Report - mail.freegiftpubgmobile.duckdns.org/

Report Overview

Submitted URL
mail.freegiftpubgmobile.duckdns.org/
IP
20.5.64.12
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2022-09-21 05:30:07
Access
Website Title
Final URL
Tags
None
urlquery detections
DynDNS domain detected

Detections

urlquery
29
Network Intrusion Detection
0
Threat Detection Systems
66

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
www.pubgmobile.com	21653	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.0 kB	1.1 MB	23.36.76.250
l.top4top.io	926491	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	438 B	20 kB	65.21.235.194
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.3 kB	6.2 kB	23.36.77.32
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	3.5 kB	142.250.74.3
mail.freegiftpubgmobile.duckdns.org	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	9.5 kB	1.2 MB	20.5.64.12
i.ibb.co	13485	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	21 kB	14 MB	51.210.3.236
ajax.googleapis.com	12905	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	412 B	31 kB	216.58.211.10
stackpath.bootstrapcdn.com	2467	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	426 B	263 kB	104.18.10.207
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	59 kB	34.120.237.76
a.top4top.io	588496	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	438 B	18 kB	51.159.64.45
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	143.204.55.110
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	35.162.217.251
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	987 B	1.8 kB	93.184.220.29
cdnjs.cloudflare.com	235	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	460 B	7.0 kB	104.17.25.14
i.postimg.cc	23840	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	8.3 kB	812 kB	162.19.88.69
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	427 B	31 kB	216.58.211.10
code.jquery.com	634	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	297 B	33 kB	69.16.175.10
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.27
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	968 B	28 kB	142.250.74.163

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent
2022-09-20	medium	mail.freegiftpubgmobile.duckdns.org/	Tencent

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-21	medium	mail.freegiftpubgmobile.duckdns.org/	Phishing
2022-09-21	medium	mail.freegiftpubgmobile.duckdns.org/js/script.js	Phishing
2022-09-21	medium	l.top4top.io/m_1725u5z7i1.mp3	Malware
2022-09-21	medium	a.top4top.io/m_1725zobal2.mp3	Malware
2022-09-21	medium	mail.freegiftpubgmobile.duckdns.org/media/header.mp4	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js	84 kB	2023-03-07	2024-04-15
Pretty URL ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js IP 216.58.211.10 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-04-15 14:57:25 Times Seen13578 Hash e40ec2161fe7993196f23c8a07346306 afb90752e0a90c24b7f724faca86c5f3d15d1178 874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4 Loading...

	ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js	84 kB	2023-03-07	2024-04-15
Pretty URL ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-04-15 14:55:38 Times Seen13961 Hash 32015dd42e9582a80a84736f5d9a44d7 41b4bfbaa96be6d1440db6e78004ade1c134e276 8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3 Loading...

	mail.freegiftpubgmobile.duckdns.org/js/script.js	8.5 kB	2023-03-07	2023-03-07
Pretty URL mail.freegiftpubgmobile.duckdns.org/js/script.js IP 20.5.64.12 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:21:48 Last Seen2023-03-07 22:28:42 Times Seen1 Hash 303af881382511e3f9b6f0b0ef24a800 5de7389e2f0299a39d29b67df9c8b2f64dda4f48 2ad01546797994d3ecaf0dbd69d9f8c2e2955fa0741933cf47bbb1a6cd8e96d5 Loading...

HTTP Transactions (143)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7751
Expires: Wed, 21 Sep 2022 07:39:06 GMT
Date: Wed, 21 Sep 2022 05:29:55 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

143.204.55.27

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.27:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Retry-After, Content-Type, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 21 Sep 2022 05:13:32 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7TqCnIS5oKuIDtbiLIZbz2cc2e1_9C4lxXEgI18E7u_AYaf-bHGPrw==
Age: 983

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain

143.204.55.110

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
143.204.55.110:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: P98kWn6vbG-VK5rSOLTdQN1UGcYYuLPOlYjvcc2tnk9VHX6TgMtokQ==
age: 3282
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:55 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.27

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.27:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 21 Sep 2022 05:03:22 GMT
Cache-Control: max-age=3600
Expires: Wed, 21 Sep 2022 05:38:02 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: JSCW1z7ZQ06vJBGLBafFyGSBfNN5XoUEI-u0Z_Vw1pr7ZXahSrW4SA==
Age: 1594

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
edf07cd621f733b0eb50c632387ebf4f
61a082d26501c2c8d481b1676d0de2e585269613
e5c4324e4c55824b86f48bf0b9a1d317a82e7d3c19bdea7a91d78ce98d68a980

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4915
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 05:29:56 GMT
Last-Modified: Wed, 21 Sep 2022 04:08:01 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

35.162.217.251

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.162.217.251:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: PUZwT6/zx60JFZVPbAdhDg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: WWAThbddeZd2HA5YgB6Amf0Jo9U=

cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css

104.17.25.14

200 OK

5.8 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css
IP
104.17.25.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65536), with no line terminators
Size
5.8 kB (5845 bytes)
Hash
a7e25a22602a2b2ed35f90fd5210cff1
148c4f275b60e6cf6253d6b4c7bdc486515b2202
312d94bafa68e11e3a4a8d7c06bc25ee161d1d965afb1fa99db79815a272d0bf

HTTP Headers

GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: text/css; charset=utf-8
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 5893840
expires: Mon, 11 Sep 2023 05:29:57 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gOVpGyeERoLqfsX2%2F03rUOwK9xIntbyevrPgovg9EwTAJm4OvXgb0i4X5FRfhKwQGuqAHwcvouIExi8hT1bFC1IO1BZ8x0vAR7dXMNwikT9stN0Mr8FWoXQ0s7P7bXtiLOsG4Z3h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74e067f44ec60b3d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
61e5226dc3bddf0c0823c3134ebde224
4b35c53e8f91a840a4125b1ff92e99589c007a37
223615fe4754c0953ed65ec85d36d5219904395c8d7d7963670ab6f4c44e22da

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3840
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 05:29:57 GMT
Last-Modified: Wed, 21 Sep 2022 04:25:57 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
61e5226dc3bddf0c0823c3134ebde224
4b35c53e8f91a840a4125b1ff92e99589c007a37
223615fe4754c0953ed65ec85d36d5219904395c8d7d7963670ab6f4c44e22da

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3840
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 05:29:57 GMT
Last-Modified: Wed, 21 Sep 2022 04:25:57 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279

i.postimg.cc/FHNVyZgK/newAkm2.png

162.19.88.69

200 OK

62 kB

URL HTTP/2
i.postimg.cc/FHNVyZgK/newAkm2.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
62 kB (62358 bytes)
Hash
ca7340f6a175ef563bf2f2c234580ef9
74b840a40d5695f788b7981d441425d45bc604b5
49d4eba953a972be1bf227524ff891c5d0ece3a5b791d1eb763bc879cc5a1f41

HTTP Headers

GET /FHNVyZgK/newAkm2.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 62358
last-modified: Sun, 19 Jun 2022 19:33:25 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/N5zb6s3X/new1.png

162.19.88.69

200 OK

30 kB

URL HTTP/2
i.postimg.cc/N5zb6s3X/new1.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced\012- data
Size
30 kB (30182 bytes)
Hash
8617f0d0753f97beeac331097ea14206
3bdd5911ecf53ab25b4f241b238c373ae74a1d62
8427617e2a1f7e380641c326fabcdefb3ab16503a787da55fead422be9c3d6b0

HTTP Headers

GET /N5zb6s3X/new1.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 30182
last-modified: Fri, 18 Mar 2022 01:22:35 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/mcxwnd22/new2.png

162.19.88.69

200 OK

36 kB

URL HTTP/2
i.postimg.cc/mcxwnd22/new2.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced\012- data
Size
36 kB (35866 bytes)
Hash
e3b1c8e5690e0c0d5b4485e62285de65
c01d6349432d28e16fe476a187e8d4c8c61d8b68
18e61cc494a55c748250b06e0e26f6950f6b796c0521c7b3721b0cd608778ff9

HTTP Headers

GET /mcxwnd22/new2.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 35866
last-modified: Fri, 18 Mar 2022 01:22:35 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/jDXByYLj/image-35.png

162.19.88.69

200 OK

20 kB

URL HTTP/2
i.postimg.cc/jDXByYLj/image-35.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size
20 kB (19476 bytes)
Hash
61c0492e7819644b54229c7eb5dd420c
0d375d5652b838042d810a035b1431d6c485ba84
95f83e5387544a62bb41e254654d6b4473828514558d7d680e725972ebac9497

HTTP Headers

GET /jDXByYLj/image-35.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 19476
last-modified: Sun, 13 Feb 2022 14:09:58 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/k2RsfrCp/new3.png

162.19.88.69

200 OK

22 kB

URL HTTP/2
i.postimg.cc/k2RsfrCp/new3.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced\012- data
Size
22 kB (22267 bytes)
Hash
10fa0fe956c600f7b27e8d6d8a48712d
126b1248a5e0c621eb7d7bcb35d878a3953d017f
98ae04c12f99b760af33ef694adb3150ed78776c916c8035682530a8ffe506ef

HTTP Headers

GET /k2RsfrCp/new3.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 22267
last-modified: Fri, 18 Mar 2022 01:22:35 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/fJQPFRdL/image-25.png

162.19.88.69

200 OK

26 kB

URL HTTP/2
i.postimg.cc/fJQPFRdL/image-25.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size
26 kB (25854 bytes)
Hash
99b30a12498275a0eab9d645bee6ed27
c2c8aaf16964979d6dea358aa491704e5c8f69c2
9590a4854a0ec6c2d57bc4e5d5ddf668ec6611f4674713871560a6d0a3b938b2

HTTP Headers

GET /fJQPFRdL/image-25.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 25854
last-modified: Sun, 13 Feb 2022 14:09:58 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

mail.freegiftpubgmobile.duckdns.org/css/style.css

20.5.64.12

200 OK

14 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/css/style.css
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
assembler source, ASCII text
Size
14 kB (13830 bytes)
Hash
f080370502a63431ee18f22463a9bc74
6e00f7f7a2d9b58b06fc34ea5da5c3529e09af7b
4f5edaf54d282f9794343dc21088c97be4328f8159536e68e444d73f92b922a9

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /css/style.css HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:57 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 13830
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

i.postimg.cc/SxQ04Qn4/navbar-logo.png

162.19.88.69

200 OK

177 kB

URL HTTP/2
i.postimg.cc/SxQ04Qn4/navbar-logo.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 1074 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size
177 kB (177317 bytes)
Hash
d2d4c42a8bef48daa7c8151a838870c9
7ad25c9e369e069f97093188699bd58a2b298888
a817051e4bb4f6a94ffc632b32ba786440fb33f2028b99a83c836631299ff587

HTTP Headers

GET /SxQ04Qn4/navbar-logo.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 177317
last-modified: Tue, 22 Mar 2022 04:46:34 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/0QWX9JsG/uc.png

162.19.88.69

200 OK

125 kB

URL HTTP/2
i.postimg.cc/0QWX9JsG/uc.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size
125 kB (125141 bytes)
Hash
e0c2e2babc8f6a27605314995d1267ce
e5ee5efed8a21f0a8c462814b6b4cae296523746
8913ad939828cfd2b6ad95bf251c3cee0a55e715203d9b79dd2301f9f28e412c

HTTP Headers

GET /0QWX9JsG/uc.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 125141
last-modified: Thu, 17 Mar 2022 02:00:52 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/tRcvfPDp/material.png

162.19.88.69

200 OK

89 kB

URL HTTP/2
i.postimg.cc/tRcvfPDp/material.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit/color RGB, non-interlaced\012- data
Size
89 kB (89277 bytes)
Hash
2b1b5c8efcad287491b0325bd74330fa
0de22f17cc9638cd0abe3771e7a4eddf8aefc5d2
423cd07235036660a5f26c8fa74948471ae0d2974bf0866b3f6cc316b7c2819e

HTTP Headers

GET /tRcvfPDp/material.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 89277
last-modified: Thu, 17 Mar 2022 02:01:02 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/QxWYrtn5/paint.png

162.19.88.69

200 OK

108 kB

URL HTTP/2
i.postimg.cc/QxWYrtn5/paint.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size
108 kB (107723 bytes)
Hash
10e82f09bc3347eadde722eee7a2546e
3e89404d354722c674d619f5fe834f9799c6f3a0
7f0cfba3ef55c9db49e2e61185b7b35b7c560cf30adb5863d1b6e799eb1284ee

HTTP Headers

GET /QxWYrtn5/paint.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 107723
last-modified: Thu, 17 Mar 2022 02:01:09 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/jnLQLD1x/footer-socmed-1.png

162.19.88.69

200 OK

5.8 kB

URL HTTP/2
i.postimg.cc/jnLQLD1x/footer-socmed-1.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size
5.8 kB (5796 bytes)
Hash
bef4c998aafaa09e5d29d60f46525c62
6c7f350282f0f6dc01f577c3785e0aaea0fcc2e6
dfba7a0c7d120366be1d50ada6b75adcf62ac2038a1c08fd6e1c77071a38b5d1

HTTP Headers

GET /jnLQLD1x/footer-socmed-1.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 5796
last-modified: Tue, 22 Mar 2022 04:48:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/Thwcks3z/footer-socmed-2.png

162.19.88.69

200 OK

11 kB

URL HTTP/2
i.postimg.cc/Thwcks3z/footer-socmed-2.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 180 x 148, 8-bit/color RGBA, non-interlaced\012- data
Size
11 kB (10864 bytes)
Hash
80c10d25063bc5137b0fcf63b4d6165f
9655f83c214eaccb92d34d8b8ca83581a56fb2a7
16f1ccc0e0a89629ef11948c8de6ca77591a6f9b937b8de44ebc18358225bd80

HTTP Headers

GET /Thwcks3z/footer-socmed-2.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 10864
last-modified: Tue, 22 Mar 2022 04:48:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/bdB94RGs/footer-socmed-3.png

162.19.88.69

200 OK

6.6 kB

URL HTTP/2
i.postimg.cc/bdB94RGs/footer-socmed-3.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 180 x 128, 8-bit/color RGBA, non-interlaced\012- data
Size
6.6 kB (6571 bytes)
Hash
bc99de2d262f8daf5c75d55ea0328990
8af7007005a8725a1c2e2a4710101be68a7ebfea
d1e50bf94ebb01626c1045d43541f5989f67f6b3d62d3d6eb38e34fe0be94595

HTTP Headers

GET /bdB94RGs/footer-socmed-3.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 6571
last-modified: Tue, 22 Mar 2022 04:48:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/YvcfCqz7/footer-socmed-4.png

162.19.88.69

200 OK

14 kB

URL HTTP/2
i.postimg.cc/YvcfCqz7/footer-socmed-4.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size
14 kB (13796 bytes)
Hash
023bfaf2a56a2b76e7afc94885893502
225d5166c4b3f7346e3bfef148d6bfb87b5b4a96
8014774799900154e012ac41d6cdd404adc93c5955535ee4bd5372e054e90443

HTTP Headers

GET /YvcfCqz7/footer-socmed-4.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 13796
last-modified: Tue, 22 Mar 2022 04:48:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/w7RQzsJF/footer-socmed-5.png

162.19.88.69

200 OK

9.2 kB

URL HTTP/2
i.postimg.cc/w7RQzsJF/footer-socmed-5.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size
9.2 kB (9205 bytes)
Hash
2a03905025f0e6e39ce3934cb40b170f
72ccd4a954ae859709be05f27c5e425dc0c810eb
a72b0b2226327f8af54d11c68347fd2930f05d48004c0f05e1ef39c3505d8ba0

HTTP Headers

GET /w7RQzsJF/footer-socmed-5.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 9205
last-modified: Tue, 22 Mar 2022 04:48:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/Sxyy8Kzz/footer-socmed-6.png

162.19.88.69

200 OK

4.3 kB

URL HTTP/2
i.postimg.cc/Sxyy8Kzz/footer-socmed-6.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 184 x 140, 8-bit/color RGBA, non-interlaced\012- data
Size
4.3 kB (4316 bytes)
Hash
27eb10858d473bfd39cca3251fe35a26
f472c341ec3696a0c7bb85799495995ff72f941f
e0e93e88b46229223de82294608854d6578f0ade6f696b31f830cda37aae9b0e

HTTP Headers

GET /Sxyy8Kzz/footer-socmed-6.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 4316
last-modified: Wed, 13 Apr 2022 13:57:35 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/pV8Q4L9L/footer-img.png

162.19.88.69

200 OK

14 kB

URL HTTP/2
i.postimg.cc/pV8Q4L9L/footer-img.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 669 x 99, 8-bit/color RGBA, non-interlaced\012- data
Size
14 kB (14457 bytes)
Hash
d8e7ade119fece88de74909f9625a4f4
fcd55a597136e98a1ef13fb4ec78b5fdfe5ddffb
49c48ca56906e272d341083c726fc29a7304b7e66647ffd08b4ce7edd67430b4

HTTP Headers

GET /pV8Q4L9L/footer-img.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 14457
last-modified: Sun, 26 Dec 2021 01:40:34 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/3wBVgZTz/login-Method1.png

162.19.88.69

200 OK

29 kB

URL HTTP/2
i.postimg.cc/3wBVgZTz/login-Method1.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 604 x 158, 8-bit/color RGBA, non-interlaced\012- data
Size
29 kB (28789 bytes)
Hash
74190b93fc4f5d88f0c8e6411ba20bd8
89ce2ecb660a90b8e6ed1b335443d7767c59f28a
092a3cd5f86b3f039feefdeb86694cd16ae545af214cfda614bdbbe2d1bde401

HTTP Headers

GET /3wBVgZTz/login-Method1.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 28789
last-modified: Sun, 26 Dec 2021 01:51:44 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/dtyfWFF2/login-Method2.png

162.19.88.69

200 OK

4.3 kB

URL HTTP/2
i.postimg.cc/dtyfWFF2/login-Method2.png
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced\012- data
Size
4.3 kB (4298 bytes)
Hash
fef946b8bba756359e2a1e87ccd915ea
acc364946077b0e32b2343474ce4066ad3ee524c
1be5d05ce6faad469f7f9c5a5879f2d9f8d267b60eb394e92c19217268bcea8f

HTTP Headers

GET /dtyfWFF2/login-Method2.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 4298
last-modified: Sun, 26 Dec 2021 01:53:00 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
e5d7d983b288c67e17280c6a1c0d80d9
8a1e575f8b8427e872c1e4c5645d9ce3e5445e52
a08530049c460e7e3cf236a9969b94b4a794d83f3f4279ac43934194f39dedd6

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 05:29:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

mail.freegiftpubgmobile.duckdns.org/

20.5.64.12

200 OK

48 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
48 kB (47791 bytes)
Hash
acd1b931c170a551fbd3527dc5734d3c
71d939ca35cc4ea5c4bad00436d43ae0f9fd45f4
ecf1aa097bd2c25110c3b5d4c49d2fe804b5eb2fecb575d756215c64d36f12ad

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:55 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

i.ibb.co/JK5QkCq/1.png

51.210.3.236

200 OK

6.1 kB

URL HTTP/2
i.ibb.co/JK5QkCq/1.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 103 x 103, 8-bit/color RGBA, non-interlaced\012- data
Size
6.1 kB (6105 bytes)
Hash
4ed8ac08650c96443e8d01025ebf6b34
03e58a80de382a6b2e2c2c6af6f99185c04203c2
301e6af7740d7ce9e41f509fd70eda1ac0d0c52a7ecf25211be7c3f98ec96a61

HTTP Headers

GET /JK5QkCq/1.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 6105
last-modified: Mon, 18 Jan 2021 22:05:59 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/HdCPbym/3.jpg

51.210.3.236

200 OK

32 kB

URL HTTP/2
i.ibb.co/HdCPbym/3.jpg
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1052x1045, components 3\012- data
Size
32 kB (31872 bytes)
Hash
d52bcc72cf4df39af593c1f7de78970a
68f3918a01f52122223c6d1de7917ac2624488bc
0aa8aa161fc8acd0a816dbbf3b1bf007019f4f9b71dd29453077c559687f34f1

HTTP Headers

GET /HdCPbym/3.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/jpeg
content-length: 31872
last-modified: Thu, 10 Dec 2020 19:26:59 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/tC7gGKh/2.jpg

51.210.3.236

200 OK

33 kB

URL HTTP/2
i.ibb.co/tC7gGKh/2.jpg
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3\012- data
Size
33 kB (32887 bytes)
Hash
a05c5791746d98a23143bbfe07287a6b
d5ea7166fe6839d22f179086283944a553be98a2
0b2a9bacb048f2647e49b8efccb3c8464304abe67b45d8475d5af32360d57c7e

HTTP Headers

GET /tC7gGKh/2.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/jpeg
content-length: 32887
last-modified: Thu, 10 Dec 2020 19:26:58 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/JyKsRV9/3.jpg

51.210.3.236

200 OK

86 kB

URL HTTP/2
i.ibb.co/JyKsRV9/3.jpg
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7], baseline, precision 8, 1080x1080, components 3\012- data
Size
86 kB (85931 bytes)
Hash
9fb70511e88b3d10a4f81387f339f2ab
806e65cc835ea484c10e853817a4d6e991b255f2
83e47f37023e66e80569cb00d5674c1415d7515763793d38623d25582b823df3

HTTP Headers

GET /JyKsRV9/3.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/jpeg
content-length: 85931
last-modified: Tue, 25 Aug 2020 17:43:06 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/n0jsqH6/1.jpg

51.210.3.236

200 OK

32 kB

URL HTTP/2
i.ibb.co/n0jsqH6/1.jpg
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3\012- data
Size
32 kB (32177 bytes)
Hash
c358572510d7d6262877711b1669e567
27b5c202a7b37cfb4ca7bf9a70984e48a434e1c0
d4726647cf1c473b748e79a819b9a46661313501d7abb450c7a0c3f485b092f3

HTTP Headers

GET /n0jsqH6/1.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/jpeg
content-length: 32177
last-modified: Thu, 10 Dec 2020 19:26:58 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/N1Kh4DJ/m249.png

51.210.3.236

200 OK

31 kB

URL HTTP/2
i.ibb.co/N1Kh4DJ/m249.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 185 x 210, 8-bit/color RGBA, non-interlaced\012- data
Size
31 kB (30979 bytes)
Hash
edfa9907c7a73de5a92d503347d843f7
6c7bffb388d0a55a89f982b90ae5aa1798bfd02f
4786bc051fb7c19b9f62b10d3596c0ee226b46d1a71bab6b9cd2281460aa0762

HTTP Headers

GET /N1Kh4DJ/m249.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 30979
last-modified: Mon, 18 Jan 2021 22:06:15 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js

216.58.211.10

200 OK

30 kB

URL HTTP/2
ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js
IP
216.58.211.10:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (32061)
Size
30 kB (29671 bytes)
Hash
b90b3d2618cce9d766152cd3092b5c27
496339457cd00caab8118e2e1f30ea18dc05b9f4
b7b155aa8c6b5db28f9a6b41e88c96e9462c196c700add426f8ef32c9ce1ed41

HTTP Headers

GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29671
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Sep 2022 15:43:54 GMT
expires: Sat, 16 Sep 2023 15:43:54 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 395163
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
e5d7d983b288c67e17280c6a1c0d80d9
8a1e575f8b8427e872c1e4c5645d9ce3e5445e52
a08530049c460e7e3cf236a9969b94b4a794d83f3f4279ac43934194f39dedd6

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 05:29:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

i.ibb.co/cL1tWzt/11.png

51.210.3.236

200 OK

64 kB

URL HTTP/2
i.ibb.co/cL1tWzt/11.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
64 kB (63580 bytes)
Hash
ca512f94eaaa11002402a21ab6515fa7
f4bc3dd1c76312ab4e2cceee155c030fe3f61964
88e9c92ab98eddf38e079c26df75e530b6bcdce9bba1053461bc2953d1ca0719

HTTP Headers

GET /cL1tWzt/11.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 63580
last-modified: Fri, 15 Apr 2022 01:32:34 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500

216.58.211.10

200 OK

31 kB

URL HTTP/2
fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500
IP
216.58.211.10:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (32017)
Size
31 kB (30568 bytes)
Hash
93334839d3d3e9f0df33c283cde46bc6
474af4dc0c5305c768d27474c02ab6e675e51ae1
c191cd86853845b55847fd68ddac04da081f22d87c0f804f5d56d67769a8d587

HTTP Headers

GET /css?family=Roboto:300,400,500,700|Teko:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 21 Sep 2022 05:29:57 GMT
date: Wed, 21 Sep 2022 05:29:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

i.ibb.co/tKnVNF1/8.png

51.210.3.236

200 OK

51 kB

URL HTTP/2
i.ibb.co/tKnVNF1/8.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
51 kB (50570 bytes)
Hash
742d41afca510b1a14cb9c938cb2113f
798dcd1999508cf32c6d805408a5b74a70aa6513
5e204eb0349c0f0360a0be3b45d85419b311c5226d731b8892642a1f90398ae9

HTTP Headers

GET /tKnVNF1/8.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 50570
last-modified: Fri, 15 Apr 2022 01:21:18 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/Wg93jRK/image-77-1.png

51.210.3.236

200 OK

62 kB

URL HTTP/2
i.ibb.co/Wg93jRK/image-77-1.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
62 kB (61931 bytes)
Hash
97c1e3eff80c6d61d01542595a0d22d8
4e4d993e4f0aef5e4040f6d4984fd83c222f8453
10d5b2c3eb2c23d0008541d08afb42eb0ed9a6e69b029624c0f69a36f6f649d9

HTTP Headers

GET /Wg93jRK/image-77-1.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 61931
last-modified: Wed, 18 May 2022 21:28:46 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/JFdHX4V/image-76-1.png

51.210.3.236

200 OK

50 kB

URL HTTP/2
i.ibb.co/JFdHX4V/image-76-1.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
50 kB (50506 bytes)
Hash
648b649c67b8edc4a6894a4969bd85eb
fc80a4331961605198cb658cd95d828c02fa69ca
b965c4ef303c587bc3ee12976a43614f006369ab8875227c9693f84d6bd4a1c2

HTTP Headers

GET /JFdHX4V/image-76-1.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 50506
last-modified: Wed, 18 May 2022 21:28:46 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/56YKxY3/image-35-1.png

51.210.3.236

200 OK

58 kB

URL HTTP/2
i.ibb.co/56YKxY3/image-35-1.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
58 kB (58535 bytes)
Hash
32037aabe4f7d88e9152c241e25b6378
b1d1d3aa928572ff09adfc7926410cf7c0166647
9226e79b076302bda189695a68f9a8e48636eb60930402606ace318d9c5a803c

HTTP Headers

GET /56YKxY3/image-35-1.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 58535
last-modified: Mon, 20 Dec 2021 23:15:53 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/jRZxtbP/a2.jpg

51.210.3.236

200 OK

44 kB

URL HTTP/2
i.ibb.co/jRZxtbP/a2.jpg
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1080x1080, components 3\012- data
Size
44 kB (44455 bytes)
Hash
deb9155d3f9fc834c4b94b872953ae1f
132201b31e2a342306164d7b5e0c3cdaa5979f75
9103ae876f26f63f892f9951404f953b7465553d74e15946e521ac598d11d477

HTTP Headers

GET /jRZxtbP/a2.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/jpeg
content-length: 44455
last-modified: Tue, 16 Mar 2021 21:41:54 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/NtHMgmF/a3.jpg

51.210.3.236

200 OK

60 kB

URL HTTP/2
i.ibb.co/NtHMgmF/a3.jpg
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1080x1080, components 3\012- data
Size
60 kB (60291 bytes)
Hash
a60f062d094a7715ec651472ff266dbc
a148c9a3f9f5f714a69f1b30e561e5989df9bded
bace600d7d175d5e721f407ae0d30e393cdad0340b70e870c4a1888d1381cdaa

HTTP Headers

GET /NtHMgmF/a3.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/jpeg
content-length: 60291
last-modified: Tue, 16 Mar 2021 21:41:54 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/wzmCg1L/a1.jpg

51.210.3.236

200 OK

58 kB

URL HTTP/2
i.ibb.co/wzmCg1L/a1.jpg
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1080x1080, components 3\012- data
Size
58 kB (57513 bytes)
Hash
8cfac2046d01f4d1101f6995a5834fd7
8d17b39b344ba9d606cda7708a89d9b5f68affb8
bd41cfc8641743895e2eeba7053a56733b0aca85ff242e2c2441bed0a1e70b13

HTTP Headers

GET /wzmCg1L/a1.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/jpeg
content-length: 57513
last-modified: Tue, 16 Mar 2021 21:41:54 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/tMxQz1L/4.png

51.210.3.236

200 OK

157 kB

URL HTTP/2
i.ibb.co/tMxQz1L/4.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size
157 kB (157195 bytes)
Hash
6bc4f359513ae368d2aa08fff7d429f4
6e92b85e79d6bc3c0a7e9719991d0185af734063
18022adb51a72cb33491decc65325a5a96c12e69e82d2b79748d080dc6f1e9eb

HTTP Headers

GET /tMxQz1L/4.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 157195
last-modified: Fri, 13 Aug 2021 15:16:44 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/mvHNgg1/m24new.png

51.210.3.236

200 OK

135 kB

URL HTTP/2
i.ibb.co/mvHNgg1/m24new.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size
135 kB (134876 bytes)
Hash
51b2cf44fbd55e3da2ac0176b30a7e4f
c24c40335787b30e6fc7e2ef1dcc3e07b1899148
bc897f39a49644f7af853c3b79d0e0ec3196f69465cc26db474b5c0254af06b3

HTTP Headers

GET /mvHNgg1/m24new.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 134876
last-modified: Wed, 14 Jul 2021 01:43:30 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/fFQfP42/GR-7.jpg

51.210.3.236

200 OK

136 kB

URL HTTP/2
i.ibb.co/fFQfP42/GR-7.jpg
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1080], progressive, precision 8, 1080x1080, components 3\012- data
Size
136 kB (136242 bytes)
Hash
ae1c8c4453b0dfec12692e0a3d42f9d3
c54f91d685961723e1667e5f68c9762c74464bf1
1c8dd53255c3c0b6ad15fe51b85888f297c341fb4bbfe79a6eb69f29b259859f

HTTP Headers

GET /fFQfP42/GR-7.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/jpeg
content-length: 136242
last-modified: Tue, 13 Apr 2021 22:07:45 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

mail.freegiftpubgmobile.duckdns.org/css/login/facebook.css

20.5.64.12

200 OK

3.1 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/css/login/facebook.css
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text
Size
3.1 kB (3136 bytes)
Hash
7963984a8f422cb6cdabcb6597f3f252
8932b3a35c501044ccf88aab675703b972868182
a20af21afb394e0efb04bb292e5faaf2684003d2d94d71122b8f98c69fb68870

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /css/login/facebook.css HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:57 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 3136
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

mail.freegiftpubgmobile.duckdns.org/css/login/twitter.css

20.5.64.12

200 OK

2.1 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/css/login/twitter.css
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text
Size
2.1 kB (2068 bytes)
Hash
aa7cc463409f187509e7e5fb570e1d0c
0321e26b58b7f779248e23a56c9153c908d42ed6
6eb360154fcda50619dcbdbc620141c511b0a2be9bbee053f3abe67e70fd5533

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /css/login/twitter.css HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:57 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 2068
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

i.ibb.co/cXn5Wb9/8.png

51.210.3.236

200 OK

138 kB

URL HTTP/2
i.ibb.co/cXn5Wb9/8.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size
138 kB (138214 bytes)
Hash
a04374438348656581018f9b7f75da03
af44537ca66104e012b502b0c9b5d7c76872d9f5
865fb8175909778ee69d27bb8a8d81a5cf24412fdc9c82ad0e8f8954d48409a0

HTTP Headers

GET /cXn5Wb9/8.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 138214
last-modified: Sun, 16 May 2021 20:29:33 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

code.jquery.com/jquery-1.10.2.min.js

69.16.175.10

200 OK

33 kB

URL HTTP/1.1
code.jquery.com/jquery-1.10.2.min.js
IP
69.16.175.10:0
ASN
#20446 STACKPATH-CDN

File type
ASCII text, with very long lines (32072)
Size
33 kB (32788 bytes)
Hash
68cc08e82915da8b82fc6be74ab86365
4089530b0c00f6cbd1452d7f873be85454196fd1
6c63276db5e51f227be1c9bdaf73d76fa01040499944a8c8607db0c234f0575c

HTTP Headers

GET /jquery-1.10.2.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:57 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 32788
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 16 Feb 2022 10:50:39 GMT
Accept-Ranges: bytes
Server: nginx
ETag: W/"620cd6ff-16bb3"
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-HW: 1663738197.dop229.sk1.t,1663738197.cds243.sk1.c

mail.freegiftpubgmobile.duckdns.org/js/script.js

20.5.64.12

200 OK

8.5 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/js/script.js
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text, with very long lines (8491), with no line terminators
Size
8.5 kB (8491 bytes)
Hash
303af881382511e3f9b6f0b0ef24a800
5de7389e2f0299a39d29b67df9c8b2f64dda4f48
2ad01546797994d3ecaf0dbd69d9f8c2e2955fa0741933cf47bbb1a6cd8e96d5

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent
fortinet	Phishing

HTTP Headers

GET /js/script.js HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:57 GMT
Server: Apache
Last-Modified: Tue, 21 Jun 2022 04:58:18 GMT
Accept-Ranges: bytes
Content-Length: 8491
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css

104.18.10.207

200 OK

262 kB

URL HTTP/2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.18.10.207:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (30837)
Size
262 kB (261660 bytes)
Hash
f9b11bcbe287bf37d90ad4e4f620187d
b65012c310a46740dee414632533c64eddef8407
5a5a8effaa500f1d8374093c76536679ff178dd5937bcc617497a80afc2b98b3

HTTP Headers

GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 11/15/2021 21:49:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 2729ae8f2fc6c761bdc17d91cc795f58
cdn-cache: HIT
cf-cache-status: HIT
age: 9184951
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74e067f479dffab4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

i.ibb.co/PNfHQNg/newSKS.png

51.210.3.236

200 OK

178 kB

URL HTTP/2
i.ibb.co/PNfHQNg/newSKS.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size
178 kB (177901 bytes)
Hash
14341bc1d49e6710d7f435e813cf2d09
85581f91425cd85619cd98b89a6948cdcd9594b8
be4e89ea02e92640b33c9eb92eed65b21e3c36189084841925d8acb4ea3d101b

HTTP Headers

GET /PNfHQNg/newSKS.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 177901
last-modified: Sun, 16 Jan 2022 02:45:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/GtRxjJp/m16new.png

51.210.3.236

200 OK

166 kB

URL HTTP/2
i.ibb.co/GtRxjJp/m16new.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size
166 kB (165566 bytes)
Hash
765fec161059d4043cbba81158b48353
4ec6377c1579bea147d2ec31664f767f15a04b76
4d93a73abe37bc3c69e6c071b7a14578ad46ed2a92a5137c66e5f36cc7bfb108

HTTP Headers

GET /GtRxjJp/m16new.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 165566
last-modified: Wed, 14 Jul 2021 01:43:30 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/RT1tc10/image-12.png

51.210.3.236

200 OK

181 kB

URL HTTP/2
i.ibb.co/RT1tc10/image-12.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size
181 kB (181109 bytes)
Hash
4b84d4bae3c438dc5ee5749ea9a2a4ec
30f887d113fc10a5c5cadf29da6b22733953e845
7b73cae1bc1e5c2d684b506ace25b56f77f0b5683968d28ab60965b3fa8a5c2e

HTTP Headers

GET /RT1tc10/image-12.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 181109
last-modified: Fri, 14 May 2021 12:34:28 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/X8Y41sj/14.png

51.210.3.236

200 OK

185 kB

URL HTTP/2
i.ibb.co/X8Y41sj/14.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced\012- data
Size
185 kB (185129 bytes)
Hash
542b763d58950b56ee639fbcd8116a65
cd765672335e044da59dd56cf028ae4e9cca0ecb
8ae1535b44ee23d507bf04fd90a46eb15c79bb47c7ed438fa0ac7a44a3bb333d

HTTP Headers

GET /X8Y41sj/14.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 185129
last-modified: Tue, 07 Jul 2020 07:03:31 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/Ph8rysB/newAkm.png

51.210.3.236

200 OK

198 kB

URL HTTP/2
i.ibb.co/Ph8rysB/newAkm.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size
198 kB (197518 bytes)
Hash
efe90784960c35b55842011ba6b92ecd
6da49603edf22624ae1eb238a67bb3032ae8b378
245d6cb9f59180bde61529a0d22d040f79eec2e9172e567a454b5d2bf864a868

HTTP Headers

GET /Ph8rysB/newAkm.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 197518
last-modified: Tue, 18 Jan 2022 03:16:25 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/BTDzRRr/scar.png

51.210.3.236

200 OK

214 kB

URL HTTP/2
i.ibb.co/BTDzRRr/scar.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size
214 kB (214538 bytes)
Hash
8bb47abe6a7bd2a74e6e2d32cd469155
90483fac99e800b94df5f5f7d084d60194f77879
90206bd47fc5317fb5a0ec20c9d09e08ab1e4b4d9dad814949b5d7fafa2f33ec

HTTP Headers

GET /BTDzRRr/scar.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 214538
last-modified: Wed, 17 Nov 2021 13:59:52 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/rkkQqXM/20.png

51.210.3.236

200 OK

226 kB

URL HTTP/2
i.ibb.co/rkkQqXM/20.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced\012- data
Size
226 kB (225660 bytes)
Hash
2396a21880624252bcf3437d8af0b64e
3d59a3d3362b72474fc79bf08beaa3fb9fbc76b2
81e03c3138543c9be3caea8478e2142a0b737e7e7252fbfbec3f6234b638ae79

HTTP Headers

GET /rkkQqXM/20.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 225660
last-modified: Tue, 07 Jul 2020 07:04:20 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/DrzYVS0/2.png

51.210.3.236

200 OK

239 kB

URL HTTP/2
i.ibb.co/DrzYVS0/2.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced\012- data
Size
239 kB (238592 bytes)
Hash
ce35862f6aeac6ef1f191f4de6ec99ba
5fa8e03da448a9d90241d904819e73c892e94d4e
e77f6abb817f33d5765fb0a192db10a266c99474230168937849951a01808720

HTTP Headers

GET /DrzYVS0/2.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 238592
last-modified: Tue, 07 Jul 2020 07:01:48 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/BGwRpxc/newUZI.png

51.210.3.236

200 OK

262 kB

URL HTTP/2
i.ibb.co/BGwRpxc/newUZI.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size
262 kB (261756 bytes)
Hash
5f83cce43fa15b2596152f504d1d9c98
aeee0ec64843047688f0c07db5ec1929b635c28e
232d5ace3897de620d0f8cdecef1475043b6d216db2913a22371b1b382a86dc5

HTTP Headers

GET /BGwRpxc/newUZI.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 261756
last-modified: Sun, 16 Jan 2022 02:45:21 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/30shkpG/4.png

51.210.3.236

200 OK

233 kB

URL HTTP/2
i.ibb.co/30shkpG/4.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced\012- data
Size
233 kB (232829 bytes)
Hash
8b4b7bb493952fe127721a36f0a89e01
5ce5e160edbd6232ed7e51ed334515d58f4518f9
b238d6362a0cd51476cab0bace40cd6f74d2b884eff57337c7516e3f4af3cf66

HTTP Headers

GET /30shkpG/4.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 232829
last-modified: Tue, 07 Jul 2020 07:02:07 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/qB0F8jV/17.png

51.210.3.236

200 OK

258 kB

URL HTTP/2
i.ibb.co/qB0F8jV/17.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced\012- data
Size
258 kB (258056 bytes)
Hash
f5262e3a5fcae0bffccd914e349f7fd9
872a69a864ea980b76647ac6856a20673b557821
89068dd0b8cddb93ab70010b5ad87ea95ed20439190b5af5b55267de10f8e212

HTTP Headers

GET /qB0F8jV/17.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 258056
last-modified: Tue, 07 Jul 2020 07:03:52 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/hcnPCFM/9.png

51.210.3.236

200 OK

241 kB

URL HTTP/2
i.ibb.co/hcnPCFM/9.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 531 x 535, 8-bit/color RGBA, non-interlaced\012- data
Size
241 kB (241363 bytes)
Hash
43f886600e9082cfa4ec62024a2d9b1c
68725d265651543b77101eea90b204b2212d6fd1
b55687b11f221e860fc7251873bcc6670d063cc690e10e732e8b19592c504b4d

HTTP Headers

GET /hcnPCFM/9.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 241363
last-modified: Wed, 21 Oct 2020 22:38:16 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10500
Expires: Wed, 21 Sep 2022 08:24:58 GMT
Date: Wed, 21 Sep 2022 05:29:58 GMT
Connection: keep-alive

i.ibb.co/54C3TwS/1.png

51.210.3.236

200 OK

261 kB

URL HTTP/2
i.ibb.co/54C3TwS/1.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 640 x 632, 8-bit/color RGBA, non-interlaced\012- data
Size
261 kB (261161 bytes)
Hash
f0a74397a56becf5074450548e86f32b
1e586c270dbce041649e30a30e044b98f89d48cc
b1d1bc12dafc2b676ab691cbdfbe18f6d75a19e3f2d17e774db6e8c9f0b8c7aa

HTTP Headers

GET /54C3TwS/1.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 261161
last-modified: Tue, 25 Aug 2020 17:43:03 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/mhWQMvq/15.png

51.210.3.236

200 OK

324 kB

URL HTTP/2
i.ibb.co/mhWQMvq/15.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
324 kB (324312 bytes)
Hash
e31a33749aa741b9e7fe465082d4e1c5
ed820b4250d2f9f087b6f7ada2863a3e763c8a27
3bfcd4587f443c06425a2de6f0b5d4d682176bc8b05513fa3b61072a3f51f317

HTTP Headers

GET /mhWQMvq/15.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 324312
last-modified: Tue, 07 Jul 2020 07:03:39 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10500
Expires: Wed, 21 Sep 2022 08:24:58 GMT
Date: Wed, 21 Sep 2022 05:29:58 GMT
Connection: keep-alive

i.ibb.co/v332bhy/4.png

51.210.3.236

200 OK

326 kB

URL HTTP/2
i.ibb.co/v332bhy/4.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 962 x 962, 8-bit/color RGBA, non-interlaced\012- data
Size
326 kB (326449 bytes)
Hash
b3c6d0d2ccbd62967561e4871026a6b0
c213498366616b8caa5e23843e086ec7a230a6f5
55ff46afd6bdf39140a8d0df3bbd9baefc99052116b52974f8fd2337b877ce0c

HTTP Headers

GET /v332bhy/4.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 326449
last-modified: Mon, 14 Sep 2020 06:26:51 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/Rjh4zr4/16.png

51.210.3.236

200 OK

325 kB

URL HTTP/2
i.ibb.co/Rjh4zr4/16.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
325 kB (325375 bytes)
Hash
98b154c09c1c172ac9fb5ad277693633
50f737eb4305abf082be39164fb505f41858b595
88d1812e18dba154595a4eb7cd333166187c5160a0e94ee56c698fd272d04951

HTTP Headers

GET /Rjh4zr4/16.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 325375
last-modified: Tue, 07 Jul 2020 07:03:46 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f06ad5e-83fd-449e-b227-1b9d5389e57d.jpeg

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f06ad5e-83fd-449e-b227-1b9d5389e57d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10244 bytes)
Hash
14e6ddceb639a5f4875aecb796f95c79
b1cd04a66852694284eeef16a1cde38896e33c03
4c0657a00d7fb4caefa64c28340cad94a306cc393cffe692fcc69c65a80f2391

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f06ad5e-83fd-449e-b227-1b9d5389e57d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10244
x-amzn-requestid: 71f08b9e-e977-48de-ad60-5192a43db517
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYwBkGqjIAMFz0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63202d3d-0af3334d085ca4a764e31bb5;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 07:11:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7FaZfI_iYUANPdxGBld5NfneWwKJeX2nYA_gmvF9NjML5YOVhZIIoA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 14:38:21 GMT
age: 53497
etag: "b1cd04a66852694284eeef16a1cde38896e33c03"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

i.ibb.co/zHXhQmQ/8.png

51.210.3.236

200 OK

343 kB

URL HTTP/2
i.ibb.co/zHXhQmQ/8.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 958 x 957, 8-bit/color RGBA, non-interlaced\012- data
Size
343 kB (343211 bytes)
Hash
9bb160b65797963eb13d9321e7d44d1e
2700addd855ce54dac80b471c20d6c7681387582
27271d9ad52cf5f7825b9ec333f2230f4d8e6db64d335c0308ecfa746903ce13

HTTP Headers

GET /zHXhQmQ/8.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 343211
last-modified: Wed, 21 Oct 2020 22:38:16 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F689f6ab4-a759-42b3-82a8-f66964d5ece4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.6 kB (9574 bytes)
Hash
eff7103898a5102e685ce6741cdf19f8
3371965b4417ee0b74a3a5094adfc1632d4849b1
c326683c06d56a02d8c1a36dd34c1eff1b9d242b8b5280a1824b0602ccd28020

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F689f6ab4-a759-42b3-82a8-f66964d5ece4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9574
x-amzn-requestid: 3dfa0e8c-77e6-4fc5-9f64-00ac854abbfa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yxy1mEj2IAMFWdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a31bd-745819ba4b5c16ee6e649ad7;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 21:33:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _3w3cbABzhrIn3y9Spo6-NCZDzf4gHAfU30Zpvk3WTp8_kgWT7NAMw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 21:41:04 GMT
age: 28134
etag: "3371965b4417ee0b74a3a5094adfc1632d4849b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

i.ibb.co/N9XVcKh/13.png

51.210.3.236

200 OK

363 kB

URL HTTP/2
i.ibb.co/N9XVcKh/13.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
363 kB (362821 bytes)
Hash
96b51e940abacf9fd76700b2524cccfa
1e6178a87bef1913bdbac15e5af78435f37622f0
46f5b903cf542dbad0470316a0ac5b1e6797b8da7e1911b65be7802c6bc17c10

HTTP Headers

GET /N9XVcKh/13.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 362821
last-modified: Tue, 07 Jul 2020 07:03:27 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/9NW5RBs/1.png

51.210.3.236

200 OK

436 kB

URL HTTP/2
i.ibb.co/9NW5RBs/1.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
436 kB (436285 bytes)
Hash
4e550663b3be03f7ade68fc9cf5dc621
fa6a960fea8c2fb7d76d3a0a7c5e71135c610c00
69c7d14241842543dee3c4c9310205d413e0d3756bc8080d203a9f63dad1f815

HTTP Headers

GET /9NW5RBs/1.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 436285
last-modified: Tue, 07 Jul 2020 07:01:48 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf057f43-44fd-440b-bd96-67b16eb4eb13.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (12654 bytes)
Hash
f7b780d39877eea116277625aaa01f1b
d8ac8a7e19b06e38070a0319cde24b5bf0eaa7db
ca9d59056e0a3f512d36db11f4a4bd3109c2ce1e13b29b5f40dce84df079e71f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf057f43-44fd-440b-bd96-67b16eb4eb13.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12654
x-amzn-requestid: efc99152-2b51-462d-b48b-67ba8263b1cf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YpOJOGVYoAMFcvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6326c3d4-00eeb6913e06ac151f293263;Sampled=0
x-amzn-remapped-date: Sun, 18 Sep 2022 07:08:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wK03Lqow6u4lrQ3QI21klXXHGZqbKYathhCO87k0rZWBbF8o5YYjXw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 07:20:16 GMT
age: 79782
etag: "d8ac8a7e19b06e38070a0319cde24b5bf0eaa7db"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10500
Expires: Wed, 21 Sep 2022 08:24:58 GMT
Date: Wed, 21 Sep 2022 05:29:58 GMT
Connection: keep-alive

mail.freegiftpubgmobile.duckdns.org/css/animate.css

20.5.64.12

200 OK

78 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/css/animate.css
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text
Size
78 kB (77906 bytes)
Hash
8eae1a9cfafdc593321d4d59ec4905ea
232f5f3f4c3a0a56823e0e933f9c7fec3aa9cbcc
e89c81987c5cbc157097eaa6657d6a594abf030cc89bb63f0d2154d8383e9fab

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /css/animate.css HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:57 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 77906
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

i.ibb.co/3cM96Bn/3.png

51.210.3.236

200 OK

420 kB

URL HTTP/2
i.ibb.co/3cM96Bn/3.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
420 kB (420472 bytes)
Hash
4cdf054d73db7827928913f351228309
ecf8458dadfaf87286cea3aa2547425dc13ee6cd
ed901d7cfaee685c4e47732f3cf421ef863e44ac3a31ccf2feeceeb8969996fa

HTTP Headers

GET /3cM96Bn/3.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 420472
last-modified: Tue, 07 Jul 2020 07:01:58 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/pdYW33J/12.png

51.210.3.236

200 OK

411 kB

URL HTTP/2
i.ibb.co/pdYW33J/12.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced\012- data
Size
411 kB (411151 bytes)
Hash
de57ba8c2d28e81900cdbfe4b289f64a
1567954130e0dd41084634e252dd62a8d4154c75
392e974825a93a61625b8ebbd8b672c5542adc1e832f6e694d7a3b4accb7e744

HTTP Headers

GET /pdYW33J/12.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 411151
last-modified: Tue, 07 Jul 2020 07:03:21 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10500
Expires: Wed, 21 Sep 2022 08:24:58 GMT
Date: Wed, 21 Sep 2022 05:29:58 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10500
Expires: Wed, 21 Sep 2022 08:24:58 GMT
Date: Wed, 21 Sep 2022 05:29:58 GMT
Connection: keep-alive

i.ibb.co/WgYyGnw/11.png

51.210.3.236

200 OK

436 kB

URL HTTP/2
i.ibb.co/WgYyGnw/11.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
436 kB (435708 bytes)
Hash
bd3bb5bcfe51df61bfb0b499932f4ba7
3085137fe929dd1ec87d9295cc15c6c01047fb2a
b3d4677d9a1f8447b6715f78f05f004c2087c89fd3abb74b9899227014bdee18

HTTP Headers

GET /WgYyGnw/11.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 435708
last-modified: Tue, 07 Jul 2020 07:03:06 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/smrqkwd/9.png

51.210.3.236

200 OK

451 kB

URL HTTP/2
i.ibb.co/smrqkwd/9.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
451 kB (450698 bytes)
Hash
9f8fdcdd9adc63f202aded3530e45230
58c8f9a038b6d673f09758bdbebcac13c2734893
41fe7d4318ff5170bf91d810d14850a0337c7e9518713669e5f28aff23925d22

HTTP Headers

GET /smrqkwd/9.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 450698
last-modified: Tue, 07 Jul 2020 07:02:55 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/Lk3B2mw/2.png

51.210.3.236

200 OK

450 kB

URL HTTP/2
i.ibb.co/Lk3B2mw/2.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
450 kB (450117 bytes)
Hash
62ca1959614d8e6497d4df89d68601ec
035001adaa459a9be17bfa81a2eb00f8a317c2fa
9a3eee39725692b77c1d240e653627259d894bce3f47277d6cf81e550c6c6714

HTTP Headers

GET /Lk3B2mw/2.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 450117
last-modified: Mon, 14 Sep 2020 06:26:38 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2a425d5-4fbd-4af0-a85b-75f0878759cb.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.5 kB (7507 bytes)
Hash
4d98acc059a69d51165fb5e0c7430ea3
09bd3300d710c3212483159f8398b84cde09da26
6e38bbb5c79c4f714973e10961d7bad9e7ae8711cf24d68b13a77206f474d2a6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2a425d5-4fbd-4af0-a85b-75f0878759cb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7507
x-amzn-requestid: 2a40c792-8b1b-4476-92de-1fce3df48fc1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcCmaHefoAMF4Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217e28-6b05350006b7f3fb73d1e37a;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:09:28 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rq4QHCD4EubBKHyCj7jyKqpct5d7U33TvNufqj_w8mWunqQsouoh7w==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 22:21:54 GMT
age: 25684
etag: "09bd3300d710c3212483159f8398b84cde09da26"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

i.ibb.co/c232k1x/8.png

51.210.3.236

200 OK

487 kB

URL HTTP/2
i.ibb.co/c232k1x/8.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
487 kB (487142 bytes)
Hash
8376ba13077d6a8fbd2ea1c108bd1889
b3836df1faf0f6fc5619f95f22c6f05b0327b742
0b0293ba6658ff063696c34156da9883eb3d74575d46f7c1975fa56b544e2242

HTTP Headers

GET /c232k1x/8.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 487142
last-modified: Tue, 07 Jul 2020 07:02:46 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5a64d4-8802-4886-ab88-03c39eb96f1a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.2 kB (5174 bytes)
Hash
5a21b393fc4213d090f794f3eeee2333
cf334c1fc3191c5dcafaa2df55f62a10e16fda69
43553a352e6d7c8108bd5152d1c949d8acfb922344a00f8c77c986e2d8f665d9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5a64d4-8802-4886-ab88-03c39eb96f1a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5174
x-amzn-requestid: 19cef827-7a71-4789-ae2f-03861f7d65c1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YsvkiG9BoAMFqRA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63282c83-695865cd7f0a236300a179cb;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 08:46:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: pt-UpDrev8YQvpm0E3xWMpkUSsxo80_jlCq1jJ0ePrpLb9rE7_kQ8w==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 22:20:37 GMT
age: 25761
etag: "cf334c1fc3191c5dcafaa2df55f62a10e16fda69"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

i.postimg.cc/DZYQm0Gm/footer-bg.jpg

162.19.88.69

200 OK

12 kB

URL HTTP/2
i.postimg.cc/DZYQm0Gm/footer-bg.jpg
IP
162.19.88.69:0
ASN
#16276 OVH SAS

File type
JPEG image data, progressive, precision 8, 579x800, components 3\012- data
Size
12 kB (11651 bytes)
Hash
27b8ceba13cb26a4ac6951cecdd4a5d3
accbec4f1b6038f0bcd2032da80c2ee342033d2e
d1740f2a847c3b67a1071442fe2af27298bca56ab267e90ea8aec3d4e9b9552f

HTTP Headers

GET /DZYQm0Gm/footer-bg.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:58 GMT
content-type: image/jpeg
content-length: 11651
last-modified: Wed, 13 Apr 2022 14:17:46 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/stysM7v/10.png

51.210.3.236

200 OK

462 kB

URL HTTP/2
i.ibb.co/stysM7v/10.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
462 kB (462543 bytes)
Hash
6dcac3c211950c5d279b8dfa192595fc
21fd8c3e9cb2af08e22155798781b551e76e6552
eba14a8589003d97649bbfc5cbacab6baaecc2e78bbca141d7fec48e2c66f1dc

HTTP Headers

GET /stysM7v/10.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 462543
last-modified: Tue, 07 Jul 2020 07:03:02 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/DYcd3r8/5.png

51.210.3.236

200 OK

495 kB

URL HTTP/2
i.ibb.co/DYcd3r8/5.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
495 kB (494567 bytes)
Hash
6af8adf4fb95ffeaba353ec278fe87c6
1de3adee5399c5f7e26f1a76d79577abeffc7e91
1a5fb2572ce7868cc65d4ee1cad8c6f6c71d5ea57217dab6237085121d0b476a

HTTP Headers

GET /DYcd3r8/5.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 494567
last-modified: Tue, 07 Jul 2020 07:02:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/0hG72h9/7.png

51.210.3.236

200 OK

501 kB

URL HTTP/2
i.ibb.co/0hG72h9/7.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
501 kB (501372 bytes)
Hash
20c961417210c50d89bb3744e82c58be
473593bf6304124f40400a0ea9effb71b6c5185b
21611607cd755bb1d9b0f8b80c1ea0b521245a7f2f470d9e5461aaadc8b2acd0

HTTP Headers

GET /0hG72h9/7.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 501372
last-modified: Tue, 07 Jul 2020 07:02:41 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/n8pTPFf/18.png

51.210.3.236

200 OK

527 kB

URL HTTP/2
i.ibb.co/n8pTPFf/18.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
527 kB (527154 bytes)
Hash
f3badf9d78d6ddcbc476370883d753f6
c225ac6037842ac08c2e816b311b095a870bbcac
9dbe1633a41ce1148d8139c5a8d2c9b6ae417d071b42b32e5b487897d7c156a0

HTTP Headers

GET /n8pTPFf/18.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 527154
last-modified: Tue, 07 Jul 2020 07:04:05 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8fb4f53-c4a2-4769-939e-c2f7ff562e36.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.4 kB (7383 bytes)
Hash
681b3e236c8b9bc524d935af247ec72b
96048f054243b5a13f14ab3dd9f4a0f3f2e0feae
aaa2f649fd336f89b3c0fc1d9226f8763f5a8cd850826a7f0819ebe7414fbf2a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8fb4f53-c4a2-4769-939e-c2f7ff562e36.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7383
x-amzn-requestid: 32b97df0-b979-4e80-a54f-cae77affc915
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yxy2sHJ_oAMF0bg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a31c4-2c6db6e21fa1db233a4c1f49;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 21:33:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: bmxUC0kur2YyFURbaNuBfgoyC3_l6XVfmKAyA-41jFdjBN2bY60GkQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 21:41:04 GMT
etag: "96048f054243b5a13f14ab3dd9f4a0f3f2e0feae"
content-type: image/jpeg
age: 28134
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

i.ibb.co/S78nnmC/1.png

51.210.3.236

200 OK

534 kB

URL HTTP/2
i.ibb.co/S78nnmC/1.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
534 kB (533930 bytes)
Hash
e7c627b51c7938415a927cc9597cd822
776ee1a876407e4e3d84d73d412627eead79f835
d26071d9347f807ae2d911f7167170c91e381912ea2e33f01e456c877ba23345

HTTP Headers

GET /S78nnmC/1.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 533930
last-modified: Mon, 14 Sep 2020 06:26:39 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/m5MfkNp/6.png

51.210.3.236

200 OK

569 kB

URL HTTP/2
i.ibb.co/m5MfkNp/6.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
569 kB (568704 bytes)
Hash
7013574c46d1a15bda9dfa5702be6c43
2e6fa9a6ced3b8019de2a9ff8d08c131ea403509
dcf2566d2da7260758ccc1d6a374104acda783263d746c27105ec707d3c89ca8

HTTP Headers

GET /m5MfkNp/6.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 568704
last-modified: Tue, 07 Jul 2020 07:02:29 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.ibb.co/YpbSGGN/3.png

51.210.3.236

200 OK

572 kB

URL HTTP/2
i.ibb.co/YpbSGGN/3.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1440 x 1440, 8-bit/color RGBA, non-interlaced\012- data
Size
572 kB (572150 bytes)
Hash
6bb1724890985ef8722f3dd1c80d9140
5cfa93e274e05472e5a027f6eb6c1541f12d8b7d
0df6cccb71bb8053be729b5028c7f759264c315ad419552d9e0a9cf738940239

HTTP Headers

GET /YpbSGGN/3.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 572150
last-modified: Mon, 14 Sep 2020 06:26:50 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

mail.freegiftpubgmobile.duckdns.org/img/rewards/14.png

20.5.64.12

200 OK

46 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/rewards/14.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
46 kB (46131 bytes)
Hash
627b786cd14c2a0bd1f00c7be7714e5d
1bb5311709efb701560cb1ada5a213b44b3dab7b
41c62845b01f77d5aed674e553ac756692c58c67a6483910dcfdbe54bd0639d5

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/rewards/14.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:58 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 46131
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

i.ibb.co/9sw3NZK/5.png

51.210.3.236

200 OK

600 kB

URL HTTP/2
i.ibb.co/9sw3NZK/5.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1359 x 1380, 8-bit/color RGBA, non-interlaced\012- data
Size
600 kB (599980 bytes)
Hash
13c06ae922ff7cab8a57fd6572812a69
716c3bdf845b764973af99bf60a75273a986f43e
24d3bf04c98e2562a5e43d2dd043daa142298fb3cd5b552d9e64791d64d14fdc

HTTP Headers

GET /9sw3NZK/5.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 599980
last-modified: Tue, 25 Aug 2020 17:43:14 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
c683e61e63df92799aa274fdac42cd3b
191aeec95861fa8596a90a10c60b22434431c033
898c007bc0e7d5f4d3180c9fe28b88036102ba64912d0773c023e1f4f07d7beb

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 05:29:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

i.ibb.co/jTsg4BQ/21.png

51.210.3.236

200 OK

638 kB

URL HTTP/2
i.ibb.co/jTsg4BQ/21.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type
PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size
638 kB (637705 bytes)
Hash
0942eae35957bc5d96f112cc45276371
4bbb1a5c2ccac4c45fc5c2cd9ec2eb3ebc950a34
c053a33153ca683789e6b3cf4dce7b864105d09e4c4f85574436bad865cb6959

HTTP Headers

GET /jTsg4BQ/21.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 637705
last-modified: Tue, 07 Jul 2020 07:04:26 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

www.pubgmobile.com/id/event/royalepass10/images/icon_logo.jpg

23.36.76.250

200 OK

75 kB

URL HTTP/2
www.pubgmobile.com/id/event/royalepass10/images/icon_logo.jpg
IP
23.36.76.250:0
ASN
#20940 Akamai International B.V.

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3\012- data
Size
75 kB (75149 bytes)
Hash
92c19dc5bd77186e5bb8ed35ce668979
646bf70d1c669c7d7388f95a0a33755e4721289c
0d9cf7eb8fb12be77685134e63f7dae9a95fbf9306ae0529bd0347582d18a8ef

HTTP Headers

GET /id/event/royalepass10/images/icon_logo.jpg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
content-length: 75149
last-modified: Wed, 15 Sep 2021 06:46:59 GMT
etag: "614196e3-1258d"
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=300
expires: Wed, 21 Sep 2022 05:34:58 GMT
date: Wed, 21 Sep 2022 05:29:58 GMT
X-Firefox-Spdy: h2

www.pubgmobile.com/en/images/nav_download.svg

23.36.76.250

200 OK

485 B

URL HTTP/2
www.pubgmobile.com/en/images/nav_download.svg
IP
23.36.76.250:0
ASN
#20940 Akamai International B.V.

File type
SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (999), with no line terminators
Size
485 B (485 bytes)
Hash
105955f14143a23be57cadef8e91950e
98cc1e76113b4b2a2a77805bb1f1d6b364344d88
b85bdfd2887c4fe7681cae97896e604e74d27f150feb49598e1e7efebd3c6fc2

HTTP Headers

GET /en/images/nav_download.svg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Mar 2022 13:24:17 GMT
etag: "62387c81-3ef"
accept-ranges: bytes
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
date: Wed, 21 Sep 2022 05:29:58 GMT
content-length: 485
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
c683e61e63df92799aa274fdac42cd3b
191aeec95861fa8596a90a10c60b22434431c033
898c007bc0e7d5f4d3180c9fe28b88036102ba64912d0773c023e1f4f07d7beb

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 05:29:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.pubgmobile.com/en/images/nav_menu.svg

23.36.76.250

200 OK

426 B

URL HTTP/2
www.pubgmobile.com/en/images/nav_menu.svg
IP
23.36.76.250:0
ASN
#20940 Akamai International B.V.

File type
SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (876), with no line terminators
Size
426 B (426 bytes)
Hash
76f5753e4fe160785df31ef342ada1c1
a78cc3e318b79b7fe5e7eb8df11683706b518e8f
52c48564638e7f165f23fae7f76b72d07905f2179ff659b939bfab7ec8b82a26

HTTP Headers

GET /en/images/nav_menu.svg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Mar 2022 13:24:18 GMT
etag: "62387c82-374"
accept-ranges: bytes
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
date: Wed, 21 Sep 2022 05:29:58 GMT
content-length: 426
X-Firefox-Spdy: h2

fonts.gstatic.com/s/teko/v15/LYjNdG7kmE0gfaN9pQ.woff2

142.250.74.163

200 OK

13 kB

URL HTTP/2
fonts.gstatic.com/s/teko/v15/LYjNdG7kmE0gfaN9pQ.woff2
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 13324, version 1.0\012- data
Size
13 kB (13324 bytes)
Hash
b4082c888eefa2dca3fe2c9d46a87180
05aeb6c58175f659fe59eaca5a9d3735dd0530e3
352ad1513eeaeec51060f01d5bed32345862ec4d9c0802b81e0a47885951e4b6

HTTP Headers

GET /s/teko/v15/LYjNdG7kmE0gfaN9pQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mail.freegiftpubgmobile.duckdns.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13324
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 20:23:40 GMT
expires: Thu, 14 Sep 2023 20:23:40 GMT
cache-control: public, max-age=31536000
age: 551178
last-modified: Wed, 27 Apr 2022 17:05:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

fonts.gstatic.com/s/teko/v15/LYjCdG7kmE0gdVBesCRgqA.woff2

142.250.74.163

200 OK

13 kB

URL HTTP/2
fonts.gstatic.com/s/teko/v15/LYjCdG7kmE0gdVBesCRgqA.woff2
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 13196, version 1.0\012- data
Size
13 kB (13196 bytes)
Hash
5b9fce771bd530ab9767e2b5aebd28c1
28ee5935b59df8b2d6876707e1f0f0e6768d2d31
a3bf77e9dea5a047c348fa98ccbeb5d5e07de3541ce0a2dfb243690da964804c

HTTP Headers

GET /s/teko/v15/LYjCdG7kmE0gdVBesCRgqA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mail.freegiftpubgmobile.duckdns.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13196
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 20:04:04 GMT
expires: Tue, 19 Sep 2023 20:04:04 GMT
cache-control: public, max-age=31536000
age: 120354
last-modified: Wed, 27 Apr 2022 16:17:49 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
214f1a068a81940edf418deb6273b95b
e325075fd4ee936768af87602e21f02544b8504a
3567281c829c6a698ef539ad4da7538a0bd452276ae45d625ac0e96eec46c498

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3567281C829C6A698EF539AD4DA7538A0BD452276AE45D625AC0E96EEC46C498"
Last-Modified: Mon, 19 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7901
Expires: Wed, 21 Sep 2022 07:41:39 GMT
Date: Wed, 21 Sep 2022 05:29:58 GMT
Connection: keep-alive

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
c683e61e63df92799aa274fdac42cd3b
191aeec95861fa8596a90a10c60b22434431c033
898c007bc0e7d5f4d3180c9fe28b88036102ba64912d0773c023e1f4f07d7beb

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 05:29:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

l.top4top.io/m_1725u5z7i1.mp3

65.21.235.194

206 Partial Content

20 kB

URL HTTP/2
l.top4top.io/m_1725u5z7i1.mp3
IP
65.21.235.194:0
ASN
#24940 Hetzner Online GmbH

File type
Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo\012- data
Size
20 kB (19781 bytes)
Hash
ee5b5d12064ae26f839b882edb33da62
6fa93ef00f294eec4ef05276e81813db1e95e346
4bc5852e5cec62ceab9260f712961f59609868151e01b63e7b7cae2b00efed54

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /m_1725u5z7i1.mp3 HTTP/1.1
Host: l.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 206 Partial Content
server: nginx
date: Wed, 21 Sep 2022 05:29:58 GMT
content-type: audio/mpeg
content-length: 19781
set-cookie: klj_40d147_downloads=kh51z; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Thu, 22 Sep 2022 05:06:38 GMT
last-modified: Mon, 21 Sep 2020 07:16:33 GMT
content-disposition: inline; filename="open_reward_tab.mp3"
etag: "5f685351-4d45"
expires: Wed, 21 Sep 2022 07:29:58 GMT
cache-control: max-age=7200
x-file-id: x34392023x
content-range: bytes 0-19780/19781
X-Firefox-Spdy: h2

www.pubgmobile.com/en/images/footer_link_bg.png

23.36.76.250

200 OK

1.6 kB

URL HTTP/2
www.pubgmobile.com/en/images/footer_link_bg.png
IP
23.36.76.250:0
ASN
#20940 Akamai International B.V.

File type
PNG image data, 560 x 127, 8-bit/color RGBA, non-interlaced\012- data
Size
1.6 kB (1630 bytes)
Hash
92ae645b6114492e8c1c5464d949466a
1d27f2644c0f5e899e9478c78136a9bc94131150
f1bd509f6032d31635a91d57de9428b83929221b854768c38c8f1643877a9417

HTTP Headers

GET /en/images/footer_link_bg.png HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/png
content-length: 1630
last-modified: Mon, 21 Mar 2022 13:24:17 GMT
etag: "62387c81-65e"
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=276
expires: Wed, 21 Sep 2022 05:34:34 GMT
date: Wed, 21 Sep 2022 05:29:58 GMT
X-Firefox-Spdy: h2

mail.freegiftpubgmobile.duckdns.org/img/rewards/10.png

20.5.64.12

200 OK

42 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/rewards/10.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
42 kB (41470 bytes)
Hash
65c3964ae787ce06ef391570d8927c87
3b73fa65d24f16449ba702620b5ab86c7cdaa27f
86056aaa4ad40695598b44c77d77061a4c323d8a396b1b6e8e5fcb76119d7a9b

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/rewards/10.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:58 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 41470
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

mail.freegiftpubgmobile.duckdns.org/img/container.jpg

20.5.64.12

200 OK

27 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/container.jpg
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 712x1136, components 3\012- data
Size
27 kB (26776 bytes)
Hash
45bfe34bd058c4bee80d7ce9fede0f3f
da562a1a4811b4d430cadfc17cf8d04e60f257de
b3580091722730d93c6588607a19e10da82b9e28c5e3be3a4685d25b864d5d22

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/container.jpg HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/css/style.css

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:58 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 26776
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg

a.top4top.io/m_1725zobal2.mp3

51.159.64.45

206 Partial Content

18 kB

URL HTTP/2
a.top4top.io/m_1725zobal2.mp3
IP
51.159.64.45:0
ASN
#12876 Online S.a.s.

File type
Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo\012- data
Size
18 kB (17691 bytes)
Hash
70ded6b0b406f9710307bc35e221629f
7034ec2ff72c936255b04c0890ce8976599380cc
22e1575a06426f427b46598d6599c565e80ed3e937b1872b0d5d928bfe5b2d65

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /m_1725zobal2.mp3 HTTP/1.1
Host: a.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 206 Partial Content
server: nginx
date: Wed, 21 Sep 2022 05:29:58 GMT
content-type: audio/mpeg
content-length: 17691
set-cookie: klj_40d147_downloads=kh520; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Thu, 22 Sep 2022 05:06:38 GMT
last-modified: Mon, 21 Sep 2020 07:16:33 GMT
content-disposition: inline; filename="close_reward_popup.mp3"
etag: "5f685351-451b"
expires: Wed, 21 Sep 2022 07:29:58 GMT
cache-control: max-age=7200
x-file-id: x34392024x
content-range: bytes 0-17690/17691
X-Firefox-Spdy: h2

mail.freegiftpubgmobile.duckdns.org/img/rewards/7.png

20.5.64.12

200 OK

62 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/rewards/7.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
62 kB (61605 bytes)
Hash
f6a710274b8140fc1af9b9fc6c0527f9
5363a3c6e9dbb05323bb9c0fa3cb8e72dee861e6
8a622c0dd94cb62966b10f6570f935099ecb2fe63fb8632d2f55b203960c21bc

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/rewards/7.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:58 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 61605
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png

mail.freegiftpubgmobile.duckdns.org/img/rewards/15.png

20.5.64.12

200 OK

62 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/rewards/15.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
62 kB (61557 bytes)
Hash
56e4cfcbf70af3e72ffae50f4ad1610d
3ad5ec074b64c8bab790d689696159f1cb9f92b4
36d9f96f021a947b50ac8ebf7437679072c88c12efa91f055d343bb0ff446c59

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/rewards/15.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:58 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 61557
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

mail.freegiftpubgmobile.duckdns.org/img/season.png

20.5.64.12

200 OK

78 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/season.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 453 x 550, 8-bit colormap, non-interlaced\012- data
Size
78 kB (78307 bytes)
Hash
45ccb05076637289b8644f62d53ae0d7
8f577780a26cf8565d010883ce2e16bb834529c0
e2d3bd709d73dfc2514369a165537867418f2c877a77614e5169132ca072a257

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/season.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:58 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 78307
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png

mail.freegiftpubgmobile.duckdns.org/img/btn-off.png

20.5.64.12

200 OK

1.8 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/btn-off.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 195 x 58, 8-bit colormap, non-interlaced\012- data
Size
1.8 kB (1809 bytes)
Hash
9893cb02d367476b63f130bbdf8b5a2c
f31c0db58b3c5b1df07d7fd9ecc0200e65916245
76c1493a2707460a4d2be0e9eecd86f99d621ed711947e23e912e79ea2b4d730

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/btn-off.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/css/style.css

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:58 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 1809
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

mail.freegiftpubgmobile.duckdns.org/img/btn-on.png

20.5.64.12

200 OK

1.6 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/btn-on.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 195 x 58, 8-bit/color RGBA, non-interlaced\012- data
Size
1.6 kB (1629 bytes)
Hash
6c56372bc20282e518d5e9db202a94d6
c370de1f2aca8ee9f91364692c346a6bbe9b8093
3f7e38550cf73f157ce96b6817577f9e9034c35bb96e0ad5ef0358d4145579c6

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/btn-on.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/css/style.css

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:58 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 1629
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

www.pubgmobile.com/en/images/nav_shop.svg

23.36.76.250

200 OK

526 B

URL HTTP/2
www.pubgmobile.com/en/images/nav_shop.svg
IP
23.36.76.250:0
ASN
#20940 Akamai International B.V.

File type
SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (985), with no line terminators
Size
526 B (526 bytes)
Hash
ad0548f5478991acc360e6464247e82a
40e3e327eebfc39a8e45b1aa46b725d65390cdcc
6654577abe5f4be7b3f9089fa76e5f746c8d0f5c7eae1cc8202a94fae1193fe3

HTTP Headers

GET /en/images/nav_shop.svg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Mar 2022 13:24:18 GMT
etag: "62387c82-3e1"
accept-ranges: bytes
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
date: Wed, 21 Sep 2022 05:29:59 GMT
content-length: 526
X-Firefox-Spdy: h2

www.pubgmobile.com/en/images/nav_language.svg

23.36.76.250

200 OK

675 B

URL HTTP/2
www.pubgmobile.com/en/images/nav_language.svg
IP
23.36.76.250:0
ASN
#20940 Akamai International B.V.

File type
SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (1107), with no line terminators
Size
675 B (675 bytes)
Hash
77e7b8dcd13159c59219706782b1a897
a3c73409a8e9841a00b771d96ce6cb0ce76d222e
4f61e0a210a58bdf43f8a93bf658275291e6a16979f8090c0731f06b6fb3c5a4

HTTP Headers

GET /en/images/nav_language.svg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Mar 2022 13:24:18 GMT
etag: "62387c82-45b"
accept-ranges: bytes
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
date: Wed, 21 Sep 2022 05:29:59 GMT
content-length: 675
X-Firefox-Spdy: h2

mail.freegiftpubgmobile.duckdns.org/img/rewards/1.png

20.5.64.12

200 OK

29 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/rewards/1.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 141 x 141, 8-bit/color RGBA, non-interlaced\012- data
Size
29 kB (28767 bytes)
Hash
dd1f0c14038d62bfde8d948ca5aea4ae
5636e06625a583fa664cd2571e39179484f467dc
f790b6028fd88bb0d44cafb60ce973c1db953105e8dc3ef869b86413f576f19d

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/rewards/1.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:59 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 28767
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

mail.freegiftpubgmobile.duckdns.org/img/rewards/3.png

20.5.64.12

200 OK

14 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/rewards/3.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 143 x 143, 8-bit/color RGBA, non-interlaced\012- data
Size
14 kB (13886 bytes)
Hash
4dc5a2ba9702f363a6f2d50117df5766
67bb3e3b3e12198464837ccad107d56b2524dcae
baca8c1cdbacd34f931ee9db9d2832c0f3c9025683737d79d8dd1dde9ba2fb6c

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/rewards/3.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:59 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 13886
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

mail.freegiftpubgmobile.duckdns.org/img/rewards/2.png

20.5.64.12

200 OK

26 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/rewards/2.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 141 x 141, 8-bit/color RGBA, non-interlaced\012- data
Size
26 kB (26338 bytes)
Hash
757710a81ea305e109a358805d95538c
6bd7bdea727f1f473a84cf978bfc26d770a13b85
bea392a2e7386a1479f12f8c2ac7d7a8be2b2a204f05850188dd7e59fd891366

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/rewards/2.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:59 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 26338
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

mail.freegiftpubgmobile.duckdns.org/img/rewards/4.png

20.5.64.12

200 OK

67 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/rewards/4.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
67 kB (66635 bytes)
Hash
f224d6fbf4856f30ce445bf5ead6e832
1b0f0b55b162b60f5c6bf9a6711c7ce38903dfcb
40cd42276b217c698a1b7ff51f4813cb472c1a3ade5b116b2627593df806037b

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/rewards/4.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:59 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 66635
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

mail.freegiftpubgmobile.duckdns.org/img/background.jpg

20.5.64.12

200 OK

122 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/background.jpg
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1136, components 3\012- data
Size
122 kB (121511 bytes)
Hash
63c5bef063b1327afa201091b17927d6
02878ecc28db83aee57ace3bd9cd4e698aa0f687
15ecbfdd88f57c0d5b28594714c4b82fa6a25f3f053b382f65a75eb46cfc10c6

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/background.jpg HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/css/style.css

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:58 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 121511
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg

mail.freegiftpubgmobile.duckdns.org/img/rewards/6.png

20.5.64.12

200 OK

74 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/rewards/6.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
74 kB (73727 bytes)
Hash
6a5217ce8c7bbfb0de95a988f1946aed
820ee1c18df90d7503922a497fa79ba913b12bd7
eab305fb9ba41545d8b196bf6bdf6c4689140d5ade190e9340fed4b3f61f97e4

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/rewards/6.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:59 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 73727
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

mail.freegiftpubgmobile.duckdns.org/img/rewards/8.png

20.5.64.12

200 OK

47 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/rewards/8.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
47 kB (47368 bytes)
Hash
fe6e1ece7488cc7f4c6850cd066f65c8
78f18e9c72ad0678d7c6f05d6405e28047306209
2bfb951b0e3d20a530e92cf60b1853d3c1164831e129777f3969c3d9811f5dfd

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/rewards/8.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:59 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 47368
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

mail.freegiftpubgmobile.duckdns.org/img/rewards/9.png

20.5.64.12

200 OK

61 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/rewards/9.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
61 kB (61378 bytes)
Hash
f75dbcd4e2325ae79bbb66429f47480d
2322cdcface7b02a57f01749c103a1b5deb84573
a5e7e9083c8886d97403ed069332f5ccac1d439058661cf423c33119415b501f

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/rewards/9.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:59 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 61378
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

mail.freegiftpubgmobile.duckdns.org/img/rewards/11.png

20.5.64.12

200 OK

65 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/rewards/11.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
65 kB (65058 bytes)
Hash
d0baa008c05ec9eb8591969f3c96af2d
3f45be71ae551640e1932b29dc6043c9bf71ac4b
d85ba5f2a1c7892bd7550224c54acaad94756b8f2278091fdd680aee545815f5

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/rewards/11.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:59 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 65058
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png

mail.freegiftpubgmobile.duckdns.org/img/rewards/5.png

20.5.64.12

200 OK

95 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/rewards/5.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
95 kB (95273 bytes)
Hash
1d2382935374a36b453d3416ecd1a152
6263c620c92fb831921cfd161cd147b16c2182fc
0eac2626c4a8208227fd2a47cde8542fa5397ff4b316eb17448ab13c521deb2f

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/rewards/5.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:59 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 95273
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

mail.freegiftpubgmobile.duckdns.org/img/rewards/12.png

20.5.64.12

200 OK

84 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/rewards/12.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
84 kB (84204 bytes)
Hash
0cc112e49467eb9b5541ec92932e877d
8d61e461692e94399823c8040dc96a6b768f0236
cdef0a2fe8b2c46210e0dfcedb037648ecff376917d01147d6fa8027952c2848

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/rewards/12.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:59 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 84204
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

www.pubgmobile.com/common/images/icon_logo.jpg

23.36.76.250

200 OK

982 kB

URL HTTP/2
www.pubgmobile.com/common/images/icon_logo.jpg
IP
23.36.76.250:0
ASN
#20940 Akamai International B.V.

File type
JPEG image data, baseline, precision 8, 1024x1024, components 3\012- data
Size
982 kB (982437 bytes)
Hash
b83d8d3e9beecfac081f4e742d27661c
448330670bef8c2ee17baf6d2410ca974341cb88
5899c82b2f0563679a9c1ee79b5b28f2545864d95c7627c1a70e36a2f034497d

HTTP Headers

GET /common/images/icon_logo.jpg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: image/jpeg
content-length: 982437
last-modified: Mon, 30 Nov 2020 12:10:45 GMT
etag: "5fc4e145-efda5"
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=230
expires: Wed, 21 Sep 2022 05:33:49 GMT
date: Wed, 21 Sep 2022 05:29:59 GMT
X-Firefox-Spdy: h2

mail.freegiftpubgmobile.duckdns.org/img/rewards/13.png

20.5.64.12

200 OK

53 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/rewards/13.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 600 x 600, 8-bit colormap, non-interlaced\012- data
Size
53 kB (53019 bytes)
Hash
61f64cae2be3ec985087daddc6168614
6e12010a0725fbb087fea72156bc631cfa7b501e
a5e3b20d0d12bbdd5ad7fde8252f7d6db16eb892ec1f330bf535f8fcdad0950f

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/rewards/13.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:59 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 53019
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

mail.freegiftpubgmobile.duckdns.org/img/popup-close.png

20.5.64.12

200 OK

1.1 kB

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/img/popup-close.png
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
1.1 kB (1083 bytes)
Hash
ca319f2406064dc2e94eb44c4a5c9f83
6523983ca3fe1d9f801f07381853aa84fb7b947f
18bcd9b4f9861faf42e756905b4283798ff18d0fa372b03a9560a06a0ccc8194

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent

HTTP Headers

GET /img/popup-close.png HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 05:29:59 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 1083
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

i.ibb.co/5xvV1TP/m24.png

51.210.3.236

200 OK

0 B

URL HTTP/2
i.ibb.co/5xvV1TP/m24.png
IP
51.210.3.236:0
ASN
#16276 OVH SAS

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /5xvV1TP/m24.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 05:29:57 GMT
content-type: image/png
content-length: 139186
last-modified: Tue, 13 Apr 2021 22:07:45 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

mail.freegiftpubgmobile.duckdns.org/media/header.mp4

20.5.64.12

206 Partial Content

0 B

URL HTTP/1.1
mail.freegiftpubgmobile.duckdns.org/media/header.mp4
IP
20.5.64.12:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Tencent
fortinet	Phishing

HTTP Headers

GET /media/header.mp4 HTTP/1.1
Host: mail.freegiftpubgmobile.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://mail.freegiftpubgmobile.duckdns.org/

HTTP/1.1 206 Partial Content
Date: Wed, 21 Sep 2022 05:29:58 GMT
Server: Apache
Last-Modified: Mon, 20 Jun 2022 01:07:26 GMT
Accept-Ranges: bytes
Content-Length: 1309782
Content-Range: bytes 0-1309781/1309782
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: video/mp4

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (143)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size