| |  172.67.218.82 | 301 Moved Permanently | 167 B |
URL User Request GET HTTP/2IP172.67.218.82:443
CertificateIssuerGoogle Trust Services LLC Subjectcnszgzdz.com FingerprintDA:0B:F0:7E:DC:47:86:F3:EF:20:D3:01:3A:91:FD:E2:C1:4D:A3:79 ValidityWed, 17 Apr 2024 08:51:37 GMT - Tue, 16 Jul 2024 08:51:36 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: www.cnszgzdz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 19 Apr 2024 04:46:43 GMT
content-type: text/html
content-length: 167
location: https://www.vzy68.com
cache-control: max-age=3600
expires: Fri, 19 Apr 2024 05:46:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aEfbByK9tpi8a0BHjzoebaoyisOn6QY2UcAtG%2F4SauArp5nCbr0nMny0HFJnMqDFGDIq3pp6gVt0VL1WzArZ4TRQJg0wTxAK3JUW4S4Nm%2F%2FlkWuXEEORR6SwRRLo5WAh5am4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876a40a3289f56a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| |  103.158.37.203 | 200 OK | 82 B |
URL User Request GET HTTP/2IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeHTML document, ASCII text, with no line terminators Hash4f3007cbc7a7a66ce056941a01b98cb4 3f037065a973fc6a9a217eb71dba73060366b744 f72b8af72714d8c81bb716731265739bb54f3b5ef50c1b0651fa5dced0422079
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET / HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:44 GMT
content-type: text/html
content-length: 82
last-modified: Sun, 07 Jan 2024 07:32:44 GMT
etag: "659a539c-52"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/ResourceConfig/urlConfig.json | 103.158.37.203 | 200 OK | 976 B |
URL GET HTTP/2www.vzy68.com/ResourceConfig/urlConfig.json IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hashbee50249b0a076b83f30088c17abb979 ff3b93764a5cef58469e4d9fbe9641805aa457ca 67bf455b6872cc13447346711aa6c61cee929504601a4b804c2174de9304f1a7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /ResourceConfig/urlConfig.json HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:45 GMT
content-type: application/json
content-length: 976
last-modified: Wed, 28 Feb 2024 06:49:26 GMT
etag: "65ded776-3d0"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/static/js/it.js?t=1 | 103.158.37.203 | 200 OK | 62 kB |
URL GET HTTP/2www.vzy68.com/static/js/it.js?t=1 IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typegzip compressed data, from Unix Hashdb47f0fecb08e521c7b6eaaae58f6208 55b5bc89a5eb8c63b5349b33d8517f05e07d115e 77426bb688f66f048401b2ec4b01b8c7aaa07ca3ecaab21ded51b567532af6fc
GET /static/js/it.js?t=1 HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:45 GMT
content-type: application/javascript
last-modified: Mon, 19 Jun 2023 12:27:26 GMT
vary: Accept-Encoding
etag: W/"649049ae-4ce"
expires: Fri, 19 Apr 2024 16:46:45 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/favicon.ico | 103.158.37.203 | 404 Not Found | 146 B |
URL GET HTTP/2www.vzy68.com/favicon.ico IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /favicon.ico HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 04:46:46 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/static/js/ResourceRedConfig.js | 103.158.37.203 | 200 OK | 5.3 kB |
URL GET HTTP/2www.vzy68.com/static/js/ResourceRedConfig.js IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typegzip compressed data, from Unix Hashcfe76d7f26869f0866cba90ab1d19936 34fc7bbc6a64af7fca88a737968f27227f65bbd9 d66bd118e3ab12c202917bf880a587b8e0d0e24dbf681aa617246fa987c10c2a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /static/js/ResourceRedConfig.js HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:45 GMT
content-type: application/javascript
last-modified: Mon, 18 Mar 2024 16:11:50 GMT
vary: Accept-Encoding
etag: W/"65f867c6-2dd4"
expires: Fri, 19 Apr 2024 16:46:45 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.jpcsalarak9243.com/click/queryIpClick |  134.122.148.74 | 200 OK | 0 B |
URL GET HTTP/2www.jpcsalarak9243.com/click/queryIpClick IP134.122.148.74:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectwww.jpcsalarak9243.com FingerprintAF:C3:BC:7C:CF:E9:25:F8:32:82:FD:45:77:68:9E:8C:6F:90:F1:94 ValiditySun, 31 Mar 2024 17:31:18 GMT - Sat, 29 Jun 2024 17:31:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /click/queryIpClick HTTP/1.1
Host: www.jpcsalarak9243.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: sink,sinks
Referer: https://www.vzy68.com/
Origin: https://www.vzy68.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:47 GMT
content-type: text/plain;charset=utf-8
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE
access-control-max-age: 3600
access-control-allow-headers: *
X-Firefox-Spdy: h2
|
|
| www.jpcsalarak9243.com/websocket/2e03a3b3a61971bd375aac43fcf616cd | 134.122.148.74 | | 0 B |
URL www.jpcsalarak9243.com/websocket/2e03a3b3a61971bd375aac43fcf616cd IP134.122.148.74:0 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectwww.jpcsalarak9243.com FingerprintAF:C3:BC:7C:CF:E9:25:F8:32:82:FD:45:77:68:9E:8C:6F:90:F1:94 ValiditySun, 31 Mar 2024 17:31:18 GMT - Sat, 29 Jun 2024 17:31:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /websocket/2e03a3b3a61971bd375aac43fcf616cd HTTP/1.1
Host: www.jpcsalarak9243.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.vzy68.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: V2tb3WAXfP7O5q6VDJYyag==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101
Server: nginx
Date: Fri, 19 Apr 2024 04:46:49 GMT
Connection: upgrade
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: *
Upgrade: websocket
Sec-WebSocket-Accept: vZoti2waBMS+trvmqp9HD5U53RQ=
Sec-WebSocket-Extensions: permessage-deflate
|
|
| j.amoad.com/js/r.js | 143.204.48.159 | 200 OK | 68 B |
IP143.204.48.159:443
CertificateIssuerSectigo Limited Subject*.amoad.com Fingerprint37:25:6C:68:45:02:ED:F1:63:29:78:21:DC:2F:46:08:0F:7D:A0:CE ValidityTue, 09 May 2023 00:00:00 GMT - Sat, 08 Jun 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash7828f61adf7ad1815fc4ba86262a93fd 01d64a1d8b9176e42b8dfab5ef8ff96c9626e858 0b554bac207c85c0a5ba8e6dc0ffbcd9f39c5fda7edd1ddc82c9612055e9c1fb
GET /js/r.js HTTP/1.1
Host: j.amoad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:46:50 GMT
content-type: application/javascript
content-length: 68
last-modified: Mon, 18 Mar 2024 01:28:36 GMT
etag: "7828f61adf7ad1815fc4ba86262a93fd"
x-amz-server-side-encryption: AES256
x-amz-version-id: vTU8ZdpS2BKCBz4Sr4ym669fb_lBEo35
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xqhCHA8I93oo-VJILPv42E5H2G4og1DeMiRlkKqT5XXadq1mtg_-6A==
cache-control: private, max-age=129600
X-Firefox-Spdy: h2
|
|
| js.withdesk.com/b6e987ff-e8f0-4aad-85a3-4a40538707cd | 54.230.111.58 | 302 Found | 0 B |
URL GET HTTP/2js.withdesk.com/b6e987ff-e8f0-4aad-85a3-4a40538707cd IP54.230.111.58:443
CertificateIssuerAmazon Subjectjs.withdesk.com FingerprintAA:D9:A2:DF:C6:DD:66:69:33:9F:C7:71:5C:B0:28:7F:E3:C2:BB:E0 ValidityThu, 15 Feb 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b6e987ff-e8f0-4aad-85a3-4a40538707cd HTTP/1.1
Host: js.withdesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
location: https://assets.withdesk.com/js/index.js
date: Wed, 17 Apr 2024 20:47:00 GMT
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9pk7_OQXerMDngMo1xhdv0tRJzimjOI_gq_1cWOyKZcAcXRLNsozlA==
age: 115190
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=AW-500327169 | 142.250.74.168 | 200 OK | 77 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=AW-500327169 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hash2a64d8cbfb80f79856f9edb0342da33e 15c836553964f46f8bbf6853f193855b9b970f88 3503cd949e4c77d27033952bd66fdc0e47f2cf9a0ec0f687a0ab8c5ebeb97bef
GET /gtag/js?id=AW-500327169 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:50 GMT
expires: Fri, 19 Apr 2024 04:46:50 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77437
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=AW-731046610 | 142.250.74.168 | 200 OK | 77 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=AW-731046610 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hashd1bedad65d59d4e4a64469bdb97dc389 df2cbdd7476fe608fc223d5516153694977c6ccd 5a63c9c9810d1b478e1df075feafdf1a024384644a60e358c292cb18103909f1
GET /gtag/js?id=AW-731046610 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:50 GMT
expires: Fri, 19 Apr 2024 04:46:50 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77436
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=AW-731048050 | 142.250.74.168 | 200 OK | 78 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=AW-731048050 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hash9c0c95d37393e1155cd44499dfefe425 2cab9821405aa2a3f2ee9edb995a4df5c1a1c450 832e34b8c6b4bd21eac546db6f10531de7c3c46683e3e9e29dd8b2da16025edf
GET /gtag/js?id=AW-731048050 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:50 GMT
expires: Fri, 19 Apr 2024 04:46:50 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77501
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| s2.nend.net/js/nendRt.js |  23.196.233.36 | 200 OK | 1 B |
IP23.196.233.36:443
CertificateIssuerDigiCert Inc Subject*.nend.net FingerprintD4:69:90:B5:DC:FA:C0:F9:F6:4A:62:90:B1:CE:34:62:83:D9:02:46 ValiditySun, 20 Aug 2023 00:00:00 GMT - Tue, 20 Aug 2024 23:59:59 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /js/nendRt.js HTTP/1.1
Host: s2.nend.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/x-javascript
Content-Length: 1
Last-Modified: Thu, 03 Aug 2023 06:27:49 GMT
Accept-Ranges: bytes
Cache-Control: max-age=18
Expires: Fri, 19 Apr 2024 04:47:08 GMT
Date: Fri, 19 Apr 2024 04:46:50 GMT
Connection: keep-alive
|
|
| www.googletagmanager.com/gtag/js?id=AW-500395028 | 142.250.74.168 | 200 OK | 78 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=AW-500395028 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hash3da014421da2016b6e52f0738f0ded8d eb5f330118d116dc45c766297186847fda2a0c6e e997a8e91303b6286b3c71bc28683b493413ddfff4b0e91dec6c375ba4101612
GET /gtag/js?id=AW-500395028 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:50 GMT
expires: Fri, 19 Apr 2024 04:46:50 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77519
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=AW-731042320 | 142.250.74.168 | 200 OK | 77 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=AW-731042320 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hash343eb73de96323acdf39f7283916c2f4 d1122e716a49f3620031e73a35dc68b8253d0e40 3ffcacf15501253bb6881947a138f6c7b66baebdf8c88550dc4c14b95042a8ca
GET /gtag/js?id=AW-731042320 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:50 GMT
expires: Fri, 19 Apr 2024 04:46:50 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77436
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=AW-500391275 | 142.250.74.168 | 200 OK | 77 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=AW-500391275 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hash783cbcf00fb9e5026e62fcd6afc1459a cbbe1098d70ea301e0f243df88331ee5b6946bb5 ad9c13ee1b58aa33a6405e5ca55dc8ee4037a54314d31b8f287da29047c21883
GET /gtag/js?id=AW-500391275 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:50 GMT
expires: Fri, 19 Apr 2024 04:46:50 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77435
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/static/image/logo-moneysite.png | 103.158.37.203 | 200 OK | 22 kB |
URL GET HTTP/2www.vzy68.com/static/image/logo-moneysite.png IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typePNG image data, 500 x 101, 8-bit/color RGBA, non-interlaced Hash865ee8971dda3a43ed1969c9e3775d40 ece1bd002a6874fc8a045fda3b5e08e550e2da03 784489fcbdcb6424c43264db5e6e062027aa7ab2a3c40728d3bfe810e70dc339
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /static/image/logo-moneysite.png HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:50 GMT
content-type: image/png
content-length: 22506
last-modified: Sat, 06 Jan 2024 13:07:18 GMT
etag: "65995086-57ea"
expires: Sun, 19 May 2024 04:46:50 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| t.co/i/adsct?bci=3&eci=2&event_id=4e87fc32-3f12-41c3-91e6-63b1688f5333&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9996118-daa8-4280-bc15-4bb4399a30e4&tw_document_href=https%3A%2F%2Fwww.aeon.co.jp%2Fauth%2Frealms%2Fmsweb%2Fprotocol%2Fopenid-connect%2Fauth%3Fclient_id%3DmoneySiteWeb%26redirect_uri%3Dhttps%3A%2F%2Fwww.aeon.co.jp%2Fmsapi%2Fpublic%2Fv1%2Fauthorization%2FIssueToken%26response_type%3Dcode%26scope%3Dopenid%26state%3DE5E5UI&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4wc7&type=javascript&version=2.3.29 | 104.244.42.69 | 200 OK | 0 B |
URL GET HTTP/2t.co/i/adsct?bci=3&eci=2&event_id=4e87fc32-3f12-41c3-91e6-63b1688f5333&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9996118-daa8-4280-bc15-4bb4399a30e4&tw_document_href=https%3A%2F%2Fwww.aeon.co.jp%2Fauth%2Frealms%2Fmsweb%2Fprotocol%2Fopenid-connect%2Fauth%3Fclient_id%3DmoneySiteWeb%26redirect_uri%3Dhttps%3A%2F%2Fwww.aeon.co.jp%2Fmsapi%2Fpublic%2Fv1%2Fauthorization%2FIssueToken%26response_type%3Dcode%26scope%3Dopenid%26state%3DE5E5UI&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4wc7&type=javascript&version=2.3.29 IP104.244.42.69:443
CertificateIssuerDigiCert Inc Subjectt.co Fingerprint97:DE:B3:55:69:90:C1:30:DC:D2:BA:8D:AA:FD:83:DE:5A:BD:27:5C ValiditySun, 07 Jan 2024 00:00:00 GMT - Mon, 06 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /i/adsct?bci=3&eci=2&event_id=4e87fc32-3f12-41c3-91e6-63b1688f5333&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9996118-daa8-4280-bc15-4bb4399a30e4&tw_document_href=https%3A%2F%2Fwww.aeon.co.jp%2Fauth%2Frealms%2Fmsweb%2Fprotocol%2Fopenid-connect%2Fauth%3Fclient_id%3DmoneySiteWeb%26redirect_uri%3Dhttps%3A%2F%2Fwww.aeon.co.jp%2Fmsapi%2Fpublic%2Fv1%2Fauthorization%2FIssueToken%26response_type%3Dcode%26scope%3Dopenid%26state%3DE5E5UI&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4wc7&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:46:49 GMT
perf: 7402827104
server: tsa_o
set-cookie: muc_ads=028183fe-6afa-4425-8a7d-2d018524c938; Max-Age=63072000; Expires=Sun, 19 Apr 2026 04:46:50 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: text/html;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 0
x-transaction-id: 708b30f3ba63dfbd
x-xss-protection: 0
strict-transport-security: max-age=0
access-control-allow-credentials: true
x-response-time: 102
x-connection-hash: c4a3e45bebff156cecfb8d95b15dab23693bcdc22169f85dc716c10c2a93b7ac
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/FH0yeOuckEYLmQRw4oKM/JaibVNkrbX3S1V/TVhVX1U/HFohcQV/veTw | 103.158.37.203 | 404 Not Found | 146 B |
URL GET HTTP/2www.vzy68.com/FH0yeOuckEYLmQRw4oKM/JaibVNkrbX3S1V/TVhVX1U/HFohcQV/veTw IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /FH0yeOuckEYLmQRw4oKM/JaibVNkrbX3S1V/TVhVX1U/HFohcQV/veTw HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 04:46:50 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| b99.yahoo.co.jp/pagead/conversion_async.js |  183.79.255.28 | 403 Forbidden | 10 kB |
URL GET HTTP/1.1b99.yahoo.co.jp/pagead/conversion_async.js IP183.79.255.28:443
CertificateIssuerCybertrust Japan Co., Ltd. Subjectmscedge01.yahoo.co.jp Fingerprint78:B8:E7:93:76:1B:13:8A:F9:4B:15:86:66:22:3A:89:E3:04:EA:54 ValidityMon, 20 Nov 2023 03:15:16 GMT - Thu, 19 Dec 2024 14:59:00 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (486) Hashbf7ebe1cc45db5a11337e505248ca4f8 ca46580e39a792218e8a0adc5a3e6e25dc11ee1f ae97b45362096c079f51de99d60833ee729b9daca0d414bf20dd797395b4717b
GET /pagead/conversion_async.js HTTP/1.1
Host: b99.yahoo.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Fri, 19 Apr 2024 04:46:50 GMT
Connection: close
X-Z-Chihaya: r=1
X-Frame-Options: SAMEORIGIN
Content-Length: 10051
Content-Type: text/html
|
|
| s.yimg.jp/images/listing/tool/cv/ytag.js | 182.22.25.252 | 200 OK | 10 kB |
URL GET HTTP/2s.yimg.jp/images/listing/tool/cv/ytag.js IP182.22.25.252:443 ASN#23816 Yahoo Japan Corporation
CertificateIssuerCybertrust Japan Co., Ltd. Subjectedge01.yahoo.co.jp FingerprintDF:68:03:C4:36:A5:59:5C:8E:59:E1:71:B7:8D:82:C9:4D:76:7A:93 ValidityFri, 02 Feb 2024 07:46:09 GMT - Sat, 01 Mar 2025 14:59:00 GMT
File typeJavaScript source, ASCII text, with very long lines (31249), with no line terminators Hashe20521ced63c4cc4c407616f67b524bd 7da4983207f82314fa4681d467577e32215a8e51 3356ae8297d2248e8abc6b9a612dda94298164f0ee224a98002167cfe1a68ad3
GET /images/listing/tool/cv/ytag.js HTTP/1.1
Host: s.yimg.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 19 Apr 2024 04:46:13 GMT
vary: Accept-Encoding
x-ntap-sg-trace-id: 908beb43e29d8fe4
last-modified: Thu, 21 Mar 2024 02:12:50 GMT
cache-control: public, max-age=600
content-encoding: gzip
server: nghttpx
accept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch
permissions-policy: ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform-version=*, ch-ua-arch=*
age: 37
content-length: 10012
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2
|
|
| b92.yahoo.co.jp/js/s_retargeting.js | 182.22.25.252 | 403 Forbidden | 10 kB |
URL GET HTTP/2b92.yahoo.co.jp/js/s_retargeting.js IP182.22.25.252:443 ASN#23816 Yahoo Japan Corporation
CertificateIssuerCybertrust Japan Co., Ltd. Subjectedge01.yahoo.co.jp FingerprintDF:68:03:C4:36:A5:59:5C:8E:59:E1:71:B7:8D:82:C9:4D:76:7A:93 ValidityFri, 02 Feb 2024 07:46:09 GMT - Sat, 01 Mar 2025 14:59:00 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (486) Hashbf7ebe1cc45db5a11337e505248ca4f8 ca46580e39a792218e8a0adc5a3e6e25dc11ee1f ae97b45362096c079f51de99d60833ee729b9daca0d414bf20dd797395b4717b
GET /js/s_retargeting.js HTTP/1.1
Host: b92.yahoo.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Fri, 19 Apr 2024 04:46:50 GMT
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 10051
content-type: text/html
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-W8TPP6 | 142.250.74.168 | 200 OK | 104 kB |
URL GET HTTP/3www.googletagmanager.com/gtm.js?id=GTM-W8TPP6 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (36883) Size104 kB (104484 bytes) Hashedc95319a875c1fd23847cfb14a9887d f13f75ad730c83392212ffdb43dc8e1e1b787b5f b3268e444b52a7b3d3c225b4388b76c70cae83717b9a585a8a2716fdfdfeafe0
GET /gtm.js?id=GTM-W8TPP6 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:50 GMT
expires: Fri, 19 Apr 2024 04:46:50 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 104484
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| assets.withdesk.com/js/index.js | 143.204.55.115 | 200 OK | 665 B |
URL GET HTTP/2assets.withdesk.com/js/index.js IP143.204.55.115:443
CertificateIssuerAmazon Subjectassets.withdesk.com Fingerprint20:72:AE:05:52:A4:70:8B:4C:6E:16:BA:E2:77:17:F8:6B:41:D1:D2 ValidityThu, 15 Feb 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (665), with no line terminators Hashcb901e490f44c4b382aaadb85f8165d6 3489aa909d6d5c00118143949c9fffe59f297156 7a1681677c1473cf4749f47b06cac2bf65e5d0d8b96c67cf613d7af423551c39
GET /js/index.js HTTP/1.1
Host: assets.withdesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.vzy68.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 665
last-modified: Wed, 17 Apr 2024 14:18:48 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: ByUbZjlmsXZU.ZrYgEVz59wPztky1B4S
accept-ranges: bytes
server: AmazonS3
date: Fri, 19 Apr 2024 04:46:52 GMT
cache-control: no-cache
etag: "cb901e490f44c4b382aaadb85f8165d6"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PoEbPbDyba7oFWcJKz_b3uQSlVC2UM8KvKvU2xJ3bb2F_6b_8wFk3w==
X-Firefox-Spdy: h2
|
|
| link-ag.net/dist/p/l/index.js | 18.176.205.111 | 200 OK | 3.8 kB |
URL GET HTTP/2link-ag.net/dist/p/l/index.js IP18.176.205.111:443
CertificateIssuerAmazon Subjectlink-ag.net FingerprintC0:73:BF:2D:B7:E7:32:57:B7:42:30:B2:E9:69:BC:25:FD:88:73:64 ValidityWed, 11 Oct 2023 00:00:00 GMT - Fri, 08 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3776) Hash965556cda0b22ef42ed86b88ec899a83 079569d45ffb2ab6e0e342a51636ceb713069578 4fca8e5b0583820c57286a8715f29de0595e364debd820f73e29dc5ab89eca76
GET /dist/p/l/index.js HTTP/1.1
Host: link-ag.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: application/javascript
content-length: 3839
server: nginx/1.25.5
last-modified: Thu, 18 Apr 2024 02:12:09 GMT
etag: "66208179-eff"
expires: Fri, 19 Apr 2024 04:51:51 GMT
cache-control: max-age=300
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/ResourceConfig/urlConfig.json | 103.158.37.203 | 200 OK | 976 B |
URL GET HTTP/2www.vzy68.com/ResourceConfig/urlConfig.json IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hashbee50249b0a076b83f30088c17abb979 ff3b93764a5cef58469e4d9fbe9641805aa457ca 67bf455b6872cc13447346711aa6c61cee929504601a4b804c2174de9304f1a7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /ResourceConfig/urlConfig.json HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: application/json
content-length: 976
last-modified: Wed, 28 Feb 2024 06:49:26 GMT
etag: "65ded776-3d0"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/static/js/ResourceConfig.js | 103.158.37.203 | 200 OK | 84 kB |
URL GET HTTP/2www.vzy68.com/static/js/ResourceConfig.js IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typegzip compressed data, from Unix Hash5f6091734e718ef36edcff64eb58a65d a3de2c82e9a81fc2df6730281af8c6940e47e860 d4a6cbe1f29235e56daf93e1b2e17239bba6a059ceb4cb04fa23ecef2d9c8afe
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - Suspicious Javascript code | | OpenPhish | phishing | AEON Financial Service |
GET /static/js/ResourceConfig.js HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:50 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 21:44:21 GMT
vary: Accept-Encoding
etag: W/"66219435-7251"
expires: Fri, 19 Apr 2024 16:46:50 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/static/js/vue.js | 103.158.37.203 | 200 OK | 184 kB |
URL GET HTTP/2www.vzy68.com/static/js/vue.js IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typegzip compressed data, from Unix Size184 kB (183706 bytes) Hashfe1f86c18eb4099f11716737ae11339d 04f1f41dfcf7d4519481b88d2f3a8768d5e26972 2ba2f43c66e3d16e34c7c4f0e8eaf0ab9eede722e722054f591595705a11e71e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /static/js/vue.js HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:50 GMT
content-type: application/javascript
last-modified: Thu, 13 May 2021 06:21:20 GMT
vary: Accept-Encoding
etag: W/"609cc560-53883"
expires: Fri, 19 Apr 2024 16:46:50 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-WHWLPMHQCY&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 104 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-WHWLPMHQCY&l=dataLayer&cx=c IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (18936) Size104 kB (104027 bytes) Hashe7226c1603a1fad1cdd209a3c8b67bfa 73ced1130408cf5c4574620e10b725857604acf8 045ccc7ee3745d7f1d3964c854755e491f4333b705cb8586aebe090b40d00a3a
GET /gtag/js?id=G-WHWLPMHQCY&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:51 GMT
expires: Fri, 19 Apr 2024 04:46:51 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 104027
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.vzy68.com/-/media/aeoncard/assets/images/icon/catch-title-mgt.svg | 103.158.37.203 | 200 OK | 832 B |
URL GET HTTP/2www.vzy68.com/-/media/aeoncard/assets/images/icon/catch-title-mgt.svg IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeSVG Scalable Vector Graphics image Hash46e8abb07d99f624434cc5af3cc46a01 d6070c096204c391233c32f1051852eab4fdc0d8 978f93df4d616b5cc75308e03706c59cd996427b615e57c21a6c15aae28d71b0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /-/media/aeoncard/assets/images/icon/catch-title-mgt.svg HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/static/css/common.css?updated=20210906
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: image/svg+xml
content-length: 832
last-modified: Mon, 26 Jun 2023 13:56:30 GMT
etag: "6499990e-340"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/-/media/aeoncard/assets/images/icon/login.svg | 103.158.37.203 | 200 OK | 569 B |
URL GET HTTP/2www.vzy68.com/-/media/aeoncard/assets/images/icon/login.svg IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeSVG Scalable Vector Graphics image Hasha00c57eac36a0040e83a02654b88153b b28b1d7917d4ac424bfa88dc8296be98b36346c6 e6afa5165455b60a9ee13a3d720cfbac28bf860d7f023ee81bbce7d978b3a0ea
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /-/media/aeoncard/assets/images/icon/login.svg HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/static/css/common.css?updated=20210906
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: image/svg+xml
content-length: 569
last-modified: Mon, 26 Jun 2023 13:56:38 GMT
etag: "64999916-239"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/-/media/aeoncard/assets/images/icon/arrow-right.svg | 103.158.37.203 | 200 OK | 667 B |
URL GET HTTP/2www.vzy68.com/-/media/aeoncard/assets/images/icon/arrow-right.svg IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeSVG Scalable Vector Graphics image Hash0edaca36f67857f869b532069a08d327 874ffe2bebe40ef2d93c509111a87952ca1a04f9 4b101a45570a701d8670aeed75d20f1a6b2812f2dfec8933ef51ede92f456094
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /-/media/aeoncard/assets/images/icon/arrow-right.svg HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/static/css/common.css?updated=20210906
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: image/svg+xml
content-length: 667
last-modified: Mon, 26 Jun 2023 13:56:18 GMT
etag: "64999902-29b"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/-/media/aeoncard/assets/images/login/bg-lgi-small.jpg | 103.158.37.203 | 200 OK | 251 kB |
URL GET HTTP/2www.vzy68.com/-/media/aeoncard/assets/images/login/bg-lgi-small.jpg IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeJPEG image data, baseline, precision 8, 1920x1088, components 3 Size251 kB (250623 bytes) Hashd26fee662dcb6f1234ad47225af11c44 a381ee1a527817a9d60e2976077fc6109d9dbe07 65cfc6d8a08327eaa144942a8c429db34f313187062120c4e727e2162189d434
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /-/media/aeoncard/assets/images/login/bg-lgi-small.jpg HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/static/css/common.css?updated=20210906
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: image/jpeg
content-length: 250623
last-modified: Mon, 26 Jun 2023 13:46:22 GMT
etag: "649996ae-3d2ff"
expires: Sun, 19 May 2024 04:46:51 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtm.init_consent&eid=-1&h=Ag&dl=www.vzy68.com%2F&tdp=AW-975121407;;1;7;1&rtg=189594&rlo=39&slo=30&z=0 | 142.250.74.168 | 200 OK | 0 B |
URL GET HTTP/3www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtm.init_consent&eid=-1&h=Ag&dl=www.vzy68.com%2F&tdp=AW-975121407;;1;7;1&rtg=189594&rlo=39&slo=30&z=0 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtm.init_consent&eid=-1&h=Ag&dl=www.vzy68.com%2F&tdp=AW-975121407;;1;7;1&rtg=189594&rlo=39&slo=30&z=0 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: text/html
server: Google Tag Manager
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/td?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtm.init_consent&eid=-1&h=Ag&dl=www.vzy68.com%2F&tdp=AW-975121407;;1;7;1&rtg=189594&rlo=39&slo=30&z=0 | 142.250.74.168 | 204 No Content | 0 B |
URL GET HTTP/3www.googletagmanager.com/td?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtm.init_consent&eid=-1&h=Ag&dl=www.vzy68.com%2F&tdp=AW-975121407;;1;7;1&rtg=189594&rlo=39&slo=30&z=0 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /td?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtm.init_consent&eid=-1&h=Ag&dl=www.vzy68.com%2F&tdp=AW-975121407;;1;7;1&rtg=189594&rlo=39&slo=30&z=0 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 19 Apr 2024 04:46:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtm.init&eid=0&h=Ag&z=0 | 142.250.74.168 | 200 OK | 0 B |
URL GET HTTP/3www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtm.init&eid=0&h=Ag&z=0 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtm.init&eid=0&h=Ag&z=0 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: text/html
server: Google Tag Manager
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.jpcsalarak9243.com/click/addClick?behaviour= | 134.122.148.74 | 200 OK | 0 B |
URL OPTIONS HTTP/2www.jpcsalarak9243.com/click/addClick?behaviour= IP134.122.148.74:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectwww.jpcsalarak9243.com FingerprintAF:C3:BC:7C:CF:E9:25:F8:32:82:FD:45:77:68:9E:8C:6F:90:F1:94 ValiditySun, 31 Mar 2024 17:31:18 GMT - Sat, 29 Jun 2024 17:31:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /click/addClick?behaviour= HTTP/1.1
Host: www.jpcsalarak9243.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: sink,sinks
Referer: https://www.vzy68.com/
Origin: https://www.vzy68.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: text/plain;charset=utf-8
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE
access-control-max-age: 3600
access-control-allow-headers: *
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/FH0yeOuckEYLmQRw4oKM/JaibVNkrbX3S1V/TVhVX1U/HFohcQV/veTw | 103.158.37.203 | 404 Not Found | 146 B |
URL GET HTTP/2www.vzy68.com/FH0yeOuckEYLmQRw4oKM/JaibVNkrbX3S1V/TVhVX1U/HFohcQV/veTw IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /FH0yeOuckEYLmQRw4oKM/JaibVNkrbX3S1V/TVhVX1U/HFohcQV/veTw HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Cookie: _gcl_au=1.1.1458869268.1713502011
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/-/media/aeoncard/assets/images/icon/chat-purple.svg | 103.158.37.203 | 200 OK | 812 B |
URL GET HTTP/2www.vzy68.com/-/media/aeoncard/assets/images/icon/chat-purple.svg IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeSVG Scalable Vector Graphics image Hash287f00ea51be382503dd0c7db6967740 c61cf23cda3e74815466d5b3066d59b932792fd4 785d479a0eac06c0d816ddc4430235cee67fdeadfe6bb4b08cfac7267e8c72c5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /-/media/aeoncard/assets/images/icon/chat-purple.svg HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/static/css/common.css?updated=20210906
Cookie: _gcl_au=1.1.1458869268.1713502011
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: image/svg+xml
content-length: 812
last-modified: Mon, 26 Jun 2023 13:56:32 GMT
etag: "64999910-32c"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/-/media/aeoncard/assets/images/icon/blank.svg | 103.158.37.203 | 200 OK | 470 B |
URL GET HTTP/2www.vzy68.com/-/media/aeoncard/assets/images/icon/blank.svg IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeSVG Scalable Vector Graphics image Hash245994e481b2b72a9ca1c88733bfc665 0154fae503a502444927ea064fb4dcadcd7739e7 229b2b9c9faee2c0eb5b2a576b8e248017b0c6eb6f0ace1c5b6e2b477f7a818c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /-/media/aeoncard/assets/images/icon/blank.svg HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/static/css/common.css?updated=20210906
Cookie: _gcl_au=1.1.1458869268.1713502011
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: image/svg+xml
content-length: 470
last-modified: Mon, 26 Jun 2023 13:56:24 GMT
etag: "64999908-1d6"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/-/media/aeoncard/assets/images/icon/information-purple.svg | 103.158.37.203 | 200 OK | 1.1 kB |
URL GET HTTP/2www.vzy68.com/-/media/aeoncard/assets/images/icon/information-purple.svg IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeSVG Scalable Vector Graphics image Hash7df249cb59d7b7e033a572b19f252f99 4aea9a1ccb09a9b423c2941f23298e33d79f809c c1b4b23bc18285be54f625906104a436e833ed50c981383784df1954578c2f9d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /-/media/aeoncard/assets/images/icon/information-purple.svg HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/static/css/common.css?updated=20210906
Cookie: _gcl_au=1.1.1458869268.1713502011
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: image/svg+xml
content-length: 1110
last-modified: Mon, 26 Jun 2023 13:56:36 GMT
etag: "64999914-456"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/-/media/aeoncard/assets/images/icon/menu.svg | 103.158.37.203 | 200 OK | 968 B |
URL GET HTTP/2www.vzy68.com/-/media/aeoncard/assets/images/icon/menu.svg IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeSVG Scalable Vector Graphics image Hash2277d082a21e17aafd4953758f567821 f237c5f53fd6b054b4a04d267e377b49ed1754ff a85560c08dbaaf5dbb46a89edd0d03f572edc76f5de71ef69b516b9e364033ec
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /-/media/aeoncard/assets/images/icon/menu.svg HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/static/css/common.css?updated=20210906
Cookie: _gcl_au=1.1.1458869268.1713502011
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: image/svg+xml
content-length: 968
last-modified: Mon, 26 Jun 2023 13:56:42 GMT
etag: "6499991a-3c8"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/-/media/aeoncard/assets/images/icon/home.svg | 103.158.37.203 | 200 OK | 1.8 kB |
URL GET HTTP/2www.vzy68.com/-/media/aeoncard/assets/images/icon/home.svg IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeSVG Scalable Vector Graphics image Hash6c399e6cd0a96be8185cbe8daea04fed 22f1942b99dc83acfba199694499ff2317ef59fc c1e60a02cc44cac2e4175c4d29deb35309d24fffe27facd2483d102396631d6a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /-/media/aeoncard/assets/images/icon/home.svg HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/static/css/common.css?updated=20210906
Cookie: _gcl_au=1.1.1458869268.1713502011
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: image/svg+xml
content-length: 1816
last-modified: Mon, 26 Jun 2023 13:56:34 GMT
etag: "64999912-718"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/-/media/aeoncard/assets/images/icon/apply.svg | 103.158.37.203 | 200 OK | 1.7 kB |
URL GET HTTP/2www.vzy68.com/-/media/aeoncard/assets/images/icon/apply.svg IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeSVG Scalable Vector Graphics image Hashb979e7648a7c188cd21d01408293cba8 40617d287a77d7bb77baa2f33f1939502022651b 7c7f39db64c0ee73492536b0fc378624f92a50ada42d2b6505ceab70f672fed2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /-/media/aeoncard/assets/images/icon/apply.svg HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/static/css/common.css?updated=20210906
Cookie: _gcl_au=1.1.1458869268.1713502011
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: image/svg+xml
content-length: 1706
last-modified: Mon, 26 Jun 2023 13:56:18 GMT
etag: "64999902-6aa"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/-/media/aeoncard/assets/images/icon/campaign-def.svg | 103.158.37.203 | 200 OK | 790 B |
URL GET HTTP/2www.vzy68.com/-/media/aeoncard/assets/images/icon/campaign-def.svg IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeSVG Scalable Vector Graphics image Hash11226cc0f8b01e9b33dc08d7eb92f4c8 40412486b5db7300ecf0b6ded1bdd109a29d67d7 f7c8987f8e172e87ee41201a15437859437c4ae79594e75568e070afc5e4378c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /-/media/aeoncard/assets/images/icon/campaign-def.svg HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/static/css/common.css?updated=20210906
Cookie: _gcl_au=1.1.1458869268.1713502011
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: image/svg+xml
content-length: 790
last-modified: Mon, 26 Jun 2023 13:56:28 GMT
etag: "6499990c-316"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| assets.withdesk.com/js/bundle.27693791-d162-4dae-b506-b567554557f6.js | 143.204.55.115 | 403 Forbidden | 1.4 kB |
URL GET HTTP/2assets.withdesk.com/js/bundle.27693791-d162-4dae-b506-b567554557f6.js IP143.204.55.115:443
CertificateIssuerAmazon Subjectassets.withdesk.com Fingerprint20:72:AE:05:52:A4:70:8B:4C:6E:16:BA:E2:77:17:F8:6B:41:D1:D2 ValidityThu, 15 Feb 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashbb312a7a4b509a01c713efbdb7514efd f9bb7d01e75f3c0cd87395e95c3f76921545da7d 4286dea4e321570ef8c12c79e09b5065e0d7bf85d5ddd5b22e97bcf8a40d2160
GET /js/bundle.27693791-d162-4dae-b506-b567554557f6.js HTTP/1.1
Host: assets.withdesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: application/xml
date: Fri, 19 Apr 2024 04:46:50 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NzNTzR2fszeJEyMz7sAt20Rc9fd6-iF2vmctPbT4jLt5W8N3w4skqQ==
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/-/media/aeoncard/assets/images/icon/support-def.svg | 103.158.37.203 | 200 OK | 1.4 kB |
URL GET HTTP/2www.vzy68.com/-/media/aeoncard/assets/images/icon/support-def.svg IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeSVG Scalable Vector Graphics image Hashbd36a78ef55f79c49b72eb3cb6f2729c 21c8c0f2d705980fb3b3959bc81ab0036d95d3f5 1c630708058b3ea7afdd369557045b3e2439409c062f98efcb6cc4774556686f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /-/media/aeoncard/assets/images/icon/support-def.svg HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/static/css/common.css?updated=20210906
Cookie: _gcl_au=1.1.1458869268.1713502011
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: image/svg+xml
content-length: 1421
last-modified: Mon, 26 Jun 2023 13:56:44 GMT
etag: "6499991c-58d"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| d.line-scdn.net/n/line_tag/public/release/v1/lt.js |  184.24.45.105 | 200 OK | 9.9 kB |
URL GET HTTP/2d.line-scdn.net/n/line_tag/public/release/v1/lt.js IP184.24.45.105:443
CertificateIssuerDigiCert Inc Subjectline-apps.com Fingerprint0B:AC:CB:65:26:C7:34:0F:85:0C:53:C9:7C:B0:21:40:C3:B9:A9:DC ValidityMon, 13 Nov 2023 00:00:00 GMT - Wed, 13 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (17002) Hash02e4691c0dcc2f7ecef2712fb0f24921 c43d36b258afe50cd563f93bfdc5094a5af5ff96 d504f72375bcfb65fbf8dbf79ad313aa21df0953bb1efef82695708ba70922b1
GET /n/line_tag/public/release/v1/lt.js HTTP/1.1
Host: d.line-scdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: VOS
content-type: application/javascript
accept-ranges: bytes
last-modified: Mon, 02 Oct 2023 06:16:39 GMT
x-amz-version-id: aLHCm1toaevjRzyK9ZlkfyErvpEL9I2
x-amz-expiration: expiry-date="Sat, 02 Dec 2023 00:00:00 GMT", rule-id="bucket_lifecycle"
x-rgw-object-type: Normal
etag: "02e4691c0dcc2f7ecef2712fb0f24921"
x-amz-request-id: tx000001e809b22208fe069-00651a6067-13dda30e-jp2
strict-transport-security: max-age=15768000
content-encoding: gzip
content-length: 9865
cache-control: max-age=527081
expires: Thu, 25 Apr 2024 07:11:32 GMT
date: Fri, 19 Apr 2024 04:46:51 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.jpcsalarak9243.com/click/addClick?behaviour= | 134.122.148.74 | 200 OK | 12 B |
URL OPTIONS HTTP/2www.jpcsalarak9243.com/click/addClick?behaviour= IP134.122.148.74:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectwww.jpcsalarak9243.com FingerprintAF:C3:BC:7C:CF:E9:25:F8:32:82:FD:45:77:68:9E:8C:6F:90:F1:94 ValiditySun, 31 Mar 2024 17:31:18 GMT - Sat, 29 Jun 2024 17:31:17 GMT
File typeASCII text, with no line terminators Hash35b0bce9d250429df012c0426f88d0bd f81d80af9cbeb0011316fbba3da8002b32251f7a da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
GET /click/addClick?behaviour= HTTP/1.1
Host: www.jpcsalarak9243.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
sink: ITPOST2
sinks: 2
Origin: https://www.vzy68.com
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: application/json
content-length: 12
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE
access-control-max-age: 3600
access-control-allow-headers: *
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-cache: MISS
X-Firefox-Spdy: h2
|
|
| b92.yahoo.co.jp/js/s_retargeting.js | 182.22.25.252 | 403 Forbidden | 10 kB |
URL GET HTTP/2b92.yahoo.co.jp/js/s_retargeting.js IP182.22.25.252:443 ASN#23816 Yahoo Japan Corporation
CertificateIssuerCybertrust Japan Co., Ltd. Subjectedge01.yahoo.co.jp FingerprintDF:68:03:C4:36:A5:59:5C:8E:59:E1:71:B7:8D:82:C9:4D:76:7A:93 ValidityFri, 02 Feb 2024 07:46:09 GMT - Sat, 01 Mar 2025 14:59:00 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (486) Hashbf7ebe1cc45db5a11337e505248ca4f8 ca46580e39a792218e8a0adc5a3e6e25dc11ee1f ae97b45362096c079f51de99d60833ee729b9daca0d414bf20dd797395b4717b
GET /js/s_retargeting.js HTTP/1.1
Host: b92.yahoo.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
date: Fri, 19 Apr 2024 04:46:51 GMT
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 10051
content-type: text/html
X-Firefox-Spdy: h2
|
|
| j.amoad.com/js/r.js | 143.204.48.159 | 200 OK | 68 B |
IP143.204.48.159:443
CertificateIssuerSectigo Limited Subject*.amoad.com Fingerprint37:25:6C:68:45:02:ED:F1:63:29:78:21:DC:2F:46:08:0F:7D:A0:CE ValidityTue, 09 May 2023 00:00:00 GMT - Sat, 08 Jun 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash7828f61adf7ad1815fc4ba86262a93fd 01d64a1d8b9176e42b8dfab5ef8ff96c9626e858 0b554bac207c85c0a5ba8e6dc0ffbcd9f39c5fda7edd1ddc82c9612055e9c1fb
GET /js/r.js HTTP/1.1
Host: j.amoad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: application/javascript
content-length: 68
last-modified: Mon, 18 Mar 2024 01:28:36 GMT
etag: "7828f61adf7ad1815fc4ba86262a93fd"
x-amz-server-side-encryption: AES256
x-amz-version-id: vTU8ZdpS2BKCBz4Sr4ym669fb_lBEo35
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Le-LawFuRA-GYov1DgXuQFfWf7vVYrJddVkHQWaMep_Xbz6D-X_aLg==
cache-control: private, max-age=129600
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=*&eid=1&u=AAAAAAAIAAAAAAAI&h=Ag&epr=1siloed_AW&tr=1rep.5rep&ti=1rep.1rep&z=0 | 142.250.74.168 | 200 OK | 0 B |
URL GET HTTP/3www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=*&eid=1&u=AAAAAAAIAAAAAAAI&h=Ag&epr=1siloed_AW&tr=1rep.5rep&ti=1rep.1rep&z=0 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=*&eid=1&u=AAAAAAAIAAAAAAAI&h=Ag&epr=1siloed_AW&tr=1rep.5rep&ti=1rep.1rep&z=0 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 04:46:52 GMT
content-type: text/html
server: Google Tag Manager
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| s2.nend.net/js/nendRt.js | 23.196.233.36 | 200 OK | 1 B |
IP23.196.233.36:443
CertificateIssuerDigiCert Inc Subject*.nend.net FingerprintD4:69:90:B5:DC:FA:C0:F9:F6:4A:62:90:B1:CE:34:62:83:D9:02:46 ValiditySun, 20 Aug 2023 00:00:00 GMT - Tue, 20 Aug 2024 23:59:59 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /js/nendRt.js HTTP/1.1
Host: s2.nend.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/x-javascript
Content-Length: 1
Last-Modified: Thu, 03 Aug 2023 06:27:49 GMT
Accept-Ranges: bytes
Cache-Control: max-age=16
Expires: Fri, 19 Apr 2024 04:47:08 GMT
Date: Fri, 19 Apr 2024 04:46:52 GMT
Connection: keep-alive
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-WHWLPMHQCY>m=45je44h0v899422000z86189594za200&_p=1713502010948&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1975026553.1713502012&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713502011&sct=1&seg=0&dl=https%3A%2F%2Fwww.vzy68.com%2F&dt=%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%20%7C%20%E3%82%A4%E3%82%AA%E3%83%B3%E3%82%AB%E3%83%BC%E3%83%89%E3%80%80%E6%9A%AE%E3%82%89%E3%81%97%E3%81%AE%E3%83%9E%E3%83%8D%E3%83%BC%E3%82%B5%E3%82%A4%E3%83%88&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=7911 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-WHWLPMHQCY>m=45je44h0v899422000z86189594za200&_p=1713502010948&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1975026553.1713502012&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713502011&sct=1&seg=0&dl=https%3A%2F%2Fwww.vzy68.com%2F&dt=%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%20%7C%20%E3%82%A4%E3%82%AA%E3%83%B3%E3%82%AB%E3%83%BC%E3%83%89%E3%80%80%E6%9A%AE%E3%82%89%E3%81%97%E3%81%AE%E3%83%9E%E3%83%8D%E3%83%BC%E3%82%B5%E3%82%A4%E3%83%88&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=7911 IP216.239.32.36:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-WHWLPMHQCY>m=45je44h0v899422000z86189594za200&_p=1713502010948&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1975026553.1713502012&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713502011&sct=1&seg=0&dl=https%3A%2F%2Fwww.vzy68.com%2F&dt=%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%20%7C%20%E3%82%A4%E3%82%AA%E3%83%B3%E3%82%AB%E3%83%BC%E3%83%89%E3%80%80%E6%9A%AE%E3%82%89%E3%81%97%E3%81%AE%E3%83%9E%E3%83%8D%E3%83%BC%E3%82%B5%E3%82%A4%E3%83%88&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=7911 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vzy68.com
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.vzy68.com
date: Fri, 19 Apr 2024 04:46:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-WHWLPMHQCY&cid=1975026553.1713502012>m=45je44h0v899422000z86189594za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1158929801 | 142.250.74.163 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-WHWLPMHQCY&cid=1975026553.1713502012>m=45je44h0v899422000z86189594za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1158929801 IP142.250.74.163:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.no Fingerprint0E:DD:25:54:7B:C3:7F:EC:27:35:B1:EC:15:C4:B7:D2:09:71:3B:68 ValidityMon, 04 Mar 2024 07:26:33 GMT - Mon, 27 May 2024 07:26:32 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-WHWLPMHQCY&cid=1975026553.1713502012>m=45je44h0v899422000z86189594za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1158929801 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 19 Apr 2024 04:46:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/-/media/AeonCard/favicon.ico | 103.158.37.203 | 404 Not Found | 146 B |
URL GET HTTP/2www.vzy68.com/-/media/AeonCard/favicon.ico IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /-/media/AeonCard/favicon.ico HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Cookie: _gcl_au=1.1.1458869268.1713502011; _ga_WHWLPMHQCY=GS1.1.1713502011.1.0.1713502011.60.0.0; _ga=GA1.1.1975026553.1713502012; __lt__cid=0086551a-5358-4891-ac11-1f7c4bddcc28; __lt__sid=093841cb-c29e65c2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 04:46:52 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| tr.line.me/tag.gif?b_id=0086551a-5358-4891-ac11-1f7c4bddcc28&b_u=https%3A%2F%2Fwww.vzy68.com%2F&b_d=www.vzy68.com&b_p=%2F&b_t=%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%20%7C%20%E3%82%A4%E3%82%AA%E3%83%B3%E3%82%AB%E3%83%BC%E3%83%89%E3%80%80%E6%9A%AE%E3%82%89%E3%81%97%E3%81%AE%E3%83%9E%E3%83%8D%E3%83%BC%E3%82%B5%E3%82%A4%E3%83%88&c_t=lap&t_id=e2f51902-b629-4ea6-8b96-16f1a0c89e1f&s_id=093841cb-c29e65c2&x4=100&e=pv&v=3.4.1&_t=1713502011786 | 147.92.191.92 | 200 OK | 43 B |
URL GET HTTP/1.1tr.line.me/tag.gif?b_id=0086551a-5358-4891-ac11-1f7c4bddcc28&b_u=https%3A%2F%2Fwww.vzy68.com%2F&b_d=www.vzy68.com&b_p=%2F&b_t=%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%20%7C%20%E3%82%A4%E3%82%AA%E3%83%B3%E3%82%AB%E3%83%BC%E3%83%89%E3%80%80%E6%9A%AE%E3%82%89%E3%81%97%E3%81%AE%E3%83%9E%E3%83%8D%E3%83%BC%E3%82%B5%E3%82%A4%E3%83%88&c_t=lap&t_id=e2f51902-b629-4ea6-8b96-16f1a0c89e1f&s_id=093841cb-c29e65c2&x4=100&e=pv&v=3.4.1&_t=1713502011786 IP147.92.191.92:443 ASN#38631 LINE Corporation
CertificateIssuerGlobalSign nv-sa Subject*.line.me FingerprintF8:54:23:3A:D6:56:3D:E1:B0:A0:39:E7:DC:9A:04:53:F5:C1:E1:F8 ValidityThu, 10 Aug 2023 02:36:02 GMT - Tue, 10 Sep 2024 02:36:01 GMT
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /tag.gif?b_id=0086551a-5358-4891-ac11-1f7c4bddcc28&b_u=https%3A%2F%2Fwww.vzy68.com%2F&b_d=www.vzy68.com&b_p=%2F&b_t=%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%20%7C%20%E3%82%A4%E3%82%AA%E3%83%B3%E3%82%AB%E3%83%BC%E3%83%89%E3%80%80%E6%9A%AE%E3%82%89%E3%81%97%E3%81%AE%E3%83%9E%E3%83%8D%E3%83%BC%E3%82%B5%E3%82%A4%E3%83%88&c_t=lap&t_id=e2f51902-b629-4ea6-8b96-16f1a0c89e1f&s_id=093841cb-c29e65c2&x4=100&e=pv&v=3.4.1&_t=1713502011786 HTTP/1.1
Host: tr.line.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 04:46:52 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
Set-Cookie: _ldbrbid=tr__k1y/XGYh9zxHr2j4pp8OAg==; expires=Sun, 19-Apr-26 04:46:52 GMT; domain=line.me; path=/; SameSite=None; Secure
Cache-Control: private, no-store, no-cache, must-revalidate
|
|
| b92.yahoo.co.jp/js/s_retargeting.js | 182.22.25.252 | 403 Forbidden | 10 kB |
URL GET HTTP/2b92.yahoo.co.jp/js/s_retargeting.js IP182.22.25.252:443 ASN#23816 Yahoo Japan Corporation
CertificateIssuerCybertrust Japan Co., Ltd. Subjectedge01.yahoo.co.jp FingerprintDF:68:03:C4:36:A5:59:5C:8E:59:E1:71:B7:8D:82:C9:4D:76:7A:93 ValidityFri, 02 Feb 2024 07:46:09 GMT - Sat, 01 Mar 2025 14:59:00 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (486) Hashbf7ebe1cc45db5a11337e505248ca4f8 ca46580e39a792218e8a0adc5a3e6e25dc11ee1f ae97b45362096c079f51de99d60833ee729b9daca0d414bf20dd797395b4717b
GET /js/s_retargeting.js HTTP/1.1
Host: b92.yahoo.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Fri, 19 Apr 2024 04:46:52 GMT
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 10051
content-type: text/html
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtag.config&eid=9&u=AAAAAAAIAAAAAAAI&h=Ag&z=0 | 142.250.74.168 | 200 OK | 0 B |
URL GET HTTP/3www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtag.config&eid=9&u=AAAAAAAIAAAAAAAI&h=Ag&z=0 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtag.config&eid=9&u=AAAAAAAIAAAAAAAI&h=Ag&z=0 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 04:46:52 GMT
content-type: text/html
server: Google Tag Manager
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=AW-731042320&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 78 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=AW-731042320&l=dataLayer&cx=c IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hashb4534022033c594bbff2f1fba852fe61 4084c6592ede1f5cb7bc9b371cc5ac07f7a3ae3f 402163f1b254ea7f672777f46717b936b06d073d26b4861b97aa0c194f74ac2f
GET /gtag/js?id=AW-731042320&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:52 GMT
expires: Fri, 19 Apr 2024 04:46:52 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77488
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtag.config&eid=11&u=AAAAAAAIAAAAAAAI&h=Ag&z=0 | 142.250.74.168 | 200 OK | 0 B |
URL GET HTTP/3www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtag.config&eid=11&u=AAAAAAAIAAAAAAAI&h=Ag&z=0 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtag.config&eid=11&u=AAAAAAAIAAAAAAAI&h=Ag&z=0 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 04:46:52 GMT
content-type: text/html
server: Google Tag Manager
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=AW-731046610&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 78 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=AW-731046610&l=dataLayer&cx=c IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hashf30c92c6d2a6e1bbc627d7129e9fd2dc 2690ffba66c1aab331d5c7977276432075f549f2 346405ef6056772d167a4d2b52a2dfbb9db98fb901428f89400d66af5e949c65
GET /gtag/js?id=AW-731046610&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:52 GMT
expires: Fri, 19 Apr 2024 04:46:52 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77467
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=AW-731048050&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 78 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=AW-731048050&l=dataLayer&cx=c IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hasheb8108268bfe5b5c68e70bd22892d340 7f3b0d75026701572219720398204f751e23a24e 391e6a610597bbbe1723cf26fce082063f32fe25247504055b295dd19fdb1dab
GET /gtag/js?id=AW-731048050&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:52 GMT
expires: Fri, 19 Apr 2024 04:46:52 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77489
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtag.config&eid=13&u=AAAAAAAIAAAAAAAI&h=Ag&z=0 | 142.250.74.168 | 200 OK | 0 B |
URL GET HTTP/3www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtag.config&eid=13&u=AAAAAAAIAAAAAAAI&h=Ag&z=0 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtag.config&eid=13&u=AAAAAAAIAAAAAAAI&h=Ag&z=0 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 04:46:52 GMT
content-type: text/html
server: Google Tag Manager
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=AW-500391275&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 78 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=AW-500391275&l=dataLayer&cx=c IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hashca5b6e049ed2246b3bdddbfe49efd96d b31eb80180f75fb7b7f7f685bf6f33072e84b242 ad35f3d445e2208a38bcacffc96baf937add6d77db058c5e361858734ba76c89
GET /gtag/js?id=AW-500391275&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:52 GMT
expires: Fri, 19 Apr 2024 04:46:52 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77467
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=AW-500395028&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 78 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=AW-500395028&l=dataLayer&cx=c IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hash08a7e39cf9bc0f7a4c697c5227f01555 5d018a3ceefdd163ae501a288f023bcd340bd213 ef4eeeb0a1b5811cc7b00725c685e924de1d08f945f29f812afd83e13e67fb72
GET /gtag/js?id=AW-500395028&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:52 GMT
expires: Fri, 19 Apr 2024 04:46:52 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77489
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtag.config&eid=15&u=AAAAAAAIAAAAAAAI&h=Ag&z=0 | 142.250.74.168 | 200 OK | 0 B |
URL GET HTTP/3www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtag.config&eid=15&u=AAAAAAAIAAAAAAAI&h=Ag&z=0 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtag.config&eid=15&u=AAAAAAAIAAAAAAAI&h=Ag&z=0 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 04:46:52 GMT
content-type: text/html
server: Google Tag Manager
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| d.line-scdn.net/n/line_tag/public/release/v1/lt.js | 184.24.45.105 | 200 OK | 9.9 kB |
URL GET HTTP/2d.line-scdn.net/n/line_tag/public/release/v1/lt.js IP184.24.45.105:443
CertificateIssuerDigiCert Inc Subjectline-apps.com Fingerprint0B:AC:CB:65:26:C7:34:0F:85:0C:53:C9:7C:B0:21:40:C3:B9:A9:DC ValidityMon, 13 Nov 2023 00:00:00 GMT - Wed, 13 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (17002) Hash02e4691c0dcc2f7ecef2712fb0f24921 c43d36b258afe50cd563f93bfdc5094a5af5ff96 d504f72375bcfb65fbf8dbf79ad313aa21df0953bb1efef82695708ba70922b1
GET /n/line_tag/public/release/v1/lt.js HTTP/1.1
Host: d.line-scdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: VOS
content-type: application/javascript
accept-ranges: bytes
last-modified: Mon, 02 Oct 2023 06:16:39 GMT
x-amz-version-id: aLHCm1toaevjRzyK9ZlkfyErvpEL9I2
x-amz-expiration: expiry-date="Sat, 02 Dec 2023 00:00:00 GMT", rule-id="bucket_lifecycle"
x-rgw-object-type: Normal
etag: "02e4691c0dcc2f7ecef2712fb0f24921"
x-amz-request-id: tx000001e809b22208fe069-00651a6067-13dda30e-jp2
strict-transport-security: max-age=15768000
content-encoding: gzip
content-length: 9865
cache-control: max-age=527079
expires: Thu, 25 Apr 2024 07:11:32 GMT
date: Fri, 19 Apr 2024 04:46:53 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
|
|
| taj1.ebis.ne.jp/wXcAqUcz/cmt.js | 54.230.111.45 | 200 OK | 0 B |
URL GET HTTP/2taj1.ebis.ne.jp/wXcAqUcz/cmt.js IP54.230.111.45:443
CertificateIssuerAmazon Subject*.ebis.ne.jp FingerprintF3:FD:49:B3:0A:A4:BE:FB:65:81:67:2F:EF:2F:36:85:88:45:4E:65 ValidityMon, 05 Feb 2024 00:00:00 GMT - Wed, 05 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wXcAqUcz/cmt.js HTTP/1.1
Host: taj1.ebis.ne.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 0
server: Apache
cross-origin-resource-policy: cross-origin
last-modified: Tue, 16 Apr 2024 04:25:25 GMT
accept-ranges: bytes
date: Fri, 19 Apr 2024 04:46:26 GMT
cache-control: no-store, s-maxage=60, public
etag: "0-6162f20831740"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 07gFeAG4j1zWNDuhbYUCnuUbL-e_6uw4KETXr1uudpkX13C4Xe8X6A==
age: 27
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=AW-500327169&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 78 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=AW-500327169&l=dataLayer&cx=c IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hash74e67bb36101e9c3eb856d0a81a740c7 d85c3e216b7663ec6291575493b41f250623df7a 1e2277b2807415f33c047d43cba88c710589ddbdb1b75f558b10e924c5d03acf
GET /gtag/js?id=AW-500327169&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:53 GMT
expires: Fri, 19 Apr 2024 04:46:53 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77463
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| t.co/i/adsct?bci=3&eci=2&event_id=4e87fc32-3f12-41c3-91e6-63b1688f5333&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9996118-daa8-4280-bc15-4bb4399a30e4&tw_document_href=https%3A%2F%2Fwww.aeon.co.jp%2Fauth%2Frealms%2Fmsweb%2Fprotocol%2Fopenid-connect%2Fauth%3Fclient_id%3DmoneySiteWeb%26redirect_uri%3Dhttps%3A%2F%2Fwww.aeon.co.jp%2Fmsapi%2Fpublic%2Fv1%2Fauthorization%2FIssueToken%26response_type%3Dcode%26scope%3Dopenid%26state%3DE5E5UI&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4wc7&type=javascript&version=2.3.29 | 104.244.42.69 | 200 OK | 0 B |
URL GET HTTP/2t.co/i/adsct?bci=3&eci=2&event_id=4e87fc32-3f12-41c3-91e6-63b1688f5333&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9996118-daa8-4280-bc15-4bb4399a30e4&tw_document_href=https%3A%2F%2Fwww.aeon.co.jp%2Fauth%2Frealms%2Fmsweb%2Fprotocol%2Fopenid-connect%2Fauth%3Fclient_id%3DmoneySiteWeb%26redirect_uri%3Dhttps%3A%2F%2Fwww.aeon.co.jp%2Fmsapi%2Fpublic%2Fv1%2Fauthorization%2FIssueToken%26response_type%3Dcode%26scope%3Dopenid%26state%3DE5E5UI&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4wc7&type=javascript&version=2.3.29 IP104.244.42.69:443
CertificateIssuerDigiCert Inc Subjectt.co Fingerprint97:DE:B3:55:69:90:C1:30:DC:D2:BA:8D:AA:FD:83:DE:5A:BD:27:5C ValiditySun, 07 Jan 2024 00:00:00 GMT - Mon, 06 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /i/adsct?bci=3&eci=2&event_id=4e87fc32-3f12-41c3-91e6-63b1688f5333&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9996118-daa8-4280-bc15-4bb4399a30e4&tw_document_href=https%3A%2F%2Fwww.aeon.co.jp%2Fauth%2Frealms%2Fmsweb%2Fprotocol%2Fopenid-connect%2Fauth%3Fclient_id%3DmoneySiteWeb%26redirect_uri%3Dhttps%3A%2F%2Fwww.aeon.co.jp%2Fmsapi%2Fpublic%2Fv1%2Fauthorization%2FIssueToken%26response_type%3Dcode%26scope%3Dopenid%26state%3DE5E5UI&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4wc7&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Cookie: muc_ads=028183fe-6afa-4425-8a7d-2d018524c938
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:46:52 GMT
perf: 7402827104
server: tsa_o
content-type: text/html;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 0
x-transaction-id: 95041da371e63b08
x-xss-protection: 0
strict-transport-security: max-age=0
access-control-allow-credentials: true
x-response-time: 104
x-connection-hash: c4a3e45bebff156cecfb8d95b15dab23693bcdc22169f85dc716c10c2a93b7ac
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/static/js/axios.js | 103.158.37.203 | 200 OK | 14 kB |
URL GET HTTP/2www.vzy68.com/static/js/axios.js IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typegzip compressed data, from Unix Hash608c4f4a70cc5ab6e33e16dbe7d3cd67 682bf4634ea2997ac5bff4341e0064d5a86e89be 7c477ac5f2eb488efe47705cce4d55e69bc72e797a9a1c7280bef08875a4e176
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /static/js/axios.js HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:45 GMT
content-type: application/javascript
last-modified: Sat, 10 Nov 2018 04:07:50 GMT
vary: Accept-Encoding
etag: W/"5be65996-a6f0"
expires: Fri, 19 Apr 2024 16:46:45 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtag.config&eid=19&u=AgAAAAAIAAAAAAAI&h=Ag&z=0 | 142.250.74.168 | 200 OK | 0 B |
URL GET HTTP/3www.googletagmanager.com/a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtag.config&eid=19&u=AgAAAAAIAAAAAAAI&h=Ag&z=0 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a?id=AW-975121407&v=3&t=t&pid=2130550422&cv=1&rv=44h0&tc=1&es=1&e=gtag.config&eid=19&u=AgAAAAAIAAAAAAAI&h=Ag&z=0 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 04:46:53 GMT
content-type: text/html
server: Google Tag Manager
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| b99.yahoo.co.jp/pagead/conversion_async.js | 183.79.255.28 | 403 Forbidden | 10 kB |
URL GET HTTP/1.1b99.yahoo.co.jp/pagead/conversion_async.js IP183.79.255.28:443
CertificateIssuerCybertrust Japan Co., Ltd. Subjectmscedge01.yahoo.co.jp Fingerprint78:B8:E7:93:76:1B:13:8A:F9:4B:15:86:66:22:3A:89:E3:04:EA:54 ValidityMon, 20 Nov 2023 03:15:16 GMT - Thu, 19 Dec 2024 14:59:00 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (486) Hashbf7ebe1cc45db5a11337e505248ca4f8 ca46580e39a792218e8a0adc5a3e6e25dc11ee1f ae97b45362096c079f51de99d60833ee729b9daca0d414bf20dd797395b4717b
GET /pagead/conversion_async.js HTTP/1.1
Host: b99.yahoo.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Fri, 19 Apr 2024 04:46:53 GMT
Connection: close
X-Z-Chihaya: r=1
X-Frame-Options: SAMEORIGIN
Content-Length: 10051
Content-Type: text/html
|
|
| am.yahoo.co.jp/rt/?p=PKACO8S3D7&label=&ref=https%3A%2F%2Fwww.vzy68.com%2F&rref=&pt=&item=&cat=&price=&quantity=&r=1713502013.5322082&pvid=tc6f2qsg22ilv66uuyd&su=64edb4d6-3965-4334-be2d-1e7c9bd13466&_impl=ytag | 183.79.250.251 | 403 Forbidden | 10 kB |
URL GET HTTP/2am.yahoo.co.jp/rt/?p=PKACO8S3D7&label=&ref=https%3A%2F%2Fwww.vzy68.com%2F&rref=&pt=&item=&cat=&price=&quantity=&r=1713502013.5322082&pvid=tc6f2qsg22ilv66uuyd&su=64edb4d6-3965-4334-be2d-1e7c9bd13466&_impl=ytag IP183.79.250.251:443
CertificateIssuerCybertrust Japan Co., Ltd. Subjectedge01.yahoo.co.jp FingerprintDF:68:03:C4:36:A5:59:5C:8E:59:E1:71:B7:8D:82:C9:4D:76:7A:93 ValidityFri, 02 Feb 2024 07:46:09 GMT - Sat, 01 Mar 2025 14:59:00 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (486) Hashbf7ebe1cc45db5a11337e505248ca4f8 ca46580e39a792218e8a0adc5a3e6e25dc11ee1f ae97b45362096c079f51de99d60833ee729b9daca0d414bf20dd797395b4717b
GET /rt/?p=PKACO8S3D7&label=&ref=https%3A%2F%2Fwww.vzy68.com%2F&rref=&pt=&item=&cat=&price=&quantity=&r=1713502013.5322082&pvid=tc6f2qsg22ilv66uuyd&su=64edb4d6-3965-4334-be2d-1e7c9bd13466&_impl=ytag HTTP/1.1
Host: am.yahoo.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.vzy68.com/
Origin: https://www.vzy68.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Fri, 19 Apr 2024 04:46:53 GMT
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 10051
content-type: text/html
X-Firefox-Spdy: h2
|
|
| s.yimg.jp/images/listing/tool/cv/ytag.js | 182.22.25.252 | 200 OK | 10 kB |
URL GET HTTP/2s.yimg.jp/images/listing/tool/cv/ytag.js IP182.22.25.252:443 ASN#23816 Yahoo Japan Corporation
CertificateIssuerCybertrust Japan Co., Ltd. Subjectedge01.yahoo.co.jp FingerprintDF:68:03:C4:36:A5:59:5C:8E:59:E1:71:B7:8D:82:C9:4D:76:7A:93 ValidityFri, 02 Feb 2024 07:46:09 GMT - Sat, 01 Mar 2025 14:59:00 GMT
File typeJavaScript source, ASCII text, with very long lines (31249), with no line terminators Hashe20521ced63c4cc4c407616f67b524bd 7da4983207f82314fa4681d467577e32215a8e51 3356ae8297d2248e8abc6b9a612dda94298164f0ee224a98002167cfe1a68ad3
GET /images/listing/tool/cv/ytag.js HTTP/1.1
Host: s.yimg.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 19 Apr 2024 04:46:13 GMT
vary: Accept-Encoding
x-ntap-sg-trace-id: 908beb43e29d8fe4
last-modified: Thu, 21 Mar 2024 02:12:50 GMT
cache-control: public, max-age=600
content-encoding: gzip
server: nghttpx
accept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch
permissions-policy: ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform-version=*, ch-ua-arch=*
age: 40
content-length: 10012
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2
|
|
| s.yimg.jp/images/listing/tool/cv/ytag.js | 182.22.25.252 | 200 OK | 10 kB |
URL GET HTTP/2s.yimg.jp/images/listing/tool/cv/ytag.js IP182.22.25.252:443 ASN#23816 Yahoo Japan Corporation
CertificateIssuerCybertrust Japan Co., Ltd. Subjectedge01.yahoo.co.jp FingerprintDF:68:03:C4:36:A5:59:5C:8E:59:E1:71:B7:8D:82:C9:4D:76:7A:93 ValidityFri, 02 Feb 2024 07:46:09 GMT - Sat, 01 Mar 2025 14:59:00 GMT
File typeJavaScript source, ASCII text, with very long lines (31249), with no line terminators Hashe20521ced63c4cc4c407616f67b524bd 7da4983207f82314fa4681d467577e32215a8e51 3356ae8297d2248e8abc6b9a612dda94298164f0ee224a98002167cfe1a68ad3
GET /images/listing/tool/cv/ytag.js HTTP/1.1
Host: s.yimg.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 19 Apr 2024 04:46:13 GMT
vary: Accept-Encoding
x-ntap-sg-trace-id: 908beb43e29d8fe4
last-modified: Thu, 21 Mar 2024 02:12:50 GMT
cache-control: public, max-age=600
content-encoding: gzip
server: nghttpx
accept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch
permissions-policy: ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform-version=*, ch-ua-arch=*
age: 40
content-length: 10012
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-WHWLPMHQCY>m=45je44h0v899422000z86189594za200&_p=1713502010948&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1975026553.1713502012&ul=en-us&sr=1280x1024&pscdl=noapi&_s=2&sid=1713502011&sct=1&seg=0&dl=https%3A%2F%2Fwww.vzy68.com%2F&dt=%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%20%7C%20%E3%82%A4%E3%82%AA%E3%83%B3%E3%82%AB%E3%83%BC%E3%83%89%E3%80%80%E6%9A%AE%E3%82%89%E3%81%97%E3%81%AE%E3%83%9E%E3%83%8D%E3%83%BC%E3%82%B5%E3%82%A4%E3%83%88&en=undefined&tfd=12928 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/3region1.analytics.google.com/g/collect?v=2&tid=G-WHWLPMHQCY>m=45je44h0v899422000z86189594za200&_p=1713502010948&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1975026553.1713502012&ul=en-us&sr=1280x1024&pscdl=noapi&_s=2&sid=1713502011&sct=1&seg=0&dl=https%3A%2F%2Fwww.vzy68.com%2F&dt=%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%20%7C%20%E3%82%A4%E3%82%AA%E3%83%B3%E3%82%AB%E3%83%BC%E3%83%89%E3%80%80%E6%9A%AE%E3%82%89%E3%81%97%E3%81%AE%E3%83%9E%E3%83%8D%E3%83%BC%E3%82%B5%E3%82%A4%E3%83%88&en=undefined&tfd=12928 IP216.239.32.36:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-WHWLPMHQCY>m=45je44h0v899422000z86189594za200&_p=1713502010948&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1975026553.1713502012&ul=en-us&sr=1280x1024&pscdl=noapi&_s=2&sid=1713502011&sct=1&seg=0&dl=https%3A%2F%2Fwww.vzy68.com%2F&dt=%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%20%7C%20%E3%82%A4%E3%82%AA%E3%83%B3%E3%82%AB%E3%83%BC%E3%83%89%E3%80%80%E6%9A%AE%E3%82%89%E3%81%97%E3%81%AE%E3%83%9E%E3%83%8D%E3%83%BC%E3%82%B5%E3%82%A4%E3%83%88&en=undefined&tfd=12928 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vzy68.com
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.vzy68.com
date: Fri, 19 Apr 2024 04:46:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.vzy68.com/static/css/common.css?updated=20210906 | 103.158.37.203 | 200 OK | 587 kB |
URL GET HTTP/2www.vzy68.com/static/css/common.css?updated=20210906 IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
Size587 kB (586744 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/css/common.css?updated=20210906 HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:50 GMT
content-type: text/css
last-modified: Mon, 26 Jun 2023 13:07:10 GMT
vary: Accept-Encoding
etag: W/"64998d7e-8f3f8"
expires: Fri, 19 Apr 2024 16:46:50 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/static/js/jquery-ui.js | 103.158.37.203 | 200 OK | 1.4 kB |
URL GET HTTP/2www.vzy68.com/static/js/jquery-ui.js IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeASCII text, with very long lines (1457), with no line terminators Hashbbaed5b7d825168907c177a5ffab4f5d a7bebbc47c6c6a65a6d6aa2008410bcbc20914d5 c6042221c7686c7fb7705cba96a93e9c79a052252f49b3514391e57c52300a8e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /static/js/jquery-ui.js HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:45 GMT
content-type: application/javascript
last-modified: Thu, 09 Mar 2023 07:28:18 GMT
vary: Accept-Encoding
etag: W/"64098a92-5a4"
expires: Fri, 19 Apr 2024 16:46:45 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tr.line.me/tag.gif?b_id=0086551a-5358-4891-ac11-1f7c4bddcc28&b_u=https%3A%2F%2Fwww.vzy68.com%2F&b_d=www.vzy68.com&b_p=%2F&b_t=%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%20%7C%20%E3%82%A4%E3%82%AA%E3%83%B3%E3%82%AB%E3%83%BC%E3%83%89%E3%80%80%E6%9A%AE%E3%82%89%E3%81%97%E3%81%AE%E3%83%9E%E3%83%8D%E3%83%BC%E3%82%B5%E3%82%A4%E3%83%88&c_t=lap&t_id=1bb3f25c-e698-44c3-8193-a61d70c165a3&s_id=093841cb-c29e65c2&x4=400&e=pv&v=3.4.1&_t=1713502012934 | 147.92.191.92 | 200 OK | 43 B |
URL GET HTTP/1.1tr.line.me/tag.gif?b_id=0086551a-5358-4891-ac11-1f7c4bddcc28&b_u=https%3A%2F%2Fwww.vzy68.com%2F&b_d=www.vzy68.com&b_p=%2F&b_t=%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%20%7C%20%E3%82%A4%E3%82%AA%E3%83%B3%E3%82%AB%E3%83%BC%E3%83%89%E3%80%80%E6%9A%AE%E3%82%89%E3%81%97%E3%81%AE%E3%83%9E%E3%83%8D%E3%83%BC%E3%82%B5%E3%82%A4%E3%83%88&c_t=lap&t_id=1bb3f25c-e698-44c3-8193-a61d70c165a3&s_id=093841cb-c29e65c2&x4=400&e=pv&v=3.4.1&_t=1713502012934 IP147.92.191.92:443 ASN#38631 LINE Corporation
CertificateIssuerGlobalSign nv-sa Subject*.line.me FingerprintF8:54:23:3A:D6:56:3D:E1:B0:A0:39:E7:DC:9A:04:53:F5:C1:E1:F8 ValidityThu, 10 Aug 2023 02:36:02 GMT - Tue, 10 Sep 2024 02:36:01 GMT
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /tag.gif?b_id=0086551a-5358-4891-ac11-1f7c4bddcc28&b_u=https%3A%2F%2Fwww.vzy68.com%2F&b_d=www.vzy68.com&b_p=%2F&b_t=%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%20%7C%20%E3%82%A4%E3%82%AA%E3%83%B3%E3%82%AB%E3%83%BC%E3%83%89%E3%80%80%E6%9A%AE%E3%82%89%E3%81%97%E3%81%AE%E3%83%9E%E3%83%8D%E3%83%BC%E3%82%B5%E3%82%A4%E3%83%88&c_t=lap&t_id=1bb3f25c-e698-44c3-8193-a61d70c165a3&s_id=093841cb-c29e65c2&x4=400&e=pv&v=3.4.1&_t=1713502012934 HTTP/1.1
Host: tr.line.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Cookie: _ldbrbid=tr__k1y/XGYh9zxHr2j4pp8OAg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 04:46:53 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
Set-Cookie: _ldbrbid=tr__k1y/XGYh9zxHr2j4pp8OAg==; expires=Sun, 19-Apr-26 04:46:53 GMT; domain=line.me; path=/; SameSite=None; Secure
Cache-Control: private, no-store, no-cache, must-revalidate
|
|
| www.vzy68.com/static/js/jquery-ui.js | 103.158.37.203 | 200 OK | 1.4 kB |
URL GET HTTP/2www.vzy68.com/static/js/jquery-ui.js IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeASCII text, with very long lines (1457), with no line terminators Hashbbaed5b7d825168907c177a5ffab4f5d a7bebbc47c6c6a65a6d6aa2008410bcbc20914d5 c6042221c7686c7fb7705cba96a93e9c79a052252f49b3514391e57c52300a8e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /static/js/jquery-ui.js HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:50 GMT
content-type: application/javascript
last-modified: Thu, 09 Mar 2023 07:28:18 GMT
vary: Accept-Encoding
etag: W/"64098a92-5a4"
expires: Fri, 19 Apr 2024 16:46:50 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/-/media/aeoncard/assets/images/icon/benefit.svg | 103.158.37.203 | 200 OK | 1.1 kB |
URL GET HTTP/2www.vzy68.com/-/media/aeoncard/assets/images/icon/benefit.svg IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeSVG Scalable Vector Graphics image Hash76cd480f5a9646fa9a2eb8d7163c8bb0 9a2e290f1d8750027ec81b39e77c054046552680 914c9080618bd16b5c43de7ae8cea0b34fe56e95d42da3f7264b9685641f2191
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /-/media/aeoncard/assets/images/icon/benefit.svg HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/static/css/common.css?updated=20210906
Cookie: _gcl_au=1.1.1458869268.1713502011
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:51 GMT
content-type: image/svg+xml
content-length: 1128
last-modified: Mon, 26 Jun 2023 13:56:20 GMT
etag: "64999904-468"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/destination?id=AW-975121407&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 213 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=AW-975121407&l=dataLayer&cx=c IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Size213 kB (213032 bytes) Hashde358c71e383132d7f9dd171c3ec9c84 959f7582ef0a035f51793e1b693732a4bf3f59ae 09c4b6b5472bbdcb861124843fbfe13898602e8cd579714f887aee9ace7bcfd8
GET /gtag/destination?id=AW-975121407&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:51 GMT
expires: Fri, 19 Apr 2024 04:46:51 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77514
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.tfteleknteqd888.com/index.php | 121.127.245.109 | 200 OK | 356 B |
URL OPTIONS HTTP/2www.tfteleknteqd888.com/index.php IP121.127.245.109:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectwww.tfteleknteqd888.com Fingerprint82:66:DB:62:4E:F0:7E:6F:D1:6D:02:F4:44:B5:1B:A6:44:63:FE:42 ValidityMon, 18 Mar 2024 15:11:03 GMT - Sun, 16 Jun 2024 15:11:02 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (423), with no line terminators Hash891a46330353f3520e53f79c8058441c 50ed183699f442b6fd3ba763d07c1219c04ed99e 641d8ea9f011e6835b469f0e655c30a559e5d8fbc31bd033998261c2b1940414
OPTIONS /index.php HTTP/1.1
Host: www.tfteleknteqd888.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: sink,sinks
Referer: https://www.vzy68.com/
Origin: https://www.vzy68.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:48 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://www.vzy68.com
access-control-allow-headers: HTTP_X_REQUESTED_WITH,X-Requested-With,X_Requested_With,Content-Type,ClientVersion,Authorization,Version, Token, Origin,Accept,DNT,X-Mx-ReqToken,sink,sinks
access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.jpcsalarak9243.com/websocket/2e03a3b3a61971bd375aac43fcf616cd | 134.122.148.74 | 101 | 0 B |
URL GET HTTP/1.1www.jpcsalarak9243.com/websocket/2e03a3b3a61971bd375aac43fcf616cd IP134.122.148.74:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectwww.jpcsalarak9243.com FingerprintAF:C3:BC:7C:CF:E9:25:F8:32:82:FD:45:77:68:9E:8C:6F:90:F1:94 ValiditySun, 31 Mar 2024 17:31:18 GMT - Sat, 29 Jun 2024 17:31:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /websocket/2e03a3b3a61971bd375aac43fcf616cd HTTP/1.1
Host: www.jpcsalarak9243.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.vzy68.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: V2tb3WAXfP7O5q6VDJYyag==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101
Server: nginx
Date: Fri, 19 Apr 2024 04:46:49 GMT
Connection: upgrade
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: *
Upgrade: websocket
Sec-WebSocket-Accept: vZoti2waBMS+trvmqp9HD5U53RQ=
Sec-WebSocket-Extensions: permessage-deflate
|
|
| www.googletagmanager.com/gtag/destination?id=AW-966350753&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 213 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=AW-966350753&l=dataLayer&cx=c IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Size213 kB (213038 bytes) Hashde8287b6d7a25a25edf776fe94caf3a7 2405ed261ee758ae96c50939090384eccaa754c7 c580dafb395bfdd8fb7ef4a834583c37acb3c54afc9bc9cd2ae32b8fb6532b8b
GET /gtag/destination?id=AW-966350753&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 04:46:51 GMT
expires: Fri, 19 Apr 2024 04:46:51 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77468
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.vzy68.com/static/css/common.css | 103.158.37.203 | 200 OK | 587 kB |
URL GET HTTP/2www.vzy68.com/static/css/common.css IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
Size587 kB (586744 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /static/css/common.css HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:45 GMT
content-type: text/css
last-modified: Mon, 26 Jun 2023 13:07:10 GMT
vary: Accept-Encoding
etag: W/"64998d7e-8f3f8"
expires: Fri, 19 Apr 2024 16:46:45 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.vzy68.com/static/image/loading.gif | 103.158.37.203 | 200 OK | 61 kB |
URL GET HTTP/2www.vzy68.com/static/image/loading.gif IP103.158.37.203:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.vzy68.com Fingerprint56:BA:F0:31:3D:2B:EB:B7:02:BB:06:80:05:CA:EC:45:66:2F:29:B3 ValidityThu, 18 Apr 2024 20:44:32 GMT - Wed, 17 Jul 2024 20:44:31 GMT
File typeGIF image data, version 89a, 800 x 800 Hash1e8464494e154c52fc4866dc185bfacd f3625bb8360030f037381a33daaa96ff836b3227 4f21bb5f9035ebc23018660d3fa61bf1fc6fb14f383dc0a17dd91bc421ed861c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | AEON Financial Service |
GET /static/image/loading.gif HTTP/1.1
Host: www.vzy68.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:45 GMT
content-type: image/gif
content-length: 61320
last-modified: Mon, 19 Jun 2023 12:09:30 GMT
etag: "6490457a-ef88"
expires: Sun, 19 May 2024 04:46:45 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.tfteleknteqd888.com/index.php | 121.127.245.109 | 200 OK | 356 B |
URL GET HTTP/2www.tfteleknteqd888.com/index.php IP121.127.245.109:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectwww.tfteleknteqd888.com Fingerprint82:66:DB:62:4E:F0:7E:6F:D1:6D:02:F4:44:B5:1B:A6:44:63:FE:42 ValidityMon, 18 Mar 2024 15:11:03 GMT - Sun, 16 Jun 2024 15:11:02 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (423), with no line terminators Hash891a46330353f3520e53f79c8058441c 50ed183699f442b6fd3ba763d07c1219c04ed99e 641d8ea9f011e6835b469f0e655c30a559e5d8fbc31bd033998261c2b1940414
GET /index.php HTTP/1.1
Host: www.tfteleknteqd888.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
sink: ITPOST2
sinks: 2
Origin: https://www.vzy68.com
DNT: 1
Connection: keep-alive
Referer: https://www.vzy68.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:46:48 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://www.vzy68.com
access-control-allow-headers: HTTP_X_REQUESTED_WITH,X-Requested-With,X_Requested_With,Content-Type,ClientVersion,Authorization,Version, Token, Origin,Accept,DNT,X-Mx-ReqToken,sink,sinks
access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
104.21.17.10