Report - downloadws.com/

Report Overview

Visited public
2023-12-04 13:32:41
Tags
URL
downloadws.com/
Finishing URL
downloadws.com/
IP / ASN
104.21.53.220
#13335 CLOUDFLARENET
Title
WhatsApp

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
downloadws.com	unknown	2022-11-29	2017-09-20 14:22:36	2023-12-04 14:32:14	13 kB	493 kB	172.67.219.43

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp
2023-12-04	medium	downloadws.com/	WhatsApp

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (13)

	URL	From	Size	First Seen	Last Seen
	downloadws.com/	ScriptElement	376 B	2023-11-27	2024-08-20
Pretty URL downloadws.com/ IP 172.67.219.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-27 14:15 Last Seen2024-08-20 17:43 Times Seen18 Hash 210a29e5c27a7c1ef4107ffc05442262 6b1639161922c662d5aaa21c4691757d081d3427 e23d2b026b0be5aadab5c4a4f3546b2998e9c32286f9e0018cf5f7f12bda6cdf Loading...

	downloadws.com/js/config.js	ScriptElement	360 B	2023-03-12	2025-01-31
Pretty URL downloadws.com/js/config.js IP 172.67.219.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 21:05 Last Seen2025-01-31 12:40 Times Seen512 Hash 0f473dc8cb0eed8e543f26b9043a3fb6 56069d0c86850c8bcdef6495d213405e4a8b3f6d e9885f72beec80104d584000fea488790bd8c910793bfb3879dc85c2fc54d98b Loading...

	downloadws.com/js/downloadlist/dev.js	ScriptElement	604 B	2023-11-27	2024-08-20
Pretty URL downloadws.com/js/downloadlist/dev.js IP 172.67.219.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-27 14:15 Last Seen2024-08-20 17:43 Times Seen18 Hash 8eff69cdf242e2e2e31e9a24607dd799 003c3b687067f7c3e38c38d1d54a2da52398d12e b741095b4dd61c5dbf010564980af5877e613f65df34a31436e570a4e3e7fea6 Loading...

	downloadws.com/js/downloadlist/t188.js	ScriptElement	1.3 kB	2023-11-27	2024-08-20
Pretty URL downloadws.com/js/downloadlist/t188.js IP 172.67.219.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-27 14:15 Last Seen2024-08-20 17:43 Times Seen18 Hash edac870ae03409e3c800f8616a8dbc14 f4b7aca4197ff5934f536562c5fa880c918c3c02 e4e75594e14cc09ebd092363ada398f8b33539d4fc5ecd2fc614ef073b758541 Loading...

	downloadws.com/	ScriptElement	218 B	2023-03-07	2025-05-03
Pretty URL downloadws.com/ IP 172.67.219.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02 Last Seen2025-05-03 12:30 Times Seen10619 Hash 23731f926ba1b7856c53bf9c572f9e96 52618c2e6dd1bce8956fd2e2872c524eb1fd59d6 dbf6a6f99233910115437a7d602f004b1287d55441d4f751d152bf216375c07a Loading...

	downloadws.com/js/download.js	ScriptElement	3.0 kB	2023-11-27	2024-08-20
Pretty URL downloadws.com/js/download.js IP 172.67.219.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-27 14:15 Last Seen2024-08-20 17:43 Times Seen18 Hash 1387fe2bf8d3d9f638adb090950f1420 1d195f01f4faae202f38a051a7f1cb279e18e152 8df584b0c50b77646069e28266b7a6913c87236bf20480a5b01813534901b91f Loading...

	downloadws.com/js/downloadlist/t117.js	ScriptElement	366 B	2023-11-27	2024-08-20
Pretty URL downloadws.com/js/downloadlist/t117.js IP 172.67.219.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-27 14:15 Last Seen2024-08-20 17:43 Times Seen18 Hash 1fe1d328fb9bc70c5d235d23c6e43ad5 ef278fb1acaedb3e771b7ff28d33dfe590de41a0 a7c0934f3f361dc783aec0d5397edec204292279d0a01bf29a4c624dc61ec4f3 Loading...

	downloadws.com/js/downloadlist/t888.js	ScriptElement	691 B	2023-11-27	2024-08-20
Pretty URL downloadws.com/js/downloadlist/t888.js IP 172.67.219.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-27 14:15 Last Seen2024-08-20 17:43 Times Seen18 Hash 28f0104f0015f974482168e5527a056c d2b5cd238f5defc55c7fce1bcac202022ab9c91f 59d41a37db9e0757a9af8b7184519fe1d90291167435705eed303277c2eaa0a5 Loading...

	downloadws.com/	ScriptElement	30 B	2023-03-07	2025-04-30
Pretty URL downloadws.com/ IP 172.67.219.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02 Last Seen2025-04-30 15:40 Times Seen67 Hash d1e154e25314b9fbe73dfbbf8d25da8a 2e9fc107aa7c5003d4e46c79aa5f94d079fd3a23 cc56f5136a80b2aa68095bf7da1ae3c753210eae44581620ca4c5a4e9293e016 Loading...

	downloadws.com/js/downloadlist/t168.js	ScriptElement	506 B	2023-11-27	2024-08-20
Pretty URL downloadws.com/js/downloadlist/t168.js IP 172.67.219.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-27 14:15 Last Seen2024-08-20 17:43 Times Seen18 Hash c96f73a3c794bc55120f0cfaf2dec1fa 2afb3bda11887274cf1c12494404edee82f0fb72 e621c9fefc485cf657d1099534d197a946f2e87b126fdc43d8367285a96c39a6 Loading...

	downloadws.com/js/downloadlist/t110.js	ScriptElement	1.5 kB	2023-11-27	2024-08-20
Pretty URL downloadws.com/js/downloadlist/t110.js IP 172.67.219.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-27 14:15 Last Seen2024-08-20 17:43 Times Seen18 Hash f3551c9ef109ae89332e7aaa2533c85e 52009ba41b25a42b0f153341471a5c2d9d51dc4e 34c7178778c588eeac32b26e1daaa4621af4a3fafe88339e8c643db0ed99519a Loading...

	downloadws.com/js/downloadlist/t126.js	ScriptElement	348 B	2023-11-27	2024-08-20
Pretty URL downloadws.com/js/downloadlist/t126.js IP 172.67.219.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-27 14:15 Last Seen2024-08-20 17:43 Times Seen18 Hash c705794bfeb1ac2289a297e1f7f7935d cd83a43b0fdc11653b36363110993cdd35a84fbe 06d0e540effbe8b83aee9e36462d07e5d5b98758064f4f03626faa94e1f7ee7b Loading...

	downloadws.com/js/downloadlist/t158.js	ScriptElement	467 B	2023-11-27	2024-08-20
Pretty URL downloadws.com/js/downloadlist/t158.js IP 172.67.219.43 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-27 14:15 Last Seen2024-08-20 17:43 Times Seen18 Hash cd82e9cf741cf6077b3c4bf5cca87f76 513f8d27cd8ccbc623b6fff25abf062e66a8f01a a4e47a0328770ffc240f2d82c0efa8faf78e4c631bbc613ccc178528ec19c9cb Loading...

HTTP Transactions (28)

URL IP Response Size

downloadws.com/download_files/img15.png

172.67.219.43

200 OK

22 kB

URL GET HTTP/3
downloadws.com/download_files/img15.png
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
PNG image data, 189 x 397, 8-bit colormap, non-interlaced\012- data
Size
22 kB (22023 bytes)
Hash
e17f3235af4bd965dc0685b91c05472d
272000cdc612aab2f31cbd6f9dda31f3d094889c
cd899e99d525898009bc4673d29cf38ebdc2ddc6d14bd7263f2c53e322ef2ef4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /download_files/img15.png HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:25 GMT
content-type: image/png
content-length: 22023
last-modified: Thu, 08 Dec 2022 06:42:25 GMT
etag: "a2e7683bd0ad91:0"
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zE%2BXGHQNyhgeY92Jvui4vjxYJHHO0kwsoztxWmvU%2BcS13KoizzLXOvVzdLtQWYWaOlaBpVjpvGi36QU%2FdyFQz7UC5T0emvB4KXwaDdrNDaWJx%2BJy%2BZ2Nokj7m4Uwyb2Bcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83046a497df356a4-OSL
alt-svc: h3=":443"; ma=86400

downloadws.com/download_files/img14.png

172.67.219.43

200 OK

22 kB

URL GET HTTP/3
downloadws.com/download_files/img14.png
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
PNG image data, 215 x 397, 8-bit colormap, non-interlaced\012- data
Size
22 kB (22083 bytes)
Hash
853f5f9d1b1012720db015478e945f5f
7daee7f505749afbd8d2a07b8d55bfbb92297b48
736ec0b63c70e29a0dad38ffb5a2f40c1b66062ac2e31ee4c21e43f2890b00e2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /download_files/img14.png HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:25 GMT
content-type: image/png
content-length: 22083
last-modified: Thu, 08 Dec 2022 06:42:25 GMT
etag: "a2e7683bd0ad91:0"
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gHViBNl0btfQOItJz7ByoirelbJZoaPgCEzi3uZaBNSqBausbrMywF%2BYKaZTly%2B3PUlBOLSHERz4JYo3%2F90r3mTTI7B1q12GTsp%2Fgl5bXJgKs%2FbvVB9ih50RmlnIqFHydg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83046a497df156a4-OSL
alt-svc: h3=":443"; ma=86400

downloadws.com/download_files/img13.png

172.67.219.43

200 OK

185 kB

URL GET HTTP/3
downloadws.com/download_files/img13.png
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
PNG image data, 663 x 400, 8-bit/color RGBA, non-interlaced\012- data
Size
185 kB (184744 bytes)
Hash
65d291720034fbf72e845f17311dbbed
63e0293d983e4102251e6928fc11ff6087acff61
5e6fe7b4e4981959699752f4dc6ba27d8994ffcb94fbaa32b3f575e89c635347

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /download_files/img13.png HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:25 GMT
content-type: image/png
content-length: 184744
last-modified: Thu, 08 Dec 2022 06:42:25 GMT
etag: "a2e7683bd0ad91:0"
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v7pfLxe28cK3ezKL%2BCfugC2O3f73uvRjnLdxzGpo%2BRqfzehvD899V3jT%2F5XOEpq1byAJrdl6kptKFuo8NPVRylrrnmMoku7ge9laPOXguCkpnkmBf1Jv%2FQa1TPmNzgqJqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83046a497df556a4-OSL
alt-svc: h3=":443"; ma=86400

downloadws.com/js/downloadlist/dev.js

172.67.219.43

200 OK

2.4 kB

URL GET HTTP/3
downloadws.com/js/downloadlist/dev.js
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
ASCII text
Size
2.4 kB (2421 bytes)
Hash
8eff69cdf242e2e2e31e9a24607dd799
003c3b687067f7c3e38c38d1d54a2da52398d12e
b741095b4dd61c5dbf010564980af5877e613f65df34a31436e570a4e3e7fea6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /js/downloadlist/dev.js HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:26 GMT
content-type: application/javascript
last-modified: Fri, 19 May 2023 09:07:23 GMT
etag: W/"184f2153318ad91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z3WWv22LbK%2F1xnOpNSD%2BLDuRYtsusT8l1qG8%2FdJ4mDSEy%2B7bdIfClfHA%2B2sFbG2gpm7feGGYWZSbl0oVY8XtwLQrXcbPxfVhhVb5FWWpqKK2A8DjixneRBV7ZEjQ%2F6GiHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a558e7456a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/download_files/bvgAvxUnJO-.css

172.67.219.43

200 OK

6.1 kB

URL GET HTTP/3
downloadws.com/download_files/bvgAvxUnJO-.css
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
ASCII text, with very long lines (6127), with no line terminators
Size
6.1 kB (6122 bytes)
Hash
a2950a2bb78ff8f2d1f31dff96726ebb
307ecf17ce720d3f25eb447b32c23dd9b6b2a988
77463bc565ac1f3e21abbb2b8ea8c441ae19652912c4a7a46e22806b664fb091

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /download_files/bvgAvxUnJO-.css HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:24 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 06:42:25 GMT
etag: W/"3d85663bd0ad91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uJAFtQ2zNmOwOrIF1G95JPIaWRLlWAVZrtfofiX%2Fa7o%2BAlB%2BEau10PE8zF3aVcDE1v55HBrcqLDyOAhofyd1Dui6lWRAV0aFxk%2FEufflkg4HS7tuh%2Bg0aFtKzaXEWYo0lQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a48dce156a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/rsrc.php/yN/r/KKlOyJQcRfr.woff

172.67.219.43

404 Not Found

1.2 kB

URL GET HTTP/3
downloadws.com/rsrc.php/yN/r/KKlOyJQcRfr.woff
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1241), with no line terminators
Size
1.2 kB (1163 bytes)
Hash
14fc8ed36d3358a2d4a9557d2b69f860
875918c5480201d7fd3a1c646600cc8e206d9afa
a5a5957109aeeeb74db86456a631d1a1d6667ccf5cc5744901c2210f8efacdd6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /rsrc.php/yN/r/KKlOyJQcRfr.woff HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://downloadws.com/download_files/28bZN702Ikw.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 13:32:26 GMT
content-type: text/html
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TeF%2FgenZC8lTS4ptS7RIX05j6dK2CSNiby6s31T3aVgjSt6h6gOU7y87TQc3GP1aVBcfxo09JOXoA%2BdUJlfRR%2BLBYvmSFTSvN%2B8qXejHrR9DdlkVq6Dlx%2BTtRlgvKUWsXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83046a554e1256a4-OSL
alt-svc: h3=":443"; ma=86400

downloadws.com/rsrc.php/yR/r/_gCoI-iROin.woff

172.67.219.43

404 Not Found

1.2 kB

URL GET HTTP/3
downloadws.com/rsrc.php/yR/r/_gCoI-iROin.woff
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1241), with no line terminators
Size
1.2 kB (1163 bytes)
Hash
14fc8ed36d3358a2d4a9557d2b69f860
875918c5480201d7fd3a1c646600cc8e206d9afa
a5a5957109aeeeb74db86456a631d1a1d6667ccf5cc5744901c2210f8efacdd6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /rsrc.php/yR/r/_gCoI-iROin.woff HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://downloadws.com/download_files/28bZN702Ikw.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 13:32:26 GMT
content-type: text/html
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=txC%2B%2FzIc22Lu713ILJJE8zioLvENf4m5YZbv7fUmzGPyJtm4tlOiDEU9DF7SZ8VLKHSTI%2FffcTnJbCpjKRzB0aVMlhHGqjT2Kmj4JAfdUnO4BmJUENi%2FVFBt781BImCVNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83046a556e4856a4-OSL
alt-svc: h3=":443"; ma=86400

downloadws.com/js/downloadlist/t117.js

172.67.219.43

200 OK

366 B

URL GET HTTP/3
downloadws.com/js/downloadlist/t117.js
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
Unicode text, UTF-8 text, with very long lines (409), with no line terminators
Size
366 B (366 bytes)
Hash
d5b158745977612195197ce199add97d
148d33ee9541b956f9d45ce59756e4aa8b020ed3
d854278b36f126753d3baa01ed30781a21bf5ad2dfbef013b8e288ca9f0d38f4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /js/downloadlist/t117.js HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:26 GMT
content-type: application/javascript
last-modified: Mon, 12 Jun 2023 11:58:55 GMT
etag: W/"30179143259dd91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YEupbKxUv3MARYVqanw11tyuQ%2FMkzZaNgbk6nHvO%2B9jUNF2VToFmG0wdI91MoaJCdb%2FEJdRpVWB7H8wRTZjup54SBZ%2FySMsrB%2FVue%2FtGa3KGpksAakWFkLxv%2FoXj8dOIuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a558e7a56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/download_files/J7ci6KkN4Io.css

172.67.219.43

200 OK

174 kB

URL GET HTTP/3
downloadws.com/download_files/J7ci6KkN4Io.css
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
assembler source, ASCII text, with very long lines (990)
Size
174 kB (174517 bytes)
Hash
f21a863c094fda4c4dcd12f467cb138a
5893a9b63c111bf1d4d51d1c326bc1f7699588bb
6c0cd3ab0d50f2afffd5bee8b72e2aa34adce64bceedb311ccd3c7bc9c8a04da

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /download_files/J7ci6KkN4Io.css HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:25 GMT
content-type: text/css
last-modified: Sat, 14 Jan 2023 04:07:23 GMT
etag: W/"b4b3beb4cd27d91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lV3XYVVn4nuN2uHfNs33Xdoa5Q5KA%2FniRHcCsSkDM8cAiafBslAWJN9wYdFVAykCnJH0sfqreS956BADPpthK9MxnXVqcHlO52tTosONRtJMkD3IDcJ4U7YCA67Pz9OPkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a48dce056a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/rsrc.php/yU/r/zSaFQ46AO2w.woff2

172.67.219.43

404 Not Found

1.2 kB

URL GET HTTP/3
downloadws.com/rsrc.php/yU/r/zSaFQ46AO2w.woff2
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1241), with no line terminators
Size
1.2 kB (1163 bytes)
Hash
14fc8ed36d3358a2d4a9557d2b69f860
875918c5480201d7fd3a1c646600cc8e206d9afa
a5a5957109aeeeb74db86456a631d1a1d6667ccf5cc5744901c2210f8efacdd6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /rsrc.php/yU/r/zSaFQ46AO2w.woff2 HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://downloadws.com/download_files/28bZN702Ikw.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 13:32:25 GMT
content-type: text/html
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ABTP6cd4O%2Be1JO9mTFiD7JFKElCmT2UAsPXdmRorl2IKb0ST5yXYKe74Hr8XDaFGer5Mk%2F7b5zqt5ajHVndgheJt%2BxAbgqSMfKt4H%2F900i2ALE7k2nWozPefmLbJUFheqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83046a51e96956a4-OSL
alt-svc: h3=":443"; ma=86400

downloadws.com/rsrc.php/yH/r/c_1vdG88uNh.woff2

172.67.219.43

404 Not Found

1.2 kB

URL GET HTTP/3
downloadws.com/rsrc.php/yH/r/c_1vdG88uNh.woff2
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1241), with no line terminators
Size
1.2 kB (1163 bytes)
Hash
14fc8ed36d3358a2d4a9557d2b69f860
875918c5480201d7fd3a1c646600cc8e206d9afa
a5a5957109aeeeb74db86456a631d1a1d6667ccf5cc5744901c2210f8efacdd6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /rsrc.php/yH/r/c_1vdG88uNh.woff2 HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://downloadws.com/download_files/28bZN702Ikw.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 13:32:25 GMT
content-type: text/html
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SZmEGZmORERj3eXtEYS3di69UbITvGEtGsKyoakXrIKsv2K1NzlMEpTDueK9Iv3msvGu4Dz9VZu%2Fu25yImUrp%2B7S8O3P%2FTqjiSkvNYGvii27bY7lRlFH76kEnBwj3fdQ7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83046a51c94156a4-OSL
alt-svc: h3=":443"; ma=86400

downloadws.com/js/downloadlist/t126.js

172.67.219.43

200 OK

348 B

URL GET HTTP/3
downloadws.com/js/downloadlist/t126.js
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
ASCII text, with very long lines (390), with no line terminators
Size
348 B (348 bytes)
Hash
c4abf5806d88e01454e0913e35668a6d
e3fedc63426c8895592536c6a3bfa9894ea397a5
2e8c50405d2a8301f6fcd1ca3c9b2eb843e36991fd7deace4591c65222202e34

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /js/downloadlist/t126.js HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:26 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 06:23:44 GMT
etag: W/"e7a1d25c41dad91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KzYRuwuMOQYnxUELjlCn7o%2BtXHaTugiilGs42bcw4NMxX7V29p9oCxR1eAAsPBqBohubCfsGtP8leeTigkaHbUnKh6gVhxqjF3EaI1r3jt2BQOjbxvL%2B9DgTjTS8iqLMKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a558e7d56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/js/downloadlist/t158.js

172.67.219.43

200 OK

467 B

URL GET HTTP/3
downloadws.com/js/downloadlist/t158.js
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
ASCII text, with very long lines (545), with no line terminators
Size
467 B (467 bytes)
Hash
a6c730783e3996f84ad8653f0d225b5c
d4e6f7c7dea03b38f6583c8c85659cf7d074d4af
05d85d30111b8315a7efcad6fd7764a34b2b795f5311e325db43898204ed5f00

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /js/downloadlist/t158.js HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:25 GMT
content-type: application/javascript
last-modified: Sat, 11 Feb 2023 09:59:06 GMT
etag: W/"99a1477aff3dd91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: HIT
age: 3974
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JmBxH37adXXb4Xv1elkM8pCZNU%2Fvv%2BsHVBeXtdwpERZ2b4%2Bo8bycqPb3eayZ%2Fxf58JuFmCA8aBfInazxZThBqJV8G8Vyrs%2FCL%2F%2FLqhmTp0lheLbS3PTf0TaaE4YpGyWyig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a559e8456a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/rsrc.php/yH/r/c_1vdG88uNh.woff2

172.67.219.43

404 Not Found

1.2 kB

URL GET HTTP/3
downloadws.com/rsrc.php/yH/r/c_1vdG88uNh.woff2
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1241), with no line terminators
Size
1.2 kB (1163 bytes)
Hash
14fc8ed36d3358a2d4a9557d2b69f860
875918c5480201d7fd3a1c646600cc8e206d9afa
a5a5957109aeeeb74db86456a631d1a1d6667ccf5cc5744901c2210f8efacdd6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /rsrc.php/yH/r/c_1vdG88uNh.woff2 HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://downloadws.com/download_files/28bZN702Ikw.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 13:32:25 GMT
content-type: text/html
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CIUvWAh2cBFICFJYQ9kjwga7A%2FrfWCMAIFnfnv6bwo2tMHqSGE3B6zACqDLzNkEnMv2qWr2YTWMJx%2F1PVt%2BduiG2qbWXf9yzI%2FDs5wCXinDfBsTXsukHalD3e7MLkxRiCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83046a52ca8e56a4-OSL
alt-svc: h3=":443"; ma=86400

downloadws.com/js/downloadlist/t888.js

172.67.219.43

200 OK

691 B

URL GET HTTP/3
downloadws.com/js/downloadlist/t888.js
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
ASCII text, with very long lines (794), with no line terminators
Size
691 B (691 bytes)
Hash
9c0a79eb302938a7d282b79b0d0d5a8b
3b0477ec492bb0d8b2390836457aaceeeb16fc75
8f5c0abe0612dca1b3232893b006a5f693837dc9808c3bbedee2d6cf9ee7733b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /js/downloadlist/t888.js HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:26 GMT
content-type: application/javascript
last-modified: Wed, 09 Aug 2023 12:01:15 GMT
etag: W/"462ab932b9cad91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QwaZp4kmECCxlpJOE3sABesocsapOykrwuxyWba9NqCAqY9Xbynk21tojoBzuC0GZnIUcoad2H8pN5r5jKgmNNh2I7i0rSg5W32aaNGc36QrAITL0OwUOd2yAKneenvurQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a55aea056a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/download_files/img17.png

172.67.219.43

200 OK

2.0 kB

URL GET HTTP/3
downloadws.com/download_files/img17.png
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
PNG image data, 194 x 194, 8-bit colormap, non-interlaced\012- data
Size
2.0 kB (2043 bytes)
Hash
6bb288b8ba772471f23cee4f99b54c08
f72bf6750892a25cc40b590bafb2038109bd77ad
3899581abcfed9b40b7208bbbca8bdbfe3ae9655980dbf55f04dec9cb3309f27

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /download_files/img17.png HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:26 GMT
content-type: image/png
content-length: 2043
last-modified: Thu, 08 Dec 2022 06:42:25 GMT
etag: "a2e7683bd0ad91:0"
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zSeAHHo6ARaulLk7xVTpQhJO8ruJ6RjGL6kJt%2FjNnzHOjV2KQ%2BrypCj%2B0lsh%2BtI2%2F%2BrPSVjQykWL9loNn2wwEESfc%2FSmskVB6tDr2SpVxbQn6ZZrGMMKxBvsBBRJ4e5QxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83046a594bb656a4-OSL
alt-svc: h3=":443"; ma=86400

downloadws.com/js/download.js

172.67.219.43

200 OK

3.0 kB

URL GET HTTP/3
downloadws.com/js/download.js
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
ASCII text, with very long lines (3184), with no line terminators
Size
3.0 kB (3044 bytes)
Hash
2edc6f3e824634648e822db0e2fa053e
3ed7273db63279b5e55ce7b9c52e7964d4d64730
3bab92e713b273d4cd60b8d3117fa7b0d8a3faf6475f48d02cbc65b7f8514404

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /js/download.js HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:24 GMT
content-type: application/javascript
last-modified: Sat, 15 Jul 2023 10:40:21 GMT
etag: W/"e12619c18b7d91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8psiPXcGmqGVRjm%2FdmyyXpG3NqLW301sud0J9%2BV84zUZAn0o4apOywrsLTQNNqIm2yLTPpJQVNXKckyhuXeh02rgyWkwGVokDXNlQlugiuYM%2F%2B6To%2BcbUil2rM14vmujzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a497df856a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/rsrc.php/yU/r/zSaFQ46AO2w.woff2

172.67.219.43

404 Not Found

1.2 kB

URL GET HTTP/3
downloadws.com/rsrc.php/yU/r/zSaFQ46AO2w.woff2
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1241), with no line terminators
Size
1.2 kB (1163 bytes)
Hash
14fc8ed36d3358a2d4a9557d2b69f860
875918c5480201d7fd3a1c646600cc8e206d9afa
a5a5957109aeeeb74db86456a631d1a1d6667ccf5cc5744901c2210f8efacdd6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /rsrc.php/yU/r/zSaFQ46AO2w.woff2 HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://downloadws.com/download_files/28bZN702Ikw.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 13:32:25 GMT
content-type: text/html
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s3H8AZHJvlltftxPQZAnvfpZs8%2B40WMR%2FrfHJYTahxUq2JXj1UInX3oV%2BOeLuEN3oQ0zMzxs%2B7GkYrhxZI%2F76yLUfLn8J39lq3Cjyv4nUJb7W9Dpl9%2BqQTDGw5MqRie5xw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83046a52ca8f56a4-OSL
alt-svc: h3=":443"; ma=86400

downloadws.com/download_files/7oaIa_tDt95.css

172.67.219.43

200 OK

3.8 kB

URL GET HTTP/3
downloadws.com/download_files/7oaIa_tDt95.css
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
ASCII text, with very long lines (3811), with no line terminators
Size
3.8 kB (3801 bytes)
Hash
647ae73b623a89c4734b9de4904c7614
edf5ce10bbb3a9e363c8f58f1e87603f00c9e636
e5dc6601803c1656c39058f6363146a4dba7864ec64b7d743a77bcec833cd08d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /download_files/7oaIa_tDt95.css HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:24 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 06:42:25 GMT
etag: W/"c822643bd0ad91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gOJ87HmEJbVT1uR03X%2BQYLX6yuFZg%2BzmRc5NNcK7huF3p5E%2BMAqnKeDhXTC0NUiJx0e2HE9pRH1LRNQOpEknrYTCkEBl2YiSs9N3oybFA22Cl%2F%2B4IptFNdBWRrx5%2F1XhIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a48dce456a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/download_files/C2fHuK6eV5E.css

172.67.219.43

200 OK

6.7 kB

URL GET HTTP/3
downloadws.com/download_files/C2fHuK6eV5E.css
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
ASCII text, with very long lines (6685), with no line terminators
Size
6.7 kB (6683 bytes)
Hash
7b26b0d93f7b8a0221bd62ae120ca196
09b4b2efc021937b5acbd97faf62eaf825e1b8d3
893f6f1e04c9411bf2f1419b17d9d785dbbfb6fac4113ddb3d4ba86e0211d02c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /download_files/C2fHuK6eV5E.css HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:24 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 06:42:25 GMT
etag: W/"c822643bd0ad91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J7tZTw4JirJdLacrQDEZBFdSvZGj8%2FgnavifFyblGYWRsfTXBdzcD4d5xyRKKomt09DEibasWxBl1Tq1c7mU4AmJb4%2Fu8FyaWWU%2BGokb0CquIjAITam6fcVgpJ13ZqgpVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a48dcde56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/download_files/28bZN702Ikw.css

172.67.219.43

200 OK

761 B

URL GET HTTP/3
downloadws.com/download_files/28bZN702Ikw.css
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
ASCII text, with very long lines (763), with no line terminators
Size
761 B (761 bytes)
Hash
4a88cd6e3b51702e8d15707a50f4895a
8663cc1f9fd8a9453729010feb41b0ac18f9c316
e8dc75120ac656bf78f57d9cfe3eb0f2ae857b4fdb96fc863f35ef26ae4a8b77

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /download_files/28bZN702Ikw.css HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:24 GMT
content-type: text/css
last-modified: Thu, 08 Dec 2022 06:42:25 GMT
etag: W/"c822643bd0ad91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FwOpnxYWUJNqV7smUYcy9nDtuPoe23Jy%2B520xOKwcJZe8ZX8cTyNzQHtr2CveApLHopdrSyONyDIbIbBdD81BxFiznFFpxoALpiBlSJIk6OFGfr0jPs3d5L4to87MR7mkw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a48dce256a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/download_files/36B424nhiL4.svg

172.67.219.43

200 OK

8.7 kB

URL GET HTTP/3
downloadws.com/download_files/36B424nhiL4.svg
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (8858), with no line terminators
Size
8.7 kB (8731 bytes)
Hash
95c9d5dff7e63e2294b3a3fd15e73743
16a65368c9e7b244e9d6d39977583f16dc64450f
0ff6a15a8af044b499fc4e94b70e1e28e2fcebec96ec16545d28b5621996979d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /download_files/36B424nhiL4.svg HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:24 GMT
content-type: image/svg+xml
last-modified: Thu, 08 Dec 2022 06:42:25 GMT
etag: W/"c822643bd0ad91:0"
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uaDnahkxZWua2htAIo9rqik9GsPb3tFvE4PKVul9FbBGuV6hyA4pTGlHGb%2BpAuTym1PPKX16Cr%2FMhah4cDAU%2FZFoAJhs9Je5XWlPvM0HIgMdsefaj0XWc06JRPdq57tM5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83046a48dce656a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/js/config.js

172.67.219.43

200 OK

360 B

URL GET HTTP/3
downloadws.com/js/config.js
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
ASCII text, with very long lines (374), with no line terminators
Size
360 B (360 bytes)
Hash
d3f2e5932b7cfeae1444ed1f858d388e
9b28bf15f85dcf9fe73bb560758a3ee22e0cfd3f
b3d03a161856837f300683a91ae3baf14af39647f7e65591900fb646a24bce9b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /js/config.js HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:25 GMT
content-type: application/javascript
last-modified: Sat, 14 Jan 2023 03:17:24 GMT
etag: W/"9491bab8c627d91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XFKJf4aMHAkfDRRQwhdFuSnLwha6CBlc%2BHCMwpyHRveY%2FpMlzOavG7W4hJEiVz%2B83FFJwE3T6Zhy03z9sv1ThkwxHFQax7TSLjNM6z7zAMMsNh0Deg95JYjReI%2FmNTgTzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a51f9a356a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/js/downloadlist/t110.js

172.67.219.43

200 OK

1.5 kB

URL GET HTTP/3
downloadws.com/js/downloadlist/t110.js
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
ASCII text, with very long lines (1725), with no line terminators
Size
1.5 kB (1544 bytes)
Hash
f1887b9da81d1b5edf5f77d0563e73fb
6274a9478f3799f04df9a4dc4ab50ae24601f65a
c9a76eb3934ff9e536cb377dd1af408ece5ac8cd54b4b7307ebc9f2156427ffc

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /js/downloadlist/t110.js HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:26 GMT
content-type: application/javascript
last-modified: Tue, 11 Apr 2023 09:00:35 GMT
etag: W/"f1d91d14546cd91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WZ73hfiiZPtpI5m8ZOSrXSGDF2jMTrmofHUKudq8u%2Fp6aMydVil5kMsJQwjs9BevJ7bYuVcmsW9QvzKqxr4iUWVeWxwjUpSHUuPeem7gqdIvUDcBkAMuEd%2FLNEtJFZ%2FCZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a559e8a56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/js/downloadlist/t188.js

172.67.219.43

200 OK

1.3 kB

URL GET HTTP/3
downloadws.com/js/downloadlist/t188.js
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
ASCII text, with very long lines (1436), with no line terminators
Size
1.3 kB (1279 bytes)
Hash
72f670ed849b19d1c210400b4013845b
fc4e086213e249d24a264a23646bea8083f8bc58
62a9906975e25bf6e026b5426823e156943f6c9ef34e8ef2098370dc0ab95251

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /js/downloadlist/t188.js HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:26 GMT
content-type: application/javascript
last-modified: Tue, 15 Aug 2023 09:36:28 GMT
etag: W/"96e7a0f75bcfd91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fp08f%2FGcAVv5ia%2FRB6vt6YYRTqj2byOFrN2gcY3Z%2Bk7V3gW%2FTqUuqG%2B0k5lYJdhllWVCs9qgdculc4v7%2FS8XZ%2Bc8qOd1b5KzIRHdbQcox14db%2BYt%2FohvORtE0hgAxmKCOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a559e9756a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/

172.67.219.43

200 OK

22 kB

URL User Request GET HTTP/2
downloadws.com/
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type

Size
22 kB (22323 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET / HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 04 Dec 2023 13:32:23 GMT
content-type: text/html
last-modified: Sat, 14 Jan 2023 09:17:23 GMT
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s4kkLQVktQjbzhXw67Fw9wbzIA63DTZOBmHv5HVw9Cxb4vb5puyJ02%2BmOdPjs84VFFaXo57qX4sbqhGANWpDDRWS1E%2BbOVDFiukH2YDGaguknlmhp8RbLZEFECUUBFoypw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a4449070b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

downloadws.com/js/downloadlist/t168.js

172.67.219.43

200 OK

506 B

URL GET HTTP/3
downloadws.com/js/downloadlist/t168.js
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
ASCII text, with very long lines (579), with no line terminators
Size
506 B (506 bytes)
Hash
df857ee3782f19f64f16f76d228a0e0d
686a9386db3de626f2e85052b834bd4e425b054a
c5a1cdf7cbfab97d351844c8f73050ab7b644a7ab6cf12c1d1ac836c4872da38

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /js/downloadlist/t168.js HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:25 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 03:17:27 GMT
etag: W/"fa63f43fe020da1:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: HIT
age: 3970
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7TDASNEWIp58cNlt%2Frh9wPDZqObie8loi%2Be8Xjss4JMdWr9VF15SvGKjExfMir89SPDVaB3jIxHIHfGrKvWYrM68YO1FAmgTi4CzfAbv%2FxK0cXCYtfCIUlfI3W42sBDN8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83046a559e8556a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

downloadws.com/download_files/lOol7j-zq4u.svg

172.67.219.43

200 OK

2.6 kB

URL GET HTTP/3
downloadws.com/download_files/lOol7j-zq4u.svg
IP
172.67.219.43:443
ASN
#13335 CLOUDFLARENET

Requested by
https://downloadws.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectdownloadws.com
FingerprintDE:EB:B8:48:7A:2B:6D:2D:DF:AC:92:59:32:C0:03:B1:FA:77:1B:8A
ValiditySun, 19 Nov 2023 04:55:34 GMT - Sat, 17 Feb 2024 04:55:33 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2743), with no line terminators
Size
2.6 kB (2648 bytes)
Hash
af4465a12513351224543990c7d6bd22
2a824b9ae72775384714868ac1f2dc68fc773c5c
dfe902bf2459c47cd760687ea56a3fcf81e0cc0f1c2f677d763a4eeb485c87a6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /download_files/lOol7j-zq4u.svg HTTP/1.1
Host: downloadws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://downloadws.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:32:24 GMT
content-type: image/svg+xml
last-modified: Thu, 08 Dec 2022 06:42:25 GMT
etag: W/"a2e7683bd0ad91:0"
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4e%2Bkf%2FuU5D2dR12gD1GJtqxE5MpXv5TSoc9HJHHNwo0SCrlECIPbw9gZ65Wvx1At0uCa7GEVuLtcTfn5JFf5XYBdlVHnqSOPxotE16o61GGDrxc%2FRidg8AZgIAP6LKnDrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83046a48dce856a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (13)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by