| ocsp.sectigo.com/ |  172.64.155.188 | | 472 B |
IP172.64.155.188:0
Hash41035de57d03043d5c0b2e079d21a611 0d780a6ffb55f5928f4909eb2837313f34d666f5 e2e7ad07380d1c8aede61ef0d50831b3a1ab3c5a2a886618745f866be99afc8b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 May 2023 15:42:45 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 15 May 2023 23:50:07 GMT
Expires: Mon, 22 May 2023 23:50:06 GMT
Etag: "0d780a6ffb55f5928f4909eb2837313f34d666f5"
Cache-Control: max-age=374540,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7c953640e894b500-OSL
|
|
| newyear2023.xn--napth-351b.vn/images/gate.png |  188.114.97.1 | 200 OK | 12 kB |
URL GET HTTP/3newyear2023.xn--napth-351b.vn/images/gate.png IP188.114.97.1:443
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerLet's Encrypt Subjectxn--napth-351b.vn Fingerprint23:28:5B:99:D2:A9:20:FC:9B:56:54:D5:B1:BF:88:32:60:F7:BA:5A ValiditySat, 29 Apr 2023 10:08:00 GMT - Fri, 28 Jul 2023 10:07:59 GMT
File typePNG image data, 256 x 114, 8-bit/color RGBA, non-interlaced\012- data Hash7ffe1927eafd3290df6ef7b8e9751fb4 60e1f543fa7f8908e87eecee21697b3d275b645e ca9cc282a26cb3e6c9a65d4d7ab323690e68f18b9c5a54a6f6297b1577e791aa
| Analyzer | Verdict | Alert |
|---|
| openphish | Garena | | | phishtank | Other | |
GET /images/gate.png HTTP/1.1
Host: newyear2023.xn--napth-351b.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/app/fifa-online-4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 May 2023 15:42:46 GMT
content-type: image/png
content-length: 11515
cache-control: public, max-age=2629000
expires: Thu, 25 May 2023 15:42:46 GMT
last-modified: Mon, 31 Oct 2022 11:42:11 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vWHJ4o%2FGorXCeyDp9wD4HCCPYdXZYN9CNEqsrJOjVJqFTryeUmrG7uiLK27bXINOES9ItAVJjNExjtCztyYlX%2F8j2aGglcgYMvJDOze0qFzqWLhKdCJz69cGgUrGwxTqEXfMKdN1zqx0i5AAaRHFvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c9536408cdcb521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
|
|
| newyear2023.xn--napth-351b.vn/images/logo.png | 188.114.97.1 | 200 OK | 5.2 kB |
URL GET HTTP/3newyear2023.xn--napth-351b.vn/images/logo.png IP188.114.97.1:443
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerLet's Encrypt Subjectxn--napth-351b.vn Fingerprint23:28:5B:99:D2:A9:20:FC:9B:56:54:D5:B1:BF:88:32:60:F7:BA:5A ValiditySat, 29 Apr 2023 10:08:00 GMT - Fri, 28 Jul 2023 10:07:59 GMT
File typePNG image data, 436 x 116, 8-bit colormap, non-interlaced\012- data Hash354ed116f25561b4e435946a16c22de2 8763e63fa09f70464fd18a829c567dc937c8568d 2b0c37cc261fda4df56b59985c7f620d201b621dffbd6f52f01be61d020e8ad5
| Analyzer | Verdict | Alert |
|---|
| openphish | Garena | | | phishtank | Other | |
GET /images/logo.png HTTP/1.1
Host: newyear2023.xn--napth-351b.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/app/fifa-online-4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 May 2023 15:42:46 GMT
content-type: image/png
content-length: 5162
cache-control: public, max-age=2629000
expires: Thu, 25 May 2023 15:42:46 GMT
last-modified: Mon, 31 Oct 2022 11:42:11 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f3rKnCnuWzInktbhqe9TqJJTDnY%2BtvculiPxgB98Ogl5Nk9nsAWUbps4bibAbQNIjDS%2B6ubdHfGT9EGPiX%2FHbizUq4BtvddxAaqchD%2BFpbjxoJZI5T03BzzTUilRMcZZ0Ayjv%2B7Fcc5P9O1tgfCKbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c9536408cd5b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
|
|
| newyear2023.xn--napth-351b.vn/images/viettel.png | 188.114.97.1 | 200 OK | 8.9 kB |
URL GET HTTP/3newyear2023.xn--napth-351b.vn/images/viettel.png IP188.114.97.1:443
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerLet's Encrypt Subjectxn--napth-351b.vn Fingerprint23:28:5B:99:D2:A9:20:FC:9B:56:54:D5:B1:BF:88:32:60:F7:BA:5A ValiditySat, 29 Apr 2023 10:08:00 GMT - Fri, 28 Jul 2023 10:07:59 GMT
File typePNG image data, 256 x 114, 8-bit/color RGBA, non-interlaced\012- data Hash1fe572ecad72ef8fca8dcba2b17dd9ca 31e84d538e1d42c7b6a924f7dde58c76b4b52390 96c1ebe204b00af38839147367adb60232c04cd4782f0776ed3e267d0e9b1019
| Analyzer | Verdict | Alert |
|---|
| openphish | Garena | | | phishtank | Other | |
GET /images/viettel.png HTTP/1.1
Host: newyear2023.xn--napth-351b.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/app/fifa-online-4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 May 2023 15:42:46 GMT
content-type: image/png
content-length: 8888
cache-control: public, max-age=2629000
expires: Thu, 25 May 2023 15:42:46 GMT
last-modified: Mon, 31 Oct 2022 11:42:11 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hzMbNBXRbd8T%2FgmB8vnwu1W%2BRwklVNHR%2BfV7Dy3uyaL8D2pmMLMqQgNzdrWD%2B5JCBsxIrdyOfGo%2BC1CEBbjPLsS4yXD4cIcs1i6GI5oGKN0A5TcFTptUGuTqgAwIQRjDpw9EHBhzvCYjp%2BW56TZC3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c9536408cd7b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
|
|
| newyear2023.xn--napth-351b.vn/images/vinaphone.png | 188.114.97.1 | 200 OK | 19 kB |
URL GET HTTP/3newyear2023.xn--napth-351b.vn/images/vinaphone.png IP188.114.97.1:443
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerLet's Encrypt Subjectxn--napth-351b.vn Fingerprint23:28:5B:99:D2:A9:20:FC:9B:56:54:D5:B1:BF:88:32:60:F7:BA:5A ValiditySat, 29 Apr 2023 10:08:00 GMT - Fri, 28 Jul 2023 10:07:59 GMT
File typePNG image data, 256 x 114, 8-bit/color RGBA, non-interlaced\012- data Hasha254c7b17341034542490989964fd97e bf5ccdacca68840a658f971c14cd65a6f1782be2 8862bb55fd5f4fd07c5c131b86f565cc5ea9c9cf38ff84dca4704ce96cbd7319
| Analyzer | Verdict | Alert |
|---|
| openphish | Garena | | | phishtank | Other | |
GET /images/vinaphone.png HTTP/1.1
Host: newyear2023.xn--napth-351b.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/app/fifa-online-4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 May 2023 15:42:46 GMT
content-type: image/png
content-length: 19130
cache-control: public, max-age=2629000
expires: Thu, 25 May 2023 15:42:46 GMT
last-modified: Mon, 31 Oct 2022 11:42:11 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7hIgn5kc0WcTJwqTLBErn983Poy719glzki7ACcdOrBFeMLySnuRUiiBZ1mjgzUD0B1JxT8DRr7dosrwiVNH9Z7r3UEqMtGgldB2L%2BmfdBsYvz7pVZ4mU3DLo3YoyorJtFKNlqVvkdy7F0Nkjt597Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c9536408cd9b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
|
|
| newyear2023.xn--napth-351b.vn/css/napthe1.css | 188.114.97.1 | 200 OK | 2.0 kB |
URL GET HTTP/3newyear2023.xn--napth-351b.vn/css/napthe1.css IP188.114.97.1:443
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerLet's Encrypt Subjectxn--napth-351b.vn Fingerprint23:28:5B:99:D2:A9:20:FC:9B:56:54:D5:B1:BF:88:32:60:F7:BA:5A ValiditySat, 29 Apr 2023 10:08:00 GMT - Fri, 28 Jul 2023 10:07:59 GMT
File typeASCII text, with CRLF line terminators Hash09e1d0ac5d7a430a7f696401f3bd5383 c6b1e4d75d5f6bd84e34c524542f6f3d4a6a1a66 e78ba79e763fcae52087a773eb6a43b4564a081b56861ceda3c974409c169962
| Analyzer | Verdict | Alert |
|---|
| openphish | Garena | | | phishtank | Other | |
GET /css/napthe1.css HTTP/1.1
Host: newyear2023.xn--napth-351b.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/app/fifa-online-4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 May 2023 15:42:46 GMT
content-type: text/css
cache-control: public, max-age=14400
expires: Thu, 25 May 2023 15:42:46 GMT
last-modified: Mon, 31 Oct 2022 11:42:11 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SQOTIRwGMc0bDtvCjeiFrd8RIdkgtVFOfxswIMWeOb4igEQ08tmTrFkQ6yn3CeqhfXH1jK1bu60LAz0tMSff1CSKfBCEl4tb3DK%2FPTG1Tgz4udCGI0i0r1kfyPmzqfqM3ZPP39OWDoSnGyhTGJwkBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c9536407cc5b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
|
|
| newyear2023.xn--napth-351b.vn/images/vietnamobile.png | 188.114.97.1 | 200 OK | 21 kB |
URL GET HTTP/3newyear2023.xn--napth-351b.vn/images/vietnamobile.png IP188.114.97.1:443
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerLet's Encrypt Subjectxn--napth-351b.vn Fingerprint23:28:5B:99:D2:A9:20:FC:9B:56:54:D5:B1:BF:88:32:60:F7:BA:5A ValiditySat, 29 Apr 2023 10:08:00 GMT - Fri, 28 Jul 2023 10:07:59 GMT
File typePNG image data, 256 x 114, 8-bit/color RGBA, non-interlaced\012- data Hash8a049b5759ec3a1c93ffb1d2c6ab20ba 01c8919ab5aeda583a75fccfd73719bdf99fd5aa 97e0bf93fd058dd09af0542ca3b35a66951639cc95b40203b991b6b21f5f1eaf
| Analyzer | Verdict | Alert |
|---|
| openphish | Garena | | | phishtank | Other | |
GET /images/vietnamobile.png HTTP/1.1
Host: newyear2023.xn--napth-351b.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/app/fifa-online-4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 May 2023 15:42:46 GMT
content-type: image/png
content-length: 21184
cache-control: public, max-age=2629000
expires: Thu, 25 May 2023 15:42:46 GMT
last-modified: Mon, 31 Oct 2022 11:42:11 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M24iQBGeykVuQWNvK5pyctyfZhCEg9YXdy1c%2BymBHh9GxH2%2FUdE0UMvQe7sVLGDlSTKDO21pym5KSmgLBeFUjKPl9ET4jkSnGQ15iFOk1REkCS8KpmnXyegwMTAGd1AWVB5WEXsM4AKGlugI0T3eog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c9536408cdab521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
|
|
| newyear2023.xn--napth-351b.vn/images/mobifone.png | 188.114.97.1 | 200 OK | 28 kB |
URL GET HTTP/3newyear2023.xn--napth-351b.vn/images/mobifone.png IP188.114.97.1:443
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerLet's Encrypt Subjectxn--napth-351b.vn Fingerprint23:28:5B:99:D2:A9:20:FC:9B:56:54:D5:B1:BF:88:32:60:F7:BA:5A ValiditySat, 29 Apr 2023 10:08:00 GMT - Fri, 28 Jul 2023 10:07:59 GMT
File typePNG image data, 256 x 114, 8-bit/color RGBA, non-interlaced\012- data Hash718f48783e4adf931466110fc53550df fd38ac39154a19181af3043ed1525cca2926fed5 9874b99edd042b57a7fb3927cada8c4dcf9b29436ddaae536965fbb19e319a52
| Analyzer | Verdict | Alert |
|---|
| openphish | Garena | | | phishtank | Other | |
GET /images/mobifone.png HTTP/1.1
Host: newyear2023.xn--napth-351b.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/app/fifa-online-4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 May 2023 15:42:46 GMT
content-type: image/png
content-length: 27777
cache-control: public, max-age=2629000
expires: Thu, 25 May 2023 15:42:46 GMT
last-modified: Mon, 31 Oct 2022 11:42:11 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M2%2FmuwYaPxu7fEpzZTJVZi%2F6Fyk8FHHwPvJAddyIyg6t0%2Bk4re0R8P0PY4869PAyySuKFMbgovQ%2F0UsTmq9Cou%2FEn%2FpiFdU6VtNH8xnhrf0tQrSMelPfpDYLlGEvhMkEGWw5Je3WaJojQJOfjsTJzg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c9536408cd8b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
|
|
| cdngarenanow-a.akamaihd.net/gop/app/0000/032/837/point.png |  23.36.76.187 | | 8.2 kB |
URL GET cdngarenanow-a.akamaihd.net/gop/app/0000/032/837/point.png IP23.36.76.187:0 ASN#20940 Akamai International B.V.
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37 ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data Hashab146b5f86fe4a8958ee37256045c711 f98ec764173d44e112336e1a452c0156e5ce7946 f0d62a5b32f70b89b3c03d796e152d5456fb591d9ca22e6ce156f5c6573a0592
GET /gop/app/0000/032/837/point.png HTTP/1.1
Host: cdngarenanow-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
etag: "ab146b5f86fe4a8958ee37256045c711:1529456457.006434"
last-modified: Wed, 20 Jun 2018 01:00:57 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
date: Thu, 18 May 2023 15:42:46 GMT
content-length: 8212
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| cdngarenanow-a.akamaihd.net/gop/app/0000/032/837/icon.png | 23.36.76.187 | | 6.4 kB |
URL GET cdngarenanow-a.akamaihd.net/gop/app/0000/032/837/icon.png IP23.36.76.187:0 ASN#20940 Akamai International B.V.
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37 ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data Hashe36b7de9f03353fb9617300c072fd150 92482899011963bc323b90ad68d2f86da46d43cd 33e31fd4441010b4d2480d0e760dfc9af8138b6e2d71d57d9917a85890da0b75
GET /gop/app/0000/032/837/icon.png HTTP/1.1
Host: cdngarenanow-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
etag: "e36b7de9f03353fb9617300c072fd150:1529456455.786054"
last-modified: Wed, 20 Jun 2018 01:00:55 GMT
server: AkamaiNetStorage
content-encoding: gzip
content-length: 6424
date: Thu, 18 May 2023 15:42:46 GMT
vary: Accept-Encoding
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| cdn.vn.garenanow.com/web/napthevn/sp_pc_19052022.png |  45.119.240.104 | 200 OK | 78 kB |
URL GET HTTP/1.1cdn.vn.garenanow.com/web/napthevn/sp_pc_19052022.png IP45.119.240.104:443 ASN#131418 Vietnam Esports Development Joint Stock Company
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerSSL Corporation Subjectcdn.vn.garenanow.com Fingerprint4D:25:AB:22:6C:32:4E:35:93:76:95:B9:69:85:72:12:53:DD:67:EC ValidityThu, 17 Nov 2022 02:54:32 GMT - Fri, 17 Nov 2023 02:54:32 GMT
File typePNG image data, 900 x 100, 8-bit/color RGBA, non-interlaced\012- data Hash93a8e30cf135303ef28a128276527837 f27c0c2d64718fbe566e752cedae2f11f00c1d05 b48333327fede34328a2310f4fe61b8adfbe17d0dec656e1e433507b0405fc16
GET /web/napthevn/sp_pc_19052022.png HTTP/1.1
Host: cdn.vn.garenanow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 May 2023 15:42:46 GMT
Content-Type: image/png
Content-Length: 78462
Connection: keep-alive
Last-Modified: Thu, 19 May 2022 07:06:51 GMT
ETag: "6285ec8b-1327e"
X-Cache-Status: REVALIDATED
X-Handled-By: cdn-master
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| newyear2023.xn--napth-351b.vn/js/custom1.js | 188.114.97.1 | 200 OK | 268 B |
URL GET HTTP/3newyear2023.xn--napth-351b.vn/js/custom1.js IP188.114.97.1:443
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerLet's Encrypt Subjectxn--napth-351b.vn Fingerprint23:28:5B:99:D2:A9:20:FC:9B:56:54:D5:B1:BF:88:32:60:F7:BA:5A ValiditySat, 29 Apr 2023 10:08:00 GMT - Fri, 28 Jul 2023 10:07:59 GMT
File typeASCII text, with no line terminators Hash39a2f96030c5fa13ef9161348d905709 c39f9067d98b90278c45fb28564b543f161b70c5 11f8994c46b7f014551ab310acbe2497571d05de5ceffcb42a03aec4f7de3d5e
| Analyzer | Verdict | Alert |
|---|
| openphish | Garena | | | phishtank | Other | | | fortinet | Phishing | |
GET /js/custom1.js HTTP/1.1
Host: newyear2023.xn--napth-351b.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/app/fifa-online-4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 May 2023 15:42:46 GMT
content-type: application/javascript
cache-control: public, max-age=14400
expires: Thu, 25 May 2023 15:42:46 GMT
last-modified: Mon, 31 Oct 2022 11:42:11 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZJsSTEegl9TDUC%2FNICwiZ0AxE%2BYp4ZESi%2F%2Bv5HYsVm54F6cUS1w7A5Z9t4yxCDo4ZylHSjPihzwDH8uBQDYVBTDQ6wMIvm1B7N2JldVBI6ZDGS1oPgtkkVHZ3FyNyH2ciODjoCgIJdCkfiZYxcGFqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c9536407ccab521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
|
|
| newyear2023.xn--napth-351b.vn/css/bootstrap.min.css | 188.114.97.1 | 200 OK | 150 kB |
URL GET HTTP/3newyear2023.xn--napth-351b.vn/css/bootstrap.min.css IP188.114.97.1:443
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerLet's Encrypt Subjectxn--napth-351b.vn Fingerprint23:28:5B:99:D2:A9:20:FC:9B:56:54:D5:B1:BF:88:32:60:F7:BA:5A ValiditySat, 29 Apr 2023 10:08:00 GMT - Fri, 28 Jul 2023 10:07:59 GMT
File typeASCII text, with very long lines (399) Size150 kB (149830 bytes) Hash1fa2640288b4602af26f8beacaef55c1 5702361c035dfc572d953fe343e9649c38a89c9c 90aeafaae0b8e4ca9a3bca40b981950c2183102721b41a3e89045f32264b2299
| Analyzer | Verdict | Alert |
|---|
| openphish | Garena | | | phishtank | Other | |
GET /css/bootstrap.min.css HTTP/1.1
Host: newyear2023.xn--napth-351b.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/app/fifa-online-4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 May 2023 15:42:46 GMT
content-type: text/css
cache-control: public, max-age=14400
expires: Thu, 25 May 2023 15:42:46 GMT
last-modified: Mon, 31 Oct 2022 11:42:11 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x1U5AgDkdviccdYy1SuRhtsLQ0yBoCkfiCjXBopgEm99BImeifB4x4RIpzuzRH2%2Fw09Q%2Ba%2BodDFaMpOfdR4A6UwOh6IMcElkkarREm3fCzg%2BbeLW6ec0QkX5gO88huTjVGc%2Fqt8hV5n%2FE%2FxH5GSOww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c9536407cc4b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
|
|
| newyear2023.xn--napth-351b.vn/css/style.css | 188.114.97.1 | 200 OK | 5.3 kB |
URL GET HTTP/3newyear2023.xn--napth-351b.vn/css/style.css IP188.114.97.1:443
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerLet's Encrypt Subjectxn--napth-351b.vn Fingerprint23:28:5B:99:D2:A9:20:FC:9B:56:54:D5:B1:BF:88:32:60:F7:BA:5A ValiditySat, 29 Apr 2023 10:08:00 GMT - Fri, 28 Jul 2023 10:07:59 GMT
File typeASCII text, with very long lines (5658), with no line terminators Hashb210240980fa2c1d3b6ec6b2012f205f 9d223550718b9dc4159cff525b43335f987667f7 c992b5b88810d0b64b71632a512e010c5199c31cfcd32f078ed80d541e537911
| Analyzer | Verdict | Alert |
|---|
| openphish | Garena | | | phishtank | Other | |
GET /css/style.css HTTP/1.1
Host: newyear2023.xn--napth-351b.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/app/fifa-online-4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 May 2023 15:42:46 GMT
content-type: text/css
cache-control: public, max-age=14400
expires: Thu, 25 May 2023 15:42:46 GMT
last-modified: Mon, 31 Oct 2022 11:42:11 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5TmePSUiQt2dR%2BQWVCuzYEZOmMmr%2BO6ArYJmpPVxdgIt880SjaYqFdkpGHXKKSBT1j84MDWiNT9a7mrt1g3RlqaXwTBxQbVEOsGzMjIIGdrjz%2BU9i%2Fwua4Wn%2Fl9SoX6l8ahl%2FpCF0c7Yl5AdlYgmqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c9536407cc7b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
|
|
| newyear2023.xn--napth-351b.vn/images/favicon.ico | 188.114.97.1 | 200 OK | 4.5 kB |
URL GET HTTP/3newyear2023.xn--napth-351b.vn/images/favicon.ico IP188.114.97.1:443
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerLet's Encrypt Subjectxn--napth-351b.vn Fingerprint23:28:5B:99:D2:A9:20:FC:9B:56:54:D5:B1:BF:88:32:60:F7:BA:5A ValiditySat, 29 Apr 2023 10:08:00 GMT - Fri, 28 Jul 2023 10:07:59 GMT
File typePNG image data, 70 x 70, 8-bit/color RGB, non-interlaced\012- data Hash5fe97698c227d02ccb2284389b884175 b44c10d4a58ece5d6255775d85012f7c75ac6b2f 22a8e20cec6c4cd83c7446bfad7377d371a8a5b8d89bbdb74daa0dea2bcea549
| Analyzer | Verdict | Alert |
|---|
| openphish | Garena | | | phishtank | Other | |
GET /images/favicon.ico HTTP/1.1
Host: newyear2023.xn--napth-351b.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/app/fifa-online-4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 May 2023 15:42:47 GMT
content-type: image/x-icon
cache-control: public, max-age=2629000
expires: Thu, 25 May 2023 15:42:47 GMT
last-modified: Mon, 31 Oct 2022 11:42:11 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=joZLpkUu3Pm1Z3aRE0p1EfAlbApTw5bZxueCpMW%2FXrR49h8sn%2BqeV4qIZPi62BXU%2BTZGeg3JlWBTBbTFjHUjJozwgtR8dVIwnmgGnW4HyLZih%2BSQmbny04FwhUFcmf8FfTkJHiBkMfqxELHYSKk%2FAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c953647fd95b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
|
|
| newyear2023.xn--napth-351b.vn/js/bootstrap.min.js | 188.114.97.1 | 200 OK | 37 kB |
URL GET HTTP/3newyear2023.xn--napth-351b.vn/js/bootstrap.min.js IP188.114.97.1:443
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerLet's Encrypt Subjectxn--napth-351b.vn Fingerprint23:28:5B:99:D2:A9:20:FC:9B:56:54:D5:B1:BF:88:32:60:F7:BA:5A ValiditySat, 29 Apr 2023 10:08:00 GMT - Fri, 28 Jul 2023 10:07:59 GMT
File typeASCII text, with very long lines (32039), with CRLF line terminators Hash35e78bb2df69fc12053f9778e2ff2a93 ae8c8a930fd890ee61a9c82a7e85dd22918db7a6 9c7467cb2e579a31a8c0ab41c8557559bf538340fbb8632f6aa2b977aa22bf0a
| Analyzer | Verdict | Alert |
|---|
| openphish | Garena | | | phishtank | Other | | | fortinet | Phishing | |
GET /js/bootstrap.min.js HTTP/1.1
Host: newyear2023.xn--napth-351b.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/app/fifa-online-4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 May 2023 15:42:46 GMT
content-type: application/javascript
cache-control: public, max-age=14400
expires: Thu, 25 May 2023 15:42:46 GMT
last-modified: Mon, 31 Oct 2022 11:42:11 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NunOL67nxqG3JIUs%2FhYkeuB9nIzE99gQxmPZoCGzc5sgXGKWY6UsStqAY3BkTKFFZXWOKbtRl0RDgxtgwZjuYi%2BbyLZf8yx4xANRMPHEnRc%2BMC53AsVkPua43AsfDoNtKRqrsjbTDORnRo7MsfaqFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c9536407cc9b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
|
|
| newyear2023.xn--napth-351b.vn/app/fifa-online-4 | 188.114.97.1 | 200 OK | 22 kB |
URL User Request GET HTTP/2newyear2023.xn--napth-351b.vn/app/fifa-online-4 IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subjectxn--napth-351b.vn Fingerprint23:28:5B:99:D2:A9:20:FC:9B:56:54:D5:B1:BF:88:32:60:F7:BA:5A ValiditySat, 29 Apr 2023 10:08:00 GMT - Fri, 28 Jul 2023 10:07:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| openphish | Garena | | | phishtank | Other | | | fortinet | Phishing | |
GET /app/fifa-online-4 HTTP/1.1
Host: newyear2023.xn--napth-351b.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 May 2023 15:42:45 GMT
content-type: text/html
x-powered-by: PHP/5.4.45
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uuVFoTznkvkL7aDyaKXg8BwoHdSIeD7%2FsqgqMiXD7E0cuL5vF46tMpiP1RbchiMievF9LVQozpMztchyVZo5GTAXxhMMxgtB3DgEMqpAseHifIQw4Ae4azUHEghNPMdL6pD1OfUsrQ3WM8AAuLALhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c95363c5d060b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| newyear2023.xn--napth-351b.vn/js/jquery-3.2.1.min.js | 188.114.97.1 | 200 OK | 87 kB |
URL GET HTTP/3newyear2023.xn--napth-351b.vn/js/jquery-3.2.1.min.js IP188.114.97.1:443
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerLet's Encrypt Subjectxn--napth-351b.vn Fingerprint23:28:5B:99:D2:A9:20:FC:9B:56:54:D5:B1:BF:88:32:60:F7:BA:5A ValiditySat, 29 Apr 2023 10:08:00 GMT - Fri, 28 Jul 2023 10:07:59 GMT
File typeASCII text, with very long lines (32058), with CRLF line terminators Hash27a8f25e65bfe1872ebd62e021a0c6ca 9f835084914c0f4403a080fb7de4abe0d210adf8 d3a518dea876de39f9e5dc1ffcdeb6c661aee25d8a62474386b664ef3bf1b40f
| Analyzer | Verdict | Alert |
|---|
| openphish | Garena | | | phishtank | Other | | | fortinet | Phishing | |
GET /js/jquery-3.2.1.min.js HTTP/1.1
Host: newyear2023.xn--napth-351b.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/app/fifa-online-4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 May 2023 15:42:46 GMT
content-type: application/javascript
cache-control: public, max-age=14400
expires: Thu, 25 May 2023 15:42:46 GMT
last-modified: Mon, 31 Oct 2022 11:42:11 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=11S0NzJefCphQhk0PA%2FWM7Mn0IRovFHaKfaU8Lf8YJR2jTT%2B9BSUuqWed17nwxdUwjFNF%2BCCeMrsTKZAkYschUYFQ4crVm%2B4DLdhFmgKTrl2v9IK1SUSBVuoZBU52wtDPJTa26iuzLnDdibgSbZfDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c9536407cc8b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
|
|
| cdn.jsdelivr.net/npm/sweetalert2@11 |  185.244.209.62 | 200 OK | 64 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/sweetalert2@11 IP185.244.209.62:443 ASN#58286 Electric-IT Business S.R.L.
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerSectigo Limited Subjectcdn.jsdelivr.net Fingerprint95:B3:FD:0C:F5:9E:0C:6C:F5:81:AB:DD:5D:6D:67:BF:FF:4A:FD:CC ValiditySat, 01 Oct 2022 00:00:00 GMT - Fri, 20 Oct 2023 23:59:59 GMT
File typeASCII text, with very long lines (43289) Hashc10306ea9c7731da5e8282aad988d42a 2f051222a227533c602d931af52fc78649fe0689 f40b487eeb315e2d23e335dd4b14626459f4836d8e05d9533b805db1cdb3fed6
GET /npm/sweetalert2@11 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 May 2023 15:42:45 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 11.7.5
x-jsd-version-type: version
etag: W/"fa8a-LwUSIqInUzxgLZMa9S/Hhkn+Bok"
age: 1867
x-served-by: cache-fra-eddf8230029-FRA, cache-ams21057-AMS
x-cache: HIT, HIT
vary: Accept-Encoding, Accept-Encoding
content-encoding: br
cache: HIT, HIT
x-cached-since: 2023-05-05T12:24:56+00:00, 2023-05-18T14:24:02+00:00
x-id: am3-up-gc89, osix-up-gc4
x-nginx: nginx-be, nginx-be
X-Firefox-Spdy: h2
|
|
| newyear2023.xn--napth-351b.vn/js/kensine.js | 188.114.97.1 | 200 OK | 101 kB |
URL GET HTTP/3newyear2023.xn--napth-351b.vn/js/kensine.js IP188.114.97.1:443
Requested byhttps://newyear2023.xn--napth-351b.vn/app/fifa-online-4 CertificateIssuerLet's Encrypt Subjectxn--napth-351b.vn Fingerprint23:28:5B:99:D2:A9:20:FC:9B:56:54:D5:B1:BF:88:32:60:F7:BA:5A ValiditySat, 29 Apr 2023 10:08:00 GMT - Fri, 28 Jul 2023 10:07:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size101 kB (101004 bytes) Hash08e463af2e6c57ce1f3e897d41886f30 3aab4b4023019ee6f4df0b804afa76efad8e7f1d fd64d6b99d7adb77f3670043ff1db3729d758130e130c25702d74eccb67c5eb0
| Analyzer | Verdict | Alert |
|---|
| openphish | Garena | | | phishtank | Other | | | fortinet | Phishing | |
GET /js/kensine.js HTTP/1.1
Host: newyear2023.xn--napth-351b.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newyear2023.xn--napth-351b.vn/app/fifa-online-4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 May 2023 15:42:46 GMT
content-type: application/javascript
cache-control: public, max-age=14400
expires: Thu, 25 May 2023 15:42:46 GMT
last-modified: Mon, 31 Oct 2022 11:42:11 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ccmWQ9UWSbAAtYBB7%2B6%2BS5UqvsGBLLnvutgNoPvpSdhncTuO6WHr3ARkVqhhgP5YcGVYwWzm%2BJMK3%2FB7NaJnNRVOMn%2FKYmUzkKfr4SzSit9GEyhKIbZL%2Fl4VgD6er3dbXRvloIMIF1dgpHzXCe9C%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c9536408cd2b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
|
|