| login.globalsources.com/sso/gsol/pex/en/balat/images/BLANK.GIF |  107.154.199.39 | 200 OK | 43 B |
URL GET HTTP/2login.globalsources.com/sso/gsol/pex/en/balat/images/BLANK.GIF IP107.154.199.39:443
Requested byhttps://bafybeib7rwbs5nzqvrvlbqhw6hafipvns4in4w554av44fqw2rsux54rr4.ipfs.dweb.link/ CertificateIssuerDigiCert Inc Subject*.globalsources.com Fingerprint03:9F:9F:D4:F2:31:3E:0F:75:BC:1E:75:E5:6F:9D:0D:8D:F3:AB:A6 ValidityTue, 26 Mar 2024 00:00:00 GMT - Fri, 23 Aug 2024 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hash55fade2068e7503eae8d7ddf5eb6bd09 317496a096d6c86486a71d4521994bcd171a6bb3 e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /sso/gsol/pex/en/balat/images/BLANK.GIF HTTP/1.1
Host: login.globalsources.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeib7rwbs5nzqvrvlbqhw6hafipvns4in4w554av44fqw2rsux54rr4.ipfs.dweb.link/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 17:09:53 GMT
content-type: image/gif
content-length: 43
set-cookie: AWSALBTG=8XxNil1F2vDU+lW6VwY7mTlpkUOSdCPPJEtgojfcC8WaYqIWC8XfZ44uyIvynIfk4qkGotfsUxTjSu7ZUIVHn0Dd0f//K07TKtHax+xsM6jh1dlEaXLZRhmku2lJT5mFLhsVpuWXRl9AaNxsN2e8b5iCtHuy/qEu4yeUMBqT3y9/; Expires=Wed, 15 May 2024 17:09:53 GMT; Path=/
AWSALBTGCORS=8XxNil1F2vDU+lW6VwY7mTlpkUOSdCPPJEtgojfcC8WaYqIWC8XfZ44uyIvynIfk4qkGotfsUxTjSu7ZUIVHn0Dd0f//K07TKtHax+xsM6jh1dlEaXLZRhmku2lJT5mFLhsVpuWXRl9AaNxsN2e8b5iCtHuy/qEu4yeUMBqT3y9/; Expires=Wed, 15 May 2024 17:09:53 GMT; Path=/; SameSite=None; Secure
AWSALB=oUBMJtJlmv2LIuG1cFOo72uPeQVKI7a4OfejXIDsstH+Mn2mHpActqaKOxsgUT3uwKjZwfIxskYb1goaLPYnSZAOVQRuujnB35oCtKLxYo3sfWMCKKJhS/QeLdy2; Expires=Wed, 15 May 2024 17:09:53 GMT; Path=/
AWSALBCORS=oUBMJtJlmv2LIuG1cFOo72uPeQVKI7a4OfejXIDsstH+Mn2mHpActqaKOxsgUT3uwKjZwfIxskYb1goaLPYnSZAOVQRuujnB35oCtKLxYo3sfWMCKKJhS/QeLdy2; Expires=Wed, 15 May 2024 17:09:53 GMT; Path=/; SameSite=None; Secure
nlbi_2766148=ZBTuSPOQrSoC+IkGynxGRwAAAADuMJR1a2ivHV4x509FjruN; path=/; Domain=.globalsources.com
visid_incap_2766148=tq2He6yXSiq4XIzmykFOH+CxO2YAAAAAQUIPAAAAAAA/0KA4SSEU3iV2ITCUc1GG; expires=Wed, 07 May 2025 23:26:12 GMT; HttpOnly; path=/; Domain=.globalsources.com
incap_ses_722_2766148=XWo7YiCJ3EICWr2xOg8FCuGxO2YAAAAAlkk3JxSLSsNyZjbm9c44gg==; path=/; Domain=.globalsources.com
last-modified: Thu, 28 Apr 2022 06:28:07 GMT
accept-ranges: bytes
cache-control: no-cache
pragma: no-cache
expires: Mon, 01 Jan 1999 00:00:00 GMT
x-incap-sess-cookie-hdr: z2kAIzyfNnsCWr2xOg8FCuGxO2YAAAAA6kL3DcuNjwIoaZMtIxmvNg==
x-cdn: Imperva
content-security-policy: frame-ancestors 'self' *.globalsources.com; upgrade-insecure-requests;
content-security-policy-report-only: default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: *.globalsources.com ; form-action 'none' data: blob: ; frame-ancestors 'self' ; report-uri /csp_report
x-iinfo: 3-6081834-6081836 2NNN RT(1715188192203 50) q(0 0 0 1) r(8 8) U2
X-Firefox-Spdy: h2
|
|
| login.globalsources.com/sso/gsol/pex/en/balat/images/GSLOGO.PNG | 107.154.199.39 | 200 OK | 3.8 kB |
URL GET HTTP/2login.globalsources.com/sso/gsol/pex/en/balat/images/GSLOGO.PNG IP107.154.199.39:443
Requested byhttps://bafybeib7rwbs5nzqvrvlbqhw6hafipvns4in4w554av44fqw2rsux54rr4.ipfs.dweb.link/ CertificateIssuerDigiCert Inc Subject*.globalsources.com Fingerprint03:9F:9F:D4:F2:31:3E:0F:75:BC:1E:75:E5:6F:9D:0D:8D:F3:AB:A6 ValidityTue, 26 Mar 2024 00:00:00 GMT - Fri, 23 Aug 2024 23:59:59 GMT
File typePNG image data, 210 x 32, 8-bit colormap, non-interlaced Hasha8656a61ac922e6b5e297627ae7b078a fd0a07d76165669d22d9b8c1e930da9fb51aef22 465c8b941a45a964b3c73162a3357083c03e807f2eb45a6e0cc03658f686ece6
GET /sso/gsol/pex/en/balat/images/GSLOGO.PNG HTTP/1.1
Host: login.globalsources.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeib7rwbs5nzqvrvlbqhw6hafipvns4in4w554av44fqw2rsux54rr4.ipfs.dweb.link/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 17:09:53 GMT
content-type: image/png
content-length: 3788
set-cookie: AWSALBTG=qhIWZKtOvt3trdC20b0gTJTXcH8JEMjs3vF1yjG+knuwNvE8LobJBLmoCv0iN83JuJ1V9lpCvH2SiIgjPa9FuZjnPsKD0DanEiHbCZMFDzl/SLH5BmjcNziNeUUpD6N67UYtnFwgTZVbK4V5JyvYgyQu5+pFd/CIGWqDOxYw5ZIQ; Expires=Wed, 15 May 2024 17:09:53 GMT; Path=/
AWSALBTGCORS=qhIWZKtOvt3trdC20b0gTJTXcH8JEMjs3vF1yjG+knuwNvE8LobJBLmoCv0iN83JuJ1V9lpCvH2SiIgjPa9FuZjnPsKD0DanEiHbCZMFDzl/SLH5BmjcNziNeUUpD6N67UYtnFwgTZVbK4V5JyvYgyQu5+pFd/CIGWqDOxYw5ZIQ; Expires=Wed, 15 May 2024 17:09:53 GMT; Path=/; SameSite=None; Secure
AWSALB=LcKeVLXVQ8WnARgzDYXqx2TtKiEX4d0oEyJO+84JyxkLrzaxeQw4kqj5YACOZ1mg+SjUIHuJY6g6oEB+gZyv8jbp63uI9iiSFRtIZ1F9n0jqzSak9PW0iEl52J0Q; Expires=Wed, 15 May 2024 17:09:53 GMT; Path=/
AWSALBCORS=LcKeVLXVQ8WnARgzDYXqx2TtKiEX4d0oEyJO+84JyxkLrzaxeQw4kqj5YACOZ1mg+SjUIHuJY6g6oEB+gZyv8jbp63uI9iiSFRtIZ1F9n0jqzSak9PW0iEl52J0Q; Expires=Wed, 15 May 2024 17:09:53 GMT; Path=/; SameSite=None; Secure
nlbi_2766148=UDnfTA9Qzw/L4RmiynxGRwAAAABiKTwOB3rN2JZc5CAulLIf; path=/; Domain=.globalsources.com
visid_incap_2766148=tq2He6yXSiq4XIzmykFOH+CxO2YAAAAAQUIPAAAAAAA/0KA4SSEU3iV2ITCUc1GG; expires=Wed, 07 May 2025 23:26:12 GMT; HttpOnly; path=/; Domain=.globalsources.com
incap_ses_722_2766148=1CSQCIeyy1MCWr2xOg8FCuGxO2YAAAAAgLnrVgCB28UqOTpRa8LLIA==; path=/; Domain=.globalsources.com
last-modified: Sun, 31 Oct 2021 12:47:51 GMT
accept-ranges: bytes
cache-control: no-cache
pragma: no-cache
expires: Mon, 01 Jan 1999 00:00:00 GMT
x-incap-sess-cookie-hdr: HtSRUAdyqwUCWr2xOg8FCuGxO2YAAAAAcRoFgBN/or5O1JjOjcZscg==
x-cdn: Imperva
content-security-policy: frame-ancestors 'self' *.globalsources.com; upgrade-insecure-requests;
content-security-policy-report-only: default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: *.globalsources.com ; form-action 'none' data: blob: ; frame-ancestors 'self' ; report-uri /csp_report
x-iinfo: 3-6081834-6081836 2NNN RT(1715188192203 46) q(0 0 0 0) r(13 13) U2
X-Firefox-Spdy: h2
|
|
| bafybeib7rwbs5nzqvrvlbqhw6hafipvns4in4w554av44fqw2rsux54rr4.ipfs.dweb.link/ | 209.94.90.3 | 200 OK | 46 kB |
URL User Request GET HTTP/2bafybeib7rwbs5nzqvrvlbqhw6hafipvns4in4w554av44fqw2rsux54rr4.ipfs.dweb.link/ IP209.94.90.3:443
CertificateIssuerLet's Encrypt Subjectdweb.link FingerprintF6:88:14:38:C6:3C:1C:FC:F0:D3:23:B2:F2:72:50:9D:5C:DC:BE:D2 ValidityTue, 16 Apr 2024 16:54:22 GMT - Mon, 15 Jul 2024 16:54:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Global Sources (HK) |
GET / HTTP/1.1
Host: bafybeib7rwbs5nzqvrvlbqhw6hafipvns4in4w554av44fqw2rsux54rr4.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 17:09:52 GMT
content-type: text/html
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
x-ipfs-path: /ipfs/bafybeib7rwbs5nzqvrvlbqhw6hafipvns4in4w554av44fqw2rsux54rr4/
x-ipfs-roots: bafybeib7rwbs5nzqvrvlbqhw6hafipvns4in4w554av44fqw2rsux54rr4
x-ipfs-pop: rainbow-am6-02
cf-cache-status: HIT
set-cookie: __cflb=0H28vWAgTCPnyBLeRVNPz9GZjvjSWpyG2jCZpC9P9Ux; SameSite=None; Secure; path=/; expires=Thu, 09-May-24 16:09:52 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b0f581b22b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bafybeib7rwbs5nzqvrvlbqhw6hafipvns4in4w554av44fqw2rsux54rr4.ipfs.dweb.link/favicon.ico | 209.94.90.3 | 404 Not Found | 191 B |
URL GET HTTP/3bafybeib7rwbs5nzqvrvlbqhw6hafipvns4in4w554av44fqw2rsux54rr4.ipfs.dweb.link/favicon.ico IP209.94.90.3:443
Requested byhttps://bafybeib7rwbs5nzqvrvlbqhw6hafipvns4in4w554av44fqw2rsux54rr4.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectdweb.link FingerprintF6:88:14:38:C6:3C:1C:FC:F0:D3:23:B2:F2:72:50:9D:5C:DC:BE:D2 ValidityTue, 16 Apr 2024 16:54:22 GMT - Mon, 15 Jul 2024 16:54:21 GMT
File typeASCII text, with no line terminators Hashaf913c99dcaa30df80b1dbd26aeafbc7 dec5f7f1b4633c17758aedcdc1ba8c76b25af332 774b4d79cd6b78078ba43e13176249d5113e0a9cb3750e726ad9559e1fdaf77c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Global Sources (HK) |
GET /favicon.ico HTTP/1.1
Host: bafybeib7rwbs5nzqvrvlbqhw6hafipvns4in4w554av44fqw2rsux54rr4.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeib7rwbs5nzqvrvlbqhw6hafipvns4in4w554av44fqw2rsux54rr4.ipfs.dweb.link/
Cookie: __cflb=0H28vWAgTCPnyBLeRVNPz9GZjvjSWpyG2jCZpC9P9Ux
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 08 May 2024 17:09:52 GMT
content-type: text/plain; charset=utf-8
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-content-type-options: nosniff
x-ipfs-path: /ipfs/bafybeib7rwbs5nzqvrvlbqhw6hafipvns4in4w554av44fqw2rsux54rr4/favicon.ico
x-ipfs-pop: rainbow-am6-01
cf-cache-status: EXPIRED
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b0f5ca9bc0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|