| r10.o.lencr.org/ |  23.33.119.57 | | 504 B |
IP23.33.119.57:0 ASN#20940 Akamai International B.V.
Hash8d2e6150f7d0845dc26f5bd5cd6f28dd 6aad5091620585a5f76065c1888456ee70b88257 ed538ea400323f4c987f91c0b0afc79a8526b62f7aa317dd62bd107cb37850a2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "ED538EA400323F4C987F91C0B0AFC79A8526B62F7AA317DD62BD107CB37850A2"
Last-Modified: Tue, 03 Sep 2024 09:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5107
Expires: Thu, 05 Sep 2024 05:47:13 GMT
Date: Thu, 05 Sep 2024 04:22:06 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.57 | | 504 B |
IP23.33.119.57:0 ASN#20940 Akamai International B.V.
Hash66fbf7f95cb55f388373a20d4b1a736e afc34259758a563362367848629ff7639982e1fb 41c00088afc20571f6a0c6998324d9517346256ac33696dc706192ec606fe7a7
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "41C00088AFC20571F6A0C6998324D9517346256AC33696DC706192EC606FE7A7"
Last-Modified: Mon, 02 Sep 2024 12:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3766
Expires: Thu, 05 Sep 2024 05:24:52 GMT
Date: Thu, 05 Sep 2024 04:22:06 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.57 | | 504 B |
IP23.33.119.57:0 ASN#20940 Akamai International B.V.
Hash3b182d2525d361002ced8590b8a9ce07 12cd4e482375e47fdc8cde29fe98a6e3498260df 62ed97a3678824305419366056fd0bee73359522822ca42a16fabdcc3ad982be
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "62ED97A3678824305419366056FD0BEE73359522822CA42A16FABDCC3AD982BE"
Last-Modified: Mon, 02 Sep 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3733
Expires: Thu, 05 Sep 2024 05:24:19 GMT
Date: Thu, 05 Sep 2024 04:22:06 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.57 | | 504 B |
IP23.33.119.57:0 ASN#20940 Akamai International B.V.
Hashcabaaa7c3e6a621cc5836be05eee4924 c4bc6288aed0597ff7ae2dbc5aea340b6c9636b8 2b2a41201a3881bd029ab7161be291b23128d5952e5959092607b98c951fa18c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2B2A41201A3881BD029AB7161BE291B23128D5952E5959092607B98C951FA18C"
Last-Modified: Mon, 02 Sep 2024 14:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13734
Expires: Thu, 05 Sep 2024 08:11:00 GMT
Date: Thu, 05 Sep 2024 04:22:06 GMT
Connection: keep-alive
|
|
| |  150.109.94.38 | 301 Moved Permanently | 169 B |
URL User Request GET HTTP/1.1IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash5584cd241a762d7a7488f14d5409293c a88c6560e46f39dca33a1bbbc74c319e89adfe2a 56fd937f2948b7fc1b223fc1da61e781a93f6b4c74cfd88e1115bb74418c7dff
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:08 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://guatexgt.top/GT
|
|
| r11.o.lencr.org/ | 23.33.119.57 | | 504 B |
IP23.33.119.57:0 ASN#20940 Akamai International B.V.
Hashc96a4972e341191f93e963880196f8e1 8318aa6dcbdababe8728023ec9ef3aaac10917a9 dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A"
Last-Modified: Mon, 02 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7716
Expires: Thu, 05 Sep 2024 06:30:44 GMT
Date: Thu, 05 Sep 2024 04:22:08 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.33.119.57 | | 504 B |
IP23.33.119.57:0 ASN#20940 Akamai International B.V.
Hashc96a4972e341191f93e963880196f8e1 8318aa6dcbdababe8728023ec9ef3aaac10917a9 dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A"
Last-Modified: Mon, 02 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7716
Expires: Thu, 05 Sep 2024 06:30:44 GMT
Date: Thu, 05 Sep 2024 04:22:08 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.33.119.57 | | 504 B |
IP23.33.119.57:0 ASN#20940 Akamai International B.V.
Hashc96a4972e341191f93e963880196f8e1 8318aa6dcbdababe8728023ec9ef3aaac10917a9 dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A"
Last-Modified: Mon, 02 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7716
Expires: Thu, 05 Sep 2024 06:30:44 GMT
Date: Thu, 05 Sep 2024 04:22:08 GMT
Connection: keep-alive
|
|
| |  54.240.174.122 | 302 Found | 10 kB |
URL User Request GET HTTP/2IP54.240.174.122:443
CertificateIssuerAmazon Subjectqrco.de Fingerprint94:0B:3C:F5:A8:65:A5:90:3D:6A:FC:E6:E1:D8:55:2F:D6:71:3C:6C ValidityMon, 19 Aug 2024 00:00:00 GMT - Wed, 17 Sep 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 Hashfa75d13692977ba4be6693ebd9025449 b15a8d2ab27fbeb3ec79bd403a826a4be733a80d bafec1a2d582a451d27b11d97d7eeabf3236f05907e30e0e6003f521a8f64338
GET /bfMim7/ HTTP/1.1
Host: q-r.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
location: http://guatexgt.top/GT
date: Thu, 05 Sep 2024 04:22:07 GMT
server: nginx
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bMwrzfFcdSeuv0KUHpBM6jPH462TEw3l0Y4E3GkIL8JoV8Ea11CziQ==
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.33.119.57 | | 504 B |
IP23.33.119.57:0 ASN#20940 Akamai International B.V.
Hash7169f392803619d8bc52ad089814c1c0 adee2a544a7382b6db54b29626b2b8aa1bf99292 04f005c8c0fc17bd1ab18fe29de95c1d175e6d047c9794479029a0aa2201ceea
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "04F005C8C0FC17BD1AB18FE29DE95C1D175E6D047C9794479029A0AA2201CEEA"
Last-Modified: Wed, 04 Sep 2024 14:40:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 05 Sep 2024 10:22:09 GMT
Date: Thu, 05 Sep 2024 04:22:09 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.33.119.57 | | 504 B |
IP23.33.119.57:0 ASN#20940 Akamai International B.V.
Hash7169f392803619d8bc52ad089814c1c0 adee2a544a7382b6db54b29626b2b8aa1bf99292 04f005c8c0fc17bd1ab18fe29de95c1d175e6d047c9794479029a0aa2201ceea
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "04F005C8C0FC17BD1AB18FE29DE95C1D175E6D047C9794479029A0AA2201CEEA"
Last-Modified: Wed, 04 Sep 2024 14:40:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 05 Sep 2024 10:22:09 GMT
Date: Thu, 05 Sep 2024 04:22:09 GMT
Connection: keep-alive
|
|
| | 150.109.94.38 | 301 Moved Permanently | 64 B |
URL User Request GET HTTP/1.1IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeHTML document, ASCII text, with no line terminators Hashb3cd78c40a5e456fcc44654c49e05dd1 4d2ed4567a2e64ae03304d24e57dc981815adb1f f2d1b5002e3cfbeb4b64b883135b148b50d7c10c100b66ab58a55770c859e17d
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:09 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 64
Connection: keep-alive
Access-Control-Allow-Origin: *
Location: /GT/
Vary: Accept
|
|
| | 150.109.94.38 | 200 OK | 781 B |
URL User Request GET HTTP/1.1IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeHTML document, ASCII text, with very long lines (435) Hash201752d2b4ccaeed7a1f32a9363dd709 3d48dab64569e9634ec8a0b3a757775c9c1135a3 b064a68d0899638131bf25d40f660dfdd818a45d4cb41138da35da2c35d826f7
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/ HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:10 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"666-1907ba24330"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/f6170fbbQW743.css | 150.109.94.38 | 200 OK | 952 B |
URL GET HTTP/1.1guatexgt.top/GT/assets/f6170fbbQW743.css IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeASCII text, with very long lines (951) Hash32fac03c421dcba16fb4a965fc089e7a f6ac75910f20381d4478c1d302b4dd30fd1ee9ad f6170fbbee0af98d737510b5689b31d78cf4e9a152590e594175b79212210911
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/f6170fbbQW743.css HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:10 GMT
Content-Type: text/css; charset=utf-8
Content-Length: 952
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"3b8-1907ba24330"
|
|
| guatexgt.top/GT/assets/index-39fb359f.js | 150.109.94.38 | 200 OK | 149 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/index-39fb359f.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size149 kB (149437 bytes) Hashc44379fc53d985e1258cda762817fb10 3b5cd099b6351cf012b75e85943c5d71a8013c3b e9c97bb7d7e8036ac0b07ccaa82f5397cc7f003be07dd69726cb3e9f34973bbe
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/index-39fb359f.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:10 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:46:02 GMT
ETag: W/"7b2d3-1907ba27210"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/af45cd74HC7Z4.js | 150.109.94.38 | 200 OK | 1.5 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/af45cd74HC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (4529), with no line terminators Hashd1d8a8cfbda7f20d7f04ed45f0215381 e41c3ffbc524408ce56780e55373cb2647ec5beb 5c12ac16cb9d835f4a2e085b1321d0ab416152cacef8c1fa81784b704878a687
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/af45cd74HC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://guatexgt.top/GT/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:11 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:52 GMT
ETag: W/"11eb-1907ba24b00"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/af45cd74HC7Z4.js | 150.109.94.38 | 200 OK | 1.5 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/af45cd74HC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (4529), with no line terminators Hashd1d8a8cfbda7f20d7f04ed45f0215381 e41c3ffbc524408ce56780e55373cb2647ec5beb 5c12ac16cb9d835f4a2e085b1321d0ab416152cacef8c1fa81784b704878a687
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/af45cd74HC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/index-39fb359f.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:11 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:52 GMT
ETag: W/"11eb-1907ba24b00"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/650ef575HC7Z4.js | 150.109.94.38 | 200 OK | 17 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/650ef575HC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, ASCII text, with very long lines (52671) Hash52ef13ba51613b0e0bea6ccfe913eb58 19baf60427756972d2041ec49537a73307c3b93a 1647dfb387d8699af836fb039bb6c53bd85f520178cf0d4dc02f43f0612f162a
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/650ef575HC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://guatexgt.top/GT/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:11 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"d1cd-1907ba24330"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/650ef575HC7Z4.js | 150.109.94.38 | 200 OK | 17 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/650ef575HC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, ASCII text, with very long lines (52671) Hash52ef13ba51613b0e0bea6ccfe913eb58 19baf60427756972d2041ec49537a73307c3b93a 1647dfb387d8699af836fb039bb6c53bd85f520178cf0d4dc02f43f0612f162a
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/650ef575HC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/af45cd74HC7Z4.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"d1cd-1907ba24330"
Content-Encoding: gzip
|
|
| guatexgt.top/favicon.ico | 150.109.94.38 | 200 OK | 7.3 kB |
IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 96x96, segment length 16, baseline, precision 8, 192x192, components 3 Hashb085ebf16bb93384d157574bb1713f61 fbdeb3d7b09720d95b42668c81889030bf084a48 85eaab5ef28f41f7151934d35e67772eba0135ff7f6e45cb37342c02268fe74e
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /favicon.ico HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:12 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 7281
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:44 GMT
ETag: W/"1c71-1907ba22bc0"
|
|
| guatexgt.top/GT/assets/b1090594HC7Z4.js | 150.109.94.38 | 200 OK | 11 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/b1090594HC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, ASCII text, with very long lines (35036), with no line terminators Hashabe76f0fc07fcf212757d57fb3807762 561aba1a2e6964bf3a81ef6bc9053d7ba2f1d541 b19336d85b86225dc2e28a326b3fcb13538adf4bc23899c87ed4afa61f680da0
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/b1090594HC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://guatexgt.top/GT/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:52 GMT
ETag: W/"88dc-1907ba24b00"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/09bf01f8HC7Z4.js | 150.109.94.38 | 200 OK | 880 B |
URL GET HTTP/1.1guatexgt.top/GT/assets/09bf01f8HC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, ASCII text, with very long lines (2107), with no line terminators Hash94852930e9442959c71bb1741fbb5872 c8599a57da0361e13e5e16012f9b9bc2f85fa994 5344468c16eb735c28476b0205e122fc3e43b0819fab0110b46e7835c9805293
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/09bf01f8HC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://guatexgt.top/GT/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"83b-1907ba24330"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/7e71b23dHC7Z4.js | 150.109.94.38 | 200 OK | 1.1 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/7e71b23dHC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, ASCII text, with very long lines (2746), with no line terminators Hash5b71975a40d5e2b11fa38177cbaffa28 4c86098730a009133fa5f8127f1fa8fae995debe b4757d014bc1c6be3eebcbbc38f194afac08a9017a0170dda50497ace17ef59f
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/7e71b23dHC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://guatexgt.top/GT/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:52 GMT
ETag: W/"aba-1907ba24b00"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/b1090594HC7Z4.js | 150.109.94.38 | 200 OK | 11 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/b1090594HC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, ASCII text, with very long lines (35036), with no line terminators Hashabe76f0fc07fcf212757d57fb3807762 561aba1a2e6964bf3a81ef6bc9053d7ba2f1d541 b19336d85b86225dc2e28a326b3fcb13538adf4bc23899c87ed4afa61f680da0
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/b1090594HC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/index-39fb359f.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:52 GMT
ETag: W/"88dc-1907ba24b00"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/09bf01f8HC7Z4.js | 150.109.94.38 | 200 OK | 880 B |
URL GET HTTP/1.1guatexgt.top/GT/assets/09bf01f8HC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, ASCII text, with very long lines (2107), with no line terminators Hash94852930e9442959c71bb1741fbb5872 c8599a57da0361e13e5e16012f9b9bc2f85fa994 5344468c16eb735c28476b0205e122fc3e43b0819fab0110b46e7835c9805293
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/09bf01f8HC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/b1090594HC7Z4.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"83b-1907ba24330"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/7e71b23dHC7Z4.js | 150.109.94.38 | 200 OK | 1.1 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/7e71b23dHC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, ASCII text, with very long lines (2746), with no line terminators Hash5b71975a40d5e2b11fa38177cbaffa28 4c86098730a009133fa5f8127f1fa8fae995debe b4757d014bc1c6be3eebcbbc38f194afac08a9017a0170dda50497ace17ef59f
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/7e71b23dHC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/b1090594HC7Z4.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:52 GMT
ETag: W/"aba-1907ba24b00"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/4cd1ec68QW743.css | 150.109.94.38 | 200 OK | 323 B |
URL GET HTTP/1.1guatexgt.top/GT/assets/4cd1ec68QW743.css IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeASCII text, with very long lines (322) Hashbffc12e40f0d227772826cc4ab6b1d99 348bed4d1364d4933bbfe5feb5f9c61e3c5a1a6e 4cd1ec684ce1c4f864a8e95f9f7695c7f708160192531ff8e55fc5023abf5b64
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/4cd1ec68QW743.css HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:12 GMT
Content-Type: text/css; charset=utf-8
Content-Length: 323
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"143-1907ba24330"
|
|
| guatexgt.top/api/MC44NTE0NjE4OTEyMDY5ODY4 | 150.109.94.38 | 200 OK | 879 B |
URL POST HTTP/1.1guatexgt.top/api/MC44NTE0NjE4OTEyMDY5ODY4 IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeopenssl enc'd data with salted password, base64 encoded Hash17337e28e637d5224935e5dc50c1db26 bb06ec632dd4f3d809c431f3a9551493143403ac cf6a6e371552790aaf430b1081e2362c79b5fa7b6aa1fe68c4fa0adba84bdccd
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
POST /api/MC44NTE0NjE4OTEyMDY5ODY4 HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/encrypt
Content-Length: 300
Origin: https://guatexgt.top
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:13 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
ETag: W/"440-uwbsYy3U89gJxDHzqVUUkxQ0A6w"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/51aa9dd4HC7Z4.js | 150.109.94.38 | 200 OK | 2.4 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/51aa9dd4HC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (6438), with no line terminators Hash658877293a5eefeb39410d03527bd68b ea597acddfa37eeb9b3f7df8da16f6d1d3e00573 7c41662ea17e7372530275b0d85386e9f2c10e2e412489dd959f22cd277fc459
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/51aa9dd4HC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/af45cd74HC7Z4.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:13 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"192b-1907ba24330"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/294db625QW743.css | 150.109.94.38 | 200 OK | 84 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/294db625QW743.css IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeASCII text, with very long lines (40117) Hash1a85c58ece89bc5b27ad56bd6843f5c4 5c42fd28773041a4125b36ccc75bba96d1fd8c22 294db625339a0644271bcf64751058f1ff52308961e763faf0fd22bea56e9d61
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/294db625QW743.css HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:12 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"9025d-1907ba24330"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/2a4a2c6fHC7Z4.js | 150.109.94.38 | 200 OK | 33 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/2a4a2c6fHC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65476), with no line terminators Hash467c266a95ca807164133c5f8d58620a 9543576066f185be92b8541b1128c622fb874857 3d899a5131f756cec3f4ea5d469405dedfff4b7fe7b966503fb25b66e242e333
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/2a4a2c6fHC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/b1090594HC7Z4.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:13 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"1b8d7-1907ba24330"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/c27b6911HC7Z4.js | 150.109.94.38 | 200 OK | 827 B |
URL GET HTTP/1.1guatexgt.top/GT/assets/c27b6911HC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, ASCII text, with very long lines (1990), with no line terminators Hashb3fdaa2637b1e94aed44a1c64babca0c 7e6cd172422144daa91419ae9527b7222af94d2e c2d2e96660abcedd77805cab88b39910572ec800e86208e8683f71592e6fc72b
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/c27b6911HC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/51aa9dd4HC7Z4.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:13 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:52 GMT
ETag: W/"7c6-1907ba24b00"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/51aa9dd4HC7Z4.js | 150.109.94.38 | 200 OK | 2.4 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/51aa9dd4HC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (6438), with no line terminators Hash658877293a5eefeb39410d03527bd68b ea597acddfa37eeb9b3f7df8da16f6d1d3e00573 7c41662ea17e7372530275b0d85386e9f2c10e2e412489dd959f22cd277fc459
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/51aa9dd4HC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://guatexgt.top/GT/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:13 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"192b-1907ba24330"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/2a4a2c6fHC7Z4.js | 150.109.94.38 | 200 OK | 33 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/2a4a2c6fHC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65476), with no line terminators Hash467c266a95ca807164133c5f8d58620a 9543576066f185be92b8541b1128c622fb874857 3d899a5131f756cec3f4ea5d469405dedfff4b7fe7b966503fb25b66e242e333
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/2a4a2c6fHC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://guatexgt.top/GT/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:13 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"1b8d7-1907ba24330"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/c27b6911HC7Z4.js | 150.109.94.38 | 200 OK | 827 B |
URL GET HTTP/1.1guatexgt.top/GT/assets/c27b6911HC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, ASCII text, with very long lines (1990), with no line terminators Hashb3fdaa2637b1e94aed44a1c64babca0c 7e6cd172422144daa91419ae9527b7222af94d2e c2d2e96660abcedd77805cab88b39910572ec800e86208e8683f71592e6fc72b
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/c27b6911HC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://guatexgt.top/GT/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:13 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:52 GMT
ETag: W/"7c6-1907ba24b00"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/796de064QW743.woff2 | 150.109.94.38 | 200 OK | 11 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/796de064QW743.woff2 IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11028, version 1.0 Hash1f6d3cf6d38f25d83d95f5a800b8cac3 279f300ca2cbbdf9f5036ef2f438607fbf377daa 796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/796de064QW743.woff2 HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/294db625QW743.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:13 GMT
Content-Type: font/woff2
Content-Length: 11028
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"2b14-1907ba24330"
|
|
| guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70QoV_ | 150.109.94.38 | 200 OK | 118 B |
URL GET HTTP/1.1guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70QoV_ IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeASCII text, with no line terminators Hash270a98fe29c0e11b96ee7c484b275d05 2e25ec6a28e5bdbcc3f2a9f989dffeecae05a095 0aac46350b57776a511f47a6a6ff266f26d5b41b21b20087680e21f72ec06a84
GET /socket.io/?EIO=4&transport=polling&t=P70QoV_ HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:13 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 118
Connection: keep-alive
Access-Control-Allow-Origin: *
cache-control: no-store
|
|
| guatexgt.top/GT/assets/f4397cedQW743.css | 150.109.94.38 | 200 OK | 400 B |
URL GET HTTP/1.1guatexgt.top/GT/assets/f4397cedQW743.css IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeASCII text, with very long lines (399) Hash2b914e8858486eab2dcfeaa859ea8357 b782507d4e8cedba35aad5cbd1c4778115a1cb12 f4397ced557e01524d17b5d0988131cbf8b4c9cb5af39749e74e3671b8eb1917
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/f4397cedQW743.css HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:13 GMT
Content-Type: text/css; charset=utf-8
Content-Length: 400
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"190-1907ba24330"
|
|
| guatexgt.top/GT/assets/c54b3400HC7Z4.js | 150.109.94.38 | 200 OK | 18 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/c54b3400HC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators Hasheaa2f278de27a53e0cd9060e72f48f8e 7df3da8490073fe4f4ef63b40d7a3be331d4ceb1 93b0d2df6d962642e1d2654daafeb7deacc5376ed1e93f317fb1054e3f3823b6
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/c54b3400HC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/af45cd74HC7Z4.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:13 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:52 GMT
ETag: W/"14fac-1907ba24b00"
Content-Encoding: gzip
|
|
| guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70Qoa9&sid=zWbPBhwwqlU3jgJQBb2z | 150.109.94.38 | 200 OK | 2 B |
URL POST HTTP/1.1guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70Qoa9&sid=zWbPBhwwqlU3jgJQBb2z IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /socket.io/?EIO=4&transport=polling&t=P70Qoa9&sid=zWbPBhwwqlU3jgJQBb2z HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain;charset=UTF-8
Content-Length: 2
Origin: https://guatexgt.top
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Content-Type: text/html
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Origin: *
cache-control: no-store
|
|
| guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70QoaB&sid=zWbPBhwwqlU3jgJQBb2z | 150.109.94.38 | 200 OK | 32 B |
URL GET HTTP/1.1guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70QoaB&sid=zWbPBhwwqlU3jgJQBb2z IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeASCII text, with no line terminators Hash08539f6ef8b0f93f409b4167d53d4034 7d3de6a31fd74996f25f97f5d26a13d2915d2eb4 14418a418b47c7c564db59fba6f7e3595dc050f8a36fdb563bc618b472561f28
GET /socket.io/?EIO=4&transport=polling&t=P70QoaB&sid=zWbPBhwwqlU3jgJQBb2z HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 32
Connection: keep-alive
Access-Control-Allow-Origin: *
cache-control: no-store
|
|
| guatexgt.top/GT/assets/7841612aHC7Z4.js | 150.109.94.38 | 200 OK | 36 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/7841612aHC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (59874), with no line terminators Hash58a79c3e880b5174360c0c963da44614 0fc14c913e2b0326717df1509e9c6c83eb5742a7 80f3a47ac3e2481b36dbb5b206127a8bece87ff4f9ef31fa58e8542f1ce55e00
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/7841612aHC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/index-39fb359f.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:52 GMT
ETag: W/"1c64a-1907ba24b00"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/c54b3400HC7Z4.js | 150.109.94.38 | 200 OK | 18 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/c54b3400HC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators Hasheaa2f278de27a53e0cd9060e72f48f8e 7df3da8490073fe4f4ef63b40d7a3be331d4ceb1 93b0d2df6d962642e1d2654daafeb7deacc5376ed1e93f317fb1054e3f3823b6
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/c54b3400HC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://guatexgt.top/GT/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:52 GMT
ETag: W/"14fac-1907ba24b00"
Content-Encoding: gzip
|
|
| guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70QoeM&sid=zWbPBhwwqlU3jgJQBb2z | 150.109.94.38 | 200 OK | 2 B |
URL POST HTTP/1.1guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70QoeM&sid=zWbPBhwwqlU3jgJQBb2z IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /socket.io/?EIO=4&transport=polling&t=P70QoeM&sid=zWbPBhwwqlU3jgJQBb2z HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain;charset=UTF-8
Content-Length: 49
Origin: https://guatexgt.top
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Content-Type: text/html
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Origin: *
cache-control: no-store
|
|
| guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70QoeI&sid=zWbPBhwwqlU3jgJQBb2z | 150.109.94.38 | 200 OK | 58 B |
URL GET HTTP/1.1guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70QoeI&sid=zWbPBhwwqlU3jgJQBb2z IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeASCII text, with no line terminators Hash47d12d343c1b854ce82615adba93c0c1 74a58e9cfbb0f55c1a656eb08f188a9e77dbdb15 5656aca6c38b0564dbc0dd3ebcda6c8ab755056b0ae69a7273573c5f57d1902c
GET /socket.io/?EIO=4&transport=polling&t=P70QoeI&sid=zWbPBhwwqlU3jgJQBb2z HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 58
Connection: keep-alive
Access-Control-Allow-Origin: *
cache-control: no-store
|
|
| guatexgt.top/GT/assets/index-39fb359f.js | 150.109.94.38 | 200 OK | 149 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/index-39fb359f.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size149 kB (149437 bytes) Hashc44379fc53d985e1258cda762817fb10 3b5cd099b6351cf012b75e85943c5d71a8013c3b e9c97bb7d7e8036ac0b07ccaa82f5397cc7f003be07dd69726cb3e9f34973bbe
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/index-39fb359f.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://guatexgt.top/GT/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:13 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:46:02 GMT
ETag: W/"7b2d3-1907ba27210"
Content-Encoding: gzip
|
|
| guatexgt.top/GT/assets/7841612aHC7Z4.js | 150.109.94.38 | 200 OK | 36 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/7841612aHC7Z4.js IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (59874), with no line terminators Hash58a79c3e880b5174360c0c963da44614 0fc14c913e2b0326717df1509e9c6c83eb5742a7 80f3a47ac3e2481b36dbb5b206127a8bece87ff4f9ef31fa58e8542f1ce55e00
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/7841612aHC7Z4.js HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://guatexgt.top/GT/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:52 GMT
ETag: W/"1c64a-1907ba24b00"
Content-Encoding: gzip
|
|
| guatexgt.top/socket.io/?EIO=4&transport=websocket&sid=zWbPBhwwqlU3jgJQBb2z | 150.109.94.38 | | 0 B |
URL guatexgt.top/socket.io/?EIO=4&transport=websocket&sid=zWbPBhwwqlU3jgJQBb2z IP150.109.94.38:0 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=zWbPBhwwqlU3jgJQBb2z HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://guatexgt.top
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lpf5XmbRxU4hwiT0Prh3og==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Z6LeoYQqBFQk9lytwlx3DmQJtJg=
Access-Control-Allow-Origin: *
|
|
| guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70QoiV&sid=zWbPBhwwqlU3jgJQBb2z | 150.109.94.38 | 200 OK | 98 B |
URL GET HTTP/1.1guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70QoiV&sid=zWbPBhwwqlU3jgJQBb2z IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeASCII text, with no line terminators Hash6f3b4ad69aa5980085587193e6c8fadc 5938417d91287d685fcfc6a700199b32e39ad63b bc665c4cc7a1fa0a97925f53e5401f021b5c11bd9a7a3205a07e6300c3de22c5
GET /socket.io/?EIO=4&transport=polling&t=P70QoiV&sid=zWbPBhwwqlU3jgJQBb2z HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 98
Connection: keep-alive
Access-Control-Allow-Origin: *
cache-control: no-store
|
|
| guatexgt.top/GT/assets/3dc5d0c5QW743.woff2 | 150.109.94.38 | 200 OK | 7.9 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/3dc5d0c5QW743.woff2 IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7900, version 1.0 Hash43751174b6b810eb169101a20d8c26f8 7e48d54b1df1d3f657fc90227590308183ff9ddc 3dc5d0c52428fe1696264907a1054ebbaac07f8cbe45832c105f819c2ae397c0
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/3dc5d0c5QW743.woff2 HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/294db625QW743.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Content-Type: font/woff2
Content-Length: 7900
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"1edc-1907ba24330"
|
|
| guatexgt.top/GT/assets/289e0afcQW743.woff2 | 150.109.94.38 | 200 OK | 7.7 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/289e0afcQW743.woff2 IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7740, version 1.0 Hash792477d09826b11d1e5a611162c9797a bba020c0fd0426079872fdd7929a260b414845cd 289e0afc8be731a86822349e54557296f145926496bd2138db1bac0db77f77a2
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/289e0afcQW743.woff2 HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/294db625QW743.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Content-Type: font/woff2
Content-Length: 7740
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"1e3c-1907ba24330"
|
|
| guatexgt.top/GT/assets/bce2f309QW743.woff2 | 150.109.94.38 | 200 OK | 11 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/bce2f309QW743.woff2 IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11072, version 1.0 Hashe7df3d0942815909add8f9d0c40d00d9 cf5032eea3399a58870e8a05e629b006a8c7c3c7 bce2f309470952b7affa62ff4d91b454334c68cefa541429b502904d20696875
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/bce2f309QW743.woff2 HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/294db625QW743.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Content-Type: font/woff2
Content-Length: 11072
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"2b40-1907ba24330"
|
|
| guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70QomZ&sid=zWbPBhwwqlU3jgJQBb2z | 150.109.94.38 | 200 OK | 1 B |
URL GET HTTP/1.1guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70QomZ&sid=zWbPBhwwqlU3jgJQBb2z IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typevery short file (no magic) Hash1679091c5a880faf6fb5e6087eb1b2dc c1dfd96eea8cc2b62785275bca38ac261256e278 e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683
GET /socket.io/?EIO=4&transport=polling&t=P70QomZ&sid=zWbPBhwwqlU3jgJQBb2z HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:15 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 1
Connection: keep-alive
Access-Control-Allow-Origin: *
cache-control: no-store
|
|
| guatexgt.top/GT/assets/d0b4256aQW743.woff2 | 150.109.94.38 | 200 OK | 78 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/d0b4256aQW743.woff2 IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 78196, version 331.-31261 Hashe8a427e15cc502bef99cfd722b37ea98 a9922842a120a7f1eaced667480c5e185a106d69 d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/d0b4256aQW743.woff2 HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/294db625QW743.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Content-Type: font/woff2
Content-Length: 78196
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"13174-1907ba24330"
|
|
| guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70Qomj&sid=zWbPBhwwqlU3jgJQBb2z | 150.109.94.38 | 200 OK | 2 B |
URL POST HTTP/1.1guatexgt.top/socket.io/?EIO=4&transport=polling&t=P70Qomj&sid=zWbPBhwwqlU3jgJQBb2z IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /socket.io/?EIO=4&transport=polling&t=P70Qomj&sid=zWbPBhwwqlU3jgJQBb2z HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain;charset=UTF-8
Content-Length: 571
Origin: https://guatexgt.top
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:15 GMT
Content-Type: text/html
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Origin: *
cache-control: no-store
|
|
| guatexgt.top/GT/assets/643e38d8QW743.woff2 | 150.109.94.38 | 200 OK | 7.8 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/643e38d8QW743.woff2 IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7844, version 1.0 Hash42d3308e3aca8742731f63154187bdd7 69002807427be874f7b46a98f8a611d2c5c5f52b 643e38d8c288a1da34a14a68a5012441929108d50054414ce8cc33fad36a2354
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/643e38d8QW743.woff2 HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/294db625QW743.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:15 GMT
Content-Type: font/woff2
Content-Length: 7844
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"1ea4-1907ba24330"
|
|
| guatexgt.top/GT/layout/images/55.png | 150.109.94.38 | 200 OK | 118 kB |
URL GET HTTP/1.1guatexgt.top/GT/layout/images/55.png IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typePNG image data, 406 x 400, 8-bit/color RGBA, non-interlaced Size118 kB (118017 bytes) Hashfdbc85296accb3fc94909cebc8f28f33 d13cd133e7308f03cbb12772be9e639ed720b270 050bae79865587fc5a3e9b7442c9f8e5038ebba7e46a637f39b97a510c110fef
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/layout/images/55.png HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Content-Type: image/png
Content-Length: 118017
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:44 GMT
ETag: W/"1cd01-1907ba22bc0"
|
|
| guatexgt.top/GT/layout/images/54.png | 150.109.94.38 | 200 OK | 110 kB |
URL GET HTTP/1.1guatexgt.top/GT/layout/images/54.png IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typePNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced Size110 kB (110040 bytes) Hashb4d45a0699a5b1edcecde47cd5814cad 68d1963fb0f03e72810e5249884838077c846bea 52550ddd5daeef7a7ccaf33c7288cf21f125f5d3d3a8f6ca30c7ebe97c196cf3
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/layout/images/54.png HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Content-Type: image/png
Content-Length: 110040
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:44 GMT
ETag: W/"1add8-1907ba22bc0"
|
|
| guatexgt.top/GT/layout/images/62.png | 150.109.94.38 | 200 OK | 5.9 kB |
URL GET HTTP/1.1guatexgt.top/GT/layout/images/62.png IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typePNG image data, 394 x 124, 8-bit gray+alpha, non-interlaced Hash525a8dd5f03bcaf1ded1ee3337abcdd6 0fa6fb07bbd273eb717fc960a2a47bb6d452ec36 1ac699625073b29df7ad63c96d35d0903e9e5c561c76244410ad7bce53755f6b
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/layout/images/62.png HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:15 GMT
Content-Type: image/png
Content-Length: 5850
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:44 GMT
ETag: W/"16da-1907ba22bc0"
|
|
| guatexgt.top/GT/assets/125156b3QW743.svg | 150.109.94.38 | 200 OK | 1.2 kB |
URL GET HTTP/1.1guatexgt.top/GT/assets/125156b3QW743.svg IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeSVG Scalable Vector Graphics image Hash11eff03fe9e5ae73e19d39399885f091 d6f6f85cda36a3058855627a63da9f19d02e22b2 125156b395a4441d633c63327e59e4c01ded8c07dd3520ed65681a4363526ad9
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/assets/125156b3QW743.svg HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/assets/294db625QW743.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:15 GMT
Content-Type: image/svg+xml
Content-Length: 1218
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:50 GMT
ETag: W/"4c2-1907ba24330"
|
|
| guatexgt.top/GT/layout/images/56.png | 150.109.94.38 | 200 OK | 95 kB |
URL GET HTTP/1.1guatexgt.top/GT/layout/images/56.png IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typePNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced Hashe9e38ea4bc56db0cc71b410089824736 923ffac596f19753fc38b2d85ae6119b97aa60af 7886c301b96da2a0aff4202b5ec45cee90dd23019f33daea14092eb1e4d32423
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/layout/images/56.png HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:15 GMT
Content-Type: image/png
Content-Length: 95232
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:44 GMT
ETag: W/"17400-1907ba22bc0"
|
|
| guatexgt.top/GT/layout/images/53.png | 150.109.94.38 | 200 OK | 137 kB |
URL GET HTTP/1.1guatexgt.top/GT/layout/images/53.png IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typePNG image data, 1536 x 864, 8-bit/color RGBA, non-interlaced Size137 kB (137105 bytes) Hashe3b243a112777274baf93b13b5c90e39 a57499aa308e6526cf026cc4c6f75099b6245ef4 e8e622848800bf14c3a5c357baf0e4fffcdb74a71109874ca283918e416d021f
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/layout/images/53.png HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:15 GMT
Content-Type: image/png
Content-Length: 137105
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:44 GMT
ETag: W/"21791-1907ba22bc0"
|
|
| guatexgt.top/GT/layout/images/57.png | 150.109.94.38 | 200 OK | 50 kB |
URL GET HTTP/1.1guatexgt.top/GT/layout/images/57.png IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typePNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced Hashd5d9ea5dc8632e36e7977b8bcca0bc45 c14bf39df63564539c3ae97c0b209dfde3e4ddaf 895cc4a7dff4584cae3f48194cb352bfc87d1771ec60da16848bbc43bbae687c
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/layout/images/57.png HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:15 GMT
Content-Type: image/png
Content-Length: 49981
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:44 GMT
ETag: W/"c33d-1907ba22bc0"
|
|
| guatexgt.top/GT/layout/images/61.png | 150.109.94.38 | 200 OK | 212 kB |
URL GET HTTP/1.1guatexgt.top/GT/layout/images/61.png IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typePNG image data, 1033 x 307, 8-bit/color RGBA, non-interlaced Size212 kB (212053 bytes) Hash9e2a983fcd6ff6633dc9890a3bcff7c6 d179b1958b631004568ad085e0fc4a86db34645f 83cf0684d784fcfe55b19735c380c6a891a4a3a147ac2043a82bcd771a952171
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/layout/images/61.png HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:15 GMT
Content-Type: image/png
Content-Length: 212053
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:44 GMT
ETag: W/"33c55-1907ba22bc0"
|
|
| guatexgt.top/GT/layout/images/60.png | 150.109.94.38 | 200 OK | 64 kB |
URL GET HTTP/1.1guatexgt.top/GT/layout/images/60.png IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typePNG image data, 402 x 400, 8-bit/color RGBA, non-interlaced Hash6b97de379b91d864b0a5dbfb8a2063d4 cf8a3e73388c664605544363695a1c29cbda357f cdf0f7d2ef8ebc4c4321c0b1b2043bcb8d40a8ff4cdf790366db88d5d66fb23d
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/layout/images/60.png HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:15 GMT
Content-Type: image/png
Content-Length: 64507
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:44 GMT
ETag: W/"fbfb-1907ba22bc0"
|
|
| guatexgt.top/GT/layout/images/59.png | 150.109.94.38 | 200 OK | 12 kB |
URL GET HTTP/1.1guatexgt.top/GT/layout/images/59.png IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typePNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced Hash84ba60276c7b3f9e13e3dd0396514591 f1778b4ae643050a6921f604c1fe897fe19c2e06 0e7345db0ffe672048f8c638d47d4b3dc531c720339fd614d7d6b8293e0d26a2
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /GT/layout/images/59.png HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:15 GMT
Content-Type: image/png
Content-Length: 12225
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Thu, 04 Jul 2024 02:45:44 GMT
ETag: W/"2fc1-1907ba22bc0"
|
|
| guatexgt.top/api/MC4yOTc5NTkxMDg3NzE4NjMwNQ== | 150.109.94.38 | 200 OK | 36 B |
URL POST HTTP/1.1guatexgt.top/api/MC4yOTc5NTkxMDg3NzE4NjMwNQ== IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
File typeopenssl enc'd data with salted password, base64 encoded Hashf78440dddd24b2fc74298c88c2021d46 0b429a0c59bc1e89649b32a84e9a0226f1b60d84 db8526d61662c088fbd48bd32ba255405b19b58a2b008f5fe6ec2711bb3b5ea2
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
POST /api/MC4yOTc5NTkxMDg3NzE4NjMwNQ== HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/encrypt
Content-Length: 308
Origin: https://guatexgt.top
DNT: 1
Connection: keep-alive
Referer: https://guatexgt.top/GT/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 36
Connection: keep-alive
Access-Control-Allow-Origin: *
ETag: W/"24-C0KaDFm8HolkmzKoTpoCJvG2DYQ"
|
|
| guatexgt.top/socket.io/?EIO=4&transport=websocket&sid=zWbPBhwwqlU3jgJQBb2z | 150.109.94.38 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1guatexgt.top/socket.io/?EIO=4&transport=websocket&sid=zWbPBhwwqlU3jgJQBb2z IP150.109.94.38:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectguatexgt.top Fingerprint9A:F4:D6:F2:6B:D1:CD:2F:6C:F6:34:2C:7D:98:EB:D5:E6:AC:A3:A2 ValidityWed, 04 Sep 2024 13:31:46 GMT - Tue, 03 Dec 2024 13:31:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket&sid=zWbPBhwwqlU3jgJQBb2z HTTP/1.1
Host: guatexgt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://guatexgt.top
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lpf5XmbRxU4hwiT0Prh3og==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx/1.24.0
Date: Thu, 05 Sep 2024 04:22:14 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Z6LeoYQqBFQk9lytwlx3DmQJtJg=
Access-Control-Allow-Origin: *
|
|