdb4e05
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/framework-9910fad42761648c.js | 76.76.21.9 | 200 OK | 53 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/framework-9910fad42761648c.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65200) Hash46b92cd043fe51d3018c33c2faccb623 2e49e403cd93b8bd131b754c8bb2cd95ad527c1f 6a002e3da5cdfbe42873232c822d868fd714564876f69f22a7187b989fa393ba
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/framework-9910fad42761648c.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="framework-9910fad42761648c.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:55 GMT
etag: W/"46b92cd043fe51d3018c33c2faccb623"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/framework-9910fad42761648c.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qs5mn-1713419155361-f4911f97fed0
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/3804.5c782b135a9ecacd.js | 76.76.21.9 | 200 OK | 86 B |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/3804.5c782b135a9ecacd.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with no line terminators Hash51248ca3a7069f90dac31e324b5d577e e8b0cf2d6212a3e931fab48c0d669b6fdca6c11a ea6d7b09d0b72b833bd863e5a50eeca94556472bc275e70297b3f4cd22304b1c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/3804.5c782b135a9ecacd.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="3804.5c782b135a9ecacd.js"
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:56 GMT
etag: "51248ca3a7069f90dac31e324b5d577e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/3804.5c782b135a9ecacd.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::nqd2w-1713419156663-05bcddc0732c
content-length: 86
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1d5ffccebef437a8.js | 76.76.21.9 | 200 OK | 11 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1d5ffccebef437a8.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (26619) Hashe127a001bfe4e1f5f2ceff35f4b0bdca 1c3c9135f2face866a392cd4424d691013cf79a7 35e045fd512de0e3c1c187e6f8feabceccac9c350e15b1aa4f28f13abf06abde
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/quote-worker.1d5ffccebef437a8.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="quote-worker.1d5ffccebef437a8.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:56 GMT
etag: W/"e127a001bfe4e1f5f2ceff35f4b0bdca"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/quote-worker.1d5ffccebef437a8.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::bvpd5-1713419156870-4ec78d048d65
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/3676.bfc136fe6917fba7.js | 76.76.21.9 | 200 OK | 142 B |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/3676.bfc136fe6917fba7.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with no line terminators Hash24d6a4793454886507bd9328d64a417f fab42afb4ca6da0409cfabb386b23b917517c4dc 3ebc9a16d6dec44f8ce35537c4a1775180c00fcd1346d2678fe900ddcdbb3a42
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/3676.bfc136fe6917fba7.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="3676.bfc136fe6917fba7.js"
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:56 GMT
etag: "24d6a4793454886507bd9328d64a417f"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/3676.bfc136fe6917fba7.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::7wxdx-1713419156907-7a8961fa7571
content-length: 142
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1d5ffccebef437a8.js | 76.76.21.9 | 200 OK | 24 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1d5ffccebef437a8.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (26619) Hashe127a001bfe4e1f5f2ceff35f4b0bdca 1c3c9135f2face866a392cd4424d691013cf79a7 35e045fd512de0e3c1c187e6f8feabceccac9c350e15b1aa4f28f13abf06abde
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/quote-worker.1d5ffccebef437a8.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="quote-worker.1d5ffccebef437a8.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:56 GMT
etag: W/"e127a001bfe4e1f5f2ceff35f4b0bdca"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/quote-worker.1d5ffccebef437a8.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qs5mn-1713419156867-754d7ef9d8f0
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-TLF66T4 | 142.250.74.72 | 200 OK | 78 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-TLF66T4 IP142.250.74.72:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (10853) Hashf6eb91cae97011585069907692038431 8a2a37f5dbb4ed6a9c55fcde0b2ce9c4c9a5146a ea4acf2cca4b34879642f921fd7b18e0a4034f90263f94c6f4c00bc335eec038
GET /gtm.js?id=GTM-TLF66T4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 05:45:57 GMT
expires: Thu, 18 Apr 2024 05:45:57 GMT
cache-control: private, max-age=900
last-modified: Thu, 18 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 78332
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/images/astronaut-bunny.png | 172.67.75.76 | 200 OK | 76 kB |
URL GET HTTP/2assets.pancakeswap.finance/web/images/astronaut-bunny.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 700 x 700, 8-bit colormap, non-interlaced Hash5921096d3e259c17b327ff060993a2fe 5a12f77a481be93028ed6a1d80b17a7a11984887 263eeb3af9fea872adb6e984753b8fc609f636b4e800ecba2d4bee33cbfcc50c
GET /web/images/astronaut-bunny.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:45:57 GMT
content-type: image/png
content-length: 75877
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "12ba5a602b78afe34c86fd5751daf5ff"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TM8L4dFupbzp%2Fg%2BCJ2uo8xezhXewlb0J72GwsYMVvJHNBUVmXEODgAtVoXNlnOzEal3Y%2BxfF4E0Vs3wlVeT9wuO9Kk35b%2F87W753uw3%2FPLDAkUsP8l69ALGT%2F0SleNRR0JDf%2F8AvkuEv4hKhtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a049aa35691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWnVaE.woff2 | 216.58.207.227 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWnVaE.woff2 IP216.58.207.227:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19572, version 1.0 Hash24ad3fea714cb5e100aa16f832531bf3 a5475cd37afb39fc2472ef8391a4a3fd900122eb 7196c3002f08704f9f99de95b6357969a512eaa9a766eee693921dce72927cea
GET /s/kanit/v15/nKKU-Go6G5tXcr5KPxWnVaE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19572
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:38:49 GMT
expires: Fri, 18 Apr 2025 02:38:49 GMT
cache-control: public, max-age=31536000
age: 11228
last-modified: Thu, 20 Jul 2023 20:50:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5569.622decfb89090f6a.js | 76.76.21.9 | | 143 kB |
URL pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5569.622decfb89090f6a.js IP76.76.21.9:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (44354) Size143 kB (143228 bytes) Hashe343c1f1ace3057f21759e5e125833a7 123c8132ab92e706bcc3ecaaf18dc841714bb698 aced39c5e87d3ad03b4d5242265bc759c2181d4290091304c2d38f00e21d7dde
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/5569.622decfb89090f6a.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5569.622decfb89090f6a.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:56 GMT
etag: W/"e343c1f1ace3057f21759e5e125833a7"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/5569.622decfb89090f6a.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::p58sb-1713419156904-f49a1f1edacd
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWpVaF5NQ.woff2 | 216.58.207.227 | 200 OK | 20 kB |
URL GET HTTP/3fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWpVaF5NQ.woff2 IP216.58.207.227:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19636, version 1.0 Hash22aeb837a470326fe42ab217a37cea2a 46a4d8b6f9fc8f7bd2471be93a63fed40126e415 ae193f732cb0b2f333c561c7fb758f3a83e841a79da350e7030c492d3446fea9
GET /s/kanit/v15/nKKU-Go6G5tXcr5KPxWpVaF5NQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19636
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:53:37 GMT
expires: Fri, 18 Apr 2025 02:53:37 GMT
cache-control: public, max-age=31536000
age: 10340
last-modified: Thu, 20 Jul 2023 20:54:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| assets.pancakeswap.finance/web/images/astronaut-bunny.png | 172.67.75.76 | 200 OK | 76 kB |
URL GET HTTP/2assets.pancakeswap.finance/web/images/astronaut-bunny.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 700 x 700, 8-bit colormap, non-interlaced Hash5921096d3e259c17b327ff060993a2fe 5a12f77a481be93028ed6a1d80b17a7a11984887 263eeb3af9fea872adb6e984753b8fc609f636b4e800ecba2d4bee33cbfcc50c
GET /web/images/astronaut-bunny.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:57 GMT
content-type: image/png
content-length: 75877
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "12ba5a602b78afe34c86fd5751daf5ff"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TM8L4dFupbzp%2Fg%2BCJ2uo8xezhXewlb0J72GwsYMVvJHNBUVmXEODgAtVoXNlnOzEal3Y%2BxfF4E0Vs3wlVeT9wuO9Kk35b%2F87W753uw3%2FPLDAkUsP8l69ALGT%2F0SleNRR0JDf%2F8AvkuEv4hKhtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0719921c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/wallets/coinbase.png | 172.67.75.76 | | 2.1 kB |
URL assets.pancakeswap.finance/web/wallets/coinbase.png IP172.67.75.76:0
CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hash851ec2ffeb2f50e208bc1ff7c32c87d9 2ac03d14ca3e43b8a650adb46e386be7f6ff177a 29846f0225d4caa8399bc44926889b023b6f5fd7e92666bd31170273716768da
GET /web/wallets/coinbase.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:57 GMT
content-type: image/png
content-length: 2135
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "37d02187a2f00581e51815d50b840da5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ts57Ziw4mxGA9LM72jcaezLeZjWERICjx5KFp3GaIAU5cgKrScIO8eCsiTNIq1RM2M0Zq6iOewqsBkQyKCRmDMhO8hRaOYaTlrmDSIT5vp0OWqBOS1%2FzVOX%2FArNetFTlZVVGUm3Mh%2FtFo8MHxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5807
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0729951c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/wallets/walletconnect.png | 172.67.75.76 | 200 OK | 1.6 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/wallets/walletconnect.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hash78af89866774086b393a771bf2dc0eca 5f708af6b8f0586466aa0fe022d4e6b6ecfa07bf 7cfe65f11aafe9006a6ef242ce1b12374c571fdb919aa089acc7ccf9052aa5a5
GET /web/wallets/walletconnect.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:57 GMT
content-type: image/png
content-length: 1580
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ef943e7c5cf7b187cf20a8c6308a03ac"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GNB3RsAwo%2BnIaei0uDUCwtcFRbjjmzSCVyB025kQNpCrwXGSkNHhw1p01ywAZBbd3yJ2%2Bue1WAoAobBJqZR0QvV8DPWma8nk5Dc14LPrhGgJ7CwLl3RtubWNsMkNIN7Kvrw52W%2BxMvSyBNdBHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5838
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0729961c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4633-3bb6a8004ba1ec3b.js | 76.76.21.9 | 200 OK | 10 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4633-3bb6a8004ba1ec3b.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (8146) Hashc0209ae8fde9882bb7d803e2a6c69c82 db5cd24f13a4c7ba2f52ef999709cb75f0d520f9 a6b32e35b22c083fbe4ce333980ee368206b17fd4437df57b833f93e909e86c6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/4633-3bb6a8004ba1ec3b.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4633-3bb6a8004ba1ec3b.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:55 GMT
etag: W/"c0209ae8fde9882bb7d803e2a6c69c82"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4633-3bb6a8004ba1ec3b.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419155364-8fd6ce362cbf
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/lunar-bunny/star-l@2x.webp | 76.76.21.9 | 200 OK | 4.4 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/lunar-bunny/star-l@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashbe140bb7d25840b7769359bd2f2fed55 5cf57ee3b967bfa30da44d82837a58f939a412ea 7bd6d505c76583027797b365c50aee9066fe86def4aeab5b1677478e163e20d2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/lunar-bunny/star-l@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="star-l@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "be140bb7d25840b7769359bd2f2fed55"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/lunar-bunny/star-l@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::xkvkv-1713419157637-f0350ef6fe17
content-length: 4444
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/lunar-bunny/star-top-r@2x.webp | 76.76.21.9 | 200 OK | 4.9 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/lunar-bunny/star-top-r@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashff9e6f7fc4a47e7949275b8068f0e4bc 79c21e135f81671eb7dac4b8421dfa0e060f2e54 bb2bd9b324be1234014185baa3ea76d56afcf4e84ff7c22019694532b21659ec
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/lunar-bunny/star-top-r@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="star-top-r@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "ff9e6f7fc4a47e7949275b8068f0e4bc"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/lunar-bunny/star-top-r@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419157640-1de6035df39a
content-length: 4930
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/9707-db5a8e4f6bf47e3b.js | 76.76.21.9 | 200 OK | 20 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/9707-db5a8e4f6bf47e3b.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (18428) Hash9900173eff8f5fb0d489a940c8c90de4 d048ecc9cfa37957b3f1a103538eac9dfcdaa5c8 62f39ea60a7cfe47c4aeb31d665d21bf02bedbfe1700c5fa84e30e68a7f996b9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/9707-db5a8e4f6bf47e3b.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="9707-db5a8e4f6bf47e3b.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:55 GMT
etag: W/"9900173eff8f5fb0d489a940c8c90de4"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/9707-db5a8e4f6bf47e3b.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::r5qvv-1713419155364-61a9a4befd46
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/index-3e699b45c78944b0.js | 76.76.21.9 | 200 OK | 69 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/index-3e699b45c78944b0.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (12398) Hash4c3e3ba7fc4e885151d7de2867e8faf5 ceee593f0707054704e7d4634b0fe3b9cabefa3b 3054e552e194a98c16631f1164acfe345a4e2d1647232e55735b54e21c10d4c0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/pages/index-3e699b45c78944b0.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="index-3e699b45c78944b0.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:55 GMT
etag: W/"4c3e3ba7fc4e885151d7de2867e8faf5"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/pages/index-3e699b45c78944b0.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::nqd2w-1713419155366-21f989585fa9
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/89G1YMf40IpLy8Bc6Vxbj/_buildManifest.js | 76.76.21.9 | 200 OK | 24 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/89G1YMf40IpLy8Bc6Vxbj/_buildManifest.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (30892), with no line terminators Hashdf252648ec995e905a4ac5da706e9342 914dc5b72e099f46ac67988368325babb8268d82 e0222ecacad551fa5202ac4dc11b13b6f4118f429b79f99d16217a2cf8c23135
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/89G1YMf40IpLy8Bc6Vxbj/_buildManifest.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_buildManifest.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:55 GMT
etag: W/"df252648ec995e905a4ac5da706e9342"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/89G1YMf40IpLy8Bc6Vxbj/_buildManifest.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713419155367-f99f7615dc12
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/earn/pie@2x.webp | 76.76.21.9 | | 13 kB |
URL pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/earn/pie@2x.webp IP76.76.21.9:0
File typeRIFF (little-endian) data, Web/P image Hash9c06f61d9f69ed7bb4dc69267dc473c8 1b262fef58da5f3781a361d241eee68fad896a91 7a3e111ecb5ead7a6f2c4a4f0a6ec5956255fb5a466017c8da7433b404db21a4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/earn/pie@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="pie@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "9c06f61d9f69ed7bb4dc69267dc473c8"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/earn/pie@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419157664-d12249633659
content-length: 12730
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/earn/stonks@2x.webp | 76.76.21.9 | 200 OK | 18 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/earn/stonks@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash9ac5d85ce119e6a0f94cf9047836c043 5894c346533ab4ceba56df169b64e1b7846db01c a5d46a8aaef9a66ebb21b79d07c309ca5a36b91f452bc48b1e17a7d067589c83
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/earn/stonks@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="stonks@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "9ac5d85ce119e6a0f94cf9047836c043"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/earn/stonks@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::xkvkv-1713419157665-ad70c6d10aa7
content-length: 17692
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/earn/folder@2x.webp | 76.76.21.9 | 200 OK | 24 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/earn/folder@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashd2839275ccf112ac6004e02aed2b163c 8e978a5464cb38f01e1741b6f2f09d9adb30c5dc c671fee2b76908f5683550b73c932b251439c7f37e129b3f6cb0f35bbc713347
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/earn/folder@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="folder@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "d2839275ccf112ac6004e02aed2b163c"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/earn/folder@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::p58sb-1713419157665-9da193d8d019
content-length: 23524
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/blocto.png | 172.67.75.76 | 200 OK | 5.0 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/wallets/blocto.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 232 x 232, 8-bit/color RGBA, non-interlaced Hashd87c961f741da9f48ee0b84b2d8c5d97 0af6331b85523be30d072fc3d844157c1fe76cac b06b94134a2e5d91e6809f04b080866fb12d42a875c3fd98ad65ffc6f3e0a0ee
GET /web/wallets/blocto.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:57 GMT
content-type: image/png
content-length: 5015
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "a9d3ccbc66959bb406ed1966e0f92fcc"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XPwvz7t2tJqgio%2FIDuu28m4ccNFXXiAn3yYJy6Kc0rrDK2tPYNlL0tXuraHG0UU2nxQ%2FxB1Ev9vinIa%2F%2FWzQzVOkkSrDL72f1y%2FFN%2BRFPJKEx03VnNsgZkOMlcSMCNDGL4mzylPMEF%2B0VG9Tcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 7021
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0729981c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/wallets/ledger.png | 172.67.75.76 | 200 OK | 1.1 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/wallets/ledger.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit gray+alpha, non-interlaced Hash05c6aca3b2fc8f03e01b480dc905625b 1aff06fe61565ce1951622b1759a5889f81e61bb 9f515d462e131ea77573fca64bb2a138dc497434b928c372ecdf8a83e33217df
GET /web/wallets/ledger.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:57 GMT
content-type: image/png
content-length: 1061
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "fc5d6f0a18bc8c7811331e13d9d7c96f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V42tCBKXSCJE0S4J5a4u36T8auwPIqd1feFNNFJOs0ezPNuLae6FDNO%2FZEPhBR6O3UukzkN8K3Sg4iR9t59dufnSEAmWZpKkPAchxhmcTZkfuDw1dN6sRCin%2Bds07XhKMg7S%2BOV3CXSwLvlm4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 7021
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a07299a1c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/main-0785997221e18e7f.js | 76.76.21.9 | 200 OK | 42 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/main-0785997221e18e7f.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash46788ca3201af8ee2b7bd75d99ec91f9 607baf6837cb956f791773c1cbcfee5a3b53e89d 2b7ce862a23bf3a1e95d2f516165021c9e2e40061740c003d3ec48589ee271ed
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/main-0785997221e18e7f.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="main-0785997221e18e7f.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:55 GMT
etag: W/"46788ca3201af8ee2b7bd75d99ec91f9"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/main-0785997221e18e7f.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::8tz4w-1713419155362-d7d459aea8ef
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/worker-chunks-f5fe34a115bad7e7.js | 76.76.21.9 | 200 OK | 255 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/worker-chunks-f5fe34a115bad7e7.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1d5ffccebef437a8.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size255 kB (255201 bytes) Hashff49888010fc5485609cac61ae633e62 275d6761a2922803b3e8314efaa0ee9d57de58b1 c57f475660d2dbcfcaa8d0c9e05243c794841b01f8b58477a6afce18823e0c7f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/worker-chunks-f5fe34a115bad7e7.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297282
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="worker-chunks-f5fe34a115bad7e7.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:55 GMT
etag: W/"ff49888010fc5485609cac61ae633e62"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/worker-chunks-f5fe34a115bad7e7.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::625cv-1713419155362-9d2fe4ade112
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/_app-66bd8c767fc4f4c7.js | 76.76.21.9 | | 842 kB |
URL pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/_app-66bd8c767fc4f4c7.js IP76.76.21.9:0
File typeJavaScript source, ASCII text, with very long lines (45966) Size842 kB (842181 bytes) Hashab74fc9a99eb67d76800d95f3d05ba07 7ad1b758bd56d5cb3a2b5ab3eb6144b5a66a826b 8aedc7c0ca9d9b177fddd8efec87870a598dc646326da7dd23c0cd06bfb2effc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/pages/_app-66bd8c767fc4f4c7.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_app-66bd8c767fc4f4c7.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:55 GMT
etag: W/"ab74fc9a99eb67d76800d95f3d05ba07"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/pages/_app-66bd8c767fc4f4c7.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::xkvkv-1713419155363-2c015fe6d93a
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/opera.png | 172.67.75.76 | 200 OK | 3.3 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/wallets/opera.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hashb8c2ee0a8b6673889f895e1c5ffed2c6 a2a4069ababd5db01f0b3d8fd4392964e1c334e1 3a93e883601c13e72381165bd035155f531e30560acd737401d4ac93053b9be5
GET /web/wallets/opera.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:57 GMT
content-type: image/png
content-length: 3287
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "a3bf28b12102f3e4cf1ccaa356175d44"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YzVKLRRpGYT3OmLKraSFI6YY4j7%2B1FWCLKCqxjyf1ISMXwsx8iuyIgaTayZ4OlaGeg7fHhfZglP7ShJpujkUi%2BwjoGaym5MsvJc4Zmdu4NsnsIBPaOcjcCZed7yWEP3Wtatl0tSAhj8YHlwsZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5807
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0739a51c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/green@2x.webp | 76.76.21.9 | 200 OK | 20 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/green@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hasha005661a028352b5312f9a737f0ddbb7 95d6bbb2dbee6a155ce32c5e225a21b55bc621b6 ef7bae39747c8c8e4be81c371ae0ff291c18f6d2f17c4212ddb045636d5f8e80
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/prediction-cards/green@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="green@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "a005661a028352b5312f9a737f0ddbb7"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/prediction-cards/green@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qs5mn-1713419157666-74fb4a098ad0
content-length: 19546
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/2@2x.webp | 76.76.21.9 | 200 OK | 10 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/2@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash35e1ab38c57e590c6bb91e0a5895aad8 7033a549779d7dae87ccd3a2e3515fadf0c32fd0 ed51ebfcf74682ff93d0dd6d6be909fa0092ea334c4e63d114ca3737ec9a78b9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/lottery-balls/2@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="2@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "35e1ab38c57e590c6bb91e0a5895aad8"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/lottery-balls/2@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419157666-07a96c984392
content-length: 10084
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/bottom-left@2x.webp | 76.76.21.9 | 200 OK | 27 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/bottom-left@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash7d6ca43b61f07dc6540247711e038d9c 1a9ef6ccc1bd47a087f53c7efcf6e8e353c4e165 f6aef04c525c09429ba55638f68e4c63abb51b1f2148f152f343d89dc7c72b94
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/prediction-cards/bottom-left@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="bottom-left@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "7d6ca43b61f07dc6540247711e038d9c"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/prediction-cards/bottom-left@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713419157665-7c3a3ed30089
content-length: 27006
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/4@2x.webp | 76.76.21.9 | 200 OK | 15 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/4@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash1310c02ce46cfd0b0e6f2e4eae645f76 e0379827fd0c9628cde4fe17db40c8ae87672174 a40e5954e6b0bfd9f827a36387d5ac69c1522a99f3df47a0f240c32bf56f15c1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/lottery-balls/4@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297283
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="4@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "1310c02ce46cfd0b0e6f2e4eae645f76"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/lottery-balls/4@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713419157676-cf382a5b413e
content-length: 14940
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/chains/56.png | 172.67.75.76 | 200 OK | 1.2 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/56.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 48 x 48, 8-bit colormap, non-interlaced Hash241ddcd7ff9541b1839703882d91d404 5b6ada17f54077b5e020d91af0c8ebe99b06bb88 8b7f54e9045d2beca6b4d124b97c84b9c2e84d14c709b6f3b160fae209ff08e0
GET /web/chains/56.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:58 GMT
content-type: image/png
content-length: 1158
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2eba283c17774595a0733544bc896fba"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sf28G9Oq8uq3HDegoraP4oRWR4%2BDgYDQTWwcc94l7AtxmAvZY3tBHKARor%2FQk%2FAnrmBlSOhE27LbovOcuuITAkTd00byq%2BKrpoNV7RwS7wjp1uK73S%2FLvUJhhPdaFZwivnKxEnwz%2FRYYR9j43A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5757
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0e9ee71c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/chains/324.png | 172.67.75.76 | 200 OK | 738 B |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/324.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hash140504c38ceb01bbbe1632ebfd047ec5 f301254d5972ead4839dad92b9c322dde76a6e75 ad9d9c13aed41cdaaa4749bb6337aced91d1fe7ad378e1e1ac5525a706a21fe0
GET /web/chains/324.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:58 GMT
content-type: image/png
content-length: 738
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "141f703bc2926deca57513a5c3c8eb04"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3abSMnwVKxIFYCTz4NZS22RBt6H8YtPqQrYp8NR2Ffhdai3EgZ6JRxfZfNHfXLVJI95RKlmvthbwxo7vbXx6HqhpEiBNqMO6uIw9PHnNxVUbF%2BlCBaCXPFQuU3kOp4jFrSn9r6ey0qPZQ1alBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5756
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0e9ee91c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/chains/1.png | 172.67.75.76 | 200 OK | 1.2 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/1.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 48 x 48, 8-bit colormap, non-interlaced Hash236ecd183d696e37d949d8cf70a2bbd5 8eaa89051b171e1a35e226ca5d2eba058f7a6253 4540f0e53f6ed66e0dea773269c2b0d5698ebb1f7025cafe2358d6b78ac421d6
GET /web/chains/1.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:58 GMT
content-type: image/png
content-length: 1179
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "27a3beb7256d43dbe9c6e41a4550d156"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7%2BdvzhyI5NnpjIqVvZcvIH2vdoS%2F41VDl1sbYtYIzyUoTpRxQKK1bzkfLZhGxsq75r6DIMkd76dEe7Ccex0JB2zeRHljHJ4yjy5UNk9YP7b2PvRZlGlvbsHQRpzZ9hKZIU%2F1Mc5HWoNCcA7m3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5757
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0e9ee81c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/6@2x.webp | 76.76.21.9 | 200 OK | 19 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/6@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash7c12e656c90ab0f1e82dbe7fada3923e a896150c629140461742055f2ffdadaa611b768d 197d140928f7101c1b95f4fcc94366c06cc873cb795a223cd909d577d4e78e52
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/lottery-balls/6@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="6@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "7c12e656c90ab0f1e82dbe7fada3923e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/lottery-balls/6@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419157678-33446975e690
content-length: 19054
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/chains/1101.png | 172.67.75.76 | 200 OK | 86 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/1101.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced Hash8d6cd83ec34994330abbebd0a65c2f7b 9a84b286c689dba40169902e89a36022a474371e 476e4017b3f83e891214f87e60bcfcd1624f905065f436f745491222f0736f6a
GET /web/chains/1101.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:58 GMT
content-type: image/png
content-length: 86383
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "7e76b94cdc0f9628ecef8c8bb234f3ba"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qoa2WTvXokOlmO%2FrErfDqQiTCeUA1qXXc%2BTJEzNV2cK90%2FRJGhpn%2BsgpkDckyytSwFybVsWo0EWk6G6SdZYD3OlPbV4n2KFsQbaancQiJIvAcaoS%2FHTevfqBs9Euw%2B7Al%2FjGc18oCKZ5DAVXcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5757
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0e9eea1c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/ethXpancakeswap.png | 172.67.75.76 | 200 OK | 2.3 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/ethXpancakeswap.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 239 x 37, 8-bit colormap, non-interlaced Hash56426525974b5d92194de34304806141 0dd7fde921fd57b284d94f853d3a8a5e6129966c 4aaa56e07f671141b11389c5e932caba0e66a3419abfd6708e47314b227222e7
GET /web/banners/ethXpancakeswap.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:58 GMT
content-type: image/png
content-length: 2251
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "7425d15198d60bfd811e37fac809092b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lqVPfFnR5Tg1uw%2BLR8Abs61um9k1PmmRvhsV%2B9BXBrCKlh11A0CPXWc0ZYYDd74pZh7epL1%2BJKiETAjxZNIe3lrsz0CJ8OKCOVO%2FpvXLLc20CSEdWmSTPAKsFMRn9jz2yacAhle4JPLBvYNxBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 4095
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0e9eef1c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/900-011ae1c0fe9f9296.js | 76.76.21.9 | 200 OK | 29 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/900-011ae1c0fe9f9296.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (7906) Hashe75f525b1cebd7a66b61d6c6c82fdd83 4c8aaf5c01edba02b9f3b6dace601a727267ae87 7f4782afa58813033a144d804580091169838a97c9aa396e4e73a5021eaf5b13
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/900-011ae1c0fe9f9296.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 221893
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="900-011ae1c0fe9f9296.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:56 GMT
etag: W/"e75f525b1cebd7a66b61d6c6c82fdd83"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/900-011ae1c0fe9f9296.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::p58sb-1713419156662-e2b17fb56ced
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4768.d9b1d54b7879d92a.js | 76.76.21.9 | 200 OK | 94 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4768.d9b1d54b7879d92a.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash17e900bb83eff348221206d7eeea9bab b68743d668444f2e12acef84ce236c9b2d011214 7badb79646b695b9c10ef6d73f4e7aa79de8d87a5cb989d4c654015a15be2230
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/4768.d9b1d54b7879d92a.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4768.d9b1d54b7879d92a.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:56 GMT
etag: W/"17e900bb83eff348221206d7eeea9bab"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4768.d9b1d54b7879d92a.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qs5mn-1713419156662-0b08a3761744
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/banners/v3LaunchBnb.png | 172.67.75.76 | | 12 kB |
URL assets.pancakeswap.finance/web/banners/v3LaunchBnb.png IP172.67.75.76:0
CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 409 x 248, 8-bit colormap, non-interlaced Hashf56d81fd5c85dc6b5429dc62635eff98 b86bca4bae00c7068891f45677ac85b85e22a793 4cda36e45c29b1a6773576fcedc859a9d5298d268543f726a3223a89e25dafa3
GET /web/banners/v3LaunchBnb.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:58 GMT
content-type: image/png
content-length: 11932
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "e0425b2c80cab78a1c2b8bb89264fa52"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H3FKs%2FbtlVo%2Fu1dW4n%2FhjqHdHJup5ZYdkr1mjkO52%2B2o47rwdpnx4Z43Z%2FCLckrntY1IPU9SiRxAxdzajnRIaUC25WStIGMIeF94nQO7aiE2sfTI6j4ie4mOyayGd6hSlmu%2BS23O7bIBgV%2BDjg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0e9efd1c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/farmV3MigrationBunny.png | 172.67.75.76 | 200 OK | 53 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/farmV3MigrationBunny.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 316 x 236, 8-bit/color RGBA, non-interlaced Hash1d1325a5730df6b0f0b1a3e59890bc4e 9a8adb203a385947f6e9ce6458bdf22b271c5449 d9acbffae65bc4ae8fefecb2f8f93277ad217acee2030a26e2232e63e7a2ea66
GET /web/banners/farmV3MigrationBunny.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:58 GMT
content-type: image/png
content-length: 53134
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f21f596bf11519181e3f3423283355d8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rlfNezSN9v8Sow1DFyI4ZVnm1WPKs7b1AWZIIcaCyWIe7CqjROEabZ5oNqWaF8o4Yzo8J6ilhzb49t%2Fu5I9NU5PoLSAEeorWt5jhv9yRDsRV0TtvuUQ%2FHyf4ZtuF0k1Z78zAspzouRqdSIgn3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0e9f001c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/v3LaunchEth.png | 172.67.75.76 | 200 OK | 12 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/v3LaunchEth.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 436 x 369, 8-bit colormap, non-interlaced Hasha46d6efd0211e55001acded4c6115d69 9e54cb823c16adf03143c59428683a48af410b7f a3d821eced83d123cd8612b6bc714e85e02b8f0d84fb66fd726e483565ded45b
GET /web/banners/v3LaunchEth.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:58 GMT
content-type: image/png
content-length: 11598
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "97b665170e6a85ecd54a4116bcbb3d13"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pn4H8ZDvjY1LEvGoODcSw2JghyO8zCydH5ec%2B%2FblMoazgBURGPvK3fxH%2BJbelqqZds5ai5La%2FCknX2yhJ71OtCd7x3Z%2FjKQIQ9u5xg%2F3c86Vtno%2FVeJWytPzOQze0a5X2DseHHwOwmYVXXF30A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0e9efe1c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/chains/59140.png | 172.67.75.76 | 200 OK | 4.0 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/59140.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash1ceb847edb47e9c5c20a1fb57a1f7deb 828fdeffb61d6e22b516daf84e6471692bc2a4e7 d278067eb81dbb2506b25e1fc008f941ccb491c1d1bad680482661119209f346
GET /web/chains/59140.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:58 GMT
content-type: image/png
content-length: 4007
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "6f83df69f71339cb5769c76cd3cc84d5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MZaLM7NxR5L8degC%2BC9hDnI7Cilx9kH4g06bvW2ibTh5bfJ4p53hC1oY3CDIwmgEIfKOCGs1zeJEXWIzvWnNLXUDcdXjlKCu0geeGAlKxCLl9G4cxyfAf8sSq20pMwAoptG4cyWhrT0HGw2pYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0e9eec1c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/liquidStakingBunny.png | 172.67.75.76 | 404 Not Found | 0 B |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/liquidStakingBunny.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/banners/liquidStakingBunny.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 05:45:58 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ms9NG4zLEZQ6lLcEQ7pj6MWgL2l%2BbeNqOUfz71q%2F1qpRdhzz9%2FfukvoeFj0VjHlyfsjecd1cWmoK6vlsWpJGczVlavADPmjSbstC2jUcPbbo2aPgOjZQirgQtMqQn2CzWDfckjePcLjWEsQDDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 87625a0e9ef31c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/chains/4002.png | 172.67.75.76 | 404 Not Found | 0 B |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/4002.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/chains/4002.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 05:45:58 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pOX8MgL8oTpU3qyi%2BK9cxEETPcxynWv721fdsXIzmEzoEHkCkzZQdulQAPXmNtOK82QJP4SHcYjgAJHiJMj7Jo3CoSSgDMklB8MvweZ%2FLHpQ6YTkh%2FK44fFITADhv8EYavVs7OE1u2EAgGewaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 87625a0e9eed1c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/v3LaunchBunny.png | 172.67.75.76 | 200 OK | 26 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/v3LaunchBunny.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 443 x 509, 8-bit colormap, non-interlaced Hash8a6660bfcc96958b6918d5870c7342ce 97819e4da9222b29a5cfe18a6d10dd39f6b5fc22 80e4ef968c519cd7f263135601ff24fbecf5388dd66e5f9519dc99e28819c9ba
GET /web/banners/v3LaunchBunny.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:58 GMT
content-type: image/png
content-length: 25587
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "349a179e6031543cee2cd0ebd422188d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6uZo%2F6kwWRKWedruAg77%2Fn2KEhWNvX4rGvW0qMXyrAlwfbe7KsrWk6jI66fJikxFHefPvmElTA%2F9B0FK0Qx63q4tTn80pNn9w%2FMToCZMwb%2B9nDGvf3FxWeIURERSVftf0%2Fgc7ysQNVtJ1MiDZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0e9efc1c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/v3LaunchFlag.png | 172.67.75.76 | 200 OK | 13 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/v3LaunchFlag.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 307 x 367, 8-bit colormap, non-interlaced Hasha582a3aa3a0a6af730357027a4616582 97881734bd10ddf604789c2a83d257d758043fe6 8b7bd613b5e3c5485ddb5dc766a4c5a257617faff0c744d380ae043fdb3463a5
GET /web/banners/v3LaunchFlag.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:58 GMT
content-type: image/png
content-length: 12952
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "57ec66a4d86348768de7b814312a216e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hqksgylNkrGnd6I927ZYbLeLdFjuPqwvDhOJwqeb5eXCZoCODykhFBQnU07%2BMTi5T7n%2BeRVTdxdUFYbcJ1kNSrJo62Gryzdt4z1R9U27wxRtEz1kQ6uNIHZa58pmXb9rt7w0HqVw5H%2FN8G49Ig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0e9eff1c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg3.png | 172.67.75.76 | 404 Not Found | 0 B |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg3.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/banners/liquidStakingBunnyBg3.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 05:45:58 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J28upf0tWmpZdu8IZ%2FL0sO0N6gxU2DzYXWTW0YOPc7x6vv4RiHYdKoAjD2IRdzFhE%2F71NE0OFIWhl6HNtVrYX5EQd3xrVvMiAGYhxNQrKqQ8xwZytrhD5CeIvrvOf3MxPYZVFNJ%2BB%2B4jCr5AeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 87625a0e9ef71c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/liquidStakingTitle.png | 172.67.75.76 | 404 Not Found | 0 B |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/liquidStakingTitle.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/banners/liquidStakingTitle.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 05:45:58 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lsq1WKRasVacYFvCl2Vs2kQbi0xPzZfolUdM%2FHcBKEMVHWKCxM2L7cvZZIutT%2BazS%2BcTmOMycDwyiNut7tn%2BafjVSPO2Spy8BFgU%2B0mLjY3TuCtbv%2B2B%2B7czwOYLYfZentsDF%2BETWRU0trH21Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 87625a0e9ef21c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg1.png | 172.67.75.76 | 404 Not Found | 0 B |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg1.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/banners/liquidStakingBunnyBg1.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 05:45:58 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3evO2wkrzIhSjmbOga7pw9H36iKZiOyOWLnTp2wt%2BzJDUZvRmEV2bbWgi1c9H%2F1eULO3d%2BHfQCCAnNyvHjURuqHwntaRmJ4rt%2B76l1IU7U1wtdkA6xpwsKlObHqZ6sQvat68VKLkr1IsqzQQ0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 87625a0e9ef51c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=G-334KNG3DMQ&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 96 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-334KNG3DMQ&l=dataLayer&cx=c IP142.250.74.72:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (7711) Hash23d6f1a4adabb928b24a49ee6ed353c0 03fa1f45e6e4271994c224465d49d1f502ae30d6 03258559d76cf8b1b766383ab3cf1866ba692ab7f2e73a768381a039a74507b1
GET /gtag/js?id=G-334KNG3DMQ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 05:45:58 GMT
expires: Thu, 18 Apr 2024 05:45:58 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 96486
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/cake/bottom-right@2x.webp | 76.76.21.9 | 200 OK | 8.9 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/cake/bottom-right@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash1e2ed235e22f8ec23ad56beda85d52d9 53996553d82ff91d1aa8d8b2a450d9f65aca2404 b0a9c3cb61b0a75ac106b03f216b6397c758cdbe2f287b34346dafce376e428c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/cake/bottom-right@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="bottom-right@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "1e2ed235e22f8ec23ad56beda85d52d9"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/cake/bottom-right@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jdrn7-1713419157735-c02d48295a54
content-length: 8874
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/banners/pancakeProtectorBunny.png | 172.67.75.76 | 200 OK | 35 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/pancakeProtectorBunny.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 387 x 466, 8-bit colormap, non-interlaced Hash138ebe6f31cf2d4d135814b13de1184d 92614dadb1e1d47b8e3d7382c9567936249e036c 4a5fa8c8f530db5fa505eec5256f3b1501bacfa1d6b20b9883d67b0d2734d5cc
GET /web/banners/pancakeProtectorBunny.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:58 GMT
content-type: image/png
content-length: 35417
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "10ee753282a475bea7a3b572800a62c4"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G155%2BVh7Efp11meBs%2B4rUibSDIu4hKzUupXCj29GFipV%2BchVgraeQHWc7X7Rm6PihxwL5n2E6a83vMZukk1d4%2B5nUTIE8bl16k4UtyOSlphZRZZ4uWX8TNrd1CyqvW1f01PJ9UG566Apf9KIdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0e9ef01c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/red@2x.webp | 76.76.21.9 | | 18 kB |
URL pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/red@2x.webp IP76.76.21.9:0
File typeRIFF (little-endian) data, Web/P image Hash20e4289908d3cc61545bea7005167ec7 5f56452118edae9fe4890fb65307ac606ad38535 517a1e6ada3afbbcd2f63b385fc59ba9f8988370b9365a8c3bd3d179f4566727
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/prediction-cards/red@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 0
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="red@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "20e4289908d3cc61545bea7005167ec7"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/prediction-cards/red@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cqjs5-1713419157666-849a9a269515
content-length: 17990
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg2.png | 172.67.75.76 | 404 Not Found | 0 B |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg2.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/banners/liquidStakingBunnyBg2.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 05:45:58 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x4FiXIvgp2LoCseUYhKn8sCUvnmW%2FTGaM4ksHFG3gLBAyNYTUCT%2Bbc5RztJ%2BLNYQIeRxKCPHX8KSXTOwcGRNk6ArxU738JANshcXKEL0HilwYpVd8vZy%2FZ0u9tP4f5MMyfMfx0o9afNb72FG8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 87625a0e9ef61c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg4.png | 172.67.75.76 | 404 Not Found | 0 B |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg4.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/banners/liquidStakingBunnyBg4.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 05:45:58 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6slYML%2BJJf0Q6znnU8V8YlLHI64%2BVS4lT1QS%2F7zGym1Qi1shbJwYo30YzGIWyk29jyRtQcVD7%2FNry9S1yzYUzCddB7h%2BrL4292boHOZnExh%2B5Na9XiJLBi%2FoBQsJ1Crs67AiG8Kcm%2B2W4qHaSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 87625a0e9ef91c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/v3LaunchBg.png | 172.67.75.76 | 200 OK | 29 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/v3LaunchBg.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 1190 x 384, 8-bit colormap, non-interlaced Hash92269a073a8ff6ff8165823bb78c8100 37e7ad871448c7c3e201ef0cce8ad0d770ecf216 17f4e07dc792045a22b2bdd97c7735e9c725d519abe6c091d128b4bb815e7a88
GET /web/banners/v3LaunchBg.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:58 GMT
content-type: image/png
content-length: 28803
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "bdb6f1758f282044cf73da0a07fc171d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pNXOAVFQQdx8oB9VK4i%2FqKx6IxlW%2FmwXw9DeqJAI1Larv7Wmdt2jeXHq%2BcVyNZ32RcpB8WTwuwngcDMsukY2AHHiChk1vu%2Fdi81qNgmYoLJDyR7adujT%2FvIvhSywamHnmfWE62yKUf6hPh%2FVRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0e9efa1c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/top-right@2x.webp | 76.76.21.9 | 200 OK | 22 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/top-right@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash2e907ed89c4201b58a025f2bcff0ba39 d40ea11e3aed915f3c93d63b6467ca69b1fc8f70 1fd8effd1dad2cf43d43312c812e1008ce5d31901f9f9c982fcbca1a7ba2324b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/prediction-cards/top-right@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 0
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="top-right@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "2e907ed89c4201b58a025f2bcff0ba39"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/prediction-cards/top-right@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::nqd2w-1713419157666-9ffc9668b00d
content-length: 21536
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/banners/pancakeProtectorBg.png | 172.67.75.76 | 200 OK | 266 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/pancakeProtectorBg.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 2252 x 384, 8-bit colormap, non-interlaced Size266 kB (266185 bytes) Hash6d3fefc356e316b4cee5cce7da022428 6b499cbb2aa7a731c5018e291a677eba0a453cec 7d35c95cec473a40bc20a7fcf45bfa55e09deee82e6f0b4bcf78543ba30d5c0a
GET /web/banners/pancakeProtectorBg.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:58 GMT
content-type: image/png
content-length: 266185
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "6165c592e7eda7c605d1e53ec563f3b8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FR2JRyUeVQOaHlPCgqWrUha%2Fka4OFC57UYp2lw1O%2BHXD2h2Q1Xpo0IQOc2PiUhdfnyhWBSwuZKktLQ%2BjUDO9FncsbqsbVGgm0sAbqbw9aqxygjOlXn1fATwHpbZWpGpKARo2GObW2xPYu5MoCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0e9ef11c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/cake/top-right@2x.webp | 76.76.21.9 | 200 OK | 15 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/cake/top-right@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashefde83af55252c361b98cf640e04d519 0f0442d4cc462ac4de41034e5d33620199bcb2bc 9b35a86f0fcf141a5c42a0a2877a8fbdde129dee01334584874e7eab0300cd29
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/cake/top-right@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="top-right@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:58 GMT
etag: "efde83af55252c361b98cf640e04d519"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/cake/top-right@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::nqd2w-1713419158098-7c6204ff6de2
content-length: 15104
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/1-left@2x.webp | 76.76.21.9 | 200 OK | 22 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/1-left@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hasha2341c85eba52e31cea4e4b23bf7b340 995a07d062239581e28994f20913326d8e9a4a58 3650fccbec3a0bca23d851ad0c95de0517d360beed62d7defcf12c54fb0795ed
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/flying-pancakes/1-left@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297285
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="1-left@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:58 GMT
etag: "a2341c85eba52e31cea4e4b23bf7b340"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/flying-pancakes/1-left@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qs5mn-1713419158809-2efaba54a9db
content-length: 22126
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/banners/ETHBunny.png | 172.67.75.76 | 200 OK | 268 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/ETHBunny.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 2252 x 526, 8-bit/color RGBA, non-interlaced Size268 kB (268453 bytes) Hash86b0b7802a65c31f14244dfb3a3c9fa9 9658e1d22333401a7589d88eadb34593fdc05a23 10ee1bb7d9ebddfdeddca0747956e9a9a71b17775a32808bea9c90a5ff698ea6
GET /web/banners/ETHBunny.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:58 GMT
content-type: image/png
content-length: 268453
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "acfa50f5d5e161000baf4e3765b3035c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PIiw8shuyh6JfPLDhu4p2bHfdKiONyNQbVCGBhLxnH3iNX3T%2F9Cv3tEomCmkFbYyHmKludcAxPAPgX9uzM%2BhvE%2F3wT70i5FcHZvlOHJbMZVUlPJCIaBUQvkZeqMGEzKDvV34qc7ohCwmH48Tbw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0e9f021c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/cake/top-left@2x.webp | 76.76.21.9 | 200 OK | 8.5 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/cake/top-left@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash38e19d0d5eda4da9793b994a66423f72 124e977cb90b131fb168bea20bbd6a0fe861ee4a 29a06acce7f00d54fd015a3d19d4388adb51ecaade86e1a5a9fbd979630093ba
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/cake/top-left@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="top-left@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:58 GMT
etag: "38e19d0d5eda4da9793b994a66423f72"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/cake/top-left@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::r5qvv-1713419158809-ce4c57229acb
content-length: 8510
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/1-top@2x.webp | 76.76.21.9 | 200 OK | 12 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/1-top@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash49588b7810ff6c85053db84d94100bb6 19fdf997336131a89abd66bcda5fd540729b628f 99299b7457f5ef292363848a2408c170a961c99938c734624124223f64bf1b0f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/flying-pancakes/1-top@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297285
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="1-top@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:58 GMT
etag: "49588b7810ff6c85053db84d94100bb6"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/flying-pancakes/1-top@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713419158810-434fecc6c791
content-length: 12010
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/2-right@2x.webp | 76.76.21.9 | | 16 kB |
URL pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/2-right@2x.webp IP76.76.21.9:0
File typeRIFF (little-endian) data, Web/P image Hashab4f8badc3233bd79445480def206df0 6da58c32d7ac5428a9173668ae61c27327122845 c7ff6397d8b378c851cbb85d108a7e311a2bf3a9dd1a1b5d0473b01c843cf23f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/flying-pancakes/2-right@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297285
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="2-right@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:58 GMT
etag: "ab4f8badc3233bd79445480def206df0"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/flying-pancakes/2-right@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::xkvkv-1713419158810-ccd8b519ce4a
content-length: 16188
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/cake/coin@2x.webp | 76.76.21.9 | 200 OK | 25 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/cake/coin@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashb5b71b72423d3f33221fdc8ecfa8a79e b8db0a46eb69ce73e03d1b1ea10f72311047f3c2 bb1b354c2266424da4b3df33f85799f3848ea7cc8885efac16f957a745c2cbde
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/cake/coin@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297285
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="coin@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:58 GMT
etag: "b5b71b72423d3f33221fdc8ecfa8a79e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/cake/coin@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::nqd2w-1713419158809-b3f0ce353a16
content-length: 25072
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/decorations/phishing-warning-bunny.webp | 76.76.21.9 | 200 OK | 4.9 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/decorations/phishing-warning-bunny.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashc73199f7cfd8a30afa8182b0b5d9e2e5 52a839df66e697b6a63c609fc3f978bf43b5edae bae96bf0ec8c48d43751e0a3be260ce9c57feaf129b80f6e6dea7f1612c8dd39
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/decorations/phishing-warning-bunny.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297285
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="phishing-warning-bunny.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:58 GMT
etag: "c73199f7cfd8a30afa8182b0b5d9e2e5"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/decorations/phishing-warning-bunny.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::8tz4w-1713419158811-9e22b3170f6d
content-length: 4850
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/2-top@2x.webp | 76.76.21.9 | 200 OK | 16 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/2-top@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash817844dca6e8bfddbd798374497f8b91 fc5a87da1a1ac201f913b46b1cf254601daa53ad d4010f6737410456697d4632dba5b83fda5b8af4028186c0eff7ef7a1cd07e79
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/flying-pancakes/2-top@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297285
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="2-top@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:58 GMT
etag: "817844dca6e8bfddbd798374497f8b91"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/flying-pancakes/2-top@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::p58sb-1713419158812-c9a2517fe39f
content-length: 16374
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/1-bottom@2x.webp | 76.76.21.9 | 200 OK | 8.1 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/1-bottom@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashf8c2d80c86b035b00ff82b656a482b09 22755ab74c1ce40200ee6bed19db72d65b41668f b54623c62c7dbde1fc194170bca1310ee8a59e9eb0f120b1d98c31312e2344bf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/flying-pancakes/1-bottom@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297285
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="1-bottom@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:58 GMT
etag: "f8c2d80c86b035b00ff82b656a482b09"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/flying-pancakes/1-bottom@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419158810-e6f86cb3fe9a
content-length: 8108
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/media/galxe-logo.7705eef0.png | 76.76.21.9 | 200 OK | 12 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/media/galxe-logo.7705eef0.png IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 1532 x 280, 8-bit gray+alpha, non-interlaced Hashc92c83915e160dccf4f32e399aabe7e1 8e333f02c2dcff57e870522c1396dd5919a0d4f8 9d00bf2f828acafb416f25122b46d9d4d9b46dd436176fbbfc9a5e1b4959a97b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/media/galxe-logo.7705eef0.png HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="galxe-logo.7705eef0.png"
content-type: image/png
date: Thu, 18 Apr 2024 05:45:58 GMT
etag: "c92c83915e160dccf4f32e399aabe7e1"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/media/galxe-logo.7705eef0.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::8tz4w-1713419158838-920d053c8c42
content-length: 12004
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/media/polygon-zk-bg.67d7dcaf.png | 76.76.21.9 | 200 OK | 253 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/media/polygon-zk-bg.67d7dcaf.png IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 2252 x 384, 8-bit/color RGBA, non-interlaced Size253 kB (252838 bytes) Hash3b932c9b431ef4b3fb7a8983163799c0 1db3b77d840486a7155e526b8102eca25c242d46 cd9cb08d0f1971ac568c2e0a4d178e46606a6da517d01ce0ebaded0aaa835b13
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/media/polygon-zk-bg.67d7dcaf.png HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="polygon-zk-bg.67d7dcaf.png"
content-type: image/png
date: Thu, 18 Apr 2024 05:45:58 GMT
etag: "3b932c9b431ef4b3fb7a8983163799c0"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/media/polygon-zk-bg.67d7dcaf.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419158838-1bb102545959
content-length: 252838
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:45:59 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/media/galxe-traverse-bg.7ac0b1a7.png | 76.76.21.9 | 200 OK | 756 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/media/galxe-traverse-bg.7ac0b1a7.png IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 2252 x 384, 8-bit/color RGBA, non-interlaced Size756 kB (755710 bytes) Hashd36ba3799c999d755689fcd43080fced cee20cc1f8f2a8ddba5d75543d298d7772485080 0b36a0e207ecbfad3c573316693d92422e27fa67764db2838c15f9ccd65a5cb4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/media/galxe-traverse-bg.7ac0b1a7.png HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="galxe-traverse-bg.7ac0b1a7.png"
content-type: image/png
date: Thu, 18 Apr 2024 05:45:58 GMT
etag: "d36ba3799c999d755689fcd43080fced"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/media/galxe-traverse-bg.7ac0b1a7.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::2t46b-1713419158850-806373b79081
content-length: 755710
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:45:59 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:45:59 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:45:59 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/2-bottom@2x.webp | 76.76.21.9 | 200 OK | 9.9 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/2-bottom@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash88603d52da34fe4ca9f806e977f1a41a fb8f71878a6b364bf26abb8a7e8f3237b53fbe8b b28f4aa831721b37bc9d451b5d8c5bb5590310dfeeebdd80692a7246728c64b5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/flying-pancakes/2-bottom@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 0
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="2-bottom@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:58 GMT
etag: "88603d52da34fe4ca9f806e977f1a41a"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/flying-pancakes/2-bottom@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qs5mn-1713419158810-bf67898ab781
content-length: 9892
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:45:59 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fgalxe-traverse-cloud.c229b8c9.png&w=256&q=75 | 76.76.21.9 | 200 OK | 4.9 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fgalxe-traverse-cloud.c229b8c9.png&w=256&q=75 IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashc451945f4030f10cc84623fb1ae845b3 9f9a0cd6a44675c8f6a3aa487d19e381921e3d47 9622a88167a4e9ed1be4cc9aa9e6a1cba1d2205f5dfd0fdc91f34cd889bb7d70
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fgalxe-traverse-cloud.c229b8c9.png&w=256&q=75 HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1417704
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="galxe-traverse-cloud.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:59 GMT
last-modified: Mon, 01 Apr 2024 19:57:34 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/galxe-traverse-cloud.c229b8c9.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419158966-2b9525d06801
content-length: 4918
X-Firefox-Spdy: h2
|
|
| hub.snapshot.org/graphql | 172.67.72.161 | 200 OK | 0 B |
IP172.67.72.161:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjecthub.snapshot.org Fingerprint51:92:07:17:6E:EC:8E:CB:EB:58:16:46:A8:FD:FD:5C:48:F4:F4:69 ValiditySat, 30 Mar 2024 23:28:55 GMT - Fri, 28 Jun 2024 23:28:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /graphql HTTP/1.1
Host: hub.snapshot.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:45:59 GMT
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: content-type
access-control-max-age: 86400
x-do-app-origin: 9134fcd0-e6bb-11ec-b1dc-0c42a19a82a7
cache-control: private
x-do-orig-status: 204
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QXWbaC9zhUuiNpfCu0rclYMBV51N4UVJdfkJjpYmyp6iTW0fTnewYP1lJ1R41Ydr%2BEhS9L%2BtfaebHnDvDDBMRfWIzFAt%2FCRa77yqaBXWLmFkXR5r9NTzYzjklEebipo4qFI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87625a112d4256ba-OSL
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:45:59 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fpolygon-zk-bunny.a0b3c2dd.png&w=384&q=75 | 76.76.21.9 | 200 OK | 15 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fpolygon-zk-bunny.a0b3c2dd.png&w=384&q=75 IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash79f4e6efaab4b55ed07ae2a09ae7a37c f0a6145c164962adcf0714137eb58a7e37fff7b0 d8b4267fe6ec67cf8d4a462cb1bbcf4f9444c8be3b05cccdabd6702984bdbe87
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fpolygon-zk-bunny.a0b3c2dd.png&w=384&q=75 HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1417704
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="polygon-zk-bunny.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:59 GMT
last-modified: Mon, 01 Apr 2024 19:57:34 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/polygon-zk-bunny.a0b3c2dd.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qs5mn-1713419158966-061fe1fe1753
content-length: 15134
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Ftrading-reward-bunny.8fd08b80.png&w=256&q=75 | 76.76.21.9 | 200 OK | 11 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Ftrading-reward-bunny.8fd08b80.png&w=256&q=75 IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashdbe67b706df501ae166e8e8a4cc45f12 221aec7855460193cb50d6d3ea53bc2c605ee7cd 4a87fa1d79557530867ed344b51bb1f58ecda0dd4b0fc62166dd42f084bd47e6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Ftrading-reward-bunny.8fd08b80.png&w=256&q=75 HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1374558
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="trading-reward-bunny.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:59 GMT
last-modified: Tue, 02 Apr 2024 07:56:40 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/trading-reward-bunny.8fd08b80.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cqjs5-1713419159024-d3faab3451f6
content-length: 11024
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fgalxe-traverse-bunny.2eec4362.png&w=384&q=75 | 76.76.21.9 | 200 OK | 15 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fgalxe-traverse-bunny.2eec4362.png&w=384&q=75 IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash8afcec56007f78d2db6985c23d63b1da b9371f6d56506cf96576f3e4d5bfdeffdd28e615 b1410c8913372283f6c2c0d60354d862c2ca1c4d922beb593179fcde3127fce5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fgalxe-traverse-bunny.2eec4362.png&w=384&q=75 HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1417704
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="galxe-traverse-bunny.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:59 GMT
last-modified: Mon, 01 Apr 2024 19:57:34 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/galxe-traverse-bunny.2eec4362.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::xxnt5-1713419159025-f0a88b82092e
content-length: 14806
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fbutter-2.36a9d3e5.png&w=96&q=75 | 76.76.21.9 | 200 OK | 3.9 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fbutter-2.36a9d3e5.png&w=96&q=75 IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash5a5bd0a29e2af67f55c23a4c5a3fd363 cdd9a451d4ef6baf8ccec971607a6572b94cdad9 920ada32a64d008d384d78a314c8dbcc45aae9019bf542f8a0050d0cc45d1e02
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fbutter-2.36a9d3e5.png&w=96&q=75 HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1320222
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="butter-2.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:59 GMT
last-modified: Tue, 02 Apr 2024 23:02:16 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/butter-2.36a9d3e5.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::p58sb-1713419159100-5f4c51901c90
content-length: 3884
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Ftrading-reward-bg.50068168.png&w=1200&q=75 | 76.76.21.9 | | 8.5 kB |
URL pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Ftrading-reward-bg.50068168.png&w=1200&q=75 IP76.76.21.9:0
File typeRIFF (little-endian) data, Web/P image Hash6556eb7b22638f029ee4d75e3e54bb69 fa6a655de98d333b0d2ab5f67eb56cfc628e0338 246a4e100939e1cf30d87e81440e5c8c8e77131e88fdac5904ca57bf97972142
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Ftrading-reward-bg.50068168.png&w=1200&q=75 HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1320222
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="trading-reward-bg.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:59 GMT
last-modified: Tue, 02 Apr 2024 23:02:16 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/trading-reward-bg.50068168.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419159108-a5375ea34088
content-length: 8496
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fperpetual.fd0aa080.png&w=640&q=75 | 76.76.21.9 | 200 OK | 67 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fperpetual.fd0aa080.png&w=640&q=75 IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash8786fd09256232745f02507abf7965a2 e620ffd24bf12ae3a1720b3c398c67ac1e40d1bf e736ad221fd05555c9488328ae3b8826ac2140370c3ed53ed334c1e4312ceed9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fperpetual.fd0aa080.png&w=640&q=75 HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1320222
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="perpetual.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:59 GMT
last-modified: Tue, 02 Apr 2024 23:02:17 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/perpetual.fd0aa080.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419159162-5e523a584422
content-length: 66684
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Flove-butter.28a011a7.png&w=256&q=75 | 76.76.21.9 | 200 OK | 6.1 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Flove-butter.28a011a7.png&w=256&q=75 IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash69289d8d5137e2284184c075f71883f7 309f421019489d7084eef810fbeac37ffc4c29f4 54a6580f096d0d5aebe1018bf7b1ce300c934cfa56fdc7fcaf046f60e385fdf7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Flove-butter.28a011a7.png&w=256&q=75 HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1320222
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="love-butter.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:59 GMT
last-modified: Tue, 02 Apr 2024 23:02:16 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/love-butter.28a011a7.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qs5mn-1713419159162-aa905f7fb1c6
content-length: 6118
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:45:59 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt1eE1SYjlrYTRWV1JlWU40ZTg2dGFydG1BcnRQeFNZaTNYOHd5Z3RYQ21wYSIsInN1YiI6ImVmMmVjYmVmZmUxMDE2Y2E0MDRiMGNkYmI0YTE0Y2Y5ODg3OWIwMzI4M2NhNjY5M2QxZTNhYWU5MzI3YWY2ZjkiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxOTE1NywiZXhwIjoxNzEzNTA1NTU3fQ.Uw4CwHKfMfvrGtknFijels98JNxy9YyePptx5NGZgWUk0TY_oCbgQGmb36jH8ZW2bji1nJrEkjbzp7rYTXwbAQ&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true |  3.126.230.177 | | 0 B |
URL relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt1eE1SYjlrYTRWV1JlWU40ZTg2dGFydG1BcnRQeFNZaTNYOHd5Z3RYQ21wYSIsInN1YiI6ImVmMmVjYmVmZmUxMDE2Y2E0MDRiMGNkYmI0YTE0Y2Y5ODg3OWIwMzI4M2NhNjY5M2QxZTNhYWU5MzI3YWY2ZjkiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxOTE1NywiZXhwIjoxNzEzNTA1NTU3fQ.Uw4CwHKfMfvrGtknFijels98JNxy9YyePptx5NGZgWUk0TY_oCbgQGmb36jH8ZW2bji1nJrEkjbzp7rYTXwbAQ&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true IP3.126.230.177:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt1eE1SYjlrYTRWV1JlWU40ZTg2dGFydG1BcnRQeFNZaTNYOHd5Z3RYQ21wYSIsInN1YiI6ImVmMmVjYmVmZmUxMDE2Y2E0MDRiMGNkYmI0YTE0Y2Y5ODg3OWIwMzI4M2NhNjY5M2QxZTNhYWU5MzI3YWY2ZjkiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxOTE1NywiZXhwIjoxNzEzNTA1NTU3fQ.Uw4CwHKfMfvrGtknFijels98JNxy9YyePptx5NGZgWUk0TY_oCbgQGmb36jH8ZW2bji1nJrEkjbzp7rYTXwbAQ&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true HTTP/1.1
Host: relay.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OHmjspWGczsEbAfrOwg2rw==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
connection: upgrade
upgrade: websocket
sec-websocket-accept: 7qvjklvG7ZnUoKhT2uJBergyovE=
date: Thu, 18 Apr 2024 05:45:59 GMT
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fbutter.45e9bddc.png&w=96&q=75 | 76.76.21.9 | 200 OK | 4.4 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fbutter.45e9bddc.png&w=96&q=75 IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashc121e50348a34f30c4a6b3f0b339345a f57602e41ae63e4018558d4f0bfc7fe319e948fe 61ba73b76e88361c30715d5c482422aa991c6aecbb747310e71c0b4b46f8e053
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fbutter.45e9bddc.png&w=96&q=75 HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1417704
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="butter.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:59 GMT
last-modified: Mon, 01 Apr 2024 19:57:34 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/butter.45e9bddc.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419159101-0e004a4e9a7d
content-length: 4446
X-Firefox-Spdy: h2
|
|
| aptos.pancakeswap.finance/images/apt.png |  104.26.2.169 | 200 OK | 808 B |
URL GET HTTP/2aptos.pancakeswap.finance/images/apt.png IP104.26.2.169:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintCA:F7:DB:93:BF:AB:FF:53:F2:3D:11:7D:D7:8C:62:B7:F4:3B:80:3F ValidityMon, 12 Jun 2023 00:00:00 GMT - Tue, 11 Jun 2024 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit colormap, non-interlaced Hash74168d688d61e90d33aa8c00dbc38d76 9dba71d2bd1ae649f81a36a966faad7049cf705a 260092dadbeeabbf5bc49e2cec9342dcdc2e0a561d9dc24cb290eab6021ec7b4
GET /images/apt.png HTTP/1.1
Host: aptos.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:45:59 GMT
content-type: image/png
content-length: 808
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="apt.png"
etag: "74168d688d61e90d33aa8c00dbc38d76"
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/apt.png
x-vercel-cache: HIT
x-vercel-id: arn1::qv26q-1712337244438-95e4b0a0b093
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BP2umtyzfoarDlGPbVuve2Er1alaIgyWk9tMYdlwHAeQRBUA36ckNoGNvFkiC1mpMML72X4k8crXo8Jyhq%2FoksZCFNpmMhZgcEWEpZa1ZS5RmCuAeIQKaNNXckKXHlaUyHgEEY9BU3aenek%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a12cc7a5695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js | 76.76.21.9 | 200 OK | 3.9 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1d5ffccebef437a8.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (11903) Hash4af0d04550602a4e4023aae8ef321f77 78e4304151cad34afe52345efeb22cdb312c879c 1669b1d79728b734d369c85406cfa634f6455c3487057db9c9a95d47335693aa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/8940-2680582ce3921897.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1d5ffccebef437a8.js
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8940-2680582ce3921897.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:59 GMT
etag: W/"4af0d04550602a4e4023aae8ef321f77"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8940-2680582ce3921897.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::xxnt5-1713419159669-d1e18164e05e
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:45:59 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtoQzZaaGg1enJiSDl4czdZNEVkNldqOXdRam1heXFhajRUODJpRHJQYWt1SiIsInN1YiI6IjBlYzE4ODE4ODk1Y2FmNmQ5M2E3Y2EwYzdmNTQ3ZmMyYjgxYzRhZGMyYjg1MGFjNTBkNjY4ZmI4NTQ2NWI2YmEiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxOTE1NywiZXhwIjoxNzEzNTA1NTU3fQ.TLcPzJoeTR8nhABu3rJkFhyZ9IX0Deu37woGodLc8LHPomb1rWBnevH0eKj-nr2iUzhHiHjhM2YwCTFEUE8dCw&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true | 18.159.147.43 | | 0 B |
URL relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtoQzZaaGg1enJiSDl4czdZNEVkNldqOXdRam1heXFhajRUODJpRHJQYWt1SiIsInN1YiI6IjBlYzE4ODE4ODk1Y2FmNmQ5M2E3Y2EwYzdmNTQ3ZmMyYjgxYzRhZGMyYjg1MGFjNTBkNjY4ZmI4NTQ2NWI2YmEiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxOTE1NywiZXhwIjoxNzEzNTA1NTU3fQ.TLcPzJoeTR8nhABu3rJkFhyZ9IX0Deu37woGodLc8LHPomb1rWBnevH0eKj-nr2iUzhHiHjhM2YwCTFEUE8dCw&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true IP18.159.147.43:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtoQzZaaGg1enJiSDl4czdZNEVkNldqOXdRam1heXFhajRUODJpRHJQYWt1SiIsInN1YiI6IjBlYzE4ODE4ODk1Y2FmNmQ5M2E3Y2EwYzdmNTQ3ZmMyYjgxYzRhZGMyYjg1MGFjNTBkNjY4ZmI4NTQ2NWI2YmEiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxOTE1NywiZXhwIjoxNzEzNTA1NTU3fQ.TLcPzJoeTR8nhABu3rJkFhyZ9IX0Deu37woGodLc8LHPomb1rWBnevH0eKj-nr2iUzhHiHjhM2YwCTFEUE8dCw&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true HTTP/1.1
Host: relay.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: prwikaKH/wBNm6tyFIxLTA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
connection: upgrade
upgrade: websocket
sec-websocket-accept: xSHTwXKUKZJg45FgJdZ3IyS7rm0=
date: Thu, 18 Apr 2024 05:45:59 GMT
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-334KNG3DMQ&cid=1178579845.1713419159>m=45je44f0v873867766z8834067533za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=170870175 | 172.217.21.163 | | 42 B |
URL www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-334KNG3DMQ&cid=1178579845.1713419159>m=45je44f0v873867766z8834067533za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=170870175 IP172.217.21.163:0
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-334KNG3DMQ&cid=1178579845.1713419159>m=45je44f0v873867766z8834067533za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=170870175 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 18 Apr 2024 05:45:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.walletlink.org/rpc | 172.64.150.248 | | 0 B |
IP172.64.150.248:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rpc HTTP/1.1
Host: www.walletlink.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CbcynUb+aDcINGgzrCAXOg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Thu, 18 Apr 2024 05:45:59 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: rswT3ZbirYrVL/NCW6k03gveQAo=
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=o0tbOJfWnH69zACfhNiIxjHexO3T1QzEWmrbcJXsL4g-1713419159-1.0.1.1-n_Z2TXcPrRs.UEbZRl46GrlNNQAk0RwDtY89UbRJ.MN28W2qZ.p5MZ3w9HTL.BKxkXoU2Qf4wi72oJRobhIzSw; path=/; expires=Thu, 18-Apr-24 06:15:59 GMT; domain=.walletlink.org; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 87625a13196256b1-OSL
|
|
| verify.walletconnect.com/e542ff314e26ff34de2d4fba98db70bb | 18.195.125.163 | | 190 B |
URL verify.walletconnect.com/e542ff314e26ff34de2d4fba98db70bb IP18.195.125.163:0
File typeHTML document, ASCII text, with no line terminators Hashb4d6dabfae0b3ecf99198f93b5a01c00 b3047f8ca3de0847662db63a04458ba981fb9010 d776871bd3cd6295c3cbea2370c861d9c3faa7f5097649dc1810f96cbe0f424c
GET /e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: verify.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:45:59 GMT
content-type: text/html; charset=utf-8
content-length: 190
content-security-policy: frame-ancestors https://*.pancakeswap.finance https://pancakeswap.finance
x-csrf-token: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjE3MTM0MjI3NTl9.vF3zQoIj0b43DVR5R4YmTplOd5iJAuiHqv7ZVX5U0-M
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/cmc.json | 104.26.2.169 | 200 OK | 458 kB |
URL GET HTTP/2tokens.pancakeswap.finance/cmc.json IP104.26.2.169:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Size458 kB (458029 bytes) Hash2fe572f06d5051baa2ccd9f664963484 f0a0ce856c2e8356f0c2dad7b7ca5e215624fad5 2fe7a8899a8220c3c8019270ee0ce7d602526f2a0bd2311f8b04de6e715f4179
GET /cmc.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:00 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f63eedff26a5bbfc2fdea60fd05839a7"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VOxp2m%2FaIaArOszbD%2BebJvCCQAcoNZ4tozl3vj%2BitH4V4DUY18yKEMAHpgffL5ix1fEywj61m7DbJDBoylvw25vJ272yqKCcQUdRisnhWe%2FMCBig0tV8elA4evUV%2BX2%2BSpWitI1kvrEDwwYIqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87625a15c8cfb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5298-69aadc306c074bcb.js | 76.76.21.9 | 200 OK | 12 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5298-69aadc306c074bcb.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (46912) Hash76cd82199b1169fc9ae3dcf3590e6250 f5d22239740296964d8ef94132806ea1a6196079 b998948031e2e58e33a8c8679447e0c15640b022e138119ee317416bf99c9c3f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/5298-69aadc306c074bcb.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5298-69aadc306c074bcb.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"76cd82199b1169fc9ae3dcf3590e6250"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/5298-69aadc306c074bcb.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419160481-aa3f70aef831
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 205 kB |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Size205 kB (205341 bytes) Hash796314d18be66f4cda36ca0dea2fb077 249da521b48dcfdff15d54021b972d9865422fae adf62f93e65ca0c089341b83bfec285efdbdb1cd8e43ae9d15f78c2d3aacb349
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 94
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:45:59 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/pancakeswap-extended.json | 104.26.2.169 | 200 OK | 18 kB |
URL GET HTTP/2tokens.pancakeswap.finance/pancakeswap-extended.json IP104.26.2.169:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Hash4cd5c7c42fe392bbbcb089bfd6c2fcfe e656f87d73358d6996c656643ac8ca1d62235fda 85bff99f144d96a85ccb3c737cfa70f9a5279c03f7bacefb336a83033a2f98e6
GET /pancakeswap-extended.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:00 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f337df90a89a252279b03ca9ceaf71bd"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fw0GWiMNJ5cMPkPijyibBdwYFyclEzdpi52c3AuEAuvWFwCw47THUD90XGTeUzH%2FKPZ2mhffS2Oqcmkabz18Bsw9SifWI%2B4H3L9Y%2FZy4VF2HQfZVSGV6xI5MBslizjuOPprcp7eDtAyNcBV3OA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87625a15c8d1b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/782.7a1117dfc6ca135a.js | 76.76.21.9 | 200 OK | 14 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/782.7a1117dfc6ca135a.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (13606) Hashd24c507d187cc68afbe7d66c0397aa21 04590d36571f2040bba6153ce0621615d936551d a49ec560399e0f40167794971f134d8fc8061cca587d8b7ae2df1fc533bbf321
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/782.7a1117dfc6ca135a.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="782.7a1117dfc6ca135a.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:59 GMT
etag: W/"d24c507d187cc68afbe7d66c0397aa21"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/782.7a1117dfc6ca135a.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jbghs-1713419159905-6cc9cf879324
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4568.796287f6c5d648ca.js | 76.76.21.9 | 200 OK | 39 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4568.796287f6c5d648ca.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1d5ffccebef437a8.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash64d5b55a7f111087b544cf4b0184342e 35b50a5dc5480a08260d268b607863b4bfed23c8 ca53a6b9c69209f3131643e0f774fd9a98553247d75c104043aa6c318b083843
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/4568.796287f6c5d648ca.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1d5ffccebef437a8.js
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4568.796287f6c5d648ca.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:59 GMT
etag: W/"64d5b55a7f111087b544cf4b0184342e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4568.796287f6c5d648ca.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jbghs-1713419159884-a3255f285c9c
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4568.796287f6c5d648ca.js | 76.76.21.9 | 200 OK | 29 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4568.796287f6c5d648ca.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1d5ffccebef437a8.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash64d5b55a7f111087b544cf4b0184342e 35b50a5dc5480a08260d268b607863b4bfed23c8 ca53a6b9c69209f3131643e0f774fd9a98553247d75c104043aa6c318b083843
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/4568.796287f6c5d648ca.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1d5ffccebef437a8.js
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4568.796287f6c5d648ca.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:59 GMT
etag: W/"64d5b55a7f111087b544cf4b0184342e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4568.796287f6c5d648ca.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cqjs5-1713419159902-8e88932477a6
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 7.2 kB |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashc2875f97a512181b6fcfa11d78680213 bc6e42fbbb87bff294c9a1a1c13dc4fcc681571e da29fd086e363845a1dc30ab311c0e9096c402257a5639e11d80c06e8332a317
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 26696
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:01 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1978-e2ac2c2e731961b2.js | 76.76.21.9 | 200 OK | 13 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1978-e2ac2c2e731961b2.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (2266) Hashaa17dba3c6bb132a0184dab2c3711b02 fe901e0a57bc68163662a90cfabc28a03e5bb4e8 9287c2d5c8c36d8453d96be82de48fa1d1333f6d7094df460cd37f6de934f527
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/1978-e2ac2c2e731961b2.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1978-e2ac2c2e731961b2.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"aa17dba3c6bb132a0184dab2c3711b02"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1978-e2ac2c2e731961b2.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::nqd2w-1713419160491-874489817dde
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 2.6 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image Hashd62bfd6a0d4e300d8e50b60fbe10eab0 251de0bd2dba5194b0dc337e371b017f673d2b40 9407c0251bd7b695a38698d04bbb15514ed472e11797aef7793b9acb2b04fcff
GET /w3m/v1/getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:01 GMT
content-type: image/webp
content-length: 2632
cf-ray: 87625a1f2e0d712b-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 41888
cache-control: public, max-age=31536000
etag: "cfmeYviP6kCNFgjEWLRBgPUJnDUG7FeV1c8ZwDJoU7DQ"
expires: Fri, 18 Apr 2025 05:46:01 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=1341+0 c=0+15 v=2024.2.2 l=2632
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=dSup3lF8ps.UjoaQUm6Ug0xnooEJ_mxeIfqtWHWe4mc-1713419161-1.0.1.1-7Wt.mls0ZMclP0EJYVC0mA3VLMnYujwAsjY5NIeEqt.CDx1D7wbAj8UEsn67VKEBwDRj6_THgwzuixYr6Av3xg; path=/; expires=Thu, 18-Apr-24 06:16:01 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 5.7 kB |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashce5a8e7450bd5de48bd4881ca9c279a9 7d924a57835049e068c35f52f2e4acc4f5928783 f9745a3ced39f1d7a9382b4a10f1a5639cae7b2bef6feb77b2c361d90c637529
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 1416
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:45:59 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 423 kB |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Size423 kB (422860 bytes) Hasheefa50cdbe786b1074c62a166fc348e4 41efbec16c9fe582dccffbb5c1523ed98e9cf889 d4c6ed8dc932c223df60d72c92af762b2351130bfdf0b42b3668044042ebb458
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 1032
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:45:59 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js | 76.76.21.9 | 200 OK | 8.9 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1d5ffccebef437a8.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (11903) Hash4af0d04550602a4e4023aae8ef321f77 78e4304151cad34afe52345efeb22cdb312c879c 1669b1d79728b734d369c85406cfa634f6455c3487057db9c9a95d47335693aa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/8940-2680582ce3921897.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297286
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8940-2680582ce3921897.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"4af0d04550602a4e4023aae8ef321f77"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8940-2680582ce3921897.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419160483-d0e2d1f9a6ec
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 17 kB |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash07f1b66ed72df6c8e90d6b25e6287540 26205a9d3078512d0336d9b74a4c8d4456129233 8530c008160ac7ea9eb8cba19962158f98b80127311bfe490fce284b2f47830c
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 51
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:45:59 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:46:04 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:46:04 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:46:04 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 6.9 kB |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash1fa61fd8802fe430b43fbd0901ccaf4b 4ac592dfe9586cfcf8dac18f8c639f3f44722261 d607e5949de323744a367ce6b03fdf2212b310c2272ebad6ce3e27232f2adfb6
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 1032
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:45:59 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-334KNG3DMQ>m=45je44f0v873867766z8834067533za200&_p=1713419156897&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1178579845.1713419159&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AAAC&_s=2&sid=1713419159&sct=1&seg=1&dl=https%3A%2F%2Fpay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app%2F&dt=Home%20%7C%20PaySwap&en=page_view&tfd=9385 | 216.239.34.36 | 204 No Content | 0 B |
URL POST HTTP/3region1.analytics.google.com/g/collect?v=2&tid=G-334KNG3DMQ>m=45je44f0v873867766z8834067533za200&_p=1713419156897&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1178579845.1713419159&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AAAC&_s=2&sid=1713419159&sct=1&seg=1&dl=https%3A%2F%2Fpay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app%2F&dt=Home%20%7C%20PaySwap&en=page_view&tfd=9385 IP216.239.34.36:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-334KNG3DMQ>m=45je44f0v873867766z8834067533za200&_p=1713419156897&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1178579845.1713419159&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AAAC&_s=2&sid=1713419159&sct=1&seg=1&dl=https%3A%2F%2Fpay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app%2F&dt=Home%20%7C%20PaySwap&en=page_view&tfd=9385 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
date: Thu, 18 Apr 2024 05:46:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:46:05 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ | 76.76.21.9 | 200 OK | 26 kB |
URL User Request GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ IP76.76.21.9:443
CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeHTML document, ASCII text, with very long lines (3533) Hash72e0b6d7f3d30c93c136bcf2bfbc4f4c 957e987bfc9d7cb9f6d6d066f159b72ce71caa2a eeff0c998648718b50dc18cd5715a733c85b01942f091f3c71883b9767961382
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET / HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 2587418
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: text/html; charset=utf-8
date: Tue, 19 Mar 2024 07:02:16 GMT
etag: W/"10b5gfiva1p4wm"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /
x-powered-by: Next.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::iad1::brrp5-1713419155037-ae4a4ff53600
X-Firefox-Spdy: h2
|
|
| api.thegraph.com/subgraphs/name/pancakeswap/pottery | 172.64.147.225 | 200 OK | 8.8 kB |
URL OPTIONS HTTP/2api.thegraph.com/subgraphs/name/pancakeswap/pottery IP172.64.147.225:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectthegraph.com FingerprintAD:37:9B:F1:15:0A:93:00:64:CE:AF:AB:3C:14:FB:F0:C5:09:42:51 ValidityWed, 27 Mar 2024 23:12:53 GMT - Wed, 26 Jun 2024 00:11:13 GMT
Hash69e4f0a8a3805756e55eb410930b0f19 b3d9f56d98ca54b5251baff2776d294f0d9bb111 9d5498d9baea7650fe1623b4f199dabf7c103ca887c0679406f4b28444048e53
OPTIONS /subgraphs/name/pancakeswap/pottery HTTP/1.1
Host: api.thegraph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:05 GMT
content-type: text/html; charset=utf-8
cf-ray: 87625a35cd65712a-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-headers: Content-Type, User-Agent
access-control-allow-methods: GET, OPTIONS, POST
set-cookie: __cf_bm=2VomJHXDbjjvGAEfMaAKYm1oaPsKsSDvikq5uzZ7PbA-1713419165-1.0.1.1-FKgB9JBpVzCIDfDTZJ6.kKq9wzR2aYUou9L1.D1JxHNcgZCPyVF34EhixR4Dc.QYSKCzMoExuuBTkdCSAsXE_w; path=/; expires=Thu, 18-Apr-24 06:16:05 GMT; domain=.thegraph.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js | 76.76.21.9 | 200 OK | 14 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1d5ffccebef437a8.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (11903) Hash4af0d04550602a4e4023aae8ef321f77 78e4304151cad34afe52345efeb22cdb312c879c 1669b1d79728b734d369c85406cfa634f6455c3487057db9c9a95d47335693aa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/8940-2680582ce3921897.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1d5ffccebef437a8.js
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8940-2680582ce3921897.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:59 GMT
etag: W/"4af0d04550602a4e4023aae8ef321f77"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8940-2680582ce3921897.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::625cv-1713419159674-030fe9f09b10
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/pancakeswap-extended.json | 104.26.2.169 | 200 OK | 19 kB |
URL GET HTTP/2tokens.pancakeswap.finance/pancakeswap-extended.json IP104.26.2.169:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Hash4cd5c7c42fe392bbbcb089bfd6c2fcfe e656f87d73358d6996c656643ac8ca1d62235fda 85bff99f144d96a85ccb3c737cfa70f9a5279c03f7bacefb336a83033a2f98e6
GET /pancakeswap-extended.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:00 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f337df90a89a252279b03ca9ceaf71bd"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BEnfr9iKH1li16%2FKykPOLWkWvBp7CdcGdWk5YSJMPBNwZoXuLsq2gCIs0BJVuHTeWC4ffFqRy%2Bwi0QBC3OorhNbxeydLKWGSP%2ByLRZ9JEMwewOrTcOqJeB9zLWLotRyCScqnedyej%2FAJ%2FysVQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87625a15b8c0b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 4.2 kB |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash9ddc33ec7301091836c7e975ead0ba21 3588e0463fe8be69d5b3f567e3ec8c4c224b7fc1 de4fa296abfd4a413a0b0418aecd9b0ebb0a50c8e66477ac57298694f3e5bcb2
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 85
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:00 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x133B3D95bAD5405d14d53473671200e9342896BF | 104.26.15.21 | 200 OK | 5.6 kB |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x133B3D95bAD5405d14d53473671200e9342896BF IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
Hashd98f6b744fa455d7ca5beff27195c4e5 26be0e9dd77e4cc649faf93e162b5ecb88323eb8 b2dfef18bd9e5aaced50badce669c7f26f6531179a0eeadd79e879fc385b0bd7
GET /v3/56/liquidity/0x133B3D95bAD5405d14d53473671200e9342896BF HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=smjUPu139%2Bfhd5Uz92uLyj4dhg8WirNJdsBz8stUoKUXlT%2BmLdWsJeMhY3DYeVwFhHzRSqYxTmoCW1Aro%2FDtPFEr%2FNq8GjcPon7J6nUpJqPjDFmGlnZXfglxyUcf%2BecKah%2Bkbk82YMv3%2F2Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eacc5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:46:10 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x7f51c8AaA6B0599aBd16674e2b17FEc7a9f674A1 | 104.26.15.21 | 200 OK | 115 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x7f51c8AaA6B0599aBd16674e2b17FEc7a9f674A1 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
Hash01745f5f796f5452a627b75aa25971ea b096de7750070035945fb9ed04bb8ac37033b51f 2c801bad75688d2dac1483831ff3fb320f31d66d8832b92275d7fa927fbe8474
GET /v3/56/liquidity/0x7f51c8AaA6B0599aBd16674e2b17FEc7a9f674A1 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7e0VwKz0RU5yHD4B0QPgLey%2BPZQtQf4bY50trpB4ewcGEH9YLlDcktlpx3SU4QBodCleOwzqPJ908wv%2FuagMdFMYiba3QinfWc8e%2FxW4GnWf%2Bxf4Lbok6vN4%2B%2B8ThCF1dJIdSQBlf5KKt%2B8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21fb165685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:46:12 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 48 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash5cd858493fc4fedcfe0ae35f05048863 a3e635489f31b8a2e9b25229203b6cd48f9186e1 08ab95f949c4017927eb6acf46e36d2e30a6839355806601b5add14574d2f245
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 52
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:04 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 48 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashe420a526db9296513c992ed0dc61055d 1b3b0d8ed2895e413721acb244f4ea2c52d4a601 427730fe77f64acff6bb78d4c8e9295c108abfb58326be964856c0128e887504
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 52
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:10 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:46:16 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:46:17 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 48 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash3f2c3d6a25303a69c78cc42c8f556624 9ec981da5b32a16242370c76acce0b58d295c9d9 bf9d17445ebcda095d54d30c87258d08bc529b8ac73197f2eee185569548846c
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 52
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:12 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 49 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashe0f7a4723e6467df15d140163a31c472 5ae792897b869234328fa024feda6411e457ed8e 902989d462a82cfc9ffb488f680cc45787c0becc43f1db494a7c385d9e535320
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 52
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:16 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:46:20 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 99.83.204.86 | 204 No Content | 0 B |
URL OPTIONS HTTP/2bsc-dataseed1.defibit.io/ IP99.83.204.86:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:46:22 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x497a5170A242AEBc7AA7aeD735B164A0be3Bd5Fd | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x497a5170A242AEBc7AA7aeD735B164A0be3Bd5Fd IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash9465d116d37bd4f203bebfc42d8ca22a b1fe158145e0acc24b81d512f4cd1b0ee36bf2ac 96fea648f5d2e1840cd888d254833382353d1b5811a035ac5f800e4b104ed9cd
GET /v3/56/liquidity/0x497a5170A242AEBc7AA7aeD735B164A0be3Bd5Fd HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BKiYJRAADrLM2cHeLLPo%2BOc9HXt5tYP6eUqX9nmHeQJ6edJZg0ljG8rkmC8FDczthoXbDF%2BebhSWT8%2FHhqiSB%2BHmG2Hm9h5oZYAAFi8kUL%2BosuUAnEuqz3Sznx%2FwrtapoJ5JKFJX5p06UcM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eaf25685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8530-a71ec67114581872.js | 76.76.21.9 | 200 OK | 9.8 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8530-a71ec67114581872.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (10048), with no line terminators Hashb89e441daa1d5019a936cf8bc7e612a5 795a1d6dfc52a1ed198eddc45ef1080eb3ff4751 e6f369be2974b0691a1c9eb64c41db8a99ab2b4d05491366132ccbc9e46f5c55
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/8530-a71ec67114581872.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8530-a71ec67114581872.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"685a5044d6189ed14457b6674cfed9da"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8530-a71ec67114581872.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419160492-345195842fb8
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x66E9AcBA7C3a82C8EE02fAF3E325Dd55D6581a8c | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x66E9AcBA7C3a82C8EE02fAF3E325Dd55D6581a8c IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash5c825df1dabf411a4c1602eefbb75684 bc4ef7054f9bb80062afca2606904ab8996079e6 9ef0f9961d359f48a24d33d0243623f21163b78ba3c440ed57b863df0d38e3c7
GET /v3/56/liquidity/0x66E9AcBA7C3a82C8EE02fAF3E325Dd55D6581a8c HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zTG8bax2WbnFPAzt%2BZ3VVKniP9MrwrH90AtS6%2Bow7CE2U1llYJihDR%2FaguFe7IQfHojG4H%2BQGcawYJ1Q6uBwMRVriWeoVP0H%2FjuONUbz2IA0CapfSPcR71%2B0xoNrXkCTU9WZuYhnkMvwh5s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eacf5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x466e7d53e23620a24db23E2B1f8BD10Ff52116Cd | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x466e7d53e23620a24db23E2B1f8BD10Ff52116Cd IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash047ecefc74946ad1f26dbb6b5aabbde4 a1cd16827fa5cb0eb1bb64d44aabcd24faf69404 42446ff342e89513d218abd41ffae558ecee55c2ebf6de0a6927dba7e5c87c90
GET /v3/56/liquidity/0x466e7d53e23620a24db23E2B1f8BD10Ff52116Cd HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wffaBncrVgkImo2y9NpodCCoCrwGjX5PFs2%2BNIt3ChK52Xr60qMLa1EeU%2FwFpKDWgo1HeIsSoOaqb40KJHJ0bS9H41n2PQec06I02V9aeRabtJnNepEKKD51aYC0T6I%2BKXp0LW8l0avd%2BOo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eada5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x85BeA4fBC57fA22b41Fb1632f0D9a6A99390fd0a | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x85BeA4fBC57fA22b41Fb1632f0D9a6A99390fd0a IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash5c825df1dabf411a4c1602eefbb75684 bc4ef7054f9bb80062afca2606904ab8996079e6 9ef0f9961d359f48a24d33d0243623f21163b78ba3c440ed57b863df0d38e3c7
GET /v3/56/liquidity/0x85BeA4fBC57fA22b41Fb1632f0D9a6A99390fd0a HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5qlMK5TNlUWcoQggbEofkcnF1OlPsCzFS7GiXu%2BEfcP4c3tdzTednHwcWBct5SrqnfGBvuoVOIAfFs8onENgxgwSvJl2n2h1ZZ4NRaVx8HEAznnp%2BD%2B9yj1fKloRegUJDsXS85AjnEjZiXM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21ead55685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x62F0546cBcd684F7C394D8549119e072527C41Bc | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x62F0546cBcd684F7C394D8549119e072527C41Bc IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashe55bcef30224f0a3724507a437bd8e73 8550336d2ee08f3eb899ca71384dc73d3d6d888a 4ff01d1487b326f08e76aea9b95b02c0fc8c7ea8f3c85e17ea7093078c3d5e98
GET /v3/56/liquidity/0x62F0546cBcd684F7C394D8549119e072527C41Bc HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0kbR2dsRqbJIjSnO34UnbCpb%2FV%2BdyavXvDpme3HTrDH5%2B5R3%2FFglhfjbMvC4wIBPOU5PLUSICPN25Vax316MXEdoeLUil0ku9nZlztIaP4RL2lXlRN5q92ROIIzOUDzRXDCzOVigOmbQf5c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21fb145685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2892.cc24c93fe7e1d591.js | 76.76.21.9 | 200 OK | 1.2 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2892.cc24c93fe7e1d591.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1190), with no line terminators Hash103182959dd93c6176d37769816a68ab 814338bed43a0fa6c7cc3aaf91ff0bbedcb1876e 4c68bc5a80f528c68ac660b74947ae615e35bec103edec0a0640b2a154948cce
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/2892.cc24c93fe7e1d591.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="2892.cc24c93fe7e1d591.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: W/"b39193e74c50a35f6cbee935df228838"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/2892.cc24c93fe7e1d591.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::625cv-1713419157350-3db279f1a894
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/metamask.png | 172.67.75.76 | 200 OK | 5.7 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/wallets/metamask.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hash94915cd04c09db3b051619b5473e1eba e2704378fc1d79faa2e3b054299eba38da0c0084 3241b9711fff18a21c24c8331f9c6ed6c79cd2647008818bd68b15ee0291dd26
GET /web/wallets/metamask.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:57 GMT
content-type: image/png
content-length: 5738
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "42f9ce2617d6202af597e10d33973b34"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NEy93jDpadfIWLTDhlhe5VPpZlekjv54%2F3Nx6NE5A%2FsFDFuOTgGekZtaPRUBPh8q47LOf7KJNJJvkLYmGsTLCnaTWZAvMzVHxidL11usLuKp9u201n8Oh%2BbQqiVy9l8qyNuoRydnpIgl9ajCkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5838
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a07299f1c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x9f6EB6903C1277c8f02d71F8814dc9998199af1D | 104.26.15.21 | 200 OK | 206 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x9f6EB6903C1277c8f02d71F8814dc9998199af1D IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash7c5fad79b1492f6ed9b496260bdc48ed 85b1fc772c93ba2cdf183ac68a914f04428805ac b08ff3eda90051616a2085f43f71799cc2267ade48b07811a982861058b3edfe
GET /v3/56/liquidity/0x9f6EB6903C1277c8f02d71F8814dc9998199af1D HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8dk10Z610MAvDWdqV6lSmXyqOPeS9Pcs%2BBakz3P35gvEZhBGizqCdro3UIQM3eLyF3FCkBn4TfRm8%2Bf72RW5MaBzRqGiHhsEtowp3zh1jNpJlUMXJm2eB7K9NRXNa%2FASWn7yEBz7%2FJdOKlI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a220b2e5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x85FAac652b707FDf6907EF726751087F9E0b6687 | 104.26.15.21 | 200 OK | 199 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x85FAac652b707FDf6907EF726751087F9E0b6687 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash5a85d82384676d31299a2f79ca99575e dea305606b7dd26be0e5d7a5cd7e73be4fedfa41 a3f6f9f3c1deb80b6ffa727dc350c55622eecd1c04c21be650e94cfbf746c5a7
GET /v3/56/liquidity/0x85FAac652b707FDf6907EF726751087F9E0b6687 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BMyIUwDedcyNVxKNxk5uR30g1IIl4PW8WjD5aBAHTQfeblh2oARUMwQnS6oEy2Zc4BYQzoYCqAWVR3nnQSLVDkDIx4f7uKng1PA5FMaEKamXx14lwLAMZ%2B%2F8cjd0Bp5Xnnhh59XiMqFqoVA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21fb185685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7875-e604b8271f71ca63.js | 76.76.21.9 | 200 OK | 10 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7875-e604b8271f71ca63.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (10313), with no line terminators Hash896a854ebbb38fc1965137a8fab64789 5d9f4394da8ff66fc2e7c24693feff3e43155302 54fc8b94e6f9031526cb84c32f641c23a4d17b17a753eeeb289a776711b5cb94
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/7875-e604b8271f71ca63.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="7875-e604b8271f71ca63.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"b00edc9b681c54e9a79de581d19f89b3"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/7875-e604b8271f71ca63.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cqjs5-1713419160491-1039bd8c8398
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xbba8f85c3cEDdF73dB4de17D31608d640Eaea416 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xbba8f85c3cEDdF73dB4de17D31608d640Eaea416 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash8dd188b35c9d676aeb28af65b4ccf124 80b51af26ff84a2a1c2ffd61decfcf64bd127bde 2334c39693c014cc4054304158d0ed40bf3da29158f5a601319b9b9d2c1cfe00
GET /v3/56/liquidity/0xbba8f85c3cEDdF73dB4de17D31608d640Eaea416 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jQbiwCMiZ3bGYICN2pJUhRKNgc6QhIYZtSAiRwdxNAELtJer09H1UJudzlftjKTRYDyZeH3BdNOrZPfua2WbGcLtQ7B7csTOOBSOTanE3l7v5yfKEPxplcfp%2BsxWYna3C7nNzRDbdhCo6Y0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eae35685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x08eAbc3d13Fb4bdFFD1F42a5644C1c826aCF62c0 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x08eAbc3d13Fb4bdFFD1F42a5644C1c826aCF62c0 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash28ba9b435fcfe16e1013cb01e5b3029e 5cfb21767398c5c5d8298a847bc7186cd8b7613c 43c82f6a51d3a9f8e4ccf2068382a38545bdbc20e6dfc0a420daa36a35c4f7d3
GET /v3/56/liquidity/0x08eAbc3d13Fb4bdFFD1F42a5644C1c826aCF62c0 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kenPbVFcjIpUJI4p5uSrI91QKeiMZ86wHryh2hyrY3RNXr9dozvazpKcu33Rwb%2F0q3xn8bvRenLzKTM%2FAconxR069pjE7YENvtwm0uVMOsVqZURpnAc10EEUMzZniUhTow9OXOOciRGftic%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eaeb5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/coingecko.json | 104.26.2.169 | 200 OK | 936 kB |
URL GET HTTP/2tokens.pancakeswap.finance/coingecko.json IP104.26.2.169:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Size936 kB (935984 bytes) Hash1a456b5475b664c90b860d8a72e728dc 6fb67d2bb121c1dc10354873498524a0fb83f953 e4b5399f99da6974ab4fb4ed4290098469927abd953660a497feede17b8a2e05
GET /coingecko.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:00 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"48a02cbf567e574ebe81170ecee30139"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w5p4VH7iDkjtmyipOvy2SAfbTl6UKwKX6Lcy%2FgsdRcmSxhNPUhyBn6Y1amOuah%2B5t90l8VNgRRsc5ujuYa8oY%2FaEp1qPSjrhNkckXtrQ3bh786%2B3I%2FUytACdguiFUqbMok8d7Ynswgp1oMImpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87625a15b8b7b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xD10612A288Bd5024Db6a47663750996d176130Fe | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xD10612A288Bd5024Db6a47663750996d176130Fe IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash6b5f53c803befef3a0959a640f9647c1 9689a1a1df15f353966087478bdde7b6bef966cb 1037f643021884551be6f40ddae1d8b3d342b59e83bf77747e42444f5bff1619
GET /v3/56/liquidity/0xD10612A288Bd5024Db6a47663750996d176130Fe HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8H1gd%2Fj%2BOyJxPvjw4K0mErteux2su4XzvI%2BC0n%2Fgj1H7L39iNDaP7xK0G6ZpiWGOj8dRoY9FAM61uRfJDEXY7TPw1JUv2w1vVo%2F6xIuoWNrFq7t%2Fimd43IKjq9iKBjld4rc5dq3s6Vii9gU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eadd5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/4725dda0-4471-4d0f-7adf-6bbe8b929c00?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 3.8 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/4725dda0-4471-4d0f-7adf-6bbe8b929c00?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp Hashda70910749e573bddd422e3be5867a44 da34c9ed83957d53bc31a9b59fd320ce02288a3f bfbc9631cd59d2c9b3d7472e49a53ff4e9680ab19c92b8af870d4a068a2a0a71
GET /w3m/v1/getWalletImage/4725dda0-4471-4d0f-7adf-6bbe8b929c00?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:01 GMT
content-type: image/webp
content-length: 3798
cf-ray: 87625a1f3e1a712b-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 41888
cache-control: public, max-age=31536000
etag: "cfVY6bvtQgA-Z381nmE5duLVCtUG7FeV1c8ZwDJoU7DQ"
expires: Fri, 18 Apr 2025 05:46:01 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=258+0 c=10+30 v=2024.3.2 l=3798
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=izZqUwH0RxRJkecr_dH7ff5BfDdKO7UykWlukFHubBs-1713419161-1.0.1.1-afHusQIozvO_9XTl5hiztbdecAVrSmhm4prmHjrvYnI33L1608uLjPNrj0ygeb7Rc2EuefaNQ9RPs.Fm8chh4w; path=/; expires=Thu, 18-Apr-24 06:16:01 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/lunar-bunny/star-r@2x.webp | 76.76.21.9 | 200 OK | 6.8 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/lunar-bunny/star-r@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashcebe45c56134db4c93b9770d5188ff9e f457131beb084b1b85a2b0b795a801900938a43a 3b2f178b4864bdc07a4c3832edce48af25f9be8843e9d87ad76821b3e8aceb6e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/lunar-bunny/star-r@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="star-r@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "cebe45c56134db4c93b9770d5188ff9e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/lunar-bunny/star-r@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::p58sb-1713419157638-2905db5535be
content-length: 6832
X-Firefox-Spdy: h2
|
|
| relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt1eE1SYjlrYTRWV1JlWU40ZTg2dGFydG1BcnRQeFNZaTNYOHd5Z3RYQ21wYSIsInN1YiI6ImVmMmVjYmVmZmUxMDE2Y2E0MDRiMGNkYmI0YTE0Y2Y5ODg3OWIwMzI4M2NhNjY5M2QxZTNhYWU5MzI3YWY2ZjkiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxOTE1NywiZXhwIjoxNzEzNTA1NTU3fQ.Uw4CwHKfMfvrGtknFijels98JNxy9YyePptx5NGZgWUk0TY_oCbgQGmb36jH8ZW2bji1nJrEkjbzp7rYTXwbAQ&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true | 3.126.230.177 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt1eE1SYjlrYTRWV1JlWU40ZTg2dGFydG1BcnRQeFNZaTNYOHd5Z3RYQ21wYSIsInN1YiI6ImVmMmVjYmVmZmUxMDE2Y2E0MDRiMGNkYmI0YTE0Y2Y5ODg3OWIwMzI4M2NhNjY5M2QxZTNhYWU5MzI3YWY2ZjkiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxOTE1NywiZXhwIjoxNzEzNTA1NTU3fQ.Uw4CwHKfMfvrGtknFijels98JNxy9YyePptx5NGZgWUk0TY_oCbgQGmb36jH8ZW2bji1nJrEkjbzp7rYTXwbAQ&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true IP3.126.230.177:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectrelay.walletconnect.com FingerprintA3:38:A5:E6:60:04:20:E0:86:C9:9C:9E:6A:D7:35:A4:D4:04:A2:A5 ValidityMon, 07 Aug 2023 00:00:00 GMT - Thu, 05 Sep 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt1eE1SYjlrYTRWV1JlWU40ZTg2dGFydG1BcnRQeFNZaTNYOHd5Z3RYQ21wYSIsInN1YiI6ImVmMmVjYmVmZmUxMDE2Y2E0MDRiMGNkYmI0YTE0Y2Y5ODg3OWIwMzI4M2NhNjY5M2QxZTNhYWU5MzI3YWY2ZjkiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxOTE1NywiZXhwIjoxNzEzNTA1NTU3fQ.Uw4CwHKfMfvrGtknFijels98JNxy9YyePptx5NGZgWUk0TY_oCbgQGmb36jH8ZW2bji1nJrEkjbzp7rYTXwbAQ&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true HTTP/1.1
Host: relay.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OHmjspWGczsEbAfrOwg2rw==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
connection: upgrade
upgrade: websocket
sec-websocket-accept: 7qvjklvG7ZnUoKhT2uJBergyovE=
date: Thu, 18 Apr 2024 05:45:59 GMT
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-334KNG3DMQ>m=45je44f0v873867766z8834067533za200&_p=1713419156897&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1178579845.1713419159&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713419159&sct=1&seg=0&dl=https%3A%2F%2Fpay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app%2F&dt=Home%20%7C%20PaySwap&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=4111 | 216.239.34.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-334KNG3DMQ>m=45je44f0v873867766z8834067533za200&_p=1713419156897&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1178579845.1713419159&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713419159&sct=1&seg=0&dl=https%3A%2F%2Fpay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app%2F&dt=Home%20%7C%20PaySwap&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=4111 IP216.239.34.36:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-334KNG3DMQ>m=45je44f0v873867766z8834067533za200&_p=1713419156897&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1178579845.1713419159&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713419159&sct=1&seg=0&dl=https%3A%2F%2Fpay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app%2F&dt=Home%20%7C%20PaySwap&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=4111 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
date: Thu, 18 Apr 2024 05:45:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x07b2d7379427d9A5AC96D704D53983b41D9d0082 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x07b2d7379427d9A5AC96D704D53983b41D9d0082 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashf8994fd96b456355f453bbab177cec11 7196acaa21d8d957a1a647c2d7980dfdb1277edf dcc897229f0caf0aaae882d60c9c3b448ce0cde7b98266f58701fb218b39deb4
GET /v3/56/liquidity/0x07b2d7379427d9A5AC96D704D53983b41D9d0082 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o%2FbizibVUZK64t9WLDyBLty5eP2KpqMjzGZcbKlQ%2Fc%2Bzs%2BPBXGDv%2Fw%2BtznNJw9nayl0fd8MCEJzgqH%2FLiRd87bkgDfDlMUmH%2FHael3e5gAxbCQrn1o0oVtZiVJnEuKwH1OvLqJQChFIn9Yk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eaec5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x673516E510d702Ab5F2bBf0c6B545111a85f7ea7 | 104.26.15.21 | 200 OK | 204 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x673516E510d702Ab5F2bBf0c6B545111a85f7ea7 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash9c2f90ac30ffc43633ef49b6f7bbc22d 066808d93e5c859e572b793dbfb13c30d8b1dd05 f227c176d7f6aad2c612733e1c469d9bfa7a2870852c57de6f9e01644f457e2a
GET /v3/56/liquidity/0x673516E510d702Ab5F2bBf0c6B545111a85f7ea7 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ThywU%2FRqmNaniXODoQQbFYR9y3suhlfskxVVeStmixyxA3Ouk33Opul3ZSyuEmaF%2FcYmlbeWWZlTYyGgKQD%2BMIgGCWWSYCTWsgUQTFGMEEkhuXSn7uKLrf1LLGBz5cyfF%2Bp8O6KHakp2OE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21fb135685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7444-360c3f79697d7d4b.js | 76.76.21.9 | 200 OK | 2.5 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7444-360c3f79697d7d4b.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (2587), with no line terminators Hash4de8a53fb41ebd759027d91f2ec64781 3299bcc68e0d15a9685ff8ac6d49a484fa15611c 6ede75d2417932635664704622abb242b024e5a7f5bf177ab3b3cb4f4f7c2df0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/7444-360c3f79697d7d4b.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="7444-360c3f79697d7d4b.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"cf3d137988a48807f06a3e8663fb24c4"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/7444-360c3f79697d7d4b.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::2t46b-1713419160484-5395f0cdb1cd
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x73D69D55893d6c97DCA44AF2Aa85B688C0242d7f | 104.26.15.21 | 200 OK | 205 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x73D69D55893d6c97DCA44AF2Aa85B688C0242d7f IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashf62aa525fd68a215d6d2b45f8f31f975 894dc00904ecea9004a3a9a4a666cd37271b9d55 39317781be057b10f22b2d60e690a84ed18dbe54a56029d1a578b900be35635a
GET /v3/56/liquidity/0x73D69D55893d6c97DCA44AF2Aa85B688C0242d7f HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bKVcTXAQqpVbNvgV7of%2FcWUW5IfgArF3vVxJBw%2FvnpbSIbun%2BdX9TRlHDT7CgsLkB8UxHQdeSCufs6tx2hTys2CJ3uZGnYytVycfoqDn0cqUjbmILDvxY%2Fjr7uEKh7o1WvTdFxPz4MPhzpc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eade5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x61837a8a78F42dC6cfEd457c4eC1114F5e2d90f4 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x61837a8a78F42dC6cfEd457c4eC1114F5e2d90f4 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashab5068e1824b4873c4ccfcb398cd00ad f56f97e3fa959c208977b187a76d59cc02b5a51b b82c74293275a606a45a3310c6c00c7183df12a9890a7d82649129d2310bb89b
GET /v3/56/liquidity/0x61837a8a78F42dC6cfEd457c4eC1114F5e2d90f4 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A8D2H540vVSliv5NQ9GQvgPA4DR6M0rLC9%2FB3dZP9nZ%2BuMy0oJ5N5xYt3MXtAxNENVbNK71pfoMY4pv3NCXBOthfZUN0MBtzlY%2FUTk0UABXANwztSSsGCVox%2FxszVXi0LNNjCTCglnS1LHQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eaff5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.walletlink.org/rpc | 172.64.150.248 | 101 Switching Protocols | 0 B |
IP172.64.150.248:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectwalletlink.org FingerprintB8:73:73:A6:43:5F:26:A6:7B:B4:63:F2:19:C1:AE:68:20:D1:2A:EE ValiditySun, 10 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rpc HTTP/1.1
Host: www.walletlink.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CbcynUb+aDcINGgzrCAXOg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Thu, 18 Apr 2024 05:45:59 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: rswT3ZbirYrVL/NCW6k03gveQAo=
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=o0tbOJfWnH69zACfhNiIxjHexO3T1QzEWmrbcJXsL4g-1713419159-1.0.1.1-n_Z2TXcPrRs.UEbZRl46GrlNNQAk0RwDtY89UbRJ.MN28W2qZ.p5MZ3w9HTL.BKxkXoU2Qf4wi72oJRobhIzSw; path=/; expires=Thu, 18-Apr-24 06:15:59 GMT; domain=.walletlink.org; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 87625a13196256b1-OSL
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x6425bC30D0751aF5181fC74a50e760b0e4a19811 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x6425bC30D0751aF5181fC74a50e760b0e4a19811 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashd12a8eb42d7209fce7bb7900307ec2da 58dff5dac54d6ab4705e3f4c861e938459c4e42c 489611c9d6a8af3b5b47d81aedd21232336a4d4d84b811007624d3b53217fc28
GET /v3/56/liquidity/0x6425bC30D0751aF5181fC74a50e760b0e4a19811 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=erkEwshsKONWeOIQWK2GMVHFBqpwP0pNUK482MF7eZVN5qcEmzvByv3UtvD0PsKk3n3o%2BYin9WFeWdZyRdfQ%2BQpOYEtbC9%2BSUROua194x00Yn5L2ZGNtCr48UWs8MyblqvmaANlYwi%2BJs%2BE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eaee5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x07003daEbc432ecec26309cCd1391BBBF06cC890 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x07003daEbc432ecec26309cCd1391BBBF06cC890 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashfbb3938481131d9b1bf38548098f9732 1cab91ab74efcd5d39b235ac8dbe5b32c83e3d92 4bb14e0d8fc48ff5c7b9d318123c2281d366a8871b13e028781638d3631644fe
GET /v3/56/liquidity/0x07003daEbc432ecec26309cCd1391BBBF06cC890 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bNglqAgVlbFOcaroBdob7h12PAaD3I3VFppbBZAWngskHNZSutlM7vR8yvfLovu5LZHIwsd9Sb5sZVwlDBN4qwqaj2BVggfw69YWEr23scMu4WwR%2Bcue9BfpCGz1qdxSpJ6AC04%2BhLZDDAU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eafe5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xdf0c1C30e8C1aE3f189f6E6ef248d71977F7BE29 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xdf0c1C30e8C1aE3f189f6E6ef248d71977F7BE29 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashd3abcf143b51e12bb4a889d288ec6fd2 68232a8f3af377668b98773bbda1390d0d59a09d c16ec4ccbcc45d58023e18588bc1ed4aec3a183cf682c3adf7a7e166f0d3fc7e
GET /v3/56/liquidity/0xdf0c1C30e8C1aE3f189f6E6ef248d71977F7BE29 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eQtEt4TqfjVTllClFBvsaVDdGwqEbx9CMJ1DwY9zbnGMJ5ckuXOR2u4M%2FrczM%2Fsz1kGj7cA9fe8dgMGzmrB3h2CqcSC8T%2FQEdqIe%2FPzLl3n3eEejlEk%2FpTLCUt5ruL%2B8T9dU7runSfZTJ%2Bo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21fb1a5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x436380Bd2404aBA3f20c0ea68F343f5a174532a7 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x436380Bd2404aBA3f20c0ea68F343f5a174532a7 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash0843d3ded330f2ca9e1c7f5f0cc1595a 318b4ad42cea8755549ca099eee257e1fb2a53b7 13c6cf0b7f654c158c672840fb2a68ce8ce97943f63942b780e106b71133dfe8
GET /v3/56/liquidity/0x436380Bd2404aBA3f20c0ea68F343f5a174532a7 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FcAE40ZbvTv6%2FHZgotAbczOGFIIIcrNqZdINJnkR%2BEypfBTC0x%2FU6MqKsR9N5USj%2FYIcJEX3VgjKBL3LItSOcAOMJMK%2BCVTwc%2BMCiy9ENzUe8%2BnCw5n984kd683dfc2VVmJIVnKMe7g4aaU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21ead65685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x4e1f9aDf96dBA6Dc09c973228c286568F1315ea8 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x4e1f9aDf96dBA6Dc09c973228c286568F1315ea8 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashe3c0cab157bd2d3c27518de5b90d779a 47f5774b549f19972195149bb4c4ad9d92a9e321 e8b09865ebb545a4b2efe93586c592f34021a6c96d84e0da3418c803a2796810
GET /v3/56/liquidity/0x4e1f9aDf96dBA6Dc09c973228c286568F1315ea8 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=amJQjRS0sxSVSas6I525kkaQoc5ajzC7r6gJM2mQqsEDnj9SQCwfeofmj26WUA0Cj5WNl55iTyAkpKkek0OjwwL%2F7Z5ZcqJG0XCb8AmZznUxx51UlM443NvTZ4IhQSXN2957cH%2B4p2OEkpE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eae75685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4695-1183a8ea2bf16767.js | 76.76.21.9 | 200 OK | 382 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4695-1183a8ea2bf16767.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Size382 kB (381769 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/4695-1183a8ea2bf16767.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4695-1183a8ea2bf16767.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"435a8413731141a69b1398821229775b"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4695-1183a8ea2bf16767.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qs5mn-1713419160481-76e48bfac1ed
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xAE7a3D9bed2ba4ef9c134FF4BAeE33655AE5DE6f | 104.26.15.21 | 200 OK | 196 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xAE7a3D9bed2ba4ef9c134FF4BAeE33655AE5DE6f IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash85cde69f66db81b5de368c2053a1943d 10271f11ffe6bfc209a5f14465641131be7706ce c2bdccad7eb343067e295c453a2314ccab4deb2d6cc8e37b71b3ca37b06e0673
GET /v3/56/liquidity/0xAE7a3D9bed2ba4ef9c134FF4BAeE33655AE5DE6f HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eQEUTKLB5pbmfIYpj4RLTGSpVKouiJutbWa2blVYJScV00fZwh3FtgthHVKx6Jf8fkmqxO8jvfzYrdiPlFAgspj53FjBsamejzxITrHB%2BzdXYfY0y64E3GcldYZ0y88Cf%2BkydZBFj00gIXc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eaf95685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/trade/CAKE@2x.webp | 76.76.21.9 | 200 OK | 16 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/trade/CAKE@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashe82f95cba00978df12a5bbae8b7545e0 da656611239d6a8d09e41babf0fc5618a2ffb41f 88d30442ffbb47b43daed16543d216def192dce7a2cd70acd843978931b73de1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/trade/CAKE@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="CAKE@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "e82f95cba00978df12a5bbae8b7545e0"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/trade/CAKE@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::h2f49-1713419157664-7dc51d9612b1
content-length: 15662
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8394-2b149c4bb6108264.js | 76.76.21.9 | 200 OK | 44 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8394-2b149c4bb6108264.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (44056) Hashca02cb21718db3ab448c7d8204be089e 1e3060cccd6eb155b6f35cdc6d1c33bf7dca49ba 530475dd121227c652eb45b2241e84f8c01b5c5d8937762d304e7b71b43b442d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/8394-2b149c4bb6108264.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297287
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8394-2b149c4bb6108264.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"ca02cb21718db3ab448c7d8204be089e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8394-2b149c4bb6108264.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419160480-be5b2c05bad4
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/89G1YMf40IpLy8Bc6Vxbj/_ssgManifest.js | 76.76.21.9 | 200 OK | 1.4 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/89G1YMf40IpLy8Bc6Vxbj/_ssgManifest.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (1589), with no line terminators Hashebc698ccccf9903481d651c64f5f7ce5 abb4e62080fe835711e2f9a342c288390b1a5139 5d93058318c1fdfc76bb887c4949f243be901295806dba5e1243de9b4d26e60e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/89G1YMf40IpLy8Bc6Vxbj/_ssgManifest.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_ssgManifest.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:55 GMT
etag: W/"9763391e76f0ef324680013c4916beb3"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/89G1YMf40IpLy8Bc6Vxbj/_ssgManifest.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419155367-bb01e02638e3
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x89CC4347Eac9bdf71f9d783c7a25729e5C579108 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x89CC4347Eac9bdf71f9d783c7a25729e5C579108 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash32e44157add28d603abe2654743bde82 1232b09b35825d06b75b463b3624d806886c0ddd 68b327a9f94f46f2f709bf31f9a9d4ac2d171d391a0a8edfbf003119b0056299
GET /v3/56/liquidity/0x89CC4347Eac9bdf71f9d783c7a25729e5C579108 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uCHq5%2FhcJWqP4EF8tkeC53XYOVCDtnSobBtKmXao8ytcCHFgnonuOwzOIvDJUh8%2BfpdJlgT2J5bZNLSHXg3%2BCoU7y7XKYmy%2FmtildwImKG%2BtE7tWvNvovi3b6nBPfrF%2FAIXHr%2BjBRxGw9yw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eaf45685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/webpack-73ae4b7b62b272b3.js | 76.76.21.9 | 200 OK | 11 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/webpack-73ae4b7b62b272b3.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (11000) Hashfa53264d2471bf33a3a96816e77cc217 78c33c5ec2966dfa908d0d6b415ac4c3704534b7 15e8f1960adbe598e1aa1e9a4f8fec86c9d8df986ce04465d905cc5a905b8805
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/webpack-73ae4b7b62b272b3.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="webpack-73ae4b7b62b272b3.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:55 GMT
etag: W/"fa53264d2471bf33a3a96816e77cc217"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/webpack-73ae4b7b62b272b3.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::bvpd5-1713419155360-817ef0acf818
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4909-85bbad804cf18361.js | 76.76.21.9 | 200 OK | 31 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4909-85bbad804cf18361.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/4909-85bbad804cf18361.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4909-85bbad804cf18361.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"4924e0cb2961c18f43e29784a29c1ed2"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4909-85bbad804cf18361.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419160491-0093a89a82a2
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xDBbDB7dd8870ee0433f50Dd17cE849703be56704 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xDBbDB7dd8870ee0433f50Dd17cE849703be56704 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash0c3678566d0c12a3359f81c3d88d1cff 50d4d545704a04962af5bac4d2c0bd5dc56d1a04 c047024b053c8299b59260a969b83072271a3b51082c5af7b5e5bff86b1ee388
GET /v3/56/liquidity/0xDBbDB7dd8870ee0433f50Dd17cE849703be56704 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tArwp5gEgcHYNIszhOPWPcLHooyD%2BjNsqf3sajKm96QGGCzmQWWrPKZvNAEC6z8GGBInC3gcJ%2FTL3DKMLLKUClV%2B3zHNaCOY7sI10BTf3OhNPz04Zv8WqrALjoSKDy2w6R9I18iHnQ5u6QM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eae15685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xC2B3dbBF26d43617036b0ebA53aD2DBD945adebf | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xC2B3dbBF26d43617036b0ebA53aD2DBD945adebf IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash2490905b661e66795e0c187561a4c1f4 d71f615a5d5bc2727b3c448b360c20a657ac7355 2092f8f8b31577a712a713f33bdf59e006e7262ba93d9625ac0b0d8fdddadf94
GET /v3/56/liquidity/0xC2B3dbBF26d43617036b0ebA53aD2DBD945adebf HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Ci6dIlMOG0yn5NP2xNs7dI6GNXOOTq1bgeZLILXPDB8TE5DL5RtSI70vRa83V1tWs9FY57Eo1yGVmjzri3YXDpdXsuMs8P1cNBJoGDFps4pkHu2k2QAvd0UpWRw6ooX252byin%2Fa7WYax0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eae55685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1518-807be149c1b04211.js | 76.76.21.9 | 200 OK | 11 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1518-807be149c1b04211.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (10590) Hash3f46977d9b0661718797f9f6a81def97 7827f12721ec5a28d8fc5164f18ad9457c59b6a7 099d9417752b9ce255dfb29a959d0dc91a2baaa6ac71b8d9e408e7ff87044ba8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/1518-807be149c1b04211.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1518-807be149c1b04211.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"3f46977d9b0661718797f9f6a81def97"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1518-807be149c1b04211.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jbghs-1713419160483-4148cbc16d74
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x36696169C63e42cd08ce11f5deeBbCeBae652050 | 104.26.15.21 | 200 OK | 210 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x36696169C63e42cd08ce11f5deeBbCeBae652050 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashb1d5e7be752e74221b3476cd784d9357 b7f619c2faa9e66befeed60544f7dcaf5f4df7f7 54639f1fbf1963715c6fd8847e4a975197648a38a9304a42b70aa853b5e79ad6
GET /v3/56/liquidity/0x36696169C63e42cd08ce11f5deeBbCeBae652050 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nnBryriYdQ%2BzLStj6t8eY77hLTmX0sOgTsU8qeDbDpKU0SLlfNNhYrVg%2Frd5vLzOaO3sFrxyipw%2BXjGEsBrlCejKWruAo8udDwrVuLvEz8dAB5%2Ftm33GPlKQv4MObi6PspJ10kgO2B0ZJcQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21fb195685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/css/d17697a543226a3f.css | 76.76.21.9 | 200 OK | 12 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/css/d17697a543226a3f.css IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (12031) Hashb80619f45b0a559fb9753cf421927c8c 040f73d81edb8cc00315c757d0de8a8e5ce7abb9 5ff0b2aaace336e34deded8e9b47d6d6db5fe5ecb1937fd2a64c9ae5c707643f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/css/d17697a543226a3f.css HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297282
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="d17697a543226a3f.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Thu, 18 Apr 2024 05:45:55 GMT
etag: W/"b80619f45b0a559fb9753cf421927c8c"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/css/d17697a543226a3f.css
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::9d6kb-1713419155360-9059309d05da
X-Firefox-Spdy: h2
|
|
| coins.llama.fi/prices/current/bsc:0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c,bsc:0x55d398326f99059fF775485246999027B3197955,bsc:0xe9e7CEA3DedcA5984780Bafc599bD69ADd087D56,bsc:0x2170Ed0880ac9A755fd29B2688956BD959F933F8 | 104.22.54.70 | 200 OK | 563 B |
URL GET HTTP/2coins.llama.fi/prices/current/bsc:0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c,bsc:0x55d398326f99059fF775485246999027B3197955,bsc:0xe9e7CEA3DedcA5984780Bafc599bD69ADd087D56,bsc:0x2170Ed0880ac9A755fd29B2688956BD959F933F8 IP104.22.54.70:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectcoins.llama.fi Fingerprint21:F7:7E:20:9A:B3:18:B3:5B:C8:26:49:14:D2:2B:B3:A8:FD:31:A2 ValiditySat, 02 Mar 2024 00:57:59 GMT - Fri, 31 May 2024 01:56:57 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (621), with no line terminators Hash0bba8c659dfcf700e0c0197299f479ab f9609522d6a917c0fcfd3449aa565cbd0c400a22 b64ee31f0e182a4b0e87e9e3a239c2b0ec7596fd230721454cba01dbeb0f4c10
GET /prices/current/bsc:0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c,bsc:0x55d398326f99059fF775485246999027B3197955,bsc:0xe9e7CEA3DedcA5984780Bafc599bD69ADd087D56,bsc:0x2170Ed0880ac9A755fd29B2688956BD959F933F8 HTTP/1.1
Host: coins.llama.fi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:45:59 GMT
content-type: application/json
x-amzn-requestid: 02d55581-2551-407a-9a5b-3eb5cbcb9ce5
access-control-allow-origin: *
x-amz-apigw-id: WaD5wE5UFiAEJwg=
expires: Thu, 18 Apr 2024 05:50:20 GMT
x-amzn-trace-id: Root=1-6620b371-6db82f787c604fac1451a872
access-control-allow-credentials: true
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: h4fwOivWb_ljXq-5s2F8hC_h0YnDeZPEN71W-PqhmK-R7JprR_UmPQ==
cf-cache-status: MISS
last-modified: Thu, 18 Apr 2024 05:45:59 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a114cbf56bb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xb4E9DeA6105089f15685508B8EF2e7f7F5A1B16D | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xb4E9DeA6105089f15685508B8EF2e7f7F5A1B16D IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashcbfe68d826d7f593bf2c90593667da5d 394044ff789e380452dc8e487881bdc792264b0d 9771c8704fa3aceb9ab768952b66ae97b1a0fec1dee42293da9f1446fc98117d
GET /v3/56/liquidity/0xb4E9DeA6105089f15685508B8EF2e7f7F5A1B16D HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UM6TAMUJPJqSgymc7%2Fk4IdSbSl3ZjrJSn4Mqruf1HnhBJcJYvCBRKgJ1ER1y88AiYIJFVJtDR%2BBnDLSEki30YPoQF%2FIc6zgX9MRLJppXx9zp0%2BglbZngWHIoyRlrLAIaMgMtfZ7hWsWS%2Bm8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eafc5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/data/89G1YMf40IpLy8Bc6Vxbj/swap.json | 76.76.21.9 | 200 OK | 3 B |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/data/89G1YMf40IpLy8Bc6Vxbj/swap.json IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with no line terminators Hashfdf48e6b3239e0b378031fb47d5b202a b1806f381758bc595c29988c05ef5e0ef580c90a fcd393d2c13bad308661b62b34d9c3234a3ce840e22909b0a180e85f76b5d24d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/data/89G1YMf40IpLy8Bc6Vxbj/swap.json HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
purpose: prefetch
x-middleware-prefetch: 1
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
date: Thu, 18 Apr 2024 05:45:59 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /swap
x-middleware-skip: 1
x-robots-tag: noindex
x-vercel-id: arn1::cqjs5-1713419159178-914160417f1b
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xE0898f9027F037C298649AfD0fcDeeb7Bd210AcA | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xE0898f9027F037C298649AfD0fcDeeb7Bd210AcA IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashcf0ba094367ecdd323995d737ca0fd8a 769d97b5879337754b198da9d210ca2417e9740b 89b8fca68b149b053b7ae90a613a3ab958b718ee0d33bf1a34a28f54e4d4a08f
GET /v3/56/liquidity/0xE0898f9027F037C298649AfD0fcDeeb7Bd210AcA HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sr05iIgU14lGvRMkJ3f5YfpTEIjGQIKRdnvingIH04NcIoKWTwZlKur%2BUZlh4Ht4fP5llDEIIGBvs50fbI%2BS%2Bug6jgf8ffQsuuB1FW1vcI4CvwUM4xSrBaT6JJsLFX%2B7sKxKEFPtwJ84LEY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eadf5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/9f259366-0bcd-4817-0af9-f78773e41900?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 7.2 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/9f259366-0bcd-4817-0af9-f78773e41900?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image Hash342152b7fdcb21b38fb77d6b55dab77b c98e9cc318eef9dbe98df17fe6c3afc699dbee33 a1962f56716c3fc8e93e593dd611f7b45a8632bacf8df45b56f9dcc5b3c10958
GET /w3m/v1/getWalletImage/9f259366-0bcd-4817-0af9-f78773e41900?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:01 GMT
content-type: image/webp
content-length: 7170
cf-ray: 87625a1f4e32712b-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 41888
cache-control: public, max-age=31536000
etag: "cftQTt3un0HlQqBazMK6bKNWLiUG7FeV1c8ZwDJoU7DQ"
expires: Fri, 18 Apr 2025 05:46:01 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=19+0 c=2+29 v=2023.9.8 l=7170
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=JX41AizukUkLphp56K_sUihxm5NVG1XvCFFqpnqjOis-1713419161-1.0.1.1-.pH8cXgQbDilJ9GA4TUDbU0sgIXb7Rp5m_dy52IK9hiRV.qvzBW9Mvpzq0tNSkdRzQ_v_M8nEL8dBp6huzmEMA; path=/; expires=Thu, 18-Apr-24 06:16:01 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x379044E32f5A162233E82de19DA852255d0951b8 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x379044E32f5A162233E82de19DA852255d0951b8 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashea98d8fb2a9cea0ed3bfaa30ea0dd212 2585c25bcf67b0fc82ed162ee18aa2eecdc89b4a 919cfe8780e49502164dc17ca4706aead6cd4641411f7633c1398b251a2d88ce
GET /v3/56/liquidity/0x379044E32f5A162233E82de19DA852255d0951b8 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4ltawSgHJIradY0vQ5XI4lBdm23Xun5pwsRwXHRMNRh4I%2FiBnOTWLIIF234jbXoKsl3ejHlfXK0%2FdAbOc%2FrRiE0xPr77AXHIQFsbx0nUtUkFVZ9z16BgkVLW89I65%2BpExceTaL7DU47exZU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eaef5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/6403.dc60e78b17c284fe.js | 76.76.21.9 | 200 OK | 138 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/6403.dc60e78b17c284fe.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Size138 kB (137476 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/6403.dc60e78b17c284fe.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="6403.dc60e78b17c284fe.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"d959057a0ee91d2d64e3ccfdbdb6e549"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/6403.dc60e78b17c284fe.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419160407-d7c9ff9355fd
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xD0e226f674bBf064f54aB47F42473fF80DB98CBA | 104.26.15.21 | 200 OK | 198 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xD0e226f674bBf064f54aB47F42473fF80DB98CBA IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash9920ee1e4222042f2903c58ca26a31ee fd6ec20199ca44f316017e55315a527f9ddd966a d19b320c9a5e66192194f10440a5f6337382c6b9f8b89983895fe2f171230acb
GET /v3/56/liquidity/0xD0e226f674bBf064f54aB47F42473fF80DB98CBA HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nu0juLLJ1HFJH%2BLbdZYnz5Gea27bEk9bf%2BMysDvsuKB1tQ%2FN4xa58YAfWNc0x4kg7Ts0wFb9oHRvUCCn3InDrr%2B0gcotnvpztx%2FsZ5wOwiCEtgdfu0jlui%2F2y8ZNjg6rhHW08fAxsEupaRY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21ead25685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xFC75f4E78bf71eD5066dB9ca771D4CcB7C1264E0 | 104.26.15.21 | 200 OK | 196 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xFC75f4E78bf71eD5066dB9ca771D4CcB7C1264E0 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash9048685f8ca93665ea24a1e6a615388e 746e6ab4e985e7d04a1e2a183289862fc0f84cc6 aeb65c53150e3deb386c41e155282116f5f0b09829c877db7b4f8a0b0f860354
GET /v3/56/liquidity/0xFC75f4E78bf71eD5066dB9ca771D4CcB7C1264E0 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SBvj7itw1h8yDMADkVyT6Y%2BdpWZlxdyGxQGb2CbmPHAlx49ARYR%2FUt9CT%2F4nZ%2FRm3iDpr3BGPof3%2FCoNomEg7cMZWny7xO9Sc5FxD3XEAdB7rDN5gVHOKyI7jXB8PgGTnJcJT2cLXAQW9Do%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eb065685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x7d05c84581f0C41AD80ddf677A510360bae09a5A | 104.26.15.21 | 200 OK | 198 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x7d05c84581f0C41AD80ddf677A510360bae09a5A IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashcdb541d8e0bff229549bf8a89cf5ac9e 1817517bd3e3959849efea0844486e1fe86616c5 15db637b06117cdbf41170d713dc59bf9008ad60c53dc238c960b19c711d54dd
GET /v3/56/liquidity/0x7d05c84581f0C41AD80ddf677A510360bae09a5A HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2jdcs6HRpNOO%2Fiymwazf%2Bh6LgtDJYLfqowmUxQaDXUYHOuduyARjghdk7iUZRLafo3OmSfr2q0sCHAAEaeA3s0cBA1D4lKYCiwShkc%2BLX2m%2BScHdqplBXkV5H3upWcgFEEnhCWlEFX0C7Xs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eb085685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x369482C78baD380a036cAB827fE677C1903d1523 | 104.26.15.21 | 200 OK | 192 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x369482C78baD380a036cAB827fE677C1903d1523 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash3e53fa5972980d15a576a8d1070cbc58 13d2fa5e2c5fb3013b0564cc60b257ac62f3c123 ba8011361d73f5aa2a5fa00a0feb520b6a3b069f59f2c990b736861ac5dfc176
GET /v3/56/liquidity/0x369482C78baD380a036cAB827fE677C1903d1523 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8%2FmTYygIVYcWveYc85dcdjkHU0a%2F4dgzYhKqNkCxGl4lzVbItCuuaIeQLLc6w3qS8tCHPBwSSuu%2BE0tiBGRWJjk97%2B1aCZbZ5Eert7fEPDgK5C%2FQ8apnVw%2BlndS%2FcjSx2x77K8MwGL0D%2Bek%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eb025685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x22536030B9cE783B6Ddfb9a39ac7F439f568E5e6 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x22536030B9cE783B6Ddfb9a39ac7F439f568E5e6 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashebfbde93b37b5fdacb07c8ab45972339 c89d08ea303234c81af9cb82e9d6804b9846ba69 938582487147e8f5ee85f734466625dc07a9b3da415cd5cdb71a803282a67661
GET /v3/56/liquidity/0x22536030B9cE783B6Ddfb9a39ac7F439f568E5e6 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XUYEFj0MuvKbNrWnTI2rZ41KGXpyMI6QaMlz4i7Sbz3M2yhzrgX%2FpNg2KRSo8QL3TGMVOAa3qdG%2Fy%2BYMz%2F2MRzGajXDzSfdkz%2BNK7kRHstHkg0QKj1ThQZdF6Pdp66je%2BFINZkOfLmkfRIc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eb0c5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x4f3126d5DE26413AbDCF6948943FB9D0847d9818 | 104.26.15.21 | 200 OK | 210 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x4f3126d5DE26413AbDCF6948943FB9D0847d9818 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash75ba35891a2e443ca400ad54d785c1d0 e0c47241ee6129966ec72386dd9d2156f95b26db c19b0568dd98b9713b1ad637c568fdefb8b93244ec90ed23c018c5ecb433806e
GET /v3/56/liquidity/0x4f3126d5DE26413AbDCF6948943FB9D0847d9818 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=01k0gj89dMwbu0VsdPbnWtUyMiyJhCq4BSlxtlcsO5v7x0zLAeZygvtFvI3sPTSN8I0KWQiy4g%2B7lMddVi4CnRfdLDqahBKLq%2FIdM3AVDY%2FfLPS1TDCFkM%2B9A8Ts1g%2FfOSiser7q4tIkBHU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21fb0d5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x647D99772863e09f47435782cbb6C96eC4A75f12 | 104.26.15.21 | 200 OK | 200 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x647D99772863e09f47435782cbb6C96eC4A75f12 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash26635841b8e25dce7994a71d4fa29419 99b45d141ce60d55393413bfd1d4988b3a0f49d7 8a3f083dfe1e346314ec4123dd06685eda96f81007ca8e12db95b973ba699f35
GET /v3/56/liquidity/0x647D99772863e09f47435782cbb6C96eC4A75f12 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2FYsAHfLm1sFJbzvcVYXpe0iyCQ2A8hB1lV4s6gmAs3K5Qej5mv9OJ%2FbCwIWJHMqSn9hhmAjhJRkrkmkhI3ATDvmzCCKv6PeNIOd5rD9ZXqHpIPDTvnh8Mx4fq0s70BDvvb2pml72br02BE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eace5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5185.17a9876281b49b94.js | 76.76.21.9 | 200 OK | 119 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5185.17a9876281b49b94.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size119 kB (119438 bytes) Hash1cc2b2fc08b0a0772dcb49c0a2cc406e 02c4c094e825ca5343f5278f024f9ec2010298ce 6c8e7944580e21fe25821fd97a14dee32539407d22db0a6a3c64d39d4c72ae30
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/5185.17a9876281b49b94.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297284
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5185.17a9876281b49b94.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:59 GMT
etag: W/"1cc2b2fc08b0a0772dcb49c0a2cc406e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/5185.17a9876281b49b94.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::2t46b-1713419159221-d642a3b13dea
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/swap-41670e1f0a721056.js | 76.76.21.9 | 200 OK | 134 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/swap-41670e1f0a721056.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Size134 kB (133884 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/pages/swap-41670e1f0a721056.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="swap-41670e1f0a721056.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"12e77d494bf3fd054f0e85d6cab81715"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/pages/swap-41670e1f0a721056.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::nqd2w-1713419160495-cd39982e874b
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x0E1893BEEb4d0913d26B9614B18Aea29c56d94b9 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x0E1893BEEb4d0913d26B9614B18Aea29c56d94b9 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashd08abbb3215de3e5c99e0c93bb8ddf1e e48908e5276b7a7ac570b0db22ba931d5f3e2d10 17be0eaeb87ab205c4238fba2c34eb5f8e395b6431af98b1fbc8978f13a6f9de
GET /v3/56/liquidity/0x0E1893BEEb4d0913d26B9614B18Aea29c56d94b9 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JNoRWx5%2F%2FtXzaQ8BOtLjqqcX9Qx2OhnJdN6VEsLdYnWlHXmAyq7pN7KcvlSRJ4hXC6UVOam%2BA%2BGST5xHfRj4vvCSegDRl9ZZLuuM3N3aBwYwjTkWeAj9zi7yLlRVrpGgFBZfKtHlK4%2FgN8Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21fb0e5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xeF2CF65fF6dce6f2B15F18999673676d5A07F63f | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xeF2CF65fF6dce6f2B15F18999673676d5A07F63f IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash5afb023414061b17bad2b162abecbce4 41d086676aa6e52982d9b996324cf095a176def7 9a8b9c4d3af14b6e591b26654301f33d6e265af95d914220b3426a88691bf001
GET /v3/56/liquidity/0xeF2CF65fF6dce6f2B15F18999673676d5A07F63f HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IVv%2BVivHV%2BDdhxIW%2Fh68Vna2GKMg%2BTgiA3HTQj6ft9%2FSAt5p4uuwZ9I6RIcsa1fCt5XiiYo5mNoZ%2FRIp63dKQnIOp6QHCkE87xWct5T76mbLYdEoafxdl0pRwz%2BZiZpmmnnuMGAGvLy4Do4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21ead35685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/binance.png | 172.67.75.76 | 200 OK | 1.6 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/wallets/binance.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hash355630229f4891e998c71d378b7a4e16 0a2c961f6fefb268075675fa3cab150c100157e9 820f2729d566b9d78993e53ec403b1b84def82ea1a181adce24ed558f7d58c5e
GET /web/wallets/binance.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:57 GMT
content-type: image/png
content-length: 1588
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "5c6735d127234cb2d01c5a96a1eb48c8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F%2BMgj2X%2B6lBtW47HaUmSqrqYjSiFu5m8M%2BA1pdbAJHcgLy9OZjNZN9OZjWinLGHLAg0KyQNNHOFlkMVQ%2FPoA%2FGBhdJEzeiQ5EgUTFyvEYma0uAYPt%2B3MW8ILdNCH%2FAt%2F3JiZqHF3mQ7%2B%2BL7bOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 7021
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0739a31c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/trade/BTC@2x.webp | 76.76.21.9 | 200 OK | 17 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/trade/BTC@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashf4062bb3e67c072529f5d5ec9498db76 1d3a26b7941e35d10715956372c2d3d9901bb8fb 607f2538119202e00102a5e5722d0abefc899436ff6f8041292d6969c9c1e591
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/trade/BTC@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297283
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="BTC@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "f4062bb3e67c072529f5d5ec9498db76"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/trade/BTC@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jbghs-1713419157641-abf4021db254
content-length: 17026
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x71f51e5070C7070B2d079c087BfA814642Fcef58 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x71f51e5070C7070B2d079c087BfA814642Fcef58 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hasha1856dff5f152175e2aa689bbafa90a5 c2bbc3aeb7f3f30982fbc640061d4dfc48671c31 7eaf4f2b6b28662df12bf7a94a1d65605495b0ad6b4372d234b396626bf90f8d
GET /v3/56/liquidity/0x71f51e5070C7070B2d079c087BfA814642Fcef58 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q82XM8uJif9TF4a1y62jwklemLB1OqaQkxRpxWW2S%2FOI%2Fk%2FNpMWqHgtECZP7Xx4QT2h0XTJursXbGVxn%2BGbGucD5opvWFF0oc38YRSU2oHSQj0etnBfOyFR7%2BPVR4TJo7rTwGQeA%2BiV4IY4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21fb125685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x3Cb75d72401d2DBA4349C696824F1397277d6a11 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x3Cb75d72401d2DBA4349C696824F1397277d6a11 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashde9f2e5d03b58227b96c0d7925e69eee 0b7ee3ac1921f41f4f51e4684070bc67ea3921a8 cf54c8eb7ee0d81915b2c2d9f796d4f813d7c8dab1a56f7edb1a55c342edf8ff
GET /v3/56/liquidity/0x3Cb75d72401d2DBA4349C696824F1397277d6a11 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZP%2FRQMT6sAfS6qdxrVFvT9nwP8yivX1v1GbTcx4YuzGO8KVlL05aCVn8w2r2Mj3IfbZ1mIvC4C9utQqz1Qft1MUl5cy6qdFs60iZOCvkmbpZvMS%2BzqWmb9snDRkz9hi1vvtkvL04Hvm5LtQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eae65685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x539e0EBfffd39e54A0f7E5F8FEc40ade7933A664 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x539e0EBfffd39e54A0f7E5F8FEc40ade7933A664 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash8e2c238fd05a8da4ced32079870544ea e98511fa2bf3ca539395f61f6a7a86b71e3df4c4 4644ad5fb318ce5d75477ca6e336f6f901d033cbe1982df99804ae41ba7b912c
GET /v3/56/liquidity/0x539e0EBfffd39e54A0f7E5F8FEc40ade7933A664 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cekfe27YE2%2BluTcfpsptFbg15AVegOQsIpPIJxps9zZ5Yyny7gVzBl5w5UvruAmfOQSgjV7kCZJMZ9%2BC5wzPzATs%2BaSyWb7ABG69tLntUsKGyAldFYo8%2F1IqrQFzy%2Fj2Jjm4fVuE2uLMeX4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eb095685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/204b2240-5ce4-4996-6ec4-f06a22726900?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 9.3 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/204b2240-5ce4-4996-6ec4-f06a22726900?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp Hashf8d4c3c7b0a8ffc1da0f3fddeb9df5f0 e9656a24390cdddef52d3190e7059dedbef85d16 32efe5b98531569d4ee92ffd791b6c3ad191a5178b224377fc427918ae4e2caf
GET /w3m/v1/getWalletImage/204b2240-5ce4-4996-6ec4-f06a22726900?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:01 GMT
content-type: image/webp
content-length: 9300
cf-ray: 87625a1f2e02712b-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 41888
cache-control: public, max-age=31536000
etag: "cfHSK7haDWQDA9lEEikk-9BEcPUG7FeV1c8ZwDJoU7DQ"
expires: Fri, 18 Apr 2025 05:46:01 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=24+0 c=4+22 v=2024.3.2 l=9300
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=C4l1lhHsU3uDCp4f8Ni1vy.gwDTSAyLRo1fuHOL3jcI-1713419161-1.0.1.1-ic29Z5mIn58P55TNCDwTH.ecsIqea.4rIKI.ijz52Nsk8kiBAf4Ee_77JnPDhcOxjfiJTPrpaW_BMnQK3ldclg; path=/; expires=Thu, 18-Apr-24 06:16:01 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xCf57DaADfBE05A04440C502967cE5209F64747eB | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xCf57DaADfBE05A04440C502967cE5209F64747eB IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash86cbcd219a959f9e87a560feab7e3d12 57091e8d1026a62b80f4a41e2c0e134592556778 b7194fe1e1a30410e39d11b5eb511cd3259b4f44a35974196cc3f4f4e17ecfe5
GET /v3/56/liquidity/0xCf57DaADfBE05A04440C502967cE5209F64747eB HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z1T45OzVTkENAOg7z8sUw7cfSjgePIo9S9ZtmRcDj4UBVIH1HF9BWzA2B7tbp7Wh4zstGN8Ba6AjNnZO91cekcumv28fazVpr5FYRR4xCk8Jvz2Tcr%2BSSC8qunO6lwWh%2FcFU95hB3YEY5e0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eb005685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2167-b429cd128f630a62.js | 76.76.21.9 | 200 OK | 73 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2167-b429cd128f630a62.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash1b83c7564c807341530558d52cc9b46d 630d1cce3e33618109e56c6f9f042b9db581465a 6ce9773418418173a36a711c20d3204410a71f66fb81713c4fef2fdb34cfc02b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/2167-b429cd128f630a62.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="2167-b429cd128f630a62.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:55 GMT
etag: W/"1b83c7564c807341530558d52cc9b46d"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/2167-b429cd128f630a62.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::2t46b-1713419155363-725f21949d96
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x92b7807bF19b7DDdf89b706143896d05228f3121 | 104.26.15.21 | 200 OK | 214 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x92b7807bF19b7DDdf89b706143896d05228f3121 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashfaab93d32477d88c5386a8da8ab7afcb 77ee99273d4fd08ff2bee8771b7f0b35ab0cbbe2 54cc8129a5da768ae461a8bf6f22bf87d93b55c7c69601e9d19362cdc284d28c
GET /v3/56/liquidity/0x92b7807bF19b7DDdf89b706143896d05228f3121 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vxtpdPFnxviRFCntqSv12xLbOCihc5%2FssVIWxzoVnxQlZlHlNwoikSkDp2d666Ys%2B%2Fll0uC8I8HHnyqx7gK3bVAYLuXauw4nn55VajIzo8uxv6NIQlRRdMw6tqKnwEO1OUaxfvWa5lA3TBE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eb0a5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=undefined | 142.250.74.72 | 404 Not Found | 0 B |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=undefined IP142.250.74.72:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gtm.js?id=undefined HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
date: Thu, 18 Apr 2024 05:45:57 GMT
content-type: text/html; charset=UTF-8
server: Google Tag Manager
content-length: 1580
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xd881D9d0e0767719701305c614903F555d589586 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xd881D9d0e0767719701305c614903F555d589586 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashde9f2e5d03b58227b96c0d7925e69eee 0b7ee3ac1921f41f4f51e4684070bc67ea3921a8 cf54c8eb7ee0d81915b2c2d9f796d4f813d7c8dab1a56f7edb1a55c342edf8ff
GET /v3/56/liquidity/0xd881D9d0e0767719701305c614903F555d589586 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x3Ny2lDnDpYwe%2BnlxMAFjXqEUL8VreQFMXcsHS01q80%2FGtKgVntQuaQk%2FdaQS2n3U8zhHxSMkRZ%2FwxETTjHrrbM9bifG7oeakSu6Gp0b7IA6gVebwtmxlH2zvyOBnRRRXB8y2MGyo%2FH%2Bw6o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21ead95685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x63ca58e7c6bF06B06cBbEc2a83bf6AA8f8f9f77B | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x63ca58e7c6bF06B06cBbEc2a83bf6AA8f8f9f77B IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashfbb3938481131d9b1bf38548098f9732 1cab91ab74efcd5d39b235ac8dbe5b32c83e3d92 4bb14e0d8fc48ff5c7b9d318123c2281d366a8871b13e028781638d3631644fe
GET /v3/56/liquidity/0x63ca58e7c6bF06B06cBbEc2a83bf6AA8f8f9f77B HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FDxz5wlmrWgN%2Ff6EEVgQrfU6zsyzRjMI9FsnO3HBYK8Zv3T2hpsPzQBZQm0zTgS0GOSoz6fRF6tu9SnKUm3NUg0eXDYZ6O7hy7Oh2p0QNS9jrO2BpaBwSPftIAp7F6KS3KeajVlRbH12%2Bbk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eaf05685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/7@2x.webp | 76.76.21.9 | 200 OK | 27 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/7@2x.webp IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashfde53433e327e1ecfdb6acf703f2860c cd841af68e033e4bdddbdf78c2c7e3707f9835ff dcec26d1f3c498127e1e0608e496170e1f60ba5a6c73efdc85b77db3232d052a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /images/home/lottery-balls/7@2x.webp HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297284
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="7@2x.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 05:45:57 GMT
etag: "fde53433e327e1ecfdb6acf703f2860c"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/lottery-balls/7@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qs5mn-1713419157687-c6569e872c49
content-length: 27020
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/6074-62c667699746c3fe.js | 76.76.21.9 | 200 OK | 36 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/6074-62c667699746c3fe.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/6074-62c667699746c3fe.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="6074-62c667699746c3fe.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"5a05f608d319cc85fa2f074edbefc10e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/6074-62c667699746c3fe.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419160488-8a0e11444e68
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1383-da8ddc1e8fa88ba8.js | 76.76.21.9 | 200 OK | 41 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1383-da8ddc1e8fa88ba8.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (8427) Hash81775f0243f7ae5c7c890580871eede4 06161a1b0242d78deb1e47eff177e7762d446650 613bef79874b81063b390dd2f2d37a432702a1742a5bdd43fa58ca4d389b960a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/1383-da8ddc1e8fa88ba8.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1383-da8ddc1e8fa88ba8.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"81775f0243f7ae5c7c890580871eede4"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1383-da8ddc1e8fa88ba8.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qs5mn-1713419160491-fb4b8b36f73e
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/300-c9713fc247c5b7c1.js | 76.76.21.9 | 200 OK | 27 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/300-c9713fc247c5b7c1.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (10117) Hashd7d1746b5230c0d217dfb0603717ca1e 3256feb6cdfea6590a607c0a73a13bc2e57f34a1 034c485b9bf68f5dd323e0bbb5b2504152a784601b60b83740d8592574bf2afb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/300-c9713fc247c5b7c1.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="300-c9713fc247c5b7c1.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"d7d1746b5230c0d217dfb0603717ca1e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/300-c9713fc247c5b7c1.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419160494-cd3a8f2d4499
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/css/d17697a543226a3f.css | 76.76.21.9 | 200 OK | 12 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/css/d17697a543226a3f.css IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (12031) Hashb80619f45b0a559fb9753cf421927c8c 040f73d81edb8cc00315c757d0de8a8e5ce7abb9 5ff0b2aaace336e34deded8e9b47d6d6db5fe5ecb1937fd2a64c9ae5c707643f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/css/d17697a543226a3f.css HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297286
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="d17697a543226a3f.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Thu, 18 Apr 2024 05:45:58 GMT
etag: W/"b80619f45b0a559fb9753cf421927c8c"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/css/d17697a543226a3f.css
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::h2f49-1713419158810-bd27ee1738a2
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8210-89d90a19d25b6c81.js | 76.76.21.9 | 200 OK | 11 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8210-89d90a19d25b6c81.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (3414) Hash63202e7278b25673c68ac99315b2fddc b6c31343fb1cb1a2e7e95650b4c68f1d4e909844 2196d033974c7aaaa03e97374c5240b97636514fa53bfd2c2b9ec42956f57635
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/8210-89d90a19d25b6c81.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8210-89d90a19d25b6c81.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"63202e7278b25673c68ac99315b2fddc"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8210-89d90a19d25b6c81.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419160487-3e2053103c61
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1732.580bc0b12da6139f.js | 76.76.21.9 | 200 OK | 189 B |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1732.580bc0b12da6139f.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashfd09ac22cb7386ceb9e1b8b399b15faa 1d8e92e7b6f424aed8bdc8df5fbe31dad3fbf091 a7d1082561fac45f18a5a72224aeca09ea3d6ddec479f42ea60621dc6c94b685
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/1732.580bc0b12da6139f.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1732.580bc0b12da6139f.js"
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:56 GMT
etag: "193e391c62b77e9bf00ad62c66275408"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1732.580bc0b12da6139f.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::p58sb-1713419156896-73f3596dd1f0
content-length: 189
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/pancakeswap-bnb-mm.json | 104.26.2.169 | 200 OK | 2.6 kB |
URL GET HTTP/2tokens.pancakeswap.finance/pancakeswap-bnb-mm.json IP104.26.2.169:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
File typeASCII text, with very long lines (2826), with no line terminators Hash2fbf6d360c108b0878de1ad59870325f 4b4d03ad4727cd19ff23072c541bfc1b22bdd122 d4c4ca6a56be0f07e367bd39d0446bf879bf428f8e24cfee17ab54cb45c50410
GET /pancakeswap-bnb-mm.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:00 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"faf77b0d59ffb744af6dfc91e89864da"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ZUzI4Db64NsxS6gwACwY9DnOBq9rm2zAX7taSgY6CaCKjLD0yOxTsO3Uu4UCbWJmUpn8qzikBzyyFlzhJ60YVqm09UXaeWbo%2F7sVZ6kxLHDpzVsyyKc23klOH3MKEmV9OkXpcNqYLJcJBPf8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87625a15b8ccb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getDesktopListings?projectId=e542ff314e26ff34de2d4fba98db70bb&page=1&entries=9&version=2 | 104.18.27.46 | 200 OK | 6.9 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getDesktopListings?projectId=e542ff314e26ff34de2d4fba98db70bb&page=1&entries=9&version=2 IP104.18.27.46:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (7634), with no line terminators Hash60b91996618dc7eb312ba928a7e1c408 2fdd2884d5dead88b86c42ec5e83c5fddae2eaac ff7ad4613fa8c85a87814fcd8c62f8c3bbbcc23aaacd956f3288d7171e4133bb
GET /w3m/v1/getDesktopListings?projectId=e542ff314e26ff34de2d4fba98db70bb&page=1&entries=9&version=2 HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:01 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=43200, s-maxage=21600
x-robots-tag: noindex
set-cookie: __cf_bm=LnfcoaTtZ7hyfkW3zyYQAHEz6zgQpqBcTRW.8W9vVMc-1713419161-1.0.1.1-7D1K8PRuNV0PDwmZ83rC2pwENZaYf7gxVboH1R1Ygoy8S9f6k7I4HejT10GKaZ.iVB.mJPI1KrWvXwYp_JpCvA; path=/; expires=Thu, 18-Apr-24 06:16:01 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a1d7bdfb518-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2700-06b0e8b57cfd1ce5.js | 76.76.21.9 | 200 OK | 27 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2700-06b0e8b57cfd1ce5.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (20593) Hashd1bf74db4b6b5fe366a59a492268a21b a930bbcff51d67dac77fc4662400bd98ddda7567 e9515cd837fa9c78d84de984bf3ffba200bc34cffe23d6fd9a6516c128e1f755
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/2700-06b0e8b57cfd1ce5.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="2700-06b0e8b57cfd1ce5.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:55 GMT
etag: W/"d1bf74db4b6b5fe366a59a492268a21b"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/2700-06b0e8b57cfd1ce5.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::nqd2w-1713419155365-99ca53cf78d7
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8394-2b149c4bb6108264.js | 76.76.21.9 | 200 OK | 44 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8394-2b149c4bb6108264.js IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (44056) Hashca02cb21718db3ab448c7d8204be089e 1e3060cccd6eb155b6f35cdc6d1c33bf7dca49ba 530475dd121227c652eb45b2241e84f8c01b5c5d8937762d304e7b71b43b442d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/chunks/8394-2b149c4bb6108264.js HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297283
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8394-2b149c4bb6108264.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 05:45:56 GMT
etag: W/"ca02cb21718db3ab448c7d8204be089e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8394-2b149c4bb6108264.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::p58sb-1713419156901-5e57317c9e2d
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/c39b3a16-1a38-4588-f089-cb7aeb584700?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 5.1 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/c39b3a16-1a38-4588-f089-cb7aeb584700?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp Hash7cd3960a5002ec8ffd672267dbd184cf 9c353d573e5f9cb57df4068ced24b2455b6f3ddd 1562ed280e5486999bfa41e9eddf46996b078b54e14fff9748b427c793bc6969
GET /w3m/v1/getWalletImage/c39b3a16-1a38-4588-f089-cb7aeb584700?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:01 GMT
content-type: image/webp
content-length: 5054
cf-ray: 87625a1f4e2b712b-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 41888
cache-control: public, max-age=31536000
etag: "cfzxenqWecI6yJVG_C8-69sArsUG7FeV1c8ZwDJoU7DQ"
expires: Fri, 18 Apr 2025 05:46:01 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=22+0 c=0+12 v=2024.3.2 l=5054
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=dglTBQH2wzTbTWqi8t6KmHt0YWTb6Nmse85PQmae3gU-1713419161-1.0.1.1-u8CL5NN7trtKeCesty5bUL9SjKzoT9dhvNBkeSOQF_9lQQl0.r4QlIIM8ACu98aPiM8bGbNXXfg1O13hR8lPFQ; path=/; expires=Thu, 18-Apr-24 06:16:01 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x6bbc40579ad1BBD243895cA0ACB086BB6300d636 | 104.26.15.21 | 200 OK | 196 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x6bbc40579ad1BBD243895cA0ACB086BB6300d636 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash854b68f539eb2ea22706616fdd166f0a 48006630ed0ec8232852e74db01cf1f3e85f54e1 7f218d7524d83fc833c0c287fbbdf7adcb184bc476b31d694f7da14edcbeb61f
GET /v3/56/liquidity/0x6bbc40579ad1BBD243895cA0ACB086BB6300d636 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=krMjjgVA1XtPtRLZXfOsqxq8AApZiWznUHsR4InVud79zvUwQNrH6qrocO2MgNdMdDHCJ37vsW8RrB6hFyjgSarRBwAPz%2FXAuTJ4YrvWTn6r4xpDQXSwc0hoIpWk26nPd9AalIId4RT9KAM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21ead15685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x729c9a7E1f642Eab4019dfb0d467f4a9838E7cbD | 104.26.15.21 | 200 OK | 200 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x729c9a7E1f642Eab4019dfb0d467f4a9838E7cbD IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash6f02884af70727e258b41450a061d33e 63b69da12874faf6ed333c7943bd3e0d6e195a2a fc17ab2c48277a39fb9df293a977660e058028e080ab42e8bc7ae33d80c28eaf
GET /v3/56/liquidity/0x729c9a7E1f642Eab4019dfb0d467f4a9838E7cbD HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l1Jvp%2FSuSQnqYJLU2HtdzbdZFdrCvtJORSE%2B8AEZ%2F18kt6%2BgsDZu4TXpDBId4DREdbKvA8NmA%2Bnc5P3oBGbwvI%2B4K%2BVlGes%2FI173naRhV%2F3WbUPBv6JegrlHavnaKn7QIQcajSfTVxKUgns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eae85685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/trust.png | 172.67.75.76 | 200 OK | 2.2 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/wallets/trust.png IP172.67.75.76:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hasha5c44f3a69730488cf69035aa91acdfa 74c6ccff8f5c3227d0216f63fd9a9000205ae011 c0a5155f81490256cb607244e502bbd86998e6e3c5c826cfd3fa86fb2993c739
GET /web/wallets/trust.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:57 GMT
content-type: image/png
content-length: 2177
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "62f570988d31ae1821180d7c1b61ef8f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uHwtXZTSju3V7xRsxoCsRJR0qpmAaRoVNAIysTW9H1bA%2F3HfkLdFhMLAPmXutf9pptKWRP3fOyQYpPDVYYfgpaHDOq4EA8vGHccqcV6RVXM0h3GuMvkhDUDf%2Fvr3FuL58mjT7TE3lUz2Y601XQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5838
accept-ranges: bytes
server: cloudflare
cf-ray: 87625a0739a41c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/css/8ab97594b6c016e8.css | 76.76.21.9 | 200 OK | 1.5 kB |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/static/css/8ab97594b6c016e8.css IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (1460), with no line terminators Hash19ebf48c6941de89e944b419de9f69c0 1b5ae64edc5c8816bfb710884a2a5cca01bb709b 99821de931eb52e74868ab47007e1283af568141c0e9b67fb902b3c32048d951
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/static/css/8ab97594b6c016e8.css HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713419159.1.1.1713419159.60.0.0; _ga=GA1.1.1178579845.1713419159
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 297285
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8ab97594b6c016e8.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Thu, 18 Apr 2024 05:46:00 GMT
etag: W/"2afb49d6892e65c4154a498a99f55985"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/css/8ab97594b6c016e8.css
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n8vjm-1713419160496-57786c0c8386
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/a7f416de-aa03-4c5e-3280-ab49269aef00?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 2.1 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/a7f416de-aa03-4c5e-3280-ab49269aef00?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image Hash2052ea08b332c87388dc42097624cb20 8b82e1e2dd5a482ae90433c763b268b99f6cf093 11a824e4c63932ec7c2684c8c9554c84461efb5d731d15387d77bb5c3e78f9d5
GET /w3m/v1/getWalletImage/a7f416de-aa03-4c5e-3280-ab49269aef00?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:01 GMT
content-type: image/webp
content-length: 2090
cf-ray: 87625a1f2e0e712b-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 26036
cache-control: public, max-age=31536000
etag: "cfeV6YXTHd_vyfarpvxqg62GCGUG7FeV1c8ZwDJoU7DQ"
expires: Fri, 18 Apr 2025 05:46:01 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=271+0 c=0+23 v=2024.3.2 l=2090
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=YH4RM35ZzeYxnxT6ENN3TazMvGtg9KPgPgzJIkkm1cE-1713419161-1.0.1.1-BsjpjS9gw_AAUGI8vHSE4MimHnN_OeFXo_SYb13eENc.QGkx6pzSVoiD0QD13_AYdvXHu7SLVacheNPekGKXpQ; path=/; expires=Thu, 18-Apr-24 06:16:01 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/data/89G1YMf40IpLy8Bc6Vxbj/swap.json?showTradingReward=true | 76.76.21.9 | 200 OK | 3 B |
URL GET HTTP/2pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/_next/data/89G1YMf40IpLy8Bc6Vxbj/swap.json?showTradingReward=true IP76.76.21.9:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with no line terminators Hashfdf48e6b3239e0b378031fb47d5b202a b1806f381758bc595c29988c05ef5e0ef580c90a fcd393d2c13bad308661b62b34d9c3234a3ce840e22909b0a180e85f76b5d24d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /_next/data/89G1YMf40IpLy8Bc6Vxbj/swap.json?showTradingReward=true HTTP/1.1
Host: pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
purpose: prefetch
x-middleware-prefetch: 1
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
date: Thu, 18 Apr 2024 05:45:59 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /swap
x-middleware-skip: 1
x-robots-tag: noindex
x-vercel-id: arn1::h2f49-1713419159178-9e7f7eb9d356
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xEE9ECc8032849112778a8372ef3355888ea85C55 | 104.26.15.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xEE9ECc8032849112778a8372ef3355888ea85C55 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash5631ed768d3e1b7db7d0b8ba2f8656e8 04e115e77a3be48a49762c0fdff717c0410b0798 4c76f325483f458016529dd2f588d7cfaba72840b23c455add15bbc3478a47ff
GET /v3/56/liquidity/0xEE9ECc8032849112778a8372ef3355888ea85C55 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b1Lmp6WX50cnV6SFPKNDgB2fpCFkK5lBfQv7A1CUUOpllXUmZVm2%2B9EyxM7wo2lffDWVp4fMCCzzHWsUbXBpbF6T68VxCS0HXhsEVa9J7lQ0xbTrvvTmvJMHKaA8knaSo4pu3cJEXxpPILA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21ead75685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x46Cf1cF8c69595804ba91dFdd8d6b960c9B0a7C4 | 104.26.15.21 | 200 OK | 202 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x46Cf1cF8c69595804ba91dFdd8d6b960c9B0a7C4 IP104.26.15.21:443
Requested byhttps://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash0063ab6d8ba77ef24b86bc9f40f88b78 dc1d05b46fb89b4c201de4082b3b8ff3ff61c61c 3d61d43b501a0f436f2c2702b487f02cfe265ad033429ca5430e989048cd0c44
GET /v3/56/liquidity/0x46Cf1cF8c69595804ba91dFdd8d6b960c9B0a7C4 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-dp8sptwgl-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:46:02 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1n5VFYl146PvRho3USHUAUwYLkGtAKw3eq2d02mlU0VyouHODiEeu%2Ft%2BX96ILqDDOQYQpn1aFZ7ukYF5drikEVuT0tmh%2FmBn8Gz1LMbP4VHC80j8cZdeI6ZwWPj3Hygzo83cAsXX2Ue9uKg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625a21eb035685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
0.0.0.0