| news.ddr8drop.shop/login/form/form.js?v=662a9234ae241 |  172.67.179.154 | 522 No Reason Phrase | 7.1 kB |
URL GET HTTP/3news.ddr8drop.shop/login/form/form.js?v=662a9234ae241 IP172.67.179.154:443
Requested byhttps://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/? CertificateIssuerGoogle Trust Services LLC Subjectddr8drop.shop Fingerprint89:27:33:23:C9:2E:ED:8C:AD:3D:6C:C2:0B:51:99:6A:18:3A:A8:F3 ValidityWed, 17 Apr 2024 18:14:49 GMT - Tue, 16 Jul 2024 18:14:48 GMT
File typeHTML document, ASCII text, with very long lines (460) Hash22e92da84e56f3d080506d0acb2dfec3 cc05cb8a53f02bd7af7a38ebab4be26dbfff8ff1 3f670f0a2cde2d43c388bd944bb07cbc9353348f35a0c7f833e193c9fa76ff1d
GET /login/form/form.js?v=662a9234ae241 HTTP/1.1
Host: news.ddr8drop.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/?
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 522 No Reason Phrase
date: Thu, 25 Apr 2024 17:26:29 GMT
content-type: text/html; charset=UTF-8
content-length: 7096
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1TEknIKX3KKPXO%2BPMRHLAunHJ4xF%2BIFmm9vcYTlVyWtx1XmpKGlePOe9kXerSDD9bJrEYUu3CH8zz8apJLi9lJsHx%2Bn%2B7DpIHJl5%2BPq%2BRjAX%2BxNBIqSOL2V2q2D6XvcsgbaUdLQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 87a009715e98569f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/? | 172.67.179.154 | 200 OK | 235 kB |
URL User Request GET HTTP/2news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/? IP172.67.179.154:443
CertificateIssuerGoogle Trust Services LLC Subjectddr8drop.shop Fingerprint89:27:33:23:C9:2E:ED:8C:AD:3D:6C:C2:0B:51:99:6A:18:3A:A8:F3 ValidityWed, 17 Apr 2024 18:14:49 GMT - Tue, 16 Jul 2024 18:14:48 GMT
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (57970) Size235 kB (235260 bytes) Hashedaa6891e00f4936fbd2803131a4c4ec fb6606f69cf88de249562d3c9fba97136d1585b3 6669e0656adb37a71aed1afa4a17d07488769d0421b33d10fcefc4f2a045d90b
GET /view/cebed710b323f068f6c3c545787b7cbe/public/? HTTP/1.1
Host: news.ddr8drop.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 17:26:12 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3.33
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MG9bwEnLcfAi08igbaHS658VRwbllCZckoWDvDElU83Wa9Ohz4aNaIJ5zVOqRCeBMnfvp7ZS1%2BRwhtleAhVaWTREBh%2BPhT8w5BMJer21L9T4oWeI7%2BVeZsihHn1YASpqgvXO4mM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a00968ec845696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| news.ddr8drop.shop/login/form/newloader.gif | 172.67.179.154 | 200 OK | 557 kB |
URL GET HTTP/3news.ddr8drop.shop/login/form/newloader.gif IP172.67.179.154:443
Requested byhttps://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/? CertificateIssuerGoogle Trust Services LLC Subjectddr8drop.shop Fingerprint89:27:33:23:C9:2E:ED:8C:AD:3D:6C:C2:0B:51:99:6A:18:3A:A8:F3 ValidityWed, 17 Apr 2024 18:14:49 GMT - Tue, 16 Jul 2024 18:14:48 GMT
File typeGIF image data, version 89a, 480 x 480 Size557 kB (557122 bytes) Hashef8d4e6b20b0cf0d68713fb2f6069042 d62bb4b1a169c88879de3bd2f5c4292b6259a952 32bfc673211421c1a5a33acc98291840183582f11d15490954b42a81d79d4630
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Facebook |
GET /login/form/newloader.gif HTTP/1.1
Host: news.ddr8drop.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/?
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 17:26:29 GMT
content-type: image/gif
content-length: 557122
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 04:31:55 GMT
last-modified: Sat, 15 Jul 2023 08:40:24 GMT
cf-cache-status: HIT
age: 46474
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L9ak3hCGbtz%2BDfQ547JnBoNRdCvoDcnpwjXFatPkNrD5BYKdUiMW6%2BFf6Fr3on5FGzIsYHzmyg%2FxvAv9ayFrZaJ5XuLOLjTxB4dMEVC9Gsu6lzy7QeJItM5zrcmI4T7l0lYwz94%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a009d35bb8569f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| news.ddr8drop.shop/bower_components/jquery/dist/jquery.min.js | 172.67.179.154 | 200 OK | 87 kB |
URL GET HTTP/3news.ddr8drop.shop/bower_components/jquery/dist/jquery.min.js IP172.67.179.154:443
Requested byhttps://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/? CertificateIssuerGoogle Trust Services LLC Subjectddr8drop.shop Fingerprint89:27:33:23:C9:2E:ED:8C:AD:3D:6C:C2:0B:51:99:6A:18:3A:A8:F3 ValidityWed, 17 Apr 2024 18:14:49 GMT - Tue, 16 Jul 2024 18:14:48 GMT
File typeJavaScript source, ASCII text, with very long lines (32058) Hashc9f5aeeca3ad37bf2aa006139b935f0a 1055018c28ab41087ef9ccefe411606893dabea2 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Facebook |
GET /bower_components/jquery/dist/jquery.min.js HTTP/1.1
Host: news.ddr8drop.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/?
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 17:26:13 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 04:31:54 GMT
last-modified: Sat, 15 Jul 2023 08:40:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 46459
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iYNj%2BYG1Zeo2nAiconTEwSXm76RI4vQH2xmK2cFZQDnT5JNlb4R2da3u%2FrFqZ42YIde0Owq%2BabP4ElKCa15atBnhRpn%2BhHuJQw7MZ11jJnLs9gprMUkpp3HmnbiCMsRlWJO%2BJzE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a0096b4fd5569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| news.ddr8drop.shop/bower_components/ua-parser-js/dist/ua-parser.min.js | 172.67.179.154 | 200 OK | 17 kB |
URL GET HTTP/3news.ddr8drop.shop/bower_components/ua-parser-js/dist/ua-parser.min.js IP172.67.179.154:443
Requested byhttps://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/? CertificateIssuerGoogle Trust Services LLC Subjectddr8drop.shop Fingerprint89:27:33:23:C9:2E:ED:8C:AD:3D:6C:C2:0B:51:99:6A:18:3A:A8:F3 ValidityWed, 17 Apr 2024 18:14:49 GMT - Tue, 16 Jul 2024 18:14:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bower_components/ua-parser-js/dist/ua-parser.min.js HTTP/1.1
Host: news.ddr8drop.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/?
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 17:26:13 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 04:31:54 GMT
last-modified: Sat, 15 Jul 2023 08:40:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 46459
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dRhev2NmlElQ0Oz3i%2FE%2FkGt2Kv1eLZkJlEcT9Xaz3VCnSwQQGOxlvndi0UCFcEi6EdXo9BblR37O1mPpqp4x%2BmouUoBJ%2ByoW1tuRXY%2BWfDnhpbUZOJpaNf34oF6Hnq69xJ%2FRsHk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a0096b4fd6569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| news.ddr8drop.shop/bower_components/font-awesome/css/font-awesome.min.css | 172.67.179.154 | 200 OK | 31 kB |
URL GET HTTP/3news.ddr8drop.shop/bower_components/font-awesome/css/font-awesome.min.css IP172.67.179.154:443
Requested byhttps://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/? CertificateIssuerGoogle Trust Services LLC Subjectddr8drop.shop Fingerprint89:27:33:23:C9:2E:ED:8C:AD:3D:6C:C2:0B:51:99:6A:18:3A:A8:F3 ValidityWed, 17 Apr 2024 18:14:49 GMT - Tue, 16 Jul 2024 18:14:48 GMT
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Facebook |
GET /bower_components/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: news.ddr8drop.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/?
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 17:26:13 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 04:31:54 GMT
last-modified: Sat, 15 Jul 2023 08:40:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 46459
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0hRrQQeuipm2R6DiNnl6In5yL2am7sNkAn57XwS1crH7ixoNfMjnWpA0hmfFU3oNvfvfaZkdH%2BtwwVIetqZkizSOUCY30EqueA5LKzTaz0lV2c843XrYlr5j9DHtUpigjyIcmu8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a0096b4fd7569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| news.ddr8drop.shop/core/form/core_form.css | 172.67.179.154 | 200 OK | 2.7 kB |
URL GET HTTP/3news.ddr8drop.shop/core/form/core_form.css IP172.67.179.154:443
Requested byhttps://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/? CertificateIssuerGoogle Trust Services LLC Subjectddr8drop.shop Fingerprint89:27:33:23:C9:2E:ED:8C:AD:3D:6C:C2:0B:51:99:6A:18:3A:A8:F3 ValidityWed, 17 Apr 2024 18:14:49 GMT - Tue, 16 Jul 2024 18:14:48 GMT
File typeASCII text, with very long lines (2859), with no line terminators Hash395aa28d6d2623a6313a5bcaaa88a6c0 81be4728c9cb426d8edaa75d4cc64aa15b48dee0 3a6006d052f07c3c1cb20e63b906e851b3848a34f87cf56580758fe7501d7630
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Facebook |
GET /core/form/core_form.css HTTP/1.1
Host: news.ddr8drop.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/?
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 17:26:13 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 04:31:54 GMT
last-modified: Sat, 25 Nov 2023 12:54:16 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 46459
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e8pFfpOEx%2FDqtvCSyitLTjmTZP%2BMcSbEiTeXlNECUGe%2FS4ZyVECNhDhVAgYSX0Hx9LUvL1Bsj5o%2FPPedL5es%2FpkYk7HmGDYEL9Vq5XX4b6IOClrkgcXqQMXvEX6%2Fy9iu%2BnNIr2U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a0096b4fe0569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| news.ddr8drop.shop/core/form/core_form.js | 172.67.179.154 | 200 OK | 17 kB |
URL GET HTTP/3news.ddr8drop.shop/core/form/core_form.js IP172.67.179.154:443
Requested byhttps://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/? CertificateIssuerGoogle Trust Services LLC Subjectddr8drop.shop Fingerprint89:27:33:23:C9:2E:ED:8C:AD:3D:6C:C2:0B:51:99:6A:18:3A:A8:F3 ValidityWed, 17 Apr 2024 18:14:49 GMT - Tue, 16 Jul 2024 18:14:48 GMT
File typeJavaScript source, ASCII text Hasha17c7e17b71ea10cf76bf5bbb8fb6f57 08ebb851c9c37f53a2b8fedc94adc9d1cacb1cb8 871d7d34566ed4c3206be32e299552d04a697a82a36829cc71ba258ce44e4ca1
GET /core/form/core_form.js HTTP/1.1
Host: news.ddr8drop.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/?
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 17:26:13 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 04:31:54 GMT
last-modified: Thu, 30 Nov 2023 18:01:42 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 46459
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ezPNcHCFgHNk%2B0KJfCNv4YRJnmw2M9eWbHTtavQ2zcqEojV1ydTbs13B%2FO5JcgRyaqwFZ1O1nFg8gq6na1YX%2FX12O0QQ0vmpKHx4dsnyzRp%2FFWIuhAZwNUELUmCvFKDYKDxSlqM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a0096b4fd9569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| news.ddr8drop.shop/core/token/core_token.js | 172.67.179.154 | 200 OK | 14 kB |
URL GET HTTP/3news.ddr8drop.shop/core/token/core_token.js IP172.67.179.154:443
Requested byhttps://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/? CertificateIssuerGoogle Trust Services LLC Subjectddr8drop.shop Fingerprint89:27:33:23:C9:2E:ED:8C:AD:3D:6C:C2:0B:51:99:6A:18:3A:A8:F3 ValidityWed, 17 Apr 2024 18:14:49 GMT - Tue, 16 Jul 2024 18:14:48 GMT
File typeJavaScript source, ASCII text Hash94f53d530575909ce27cdd1f5dc64372 91b96e78d0aad4dfb6fa1834e7d9a60829d42eb8 3c8c63b5d734c8307e26340fabc40d2db29b8e790c857bc794f429196bc8bcf1
GET /core/token/core_token.js HTTP/1.1
Host: news.ddr8drop.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/?
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 17:26:13 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 04:31:54 GMT
last-modified: Thu, 30 Nov 2023 18:01:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 46459
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SbvifchoAl4ZwE5s4iVG%2FMzCYZV86H1f9XdGerggqBI8xG0%2F93Ep%2FwvTgYKuPYC33Rf3nwcfI63acqfRU%2B9kkzMWtmtUlTd6%2FLkmJM%2B%2BtY1AeDjxnVYWHu%2FkbXW0yRjgYv9ntHU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a0096b4fda569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| news.ddr8drop.shop/login/form/css.css | 172.67.179.154 | 200 OK | 563 B |
URL GET HTTP/3news.ddr8drop.shop/login/form/css.css IP172.67.179.154:443
Requested byhttps://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/? CertificateIssuerGoogle Trust Services LLC Subjectddr8drop.shop Fingerprint89:27:33:23:C9:2E:ED:8C:AD:3D:6C:C2:0B:51:99:6A:18:3A:A8:F3 ValidityWed, 17 Apr 2024 18:14:49 GMT - Tue, 16 Jul 2024 18:14:48 GMT
File typeASCII text, with very long lines (593), with no line terminators Hashd2fa4f2848d69806d9f0f39dcd92466b 9931bbfc6792da45a421f9b35a5f7f3284a73263 e7bd2de36778afe1a5ddccf9c9d94786eba97b0af8381f23518a6072e5b392b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Facebook |
GET /login/form/css.css HTTP/1.1
Host: news.ddr8drop.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/?
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 17:26:13 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 04:31:54 GMT
last-modified: Sat, 15 Jul 2023 08:40:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 46459
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3ko9L8aLrVOH6hS7mYFC%2Bj8EcYDo6RMZSl%2FGtIE5OWMdjfpXRX3c3TpFX9wwK0ppwasI2HApj4W9%2FJQO0e3eYr%2BzD1mO5E1Uawuct9%2F2M6jnXq7%2F31%2FaxsoyDyv1R4PG%2FYhdt8w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a0096b4fe3569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| news.ddr8drop.shop/login/token/token.js?v=662a9234ae244 | 172.67.179.154 | 522 No Reason Phrase | 7.1 kB |
URL GET HTTP/3news.ddr8drop.shop/login/token/token.js?v=662a9234ae244 IP172.67.179.154:443
Requested byhttps://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/? CertificateIssuerGoogle Trust Services LLC Subjectddr8drop.shop Fingerprint89:27:33:23:C9:2E:ED:8C:AD:3D:6C:C2:0B:51:99:6A:18:3A:A8:F3 ValidityWed, 17 Apr 2024 18:14:49 GMT - Tue, 16 Jul 2024 18:14:48 GMT
File typeHTML document, ASCII text, with very long lines (7425), with no line terminators Hashedd6c4eff00fc01675bc7d11c3fc6a02 fa671e69626d742454a2b68b7083f506a3c8d43b a590aaae74f8c2cd634ab6adc7554a3583a81de8236bff5a2321b767c69c2394
GET /login/token/token.js?v=662a9234ae244 HTTP/1.1
Host: news.ddr8drop.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news.ddr8drop.shop/view/cebed710b323f068f6c3c545787b7cbe/public/?
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 522 No Reason Phrase
date: Thu, 25 Apr 2024 17:26:29 GMT
content-type: text/html; charset=UTF-8
content-length: 7096
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mgsmJytp6TbqeznFLnU6diMGAulfXQHUzaFYOiVCr1ihSsTPCImZ0RmalkOW6MHICFi8crw3yzoezWwPzzxbJUTPC%2FtX%2FBsLAfrBfs8U7R1b%2FuxdnVyjpdigQoLfV9yHcoiQ7Fc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 87a009716e9b569f-OSL
alt-svc: h3=":443"; ma=86400
|
|