| |  45.119.53.125 | 200 OK | 5.9 kB |
URL User Request GET HTTP/1.1IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1293), with CRLF, CR, LF line terminators Hashcb3ece3216c356c6dade8e4ed453dce1 5eb5bd9a22ec2e75f331a6eda45e9d0e5e4e967b 08b6ec50c4c70116c94cdb902e0d4c78d62838c5a59d97652c4d07bac2173862
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET / HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:19 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: home_lang=cn; path=/
admin_lang=cn; path=/
PHPSESSID=irdvkssh55l39f1u8l5iqk9536; path=/
users_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
site_info=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Cache-control: private
Content-Encoding: gzip
|
|
| beacon-v2.helpscout.net/ |  54.230.111.33 | 200 OK | 328 B |
IP54.230.111.33:443
CertificateIssuerAmazon Subject*.helpscout.net FingerprintFA:94:D9:61:74:FC:5D:96:59:8E:11:C7:73:8E:F3:84:B4:19:52:82 ValidityMon, 18 Mar 2024 00:00:00 GMT - Tue, 15 Apr 2025 23:59:59 GMT
File typeASCII text, with very long lines (458), with no line terminators Hash9100bc5969e7a56ebd3d936e2c9d2181 377a43ee63ed1268a04d294fd164ad54398b69d4 8857313a6501379e1285fbf60390f1473a51b6ce5c7a4214c2137eafb514972f
GET / HTTP/1.1
Host: beacon-v2.helpscout.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 328
last-modified: Tue, 23 Apr 2024 11:06:57 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 18:08:19 GMT
cache-control: max-age=120, s-maxage=120, public
etag: "9291fece8354e34bae56baeffb2f3484"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tMHLZb2UfOdBD5EaXbsiEHKtunvGxf5Iy0H1NEXCPsIL7dN9uz90kg==
age: 22
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| 42pc.com/skin/css/swiper.min.css | 45.119.53.125 | 200 OK | 3.5 kB |
URL GET HTTP/1.142pc.com/skin/css/swiper.min.css IP45.119.53.125:80 ASN#55933 Cloudie Limited
Hashc14ad0ac4865dab36e7ac864a943f0ee f3e9e5fbbba47fb35a6e4b5561447b8ac201db8b 0ce18fdb30e9ec4adea72834c71f12f3c4d3e89d5faeee0363079d88483897ad
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/css/swiper.min.css HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:19 GMT
Content-Type: text/css
Last-Modified: Mon, 17 Jul 2023 01:51:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eae-4d56"
Expires: Sat, 27 Apr 2024 06:08:19 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/css/0b502bd7632b779787e7571ed7da626349d4848b_CSS.8e2d704c.chunk.css | 45.119.53.125 | 404 Not Found | 206 B |
URL GET HTTP/1.142pc.com/skin/css/0b502bd7632b779787e7571ed7da626349d4848b_CSS.8e2d704c.chunk.css IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeHTML document, ASCII text Hash8974d81d3c396de11102329dcd7b7766 891229fffab22abe7571d306c239d33801830409 dedbdf38a41bd497ac8adc0949ca007a4d1e25a99f4c327fae7de3c9a7faafdf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/css/0b502bd7632b779787e7571ed7da626349d4848b_CSS.8e2d704c.chunk.css HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 26 Apr 2024 18:08:20 GMT
Content-Type: text/html
Content-Length: 206
Connection: keep-alive
ETag: "64d29139-ce"
|
|
| 42pc.com/skin/js/vendor.51111976.js | 45.119.53.125 | 200 OK | 25 kB |
URL GET HTTP/1.142pc.com/skin/js/vendor.51111976.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (64243), with no line terminators Hash8db0e0247ecb71bfdf18f43ff6401d40 735da43745bf61098cb4cbdf3d5b65235e219d99 6a69a0f8da52f401b953914ed46f36a66de2a61dfd54fe5f92b4d6585773c76a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/vendor.51111976.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:19 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 02:05:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b4a1e6-faf3"
Expires: Sat, 27 Apr 2024 06:08:19 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/css/484c840239a025432effd6ecc373d498fa764368_CSS.4e604f4b.chunk.css | 45.119.53.125 | 404 Not Found | 206 B |
URL GET HTTP/1.142pc.com/skin/css/484c840239a025432effd6ecc373d498fa764368_CSS.4e604f4b.chunk.css IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeHTML document, ASCII text Hash8974d81d3c396de11102329dcd7b7766 891229fffab22abe7571d306c239d33801830409 dedbdf38a41bd497ac8adc0949ca007a4d1e25a99f4c327fae7de3c9a7faafdf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/css/484c840239a025432effd6ecc373d498fa764368_CSS.4e604f4b.chunk.css HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 26 Apr 2024 18:08:20 GMT
Content-Type: text/html
Content-Length: 206
Connection: keep-alive
ETag: "64d29139-ce"
|
|
| 42pc.com/skin/css/styles.6875948e.chunk.css | 45.119.53.125 | 200 OK | 3.7 kB |
URL GET HTTP/1.142pc.com/skin/css/styles.6875948e.chunk.css IP45.119.53.125:80 ASN#55933 Cloudie Limited
Hashfa1b931a64df40aa165626276b481a86 1a4818e1858a7baedcc0fb3e1881f5f1d2a35b2a 4f143af170575e2c2e7abc6e4e7ce439586a18963662de2339ea14c91c1c416a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/css/styles.6875948e.chunk.css HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:20 GMT
Content-Type: text/css
Last-Modified: Mon, 17 Jul 2023 01:51:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eae-43fc"
Expires: Sat, 27 Apr 2024 06:08:20 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/92df071de9572e6feefc706208f339472c775067.2b4788aa23977c8627b9.js | 45.119.53.125 | 200 OK | 9.0 kB |
URL GET HTTP/1.142pc.com/skin/js/92df071de9572e6feefc706208f339472c775067.2b4788aa23977c8627b9.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (23049), with CRLF line terminators Hash96e232830be3c41745699fe9a078702e cdceea64495d13de5937642bcf3c7a45932649f0 c3d57d9dbe93bbfa4dedbbf3a7820f3f7e1efd33a40514305b74bc01cbed0934
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/92df071de9572e6feefc706208f339472c775067.2b4788aa23977c8627b9.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:20 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-5a0b"
Expires: Sat, 27 Apr 2024 06:08:20 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/_app-371eef722a7db8ea7cd5.js | 45.119.53.125 | 200 OK | 3.1 kB |
URL GET HTTP/1.142pc.com/skin/js/_app-371eef722a7db8ea7cd5.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (7955), with CRLF line terminators Hash32a6381fc5dc9f9225a9fb0a06eefa73 9f2b4c52602153ece517df2e50ea0d6669aa6bf5 59db72036b47b8c87593995e1b4d4e0dc887ba6f8acf11924e582330520624a8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/_app-371eef722a7db8ea7cd5.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:20 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-1f15"
Expires: Sat, 27 Apr 2024 06:08:20 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/ab7bdd0af29a081632cc65532d6eb4eb4926a6c8.1174ff1829116dfff3f1.js | 45.119.53.125 | 200 OK | 9.7 kB |
URL GET HTTP/1.142pc.com/skin/js/ab7bdd0af29a081632cc65532d6eb4eb4926a6c8.1174ff1829116dfff3f1.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (26165), with CRLF line terminators Hash6eb6563349eb8a738610750801f49cdc e0db72c027e125d1e9f981a0a734dd5fb3d3211f cd9bdb6fa8d1224c575a7717e1439ff99d6a8cfcc0842041a242219340b75b7b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/ab7bdd0af29a081632cc65532d6eb4eb4926a6c8.1174ff1829116dfff3f1.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:20 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-6637"
Expires: Sat, 27 Apr 2024 06:08:20 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/0b502bd7632b779787e7571ed7da626349d4848b_CSS.ff5578978733a40a67a3.js | 45.119.53.125 | 404 Not Found | 206 B |
URL GET HTTP/1.142pc.com/skin/js/0b502bd7632b779787e7571ed7da626349d4848b_CSS.ff5578978733a40a67a3.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeHTML document, ASCII text Hash8974d81d3c396de11102329dcd7b7766 891229fffab22abe7571d306c239d33801830409 dedbdf38a41bd497ac8adc0949ca007a4d1e25a99f4c327fae7de3c9a7faafdf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/0b502bd7632b779787e7571ed7da626349d4848b_CSS.ff5578978733a40a67a3.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 26 Apr 2024 18:08:20 GMT
Content-Type: text/html
Content-Length: 206
Connection: keep-alive
ETag: "64d29139-ce"
|
|
| 42pc.com/skin/js/1641eb77b9112ff2fb25bddeb2768b5acdab245a.9add997ff7faa77a3196.js | 45.119.53.125 | 200 OK | 10 kB |
URL GET HTTP/1.142pc.com/skin/js/1641eb77b9112ff2fb25bddeb2768b5acdab245a.9add997ff7faa77a3196.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeASCII text, with very long lines (26119), with CRLF line terminators Hash390199ac2dc0a5a6038dc114957258be ffa03e08628d09006d9316907a30b6e453d3d18d 3b24e7f71ff407c81796ed60a8deeed3b289b042cdda91b2c338325b82338aa8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/1641eb77b9112ff2fb25bddeb2768b5acdab245a.9add997ff7faa77a3196.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:20 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-6609"
Expires: Sat, 27 Apr 2024 06:08:20 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/29107295.3ff92b761c5639d4e751.js | 45.119.53.125 | 200 OK | 28 kB |
URL GET HTTP/1.142pc.com/skin/js/29107295.3ff92b761c5639d4e751.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash000f6a5a18aa37b3b2f2e18f59c60476 2e16b9fed4266d82e4ae98c62d72ac64a7e2775b bed09a4492056f7aa3dfd958c644f45cea4a24191b42d9e96eda7a962c0680bb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/29107295.3ff92b761c5639d4e751.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:20 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-1207e"
Expires: Sat, 27 Apr 2024 06:08:20 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/a86f4b7efd9de9fd67c117702f5646c6a1b3c61d.d1e7a9988d80d8c33106.js | 45.119.53.125 | 200 OK | 83 kB |
URL GET HTTP/1.142pc.com/skin/js/a86f4b7efd9de9fd67c117702f5646c6a1b3c61d.d1e7a9988d80d8c33106.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (63165), with CRLF line terminators Hash85ca0b6dde4b021c8c0833b5b86da038 5f6bbc183d7237c220b0fa06991139255fb4a8ac e2836797e1fee59eb2bbfa34ddafcff8534e68fa7cac470a5f38a448339ee503
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/a86f4b7efd9de9fd67c117702f5646c6a1b3c61d.d1e7a9988d80d8c33106.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:20 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-43872"
Expires: Sat, 27 Apr 2024 06:08:20 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/484c840239a025432effd6ecc373d498fa764368_CSS.955cd01b185e91c5e5fc.js | 45.119.53.125 | 404 Not Found | 206 B |
URL GET HTTP/1.142pc.com/skin/js/484c840239a025432effd6ecc373d498fa764368_CSS.955cd01b185e91c5e5fc.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeHTML document, ASCII text Hash8974d81d3c396de11102329dcd7b7766 891229fffab22abe7571d306c239d33801830409 dedbdf38a41bd497ac8adc0949ca007a4d1e25a99f4c327fae7de3c9a7faafdf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/484c840239a025432effd6ecc373d498fa764368_CSS.955cd01b185e91c5e5fc.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 26 Apr 2024 18:08:21 GMT
Content-Type: text/html
Content-Length: 206
Connection: keep-alive
ETag: "64d29139-ce"
|
|
| 42pc.com/skin/js/styles.d1d288c297df04f219f4.js | 45.119.53.125 | 200 OK | 281 B |
URL GET HTTP/1.142pc.com/skin/js/styles.d1d288c297df04f219f4.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeASCII text, with CRLF line terminators Hash16dac4cdc2c56c77ca5455440d71d479 3356adceeb3797db56b70c95e9e7b8993d1d248a a084611dbade5dfefa4456eb05edcd01bbcc69dd6938766d5de12654a6504050
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/styles.d1d288c297df04f219f4.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:21 GMT
Content-Type: application/javascript
Content-Length: 281
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Connection: keep-alive
ETag: "64b49eb0-119"
Expires: Sat, 27 Apr 2024 06:08:21 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
|
|
| 42pc.com/skin/js/index-ec22b306826e49ccb6ce.js | 45.119.53.125 | 200 OK | 12 kB |
URL GET HTTP/1.142pc.com/skin/js/index-ec22b306826e49ccb6ce.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (5681), with CRLF line terminators Hash5ff5032b7c0e72624184ce4c1d5d810e 8c4a55660a0dfd5b703d5a3b2fa895f01738fc06 9c34b5114ec2d7484fd8bebc082745ddaad8d4dd90b4686e34a9958da574cd25
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/index-ec22b306826e49ccb6ce.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:21 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb2-a4d6"
Expires: Sat, 27 Apr 2024 06:08:21 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| hm.baidu.com/hm.js?e012d62988995f28ce3d0a3dffa82ada | 14.215.182.140 | 200 OK | 0 B |
URL GET HTTP/1.1hm.baidu.com/hm.js?e012d62988995f28ce3d0a3dffa82ada IP14.215.182.140:443
CertificateIssuerGlobalSign nv-sa Subjectbaidu.com Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.js?e012d62988995f28ce3d0a3dffa82ada HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Date: Fri, 26 Apr 2024 18:08:21 GMT
Server: apache
Strict-Transport-Security: max-age=172800
Content-Type: text/plain; charset=utf-8
|
|
| 42pc.com/skin/js/main.38238a11.js | 45.119.53.125 | 200 OK | 10 kB |
URL GET HTTP/1.142pc.com/skin/js/main.38238a11.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (25201) Hash227eb5f51392d79d6da00bdf62f4f48c 1fc90de40bdc39d3fd644f49d0a737bfbd81729d f08dd8437745a6cb47b2ea2cd8c98dd23d44b5cd50e751b8a51837fc715c8d6f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/main.38238a11.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:21 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 02:06:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b4a238-62e4"
Expires: Sat, 27 Apr 2024 06:08:21 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/484c840239a025432effd6ecc373d498fa764368.34ac5b45e5ac1c3a47cb.js | 45.119.53.125 | 200 OK | 18 kB |
URL GET HTTP/1.142pc.com/skin/js/484c840239a025432effd6ecc373d498fa764368.34ac5b45e5ac1c3a47cb.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (65280), with CRLF line terminators Hash51d6151b785c098b1008550dac908498 95f6851c5539c9e7ffe88e1092fa1e0fb0b8d0ae b2b26d9562fbd48565ae19717cae1626dc95349f358377cf7ed3db14b77fa196
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/484c840239a025432effd6ecc373d498fa764368.34ac5b45e5ac1c3a47cb.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:21 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-ff02"
Expires: Sat, 27 Apr 2024 06:08:21 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| beacon-v2.helpscout.net/static/js/vendor.0c11f266.js | 54.230.111.33 | 200 OK | 18 kB |
URL GET HTTP/2beacon-v2.helpscout.net/static/js/vendor.0c11f266.js IP54.230.111.33:443
CertificateIssuerAmazon Subject*.helpscout.net FingerprintFA:94:D9:61:74:FC:5D:96:59:8E:11:C7:73:8E:F3:84:B4:19:52:82 ValidityMon, 18 Mar 2024 00:00:00 GMT - Tue, 15 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (52037), with no line terminators Hash30808baf102d1e31fdd78d51c5d63ab1 aa6e2b75e99b14691e99782ae9e96cd2045ae04f 14d3eea2bbe24e151d544e67883a6635ce7d9b0cf6175517980fe444ad373f77
GET /static/js/vendor.0c11f266.js HTTP/1.1
Host: beacon-v2.helpscout.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 17765
last-modified: Tue, 23 Apr 2024 11:06:58 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 16:13:09 GMT
cache-control: max-age=315360000, s-maxage=7200, public
etag: "e0eaa5e68d866fd2edde772ad7db7720"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: z5zbqeMEXbKm6ZESQeH2_YwVK1r-LuPJbw69x1HgXq4Q84geSkA7lQ==
age: 6923
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| beacon-v2.helpscout.net/static/js/main.6396928b.js | 54.230.111.33 | 200 OK | 13 kB |
URL GET HTTP/2beacon-v2.helpscout.net/static/js/main.6396928b.js IP54.230.111.33:443
CertificateIssuerAmazon Subject*.helpscout.net FingerprintFA:94:D9:61:74:FC:5D:96:59:8E:11:C7:73:8E:F3:84:B4:19:52:82 ValidityMon, 18 Mar 2024 00:00:00 GMT - Tue, 15 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (31558) Hashf20e10cce237d9b395df308718bfe650 6495c3dc15ea118e25eb4d5da0783b8b68785ca2 e342f55dab0525175eef004b1bb1a7a19c8c60bb7b95a3df3c6731a294b3ea65
GET /static/js/main.6396928b.js HTTP/1.1
Host: beacon-v2.helpscout.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 12630
last-modified: Tue, 23 Apr 2024 11:06:58 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 16:54:13 GMT
cache-control: max-age=315360000, s-maxage=7200, public
etag: "1f0f1be21a16473d69e400417c22aff7"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VJrooOrGn7Bv39dvWS9VgvuDpXatu2Gtni-7sQktoAhmnDkuvx_F1w==
age: 4449
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| 42pc.com/skin/js/0b502bd7632b779787e7571ed7da626349d4848b.cf08bde46ac2fb9b4442.js | 45.119.53.125 | 200 OK | 142 kB |
URL GET HTTP/1.142pc.com/skin/js/0b502bd7632b779787e7571ed7da626349d4848b.cf08bde46ac2fb9b4442.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (4656), with CRLF line terminators Size142 kB (142188 bytes) Hash0f9a20e2cd40e7bef11426c1cfeb36fb fb54a7ba59520374c7f18f5082bdadb9399650ee 8db16ec9cb10d21ff6fd8548903a85621ae2b8231532864863afcf896cc8872c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/0b502bd7632b779787e7571ed7da626349d4848b.cf08bde46ac2fb9b4442.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:20 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb2-88f33"
Expires: Sat, 27 Apr 2024 06:08:20 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/aec7d165.5ee789e7aa703bbbf85c.js | 45.119.53.125 | 200 OK | 169 kB |
URL GET HTTP/1.142pc.com/skin/js/aec7d165.5ee789e7aa703bbbf85c.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size169 kB (168593 bytes) Hash3dd208299c90658564b1e6ab826c30ad df6c102cb86c439838b6f01e7d0ddb3a1c7ba6f8 a8f6385cd3796d9da0839b4361bb5a0387c6e69316ec1cb2a0f3f264202fda29
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/aec7d165.5ee789e7aa703bbbf85c.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:20 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-78b31"
Expires: Sat, 27 Apr 2024 06:08:20 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/abbd117381af46ffbef9704183242724.js | 45.119.53.125 | 200 OK | 293 B |
URL GET HTTP/1.142pc.com/skin/js/abbd117381af46ffbef9704183242724.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeASCII text, with no line terminators Hash5bd4276fde54cd7706d5e4db4507a7d6 768ed6cde5465cf2858cbf0236401a1217002abd 05855be99378419200abaf963fde8737c79ff3b350bd78a84adcad2bf7452c25
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/abbd117381af46ffbef9704183242724.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:21 GMT
Content-Type: application/javascript
Content-Length: 293
Last-Modified: Mon, 17 Jul 2023 01:51:46 GMT
Connection: keep-alive
ETag: "64b49eb2-125"
Expires: Sat, 27 Apr 2024 06:08:21 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
|
|
| 42pc.com/skin/js/analytics.js | 45.119.53.125 | 200 OK | 22 kB |
URL GET HTTP/1.142pc.com/skin/js/analytics.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (1325), with CRLF, LF line terminators Hasha8eeddc2365f5f4bc5974a113b9518e7 cf5a97457c0aa6b5697c1b65fe9a54f04d9879c5 e4d230df0543da50ab131bb718fdeec893ae22340af2f827ec9e3fed57b09f24
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/analytics.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:21 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb2-c553"
Expires: Sat, 27 Apr 2024 06:08:21 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/main.92cb9fcf.js | 45.119.53.125 | 200 OK | 81 kB |
URL GET HTTP/1.142pc.com/skin/js/main.92cb9fcf.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (65416) Hash90726bc947b5f2596ca067024bfb997c 3b6b03ec1619452fa5bb708fb8a069e2002a1f96 ac20db7959463824c687285ba154bfce130ca3ca7f97727d3bf6779f808b8a72
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/main.92cb9fcf.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:21 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-42e36"
Expires: Sat, 27 Apr 2024 06:08:21 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/hm.js | 45.119.53.125 | 200 OK | 12 kB |
IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (624), with CRLF, LF line terminators Hashd4c94e4728148ec132f067d1c483bc3f 0190b81f2a81963907f6e4ac87ec488692e07e6b a91cb47276cc959577ec3aaf1cfcf26ce7ac26d679fc642ec84c07a3976303c3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/hm.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:22 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-7298"
Expires: Sat, 27 Apr 2024 06:08:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/vendor.5ef70d86.js | 45.119.53.125 | 200 OK | 230 kB |
URL GET HTTP/1.142pc.com/skin/js/vendor.5ef70d86.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, Non-ISO extended-ASCII text, with very long lines (65536), with no line terminators Size230 kB (230380 bytes) Hash4694a2188b2e93f2eaa13a555908891e 3075374b565aba1fc1c6b22fa462f596306c46d4 c3a6b1f227c76213513c0df4b8e3350b5dc1da2db7f3210974bfd26454befa98
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/vendor.5ef70d86.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:21 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 02:06:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b4a208-aee5c"
Expires: Sat, 27 Apr 2024 06:08:21 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/analysis.js | 45.119.53.125 | 200 OK | 666 B |
URL GET HTTP/1.142pc.com/skin/js/analysis.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text Hash976fe982c9e9564d53f7e81b77ce1bc3 e99bfcfdf0625f87193ad3b39ef796bc95e76948 3ecf7d8f39ab4cc84daee46462bf39b693a94b580e030283276e82d64444ee99
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/analysis.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:22 GMT
Content-Type: application/javascript
Content-Length: 666
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Connection: keep-alive
ETag: "64b49eb0-29a"
Expires: Sat, 27 Apr 2024 06:08:22 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
|
|
| 42pc.com/skin/js/207c1f732bba49c5be787cca5a4b2943.js | 45.119.53.125 | 200 OK | 39 kB |
URL GET HTTP/1.142pc.com/skin/js/207c1f732bba49c5be787cca5a4b2943.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (1561) Hashdd2db74277b3f122254651036ec44899 288ec9ec22caeb790270a7e4523619217572357e 291d7521296411558a901a25fae2dfe7ecb5f5746b1767ff45ef216c9cd4db9d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/207c1f732bba49c5be787cca5a4b2943.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:21 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-16df8"
Expires: Sat, 27 Apr 2024 06:08:21 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/scrollreveal.min.js | 45.119.53.125 | 200 OK | 3.3 kB |
URL GET HTTP/1.142pc.com/skin/js/scrollreveal.min.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (9095), with CRLF line terminators Hash5ca0de71db54d2bd4beddc34fc16025f 05bc96dbc5bc725a42850a8e884b5ba7f6a6214d 35418b6def3255079226880db174310af6866051552b17d2a122692e7b324588
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/scrollreveal.min.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:22 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb2-2389"
Expires: Sat, 27 Apr 2024 06:08:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/help-zh.js | 45.119.53.125 | 200 OK | 886 B |
URL GET HTTP/1.142pc.com/skin/js/help-zh.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (529), with CRLF, LF line terminators Hash402c7656e81f331fca0b1838f5f0713e 4e8fa1a2cc9d2965ba46eb067a725a3f78a7e318 0926461aeeed911dcbaedf5a4c7f6e1f42349c4f74b8262081ed1d51287f0b48
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/help-zh.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:22 GMT
Content-Type: application/javascript
Content-Length: 886
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Connection: keep-alive
ETag: "64b49eb0-376"
Expires: Sat, 27 Apr 2024 06:08:22 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
|
|
| 42pc.com/skin/js/common.js | 45.119.53.125 | 200 OK | 1.3 kB |
URL GET HTTP/1.142pc.com/skin/js/common.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with CRLF, LF line terminators Hash741b582e8c43803547b87d98c524bfe0 b1da183d856b13e3295c2c9f7072fb8ae788d5c0 364280afef2b6dc0b4d538348ec8b9d7e6226b9e45333ad4a0e916a6137a1716
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/common.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:22 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-f81"
Expires: Sat, 27 Apr 2024 06:08:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/css/0b502bd7632b779787e7571ed7da626349d4848b_css.8e2d704c.chunk.css | 45.119.53.125 | 200 OK | 46 kB |
URL GET HTTP/1.142pc.com/skin/css/0b502bd7632b779787e7571ed7da626349d4848b_css.8e2d704c.chunk.css IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeASCII text, with CRLF line terminators Hash2745c4c047b357c5da1738e510234590 5c928f9292c2310e83596c264b6d7f9945d1fdb2 e796ed7e2a0cf28c563bcad259d001e6f33d01db043fddb59c4cfd05f4d71142
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/css/0b502bd7632b779787e7571ed7da626349d4848b_css.8e2d704c.chunk.css HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:22 GMT
Content-Type: text/css
Last-Modified: Mon, 17 Jul 2023 10:07:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b512f0-49fa4"
Expires: Sat, 27 Apr 2024 06:08:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/css/484c840239a025432effd6ecc373d498fa764368_css.4e604f4b.chunk.css | 45.119.53.125 | 200 OK | 14 kB |
URL GET HTTP/1.142pc.com/skin/css/484c840239a025432effd6ecc373d498fa764368_css.4e604f4b.chunk.css IP45.119.53.125:80 ASN#55933 Cloudie Limited
Hashde1153a2e5a87458fdca9a563f561905 f9bf97b94efebdbb7facc8ecb3610ca1507c6495 361aa6ab30a6eb5b2a0f4222c681be7288f875f7f8017adc5f4459bb9826680a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/css/484c840239a025432effd6ecc373d498fa764368_css.4e604f4b.chunk.css HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:22 GMT
Content-Type: text/css
Last-Modified: Mon, 17 Jul 2023 01:51:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eae-1a051"
Expires: Sat, 27 Apr 2024 06:08:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/public/static/common/js/ey_global.js?t=v1.6.3 | 45.119.53.125 | 200 OK | 892 B |
URL GET HTTP/1.142pc.com/public/static/common/js/ey_global.js?t=v1.6.3 IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeGeneric INItialization configuration [description] Hash36d01bd2d45a207ddc07b6dfd4a85f4d 96445d2608b55a5eb4f2f2e8cff09d656a363950 54bcf4ccdc0e2a0215d58fd6dab8e14257829aa96dbeff3450aec8274414b434
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /public/static/common/js/ey_global.js?t=v1.6.3 HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:22 GMT
Content-Type: application/javascript
Last-Modified: Fri, 12 Nov 2021 11:21:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"618e4e22-7c0"
Expires: Sat, 27 Apr 2024 06:08:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/1.js | 45.119.53.125 | 200 OK | 779 B |
IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeASCII text, with CRLF line terminators Hash3691a76024f4618907082d7604f45719 cd0a54e16d9b1e82dbfc8d9b9c4e43946134a608 6d03eeba9568145c7900d1bc49f3a02fc871c77407eadc9c64855d9fea753d7e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/1.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:22 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-1192"
Expires: Sat, 27 Apr 2024 06:08:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/2.js | 45.119.53.125 | 200 OK | 899 B |
IP45.119.53.125:80 ASN#55933 Cloudie Limited
Hashdfb093b6c09359af382a4584ffe33e29 f607b57ef82f006087680c4a9781f9b376dfc2d6 fa74b7ef28386864bf7f6e2e1d56541ca9a38ba4c9a1deaffa8b8f9efbaa4958
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/2.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:22 GMT
Content-Type: application/javascript
Content-Length: 899
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Connection: keep-alive
ETag: "64b49eb0-383"
Expires: Sat, 27 Apr 2024 06:08:22 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
|
|
| 42pc.com/skin/js/main-d2bfbe796dac318661ec.js | 45.119.53.125 | 200 OK | 8.4 kB |
URL GET HTTP/1.142pc.com/skin/js/main-d2bfbe796dac318661ec.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (22323), with CRLF line terminators Hash7898cf8c27824772851e2fb03ead8bc5 cb61c5d005936f0e8d4962476a801a9cd366bdda 945df11a59a65258ea47acfbdfbd8ac0f38d3d37d636e84a6fc78bb588bea108
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/main-d2bfbe796dac318661ec.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:22 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-5735"
Expires: Sat, 27 Apr 2024 06:08:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/webpack-d7b2fb72fb7257504a38.js | 45.119.53.125 | 200 OK | 767 B |
URL GET HTTP/1.142pc.com/skin/js/webpack-d7b2fb72fb7257504a38.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (1539), with CRLF line terminators Hashcffc73cab336b790781ef316a0a9f319 4e20d1bb6bebb9f0b1b26cb74f64acdc051420c3 cd77ead427a805cbdca66eb26913ef24cdf4c5368081af7d9a5978cffcf065c1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/webpack-d7b2fb72fb7257504a38.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:22 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-605"
Expires: Sat, 27 Apr 2024 06:08:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/framework.7425f7c0f2c0fa6b9f98.js | 45.119.53.125 | 200 OK | 46 kB |
URL GET HTTP/1.142pc.com/skin/js/framework.7425f7c0f2c0fa6b9f98.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashde7dc8e0a38c13f39c0be0ca873a9b7f 46eb38d8b89059fc76aa80d34a0e528216b3e616 da7afbaad7d9df49395593da67e63731f9da3b47b5c2a6a85ab50a7435b65d00
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/framework.7425f7c0f2c0fa6b9f98.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:22 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-1f900"
Expires: Sat, 27 Apr 2024 06:08:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/0b502bd7632b779787e7571ed7da626349d4848b_css.ff5578978733a40a67a3.js | 45.119.53.125 | 200 OK | 71 B |
URL GET HTTP/1.142pc.com/skin/js/0b502bd7632b779787e7571ed7da626349d4848b_css.ff5578978733a40a67a3.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeASCII text, with CRLF line terminators Hashd8493167f3c1851a80482d5ef4cbd2a7 0e16ab4b13a7d77ee779db26be44c24c6b9e3e38 da83a8e39af1c72bd0b738e7cf073741adf3d6e1bffebc601de622ae0005a102
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/0b502bd7632b779787e7571ed7da626349d4848b_css.ff5578978733a40a67a3.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: application/javascript
Content-Length: 71
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Connection: keep-alive
ETag: "64b49eb0-47"
Expires: Sat, 27 Apr 2024 06:08:23 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
|
|
| 42pc.com/skin/js/484c840239a025432effd6ecc373d498fa764368_css.955cd01b185e91c5e5fc.js | 45.119.53.125 | 200 OK | 72 B |
URL GET HTTP/1.142pc.com/skin/js/484c840239a025432effd6ecc373d498fa764368_css.955cd01b185e91c5e5fc.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeASCII text, with CRLF line terminators Hash80ce8e5e962243a03a6e596c50dd0ed1 8821736179984c6a5d851542e48ae0f9b845f513 bc3e68a41281fc2999cedadd01e64a8367dbb2676e987fc554f35c0f856f5f38
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/484c840239a025432effd6ecc373d498fa764368_css.955cd01b185e91c5e5fc.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: application/javascript
Content-Length: 72
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Connection: keep-alive
ETag: "64b49eb0-48"
Expires: Sat, 27 Apr 2024 06:08:23 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
|
|
| 42pc.com/skin/js/main.92cb9fcf.js | 45.119.53.125 | 200 OK | 81 kB |
URL GET HTTP/1.142pc.com/skin/js/main.92cb9fcf.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (65416) Hash90726bc947b5f2596ca067024bfb997c 3b6b03ec1619452fa5bb708fb8a069e2002a1f96 ac20db7959463824c687285ba154bfce130ca3ca7f97727d3bf6779f808b8a72
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/main.92cb9fcf.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:22 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-42e36"
Expires: Sat, 27 Apr 2024 06:08:22 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/_buildmanifest.js | 45.119.53.125 | 200 OK | 1.4 kB |
URL GET HTTP/1.142pc.com/skin/js/_buildmanifest.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, ASCII text, with very long lines (4454), with CRLF line terminators Hash343881beb56b4cf6bd8abd3ec0118288 bbb3b9a14e39fb3dceddcffd260bae6e8bc319ae 0eed9d0c6101f539ef242d0591a92428e9b56440dab438894832e94c126e0e1a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/_buildmanifest.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b49eb0-11a0"
Expires: Sat, 27 Apr 2024 06:08:23 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/js/_ssgmanifest.js | 45.119.53.125 | 200 OK | 78 B |
URL GET HTTP/1.142pc.com/skin/js/_ssgmanifest.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeASCII text, with CRLF line terminators Hash670752b3213e56d1203057662b49847d f724bdf42955eee0a10df24197076ea8c5ff0880 4ef640cf9604412cc76f279a3d3950e5bd05f8f6ee49eab0f4ab1bade9f0247c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/_ssgmanifest.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: application/javascript
Content-Length: 78
Last-Modified: Mon, 17 Jul 2023 01:51:44 GMT
Connection: keep-alive
ETag: "64b49eb0-4e"
Expires: Sat, 27 Apr 2024 06:08:23 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
|
|
| 42pc.com/public/static/common/js/ey_footer.js?t=v1.6.3 | 45.119.53.125 | 200 OK | 9.7 kB |
URL GET HTTP/1.142pc.com/public/static/common/js/ey_footer.js?t=v1.6.3 IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeUnicode text, UTF-8 text, with very long lines (2536), with CRLF line terminators Hashcb6afd46e78cf1983cc8d080e1009005 32e4ece26c9ba20aa29b116b18e49475297ebd5d f532de5d764b3673444884687d9fcf0c98e2cf37d885f69bdd4db513cffa7156
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /public/static/common/js/ey_footer.js?t=v1.6.3 HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: application/javascript
Last-Modified: Fri, 16 Jun 2023 01:06:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"648bb588-b2e1"
Expires: Sat, 27 Apr 2024 06:08:23 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| 42pc.com/skin/images/close.svg | 45.119.53.125 | 200 OK | 311 B |
URL GET HTTP/1.142pc.com/skin/images/close.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hash8b53e1f0c67b4d868767bfa013d25831 4241bf88ad97bee950f8cbe2af91f0fdf0554278 5ea371b3b37eed9c3d38da65ba2bb2f9251d07c738f1e5ea32816635c70a059c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/close.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: image/svg+xml
Content-Length: 311
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-137"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/imTokenLogo.svg | 45.119.53.125 | 200 OK | 4.4 kB |
URL GET HTTP/1.142pc.com/skin/images/imTokenLogo.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hash156126cea74bc189655a009df8a24e21 16465dbb16b2967573f9f8d8c14102fb4a7c5190 f91dc624abb33ff7ecb6b25cc7844f02128c097973db0f80213aed0720e08797
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/imTokenLogo.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: image/svg+xml
Content-Length: 4415
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-113f"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/menu.svg | 45.119.53.125 | 200 OK | 308 B |
URL GET HTTP/1.142pc.com/skin/images/menu.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hash8c52b54d3fc658ed091ce44072ec8434 d6fbb339e3640970de1891495a30d8854481449f 468f795384b4e22c4f2f1f5f5a42000e031823b8f9eeaa05588500d455bb7caa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/menu.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: image/svg+xml
Content-Length: 308
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-134"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/subscribe.svg | 45.119.53.125 | 200 OK | 576 B |
URL GET HTTP/1.142pc.com/skin/images/subscribe.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hash78f86cd737a9a0fcbfc9f23b1478550f 4b36dbf9b0d3e338565618d31c6f7aee0a073d85 5f2206d50773ff3d50037d78573b8b661efb7acc84c1412427b6472f15ef578a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/subscribe.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: image/svg+xml
Content-Length: 576
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-240"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/alarm.svg | 45.119.53.125 | 200 OK | 533 B |
URL GET HTTP/1.142pc.com/skin/images/alarm.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hashb20df3089e50c545541d8ee900863574 451b3f7e7fd362deed7642033c480082bcb0674a 7c9ca78247b00b98096dc68fc15527fa07e332c5c87c7834e1511786a490af68
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/alarm.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: image/svg+xml
Content-Length: 533
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-215"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/banner.png | 45.119.53.125 | 200 OK | 46 kB |
URL GET HTTP/1.142pc.com/skin/images/banner.png IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typePNG image data, 1000 x 1000, 8-bit colormap, non-interlaced Hashad9792ead2ce10cf4db72cb8a5ad7abb 1eafd79d8630feebc01d806a4bf525b0c6b1e0e8 e075e1cdad6e176e330ac0f927da14388ba5ad54cc0888b39dd54051b9987e61
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/banner.png HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: image/png
Content-Length: 46178
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-b462"
Expires: Sun, 26 May 2024 18:08:23 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/wallet.svg | 45.119.53.125 | 200 OK | 8.3 kB |
URL GET HTTP/1.142pc.com/skin/images/wallet.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hash1581a25991859d82a1dfae12a425efa9 abf3e2a10d2e26d36739f4072cab3dfd40a7355a 8548cc89a0ef6ec00994aba63a8724dd19fd156e743205b8d593f28266bc3255
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/wallet.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: image/svg+xml
Content-Length: 8294
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-2066"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/imkey.svg | 45.119.53.125 | 200 OK | 13 kB |
URL GET HTTP/1.142pc.com/skin/images/imkey.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hasha3fd6cd4340f73f2f44388e97964f3eb 694e8d4a2dfdd16c8f3444e77fe5d58c8ff1e907 ef070fb21fd2892969662d3f1d08792aef524bd34a1c437a8e4129c3f99bbf69
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/imkey.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: image/svg+xml
Content-Length: 13347
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-3423"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/defi.svg | 45.119.53.125 | 200 OK | 226 B |
URL GET HTTP/1.142pc.com/skin/images/defi.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hash85b27006079fe2579b83455280b9b58d a24e9b63e44b08169a2a51fc19124f9354b43e37 9ba6aa1b832755ce9bff3bff696c26c9a5276249b0e942b32c95cd24b04dd0d4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/defi.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: image/svg+xml
Content-Length: 226
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-e2"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/arrow-right.svg | 45.119.53.125 | 200 OK | 226 B |
URL GET HTTP/1.142pc.com/skin/images/arrow-right.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hash61b701c843a206b3b87effecd8382257 533694db85b583c57b95d0f5820d5682bffd11ea 8e40d35259ad6bf0e0988c35d1a3221ebdd5a7034e172d61fb96914e9e2893d7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/arrow-right.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: image/svg+xml
Content-Length: 226
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-e2"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/partner-ethereum.svg | 45.119.53.125 | 200 OK | 9.7 kB |
URL GET HTTP/1.142pc.com/skin/images/partner-ethereum.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hashbd8f57a32cd521ec6f4d6faf2932bfd8 f31988b4e991a56351f6f833775f3fc277a3f0a1 9e5ed3658d4df3fb2782c7714d3db670600b9b59572df69100a22ebcd18bb7fd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/partner-ethereum.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: image/svg+xml
Content-Length: 9680
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-25d0"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/partner-zcash.svg | 45.119.53.125 | 200 OK | 4.9 kB |
URL GET HTTP/1.142pc.com/skin/images/partner-zcash.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hashfa3d9b23853e22e41ac3e8a0d0d4c0df a604e9d2deae651c1f89386d74c6a73bd487355e a6eef80e8bafe512807a717ab3e7c78644a65d6ab998fe3f746c8fe48ae13c6b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/partner-zcash.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:24 GMT
Content-Type: image/svg+xml
Content-Length: 4872
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-1308"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/partner-polkdot.svg | 45.119.53.125 | 200 OK | 14 kB |
URL GET HTTP/1.142pc.com/skin/images/partner-polkdot.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hash43cf963b81e048636c39d1e514ce1184 2e604e4e2086cc0c0189d911af4fe4c70694acbc 0b486f91fee9220388fa9f7e8a8869105aff8a197582ded63b1078d4001c092e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/partner-polkdot.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:24 GMT
Content-Type: image/svg+xml
Content-Length: 14022
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-36c6"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/partner-cosmos.svg | 45.119.53.125 | 200 OK | 5.8 kB |
URL GET HTTP/1.142pc.com/skin/images/partner-cosmos.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hash24b422095f45e55762ce124560f2e32c 03bc60748c888a58c7ccf555903a2c90d4f44ae1 6d5e008c7a2f9daf1ecc2d5558657820ea5743c9d8f990351fe2122eb5441502
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/partner-cosmos.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:24 GMT
Content-Type: image/svg+xml
Content-Length: 5790
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-169e"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/partner-eea.svg | 45.119.53.125 | 200 OK | 9.1 kB |
URL GET HTTP/1.142pc.com/skin/images/partner-eea.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hash53bcfb318f9f0c4154d8e1e62f82b913 4a20547c48deae59d13aaee8c20d753f8f1a20df 077082d9d65c580cd7ba9d07c6ec91c0938c046d423ae2033acb87408d1b5f1d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/partner-eea.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:24 GMT
Content-Type: image/svg+xml
Content-Length: 9073
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-2371"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/partner-etherscan.svg | 45.119.53.125 | 200 OK | 11 kB |
URL GET HTTP/1.142pc.com/skin/images/partner-etherscan.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hashc2396dfee53ab9d34632f6fedd15c47e f2e7cc706a3486b0e8c27ec8ad71a97d671707d4 d9c83c68c73cab3ade09c13bd2d323325648c652b28cc92a535b2db8068a92b3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/partner-etherscan.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:24 GMT
Content-Type: image/svg+xml
Content-Length: 11263
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-2bff"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/partner-consensys.svg | 45.119.53.125 | 200 OK | 50 kB |
URL GET HTTP/1.142pc.com/skin/images/partner-consensys.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hashe6c8c3635e46cc20c06379fb68fa638c 8b1ecdf3c884347449e8eb40802a78e8d8c8e258 7d39b719ac59dba8e899accd2c2cdcbcc4cfccdb8ac7a05f74d8c866373034d4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/partner-consensys.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:24 GMT
Content-Type: image/svg+xml
Content-Length: 49536
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-c180"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/partner-0x.svg | 45.119.53.125 | 200 OK | 6.1 kB |
URL GET HTTP/1.142pc.com/skin/images/partner-0x.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hash026ba44434197fa5b70c533a470b8dd1 11777cffdac270653201a7a4cd8f37c97513c520 6bb97144580980397314ef35072a2a590718d7b1f0c9221affdb2a9dd3c81b0e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/partner-0x.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:24 GMT
Content-Type: image/svg+xml
Content-Length: 6069
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-17b5"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/partner-kyber.svg | 45.119.53.125 | 200 OK | 20 kB |
URL GET HTTP/1.142pc.com/skin/images/partner-kyber.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hash82d655ff6e0984bcaae63d7dc6463334 0e6f39fda428ceb9fae5b481a5d73e76d6ba4666 a05a43286060318dc0f2ae93cad913310c81dfa99ea6711d35346ba0e576ef31
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/partner-kyber.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:24 GMT
Content-Type: image/svg+xml
Content-Length: 20123
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-4e9b"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/tokenfans.svg | 45.119.53.125 | 200 OK | 1.8 kB |
URL GET HTTP/1.142pc.com/skin/images/tokenfans.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hashccb9eab093240587905ab16659346d3e d4048ca15d5a35b99f83da664d1a85e2967fce7b 2c081b94d2a381db87ba69c0eeec6fb5c5fc0779971e162e322157c2818f8446
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/tokenfans.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:24 GMT
Content-Type: image/svg+xml
Content-Length: 1757
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-6dd"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/feedback.svg | 45.119.53.125 | 200 OK | 881 B |
URL GET HTTP/1.142pc.com/skin/images/feedback.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hash58b754c0f9f2c13b0be845b7ada0602a 765e62db886f66d31bbfff3c8f9616b93fd4418b d02703d5c4610bd9bb5ad07df5d714ade9d5dc84286f93adf6d95e1fdf8491d4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/feedback.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:24 GMT
Content-Type: image/svg+xml
Content-Length: 881
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-371"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/images/business.svg | 45.119.53.125 | 200 OK | 834 B |
URL GET HTTP/1.142pc.com/skin/images/business.svg IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeSVG Scalable Vector Graphics image Hash5edce84229c2295c6fc6b49a18afcda9 8e93ee77317b040d252bea7e41da9a405d76642f f3752af7aab239ede54fdd4f23390750ad0d7719e2a60b63ab35166965b6b9c2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/business.svg HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:24 GMT
Content-Type: image/svg+xml
Content-Length: 834
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-342"
Accept-Ranges: bytes
|
|
| 42pc.com/skin/js/vendor.5ef70d86.js | 45.119.53.125 | 200 OK | 230 kB |
URL GET HTTP/1.142pc.com/skin/js/vendor.5ef70d86.js IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeJavaScript source, Non-ISO extended-ASCII text, with very long lines (65536), with no line terminators Size230 kB (230380 bytes) Hash4694a2188b2e93f2eaa13a555908891e 3075374b565aba1fc1c6b22fa462f596306c46d4 c3a6b1f227c76213513c0df4b8e3350b5dc1da2db7f3210974bfd26454befa98
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/js/vendor.5ef70d86.js HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:23 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Jul 2023 02:06:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64b4a208-aee5c"
Expires: Sat, 27 Apr 2024 06:08:23 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
|
| beacon-v2.helpscout.net/static/js/main.92cb9fcf.js | 54.230.111.33 | 200 OK | 69 kB |
URL GET HTTP/2beacon-v2.helpscout.net/static/js/main.92cb9fcf.js IP54.230.111.33:443
CertificateIssuerAmazon Subject*.helpscout.net FingerprintFA:94:D9:61:74:FC:5D:96:59:8E:11:C7:73:8E:F3:84:B4:19:52:82 ValidityMon, 18 Mar 2024 00:00:00 GMT - Tue, 15 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65416) Hash65b93114cd7a680b9328858acff7997c 74b565384acee8531adfbcb971f21c67de40d322 02f99be53ae94c947c1259abf80bbe5920c2ecc830852fb2d773e587b5de17a6
GET /static/js/main.92cb9fcf.js HTTP/1.1
Host: beacon-v2.helpscout.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 68915
last-modified: Fri, 08 Apr 2022 18:58:49 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 18:08:24 GMT
cache-control: max-age=315360000, s-maxage=7200, public
etag: "469a028e258e2a48aa1c950d452e6d57"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1IhaW7HYfsqMbA839ZNFCdwDWoytqQn1Gn9bYrUDePJhTr7qDNW_lQ==
age: 1703
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| 42pc.com/skin/images/to-top.png | 45.119.53.125 | 200 OK | 8.3 kB |
URL GET HTTP/1.142pc.com/skin/images/to-top.png IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typePNG image data, 124 x 131, 8-bit/color RGBA, non-interlaced Hash13eac2560b1b5d187f0632729627c7eb 9d767610734797f5f8dd98c82329d072171b67f8 64774fdbbbc520f5748ccf6f48ede71a843d30cb3ce4bbc8da64c7f64d95b3ed
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET /skin/images/to-top.png HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:24 GMT
Content-Type: image/png
Content-Length: 8324
Last-Modified: Tue, 25 Jul 2023 05:10:54 GMT
Connection: keep-alive
ETag: "64bf595e-2084"
Expires: Sun, 26 May 2024 18:08:24 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| beacon-v2.helpscout.net/static/js/vendor.5ef70d86.js | 54.230.111.33 | 200 OK | 200 kB |
URL GET HTTP/2beacon-v2.helpscout.net/static/js/vendor.5ef70d86.js IP54.230.111.33:443
CertificateIssuerAmazon Subject*.helpscout.net FingerprintFA:94:D9:61:74:FC:5D:96:59:8E:11:C7:73:8E:F3:84:B4:19:52:82 ValidityMon, 18 Mar 2024 00:00:00 GMT - Tue, 15 Apr 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators Size200 kB (199877 bytes) Hashd4cd0bd9724d74f0227b3e767aa366c8 f43fc34bd223f1c38098ee94ec85e90f5a011131 520b9ce43005e5f00f56d893a0ae424082c5f42151d4c25101e40300b37d942c
GET /static/js/vendor.5ef70d86.js HTTP/1.1
Host: beacon-v2.helpscout.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 199877
last-modified: Fri, 08 Apr 2022 18:58:49 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 18:08:24 GMT
cache-control: max-age=315360000, s-maxage=7200, public
etag: "0c6e91ad69d8817d5bf5bacfb48fb233"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7Hqv58M3U_oHKBzVYGLgxggS4AMQ8wNAjFJIF4Wt78A8tQF9gQExQQ==
age: 4162
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| hm.baidu.com/hm.js?e012d62988995f28ce3d0a3dffa82ada | 14.215.182.140 | 200 OK | 0 B |
URL GET HTTP/1.1hm.baidu.com/hm.js?e012d62988995f28ce3d0a3dffa82ada IP14.215.182.140:443
CertificateIssuerGlobalSign nv-sa Subjectbaidu.com Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.js?e012d62988995f28ce3d0a3dffa82ada HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Date: Fri, 26 Apr 2024 18:08:25 GMT
Server: apache
Strict-Transport-Security: max-age=172800
Content-Type: text/plain; charset=utf-8
|
|
| beacon-v2.helpscout.net/ | 54.230.111.33 | 200 OK | 328 B |
IP54.230.111.33:443
CertificateIssuerAmazon Subject*.helpscout.net FingerprintFA:94:D9:61:74:FC:5D:96:59:8E:11:C7:73:8E:F3:84:B4:19:52:82 ValidityMon, 18 Mar 2024 00:00:00 GMT - Tue, 15 Apr 2025 23:59:59 GMT
File typeASCII text, with very long lines (458), with no line terminators Hash9100bc5969e7a56ebd3d936e2c9d2181 377a43ee63ed1268a04d294fd164ad54398b69d4 8857313a6501379e1285fbf60390f1473a51b6ce5c7a4214c2137eafb514972f
GET / HTTP/1.1
Host: beacon-v2.helpscout.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 328
last-modified: Tue, 23 Apr 2024 11:06:57 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 18:08:19 GMT
cache-control: max-age=120, s-maxage=120, public
etag: "9291fece8354e34bae56baeffb2f3484"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9ZoDw8rWrxOSXg8Qa765QEVpP3A1HC3likew6YGs2XoiTOEBNAi3QQ==
age: 28
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| beacon-v2.helpscout.net/static/js/vendor.0c11f266.js | 54.230.111.33 | 200 OK | 18 kB |
URL GET HTTP/2beacon-v2.helpscout.net/static/js/vendor.0c11f266.js IP54.230.111.33:443
CertificateIssuerAmazon Subject*.helpscout.net FingerprintFA:94:D9:61:74:FC:5D:96:59:8E:11:C7:73:8E:F3:84:B4:19:52:82 ValidityMon, 18 Mar 2024 00:00:00 GMT - Tue, 15 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (52037), with no line terminators Hash30808baf102d1e31fdd78d51c5d63ab1 aa6e2b75e99b14691e99782ae9e96cd2045ae04f 14d3eea2bbe24e151d544e67883a6635ce7d9b0cf6175517980fe444ad373f77
GET /static/js/vendor.0c11f266.js HTTP/1.1
Host: beacon-v2.helpscout.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 17765
last-modified: Tue, 23 Apr 2024 11:06:58 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 16:13:09 GMT
cache-control: max-age=315360000, s-maxage=7200, public
etag: "e0eaa5e68d866fd2edde772ad7db7720"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qj-2TeWX-aA-2NmCLgciMBqd2tNiWe7XB2jaLSlxMx3ULHUEjCvJ4A==
age: 6927
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| beacon-v2.helpscout.net/static/js/main.6396928b.js | 54.230.111.33 | 200 OK | 13 kB |
URL GET HTTP/2beacon-v2.helpscout.net/static/js/main.6396928b.js IP54.230.111.33:443
CertificateIssuerAmazon Subject*.helpscout.net FingerprintFA:94:D9:61:74:FC:5D:96:59:8E:11:C7:73:8E:F3:84:B4:19:52:82 ValidityMon, 18 Mar 2024 00:00:00 GMT - Tue, 15 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (31558) Hashf20e10cce237d9b395df308718bfe650 6495c3dc15ea118e25eb4d5da0783b8b68785ca2 e342f55dab0525175eef004b1bb1a7a19c8c60bb7b95a3df3c6731a294b3ea65
GET /static/js/main.6396928b.js HTTP/1.1
Host: beacon-v2.helpscout.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 12630
last-modified: Tue, 23 Apr 2024 11:06:58 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 16:54:13 GMT
cache-control: max-age=315360000, s-maxage=7200, public
etag: "1f0f1be21a16473d69e400417c22aff7"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yqHYAu3QGUOv3i33cd8qmnVbsR2EOqQnqT3VloALaARBO3UfcXYi6g==
age: 4453
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| | 45.119.53.125 | 200 OK | 5.9 kB |
URL User Request GET HTTP/1.1IP45.119.53.125:80 ASN#55933 Cloudie Limited
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1293), with CRLF, CR, LF line terminators Hashcb3ece3216c356c6dade8e4ed453dce1 5eb5bd9a22ec2e75f331a6eda45e9d0e5e4e967b 08b6ec50c4c70116c94cdb902e0d4c78d62838c5a59d97652c4d07bac2173862
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET / HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:25 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Cache-control: private
Set-Cookie: home_lang=cn; path=/
users_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
site_info=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
Content-Encoding: gzip
|
|
| 42pc.com/ | 45.119.53.125 | 200 OK | 26 kB |
IP45.119.53.125:80 ASN#55933 Cloudie Limited
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet |
GET / HTTP/1.1
Host: 42pc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42pc.com/
Cookie: home_lang=cn; admin_lang=cn; PHPSESSID=irdvkssh55l39f1u8l5iqk9536
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 18:08:25 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Cache-control: private
Set-Cookie: home_lang=cn; path=/
users_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
site_info=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
Content-Encoding: gzip
|
|