| |  185.208.156.66 | 302 Found | 1.0 kB |
IP185.208.156.66:443 ASN#42624 Global-Data System IT Corporation
CertificateIssuerLet's Encrypt Subjectminbic090.shop Fingerprint58:43:32:7A:A6:7B:5A:22:79:C0:B0:5B:D7:63:04:B4:CB:7D:E7:36 ValidityThu, 20 Feb 2025 13:21:22 GMT - Wed, 21 May 2025 13:21:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Generic/Spear Phishing | | Quad9 DNS | malicious | Sinkholed |
GET /zoo.php HTTP/1.1
Host: minbic090.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://minbic090.shop/mm.html
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html
content-length: 771
date: Sat, 08 Mar 2025 06:08:51 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
location: https://minbic090.shop/yy.html
X-Firefox-Spdy: h2
|
|
| | 185.208.156.66 | 200 OK | 1.0 kB |
IP185.208.156.66:443 ASN#42624 Global-Data System IT Corporation
CertificateIssuerLet's Encrypt Subjectminbic090.shop Fingerprint58:43:32:7A:A6:7B:5A:22:79:C0:B0:5B:D7:63:04:B4:CB:7D:E7:36 ValidityThu, 20 Feb 2025 13:21:22 GMT - Wed, 21 May 2025 13:21:21 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1037), with no line terminators Hash316dd0611dfa35e9fd7531d0ec708aec 85f8ff3564a5c14483702fa75a4db4b3972dad37 04d8abb3d5e51ae0457d63ae91698a7b1189148121b7bd809dc43c20d621aa47
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /yy.html HTTP/1.1
Host: minbic090.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://minbic090.shop/mm.html
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
last-modified: Mon, 03 Mar 2025 22:45:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 441
date: Sat, 08 Mar 2025 06:08:51 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| minbic090.shop/favicon.ico | 185.208.156.66 | 404 Not Found | 1.3 kB |
URL GET minbic090.shop/favicon.ico IP185.208.156.66:443 ASN#42624 Global-Data System IT Corporation
Requested byhttps://minbic090.shop/yy.html CertificateIssuerLet's Encrypt Subjectminbic090.shop Fingerprint58:43:32:7A:A6:7B:5A:22:79:C0:B0:5B:D7:63:04:B4:CB:7D:E7:36 ValidityThu, 20 Feb 2025 13:21:22 GMT - Wed, 21 May 2025 13:21:21 GMT
File typeHTML document, ASCII text, with very long lines (1285), with no line terminators Hash94f08a3a6562f7f079c4f5a67b7260e2 cc5d03e17c41ee6bb2ebf0d26d4354a486ca1823 44ea069d9a3f7dcea953ac173384578b6185f4b2ece05a6f4513b9fda29c4c29
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: minbic090.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://minbic090.shop/yy.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 08 Mar 2025 06:08:52 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| gameprox.cc/go/539433/33f4 |  91.212.166.23 | 200 OK | 10 B |
URL User Request GET gameprox.cc/go/539433/33f4 IP91.212.166.23:443
CertificateIssuerLet's Encrypt Subjectgameprox.cc FingerprintF9:E4:DB:FF:8D:D0:1F:45:32:CA:72:64:5B:AC:97:C0:E0:99:24:15 ValidityTue, 04 Mar 2025 03:54:49 GMT - Mon, 02 Jun 2025 03:54:48 GMT
File typeASCII text, with no line terminators Hash45614538a95a50586d6926f3494af825 23ddeb3ad90efb9cdae7e0888c6c4ce84678750d b34d15090d10d08f584a1a3f11911cec77f496e8b871089985be31f2f10bb3b5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /go/539433/33f4 HTTP/1.1
Host: gameprox.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://minbic090.shop/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sat, 08 Mar 2025 06:08:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: PHPSESSID=423sbol98t4ooehltb9456gp7r; expires=Sat, 07-May-2044 06:08:52 GMT; Max-Age=604800000; path=/; domain=gameprox.cc
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Pragma: no-cache
Content-Encoding: gzip
|
|
| gameprox.cc/favicon.ico | 91.212.166.23 | 500 Internal Server Error | 534 B |
IP91.212.166.23:443
Requested byhttps://gameprox.cc/go/539433/33f4 CertificateIssuerLet's Encrypt Subjectgameprox.cc FingerprintF9:E4:DB:FF:8D:D0:1F:45:32:CA:72:64:5B:AC:97:C0:E0:99:24:15 ValidityTue, 04 Mar 2025 03:54:49 GMT - Mon, 02 Jun 2025 03:54:48 GMT
File typeHTML document, ASCII text, with very long lines (550), with no line terminators Hashe55e9987833fdb68bfd737558ef687f8 c6f6a191a9dad1d066d3d2ec087a3e329b3aaf40 13c17cbdcd6fa6fc1823c9e76919579ee2d08652ee6b24e1065d117cc0184676
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: gameprox.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gameprox.cc/go/539433/33f4
Cookie: PHPSESSID=423sbol98t4ooehltb9456gp7r
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 500 Internal Server Error
Server: nginx/1.18.0
Date: Sat, 08 Mar 2025 06:08:52 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
|
|
| |  142.250.74.161 | 200 OK | 81 kB |
IP142.250.74.161:443
CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com FingerprintE0:F5:CA:17:E2:F4:44:81:53:EB:48:F0:DA:35:D0:F5:1E:F3:3B:0C ValidityWed, 26 Feb 2025 15:33:37 GMT - Wed, 21 May 2025 15:33:36 GMT
File typeHTML document, ASCII text, with very long lines (16914) Hashe444636b5310dc088af903cce4e4447b 48674688699fe9514c8dd01eaf2ee6421c3b08d6 c6025db66492e5167ef4ec0c1385239aeff6a153332c502fdfe5fb0b1713656b
GET / HTTP/1.1
Host: jvghtd.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 08 Mar 2025 06:08:46 GMT
date: Sat, 08 Mar 2025 06:08:46 GMT
cache-control: private, max-age=0
last-modified: Fri, 07 Feb 2025 00:52:33 GMT
etag: W/"b1635609f84272ef268ae2295cdd61bacd084dbe1469fdde7280b9c384ece910"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 16148
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| | 185.208.156.66 | 200 OK | 1.3 kB |
IP185.208.156.66:443 ASN#42624 Global-Data System IT Corporation
CertificateIssuerLet's Encrypt Subjectminbic090.shop Fingerprint58:43:32:7A:A6:7B:5A:22:79:C0:B0:5B:D7:63:04:B4:CB:7D:E7:36 ValidityThu, 20 Feb 2025 13:21:22 GMT - Wed, 21 May 2025 13:21:21 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1252), with no line terminators Hash9079af990c11985720dd15de643f1312 c02e071644fd19416b4aa9510902885aadced190 e933de6756bd22aa266a8bf09ce094e5e8d4d5db3f4b00c74e66dfdb8561d696
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Generic/Spear Phishing | | Quad9 DNS | malicious | Sinkholed |
GET /mm.html HTTP/1.1
Host: minbic090.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jvghtd.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
last-modified: Sun, 23 Feb 2025 17:11:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 564
date: Sat, 08 Mar 2025 06:08:47 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| minbic090.shop/favicon.ico | 185.208.156.66 | 404 Not Found | 1.3 kB |
URL GET minbic090.shop/favicon.ico IP185.208.156.66:443 ASN#42624 Global-Data System IT Corporation
Requested byhttps://minbic090.shop/mm.html CertificateIssuerLet's Encrypt Subjectminbic090.shop Fingerprint58:43:32:7A:A6:7B:5A:22:79:C0:B0:5B:D7:63:04:B4:CB:7D:E7:36 ValidityThu, 20 Feb 2025 13:21:22 GMT - Wed, 21 May 2025 13:21:21 GMT
File typeHTML document, ASCII text, with very long lines (1285), with no line terminators Hash94f08a3a6562f7f079c4f5a67b7260e2 cc5d03e17c41ee6bb2ebf0d26d4354a486ca1823 44ea069d9a3f7dcea953ac173384578b6185f4b2ece05a6f4513b9fda29c4c29
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: minbic090.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://minbic090.shop/mm.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 08 Mar 2025 06:08:47 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| sharkboss.top/share/get_redir.php |  172.67.129.154 | 200 OK | 19 B |
URL GET sharkboss.top/share/get_redir.php IP172.67.129.154:443
Requested byhttps://minbic090.shop/yy.html CertificateIssuerGoogle Trust Services Subjectsharkboss.top FingerprintF2:F5:33:FF:B0:0D:62:5B:A7:B5:ED:62:D4:F1:91:84:57:D1:58:00 ValiditySat, 22 Feb 2025 05:54:45 GMT - Fri, 23 May 2025 06:52:25 GMT
File typeASCII text, with no line terminators Hashfe5652da35baac4c3583ba866572ee04 de0331583646dba4e77b98ff9f42d8d2b5156876 80277329a0588d1a9dde473c8f664c66e897e10ecc1aa682f44c79c5f4ec79ea
GET /share/get_redir.php HTTP/1.1
Host: sharkboss.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://minbic090.shop/
Origin: https://minbic090.shop
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 08 Mar 2025 06:08:52 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=b3305863ddcd2173737195af8ad93eb9; expires=Sat, 07-May-2044 06:08:52 GMT; Max-Age=604800000; path=/; domain=sharkboss.top
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hbhVf%2FDJMS7SpvgWRqnnrwYcHRDXcudh4az5Sb1nXlvqO5goCMqEJ5oK2On%2BUfgkU%2BwNV%2FJetoHrL38rTz%2BY3cPZbYSGSmZ0Vw9w1Ku4%2FmOKOFkS7iajUZv2ARNzmK4C"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91d029155e06568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=603&min_rtt=532&rtt_var=162&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3276&recv_bytes=1218&delivery_rate=7006451&cwnd=254&unsent_bytes=0&cid=a966739dc10eb651&ts=154&x=0"
X-Firefox-Spdy: h2
|
|