| sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/stylef.css |  108.167.181.37 | 200 OK | 2.7 kB |
URL GET HTTP/2sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/stylef.css IP108.167.181.37:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Requested byhttps://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php CertificateIssuerLet's Encrypt Subjectwebdisk.sam.hwf.temporary.site Fingerprint48:1A:21:C2:19:91:F8:6A:D5:94:66:3E:D0:66:56:76:FA:A6:93:C0 ValidityTue, 12 Mar 2024 02:46:17 GMT - Mon, 10 Jun 2024 02:46:16 GMT
File typeASCII text, with very long lines (3786), with CRLF line terminators Hash7fbdf936b3a0dfe5d689966bfd047bbf e50e67c7f7f6498a3d8c57d85b7e1d4365c63a09 9c5da9364f95ebb0c61fa03589a4cbc10bc091c62295fad5e8e92f24625e543b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix |
GET /wp-incloud/Myaccount/Wait/style/css/stylef.css HTTP/1.1
Host: sam.hwf.temporary.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php
Cookie: PHPSESSID=5e853b854f3b42b9e62ebd300815d693
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 01 Nov 2020 14:57:32 GMT
accept-ranges: none
cache-control: max-age=2592000
expires: Fri, 07 Jun 2024 16:16:32 GMT
vary: Accept-Encoding
content-encoding: gzip
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2721
content-type: text/css
date: Wed, 08 May 2024 16:16:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/js/jquery.CardValidator.js | 108.167.181.37 | 200 OK | 2.2 kB |
URL GET HTTP/2sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/js/jquery.CardValidator.js IP108.167.181.37:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Requested byhttps://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php CertificateIssuerLet's Encrypt Subjectwebdisk.sam.hwf.temporary.site Fingerprint48:1A:21:C2:19:91:F8:6A:D5:94:66:3E:D0:66:56:76:FA:A6:93:C0 ValidityTue, 12 Mar 2024 02:46:17 GMT - Mon, 10 Jun 2024 02:46:16 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashabb9a501a5640cf0f8563ea64120248a 11848f5498d35bb4d746f64d537d85de0d4a4876 bfa489820b4cff47140a8f1741f50f8bf752df013ac13388357ccef04600c8ab
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix |
GET /wp-incloud/Myaccount/Wait/style/js/jquery.CardValidator.js HTTP/1.1
Host: sam.hwf.temporary.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php
Cookie: PHPSESSID=5e853b854f3b42b9e62ebd300815d693
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 01 Nov 2020 14:57:32 GMT
accept-ranges: none
cache-control: max-age=21600
expires: Wed, 08 May 2024 22:16:32 GMT
vary: Accept-Encoding
content-encoding: gzip
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2203
content-type: application/javascript
date: Wed, 08 May 2024 16:16:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/js/style.js | 108.167.181.37 | 200 OK | 848 B |
URL GET HTTP/2sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/js/style.js IP108.167.181.37:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Requested byhttps://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php CertificateIssuerLet's Encrypt Subjectwebdisk.sam.hwf.temporary.site Fingerprint48:1A:21:C2:19:91:F8:6A:D5:94:66:3E:D0:66:56:76:FA:A6:93:C0 ValidityTue, 12 Mar 2024 02:46:17 GMT - Mon, 10 Jun 2024 02:46:16 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash898f19a99389c21b45afaa5cbc50ebbe 6dd2957947201f36f3a50cad3bda18874d2508d7 f050012b033cb391112b37757113c73ff09884815ff73ce45592ee309ce87b3f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix | | urlquery | suspicious | Suspicious - Anti-debugging code |
GET /wp-incloud/Myaccount/Wait/style/js/style.js HTTP/1.1
Host: sam.hwf.temporary.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php
Cookie: PHPSESSID=5e853b854f3b42b9e62ebd300815d693
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 01 Nov 2020 14:57:32 GMT
accept-ranges: none
cache-control: max-age=21600
expires: Wed, 08 May 2024 22:16:32 GMT
vary: Accept-Encoding
content-encoding: gzip
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 848
content-type: application/javascript
date: Wed, 08 May 2024 16:16:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/js/jquery.validate.min.js | 108.167.181.37 | 200 OK | 17 kB |
URL GET HTTP/2sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/js/jquery.validate.min.js IP108.167.181.37:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Requested byhttps://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php CertificateIssuerLet's Encrypt Subjectwebdisk.sam.hwf.temporary.site Fingerprint48:1A:21:C2:19:91:F8:6A:D5:94:66:3E:D0:66:56:76:FA:A6:93:C0 ValidityTue, 12 Mar 2024 02:46:17 GMT - Mon, 10 Jun 2024 02:46:16 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (511), with CRLF line terminators Hashd5629cbf42e106909b5113e08df03ce1 d3094a0e83e7189eefc2ac0af6299b27db141eae 4722cc6e6ae20ebfa5b2101b4424df64b9db793fc22061f4b3ddcdc5bf6a4c63
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix |
GET /wp-incloud/Myaccount/Wait/style/js/jquery.validate.min.js HTTP/1.1
Host: sam.hwf.temporary.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php
Cookie: PHPSESSID=5e853b854f3b42b9e62ebd300815d693
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 01 Nov 2020 14:57:32 GMT
accept-ranges: none
cache-control: max-age=21600
expires: Wed, 08 May 2024 22:16:32 GMT
vary: Accept-Encoding
content-encoding: gzip
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 16733
content-type: application/javascript
date: Wed, 08 May 2024 16:16:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/js/jquery.mask.js | 108.167.181.37 | 200 OK | 5.6 kB |
URL GET HTTP/2sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/js/jquery.mask.js IP108.167.181.37:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Requested byhttps://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php CertificateIssuerLet's Encrypt Subjectwebdisk.sam.hwf.temporary.site Fingerprint48:1A:21:C2:19:91:F8:6A:D5:94:66:3E:D0:66:56:76:FA:A6:93:C0 ValidityTue, 12 Mar 2024 02:46:17 GMT - Mon, 10 Jun 2024 02:46:16 GMT
File typeJavaScript source, ASCII text Hash219d169a80568884a3d6baab3e5e7def 61d00104de8c972c820cd9b527d8e2edb30e5c4a cf1f0d954cbbbcb32d170b1ff68c5b082a1086f34f2bbee825ca88b7c9fb213a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix |
GET /wp-incloud/Myaccount/Wait/style/js/jquery.mask.js HTTP/1.1
Host: sam.hwf.temporary.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php
Cookie: PHPSESSID=5e853b854f3b42b9e62ebd300815d693
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 01 Nov 2020 14:57:32 GMT
accept-ranges: none
cache-control: max-age=21600
expires: Wed, 08 May 2024 22:16:32 GMT
vary: Accept-Encoding
content-encoding: gzip
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 5606
content-type: application/javascript
date: Wed, 08 May 2024 16:16:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php | 108.167.181.37 | 200 OK | 15 kB |
URL User Request GET HTTP/2sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php IP108.167.181.37:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subjectwebdisk.sam.hwf.temporary.site Fingerprint48:1A:21:C2:19:91:F8:6A:D5:94:66:3E:D0:66:56:76:FA:A6:93:C0 ValidityTue, 12 Mar 2024 02:46:17 GMT - Mon, 10 Jun 2024 02:46:16 GMT
File typegzip compressed data, from Unix Hash841dda571304b104d9d1de847a007d34 a61027b18eef378219294f6efe5ab8b3511f5eb0 df70eb5496d95a668ada2b0fbed816cb6f96dd7817670fbdd97af863904f9b7d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix | | OpenPhish | phishing | Netflix Inc. | | PhishTank | phishing | Other |
GET /wp-incloud/Myaccount/Wait/index1.php HTTP/1.1
Host: sam.hwf.temporary.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 16:16:32 GMT
server: nginx/1.23.4
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: none
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: false
set-cookie: PHPSESSID=5e853b854f3b42b9e62ebd300815d693; path=/
X-Firefox-Spdy: h2
|
|
| sam.hwf.temporary.site/wp-incloud/Myaccount/Wait//style/css/ooadnm.png | 108.167.181.37 | 200 OK | 59 kB |
URL GET HTTP/2sam.hwf.temporary.site/wp-incloud/Myaccount/Wait//style/css/ooadnm.png IP108.167.181.37:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Requested byhttps://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php CertificateIssuerLet's Encrypt Subjectwebdisk.sam.hwf.temporary.site Fingerprint48:1A:21:C2:19:91:F8:6A:D5:94:66:3E:D0:66:56:76:FA:A6:93:C0 ValidityTue, 12 Mar 2024 02:46:17 GMT - Mon, 10 Jun 2024 02:46:16 GMT
File typePNG image data, 1668 x 1576, 8-bit/color RGBA, non-interlaced Hashe85c00c2a05d2d9db0ea188dff87e14e 163f15013b1d4f59c6f66d198192fd527d61dded 2fc95eeea201000dfc72f258030674ff5ba47f8509871414072fa69d50ea2a83
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix |
GET /wp-incloud/Myaccount/Wait//style/css/ooadnm.png HTTP/1.1
Host: sam.hwf.temporary.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php
Cookie: PHPSESSID=5e853b854f3b42b9e62ebd300815d693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 01 Nov 2020 14:57:32 GMT
accept-ranges: bytes
content-length: 59220
cache-control: max-age=31536000
expires: Thu, 08 May 2025 16:16:32 GMT
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Wed, 08 May 2024 16:16:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/alpha_website_small.jpg | 108.167.181.37 | 200 OK | 116 kB |
URL GET HTTP/2sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/alpha_website_small.jpg IP108.167.181.37:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Requested byhttps://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php CertificateIssuerLet's Encrypt Subjectwebdisk.sam.hwf.temporary.site Fingerprint48:1A:21:C2:19:91:F8:6A:D5:94:66:3E:D0:66:56:76:FA:A6:93:C0 ValidityTue, 12 Mar 2024 02:46:17 GMT - Mon, 10 Jun 2024 02:46:16 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3 Size116 kB (115912 bytes) Hash330f71efaf9464edb933d1d635e27dd6 3d11a19729f6fcd344df1c38f34eccfa60a6bf2d 3e379956c11b27e761265f7d50f07f680407c9bfe4b067856b9408755ec08255
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix |
GET /wp-incloud/Myaccount/Wait/style/css/alpha_website_small.jpg HTTP/1.1
Host: sam.hwf.temporary.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php
Cookie: PHPSESSID=5e853b854f3b42b9e62ebd300815d693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 01 Nov 2020 14:57:32 GMT
accept-ranges: bytes
content-length: 115912
cache-control: max-age=31536000
expires: Thu, 08 May 2025 16:16:32 GMT
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/jpeg
date: Wed, 08 May 2024 16:16:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/site-spinner-240-light.png | 108.167.181.37 | 200 OK | 5.1 kB |
URL GET HTTP/2sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/site-spinner-240-light.png IP108.167.181.37:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Requested byhttps://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php CertificateIssuerLet's Encrypt Subjectwebdisk.sam.hwf.temporary.site Fingerprint48:1A:21:C2:19:91:F8:6A:D5:94:66:3E:D0:66:56:76:FA:A6:93:C0 ValidityTue, 12 Mar 2024 02:46:17 GMT - Mon, 10 Jun 2024 02:46:16 GMT
File typePNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced Hash93ebf9e3bb5fde6c9456ca28711bfbba 006bef52015403d071a73fb6f04bd2dd98f82ebb 5a7ed665f614fe2c62e79a477715dd18c8afae67f7c580bc049e013feb2864b7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix |
GET /wp-incloud/Myaccount/Wait/style/css/site-spinner-240-light.png HTTP/1.1
Host: sam.hwf.temporary.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/nonechaditkk.css
Cookie: PHPSESSID=5e853b854f3b42b9e62ebd300815d693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 01 Nov 2020 14:57:32 GMT
accept-ranges: bytes
content-length: 5095
cache-control: max-age=31536000
expires: Thu, 08 May 2025 16:16:33 GMT
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Wed, 08 May 2024 16:16:33 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/nf-icon-v1-93.woff | 108.167.181.37 | 200 OK | 74 kB |
URL GET HTTP/2sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/nf-icon-v1-93.woff IP108.167.181.37:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Requested byhttps://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php CertificateIssuerLet's Encrypt Subjectwebdisk.sam.hwf.temporary.site Fingerprint48:1A:21:C2:19:91:F8:6A:D5:94:66:3E:D0:66:56:76:FA:A6:93:C0 ValidityTue, 12 Mar 2024 02:46:17 GMT - Mon, 10 Jun 2024 02:46:16 GMT
File typeWeb Open Font Format, CFF, length 73572, version 0.0 Hash7cf6156cc481244b5a254362d7b73f00 4391003d1cb06d2bd1921a5813a57604fa7d9935 98713b53a74ebe7e326353080c5f1653e83af61d6363c0b3c4c67d6d24197b4d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix |
GET /wp-incloud/Myaccount/Wait/style/css/nf-icon-v1-93.woff HTTP/1.1
Host: sam.hwf.temporary.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/nonechaditkk.css
Cookie: PHPSESSID=5e853b854f3b42b9e62ebd300815d693
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 01 Nov 2020 14:57:32 GMT
accept-ranges: bytes
content-length: 73572
cache-control: max-age=21600
expires: Wed, 08 May 2024 22:16:33 GMT
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: font/woff
date: Wed, 08 May 2024 16:16:33 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/nficon2016.png | 108.167.181.37 | 200 OK | 1.8 kB |
URL GET HTTP/2sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/nficon2016.png IP108.167.181.37:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Requested byhttps://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php CertificateIssuerLet's Encrypt Subjectwebdisk.sam.hwf.temporary.site Fingerprint48:1A:21:C2:19:91:F8:6A:D5:94:66:3E:D0:66:56:76:FA:A6:93:C0 ValidityTue, 12 Mar 2024 02:46:17 GMT - Mon, 10 Jun 2024 02:46:16 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash3d194514babc5d7d010308a0f808ca51 867e51e9b4a474c19da52d6454076c007a9d01f2 7341f7b8b0ae3c0da4aea559efc31f0b53d9db9dd291664fdcf7d618fd95ed8a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix |
GET /wp-incloud/Myaccount/Wait/style/css/nficon2016.png HTTP/1.1
Host: sam.hwf.temporary.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php
Cookie: PHPSESSID=5e853b854f3b42b9e62ebd300815d693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 01 Nov 2020 14:57:32 GMT
accept-ranges: bytes
content-length: 1755
cache-control: max-age=31536000
expires: Thu, 08 May 2025 16:16:33 GMT
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Wed, 08 May 2024 16:16:33 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/nficon2016.ico | 108.167.181.37 | 200 OK | 17 kB |
URL GET HTTP/2sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/nficon2016.ico IP108.167.181.37:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Requested byhttps://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php CertificateIssuerLet's Encrypt Subjectwebdisk.sam.hwf.temporary.site Fingerprint48:1A:21:C2:19:91:F8:6A:D5:94:66:3E:D0:66:56:76:FA:A6:93:C0 ValidityTue, 12 Mar 2024 02:46:17 GMT - Mon, 10 Jun 2024 02:46:16 GMT
File typeMS Windows icon resource - 1 icon, 64x64, 32 bits/pixel Hash41b45fdce09bd6acd07c7a8949da675e 931e18dfc6e7d950dc2f2bbdfe31e1ea720acf7c abe8012eb65c0dc0ac3e87dcc1e60e1908ebd8f12b7c47a5df1856f7a7bb1edd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix |
GET /wp-incloud/Myaccount/Wait/style/css/nficon2016.ico HTTP/1.1
Host: sam.hwf.temporary.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php
Cookie: PHPSESSID=5e853b854f3b42b9e62ebd300815d693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 16:16:33 GMT
server: nginx/1.23.4
content-type: image/x-icon
content-length: 16958
last-modified: Sun, 01 Nov 2020 14:57:32 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Thu, 08 May 2025 16:16:33 GMT
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: false
X-Firefox-Spdy: h2
|
|
| sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/js/angular.min.js | 108.167.181.37 | 200 OK | 167 kB |
URL GET HTTP/2sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/js/angular.min.js IP108.167.181.37:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Requested byhttps://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php CertificateIssuerLet's Encrypt Subjectwebdisk.sam.hwf.temporary.site Fingerprint48:1A:21:C2:19:91:F8:6A:D5:94:66:3E:D0:66:56:76:FA:A6:93:C0 ValidityTue, 12 Mar 2024 02:46:17 GMT - Mon, 10 Jun 2024 02:46:16 GMT
File typeJavaScript source, ASCII text, with very long lines (566) Size167 kB (167131 bytes) Hashbe6af23e2a716c006da75d0291784254 9c923313eabc56d715a7c07bf855feb26a72f671 8c50aa8567731858e81bcfd2027718d9a7c8fd7bf54cf496499adbf5da5741b9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix |
GET /wp-incloud/Myaccount/Wait/style/js/angular.min.js HTTP/1.1
Host: sam.hwf.temporary.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php
Cookie: PHPSESSID=5e853b854f3b42b9e62ebd300815d693
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Sun, 01 Nov 2020 14:57:32 GMT
accept-ranges: none
cache-control: max-age=21600
expires: Wed, 08 May 2024 22:16:32 GMT
vary: Accept-Encoding
content-encoding: gzip
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: application/javascript
date: Wed, 08 May 2024 16:16:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/nonechaditkk.css | 108.167.181.37 | 200 OK | 126 kB |
URL GET HTTP/2sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/css/nonechaditkk.css IP108.167.181.37:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Requested byhttps://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php CertificateIssuerLet's Encrypt Subjectwebdisk.sam.hwf.temporary.site Fingerprint48:1A:21:C2:19:91:F8:6A:D5:94:66:3E:D0:66:56:76:FA:A6:93:C0 ValidityTue, 12 Mar 2024 02:46:17 GMT - Mon, 10 Jun 2024 02:46:16 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size126 kB (125953 bytes) Hash281339edbe8d9afc5bb11f1f6f98923b 4281002b0d4a2b31806784cba910323cca4a95de 638ab18948c4069660d188e6d7c27ffedc2daadb1730698c15edfd5b96183b30
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix |
GET /wp-incloud/Myaccount/Wait/style/css/nonechaditkk.css HTTP/1.1
Host: sam.hwf.temporary.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php
Cookie: PHPSESSID=5e853b854f3b42b9e62ebd300815d693
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Sun, 01 Nov 2020 14:57:32 GMT
accept-ranges: none
cache-control: max-age=2592000
expires: Fri, 07 Jun 2024 16:16:32 GMT
vary: Accept-Encoding
content-encoding: gzip
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: text/css
date: Wed, 08 May 2024 16:16:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/js/jquery.min.js | 108.167.181.37 | 200 OK | 293 kB |
URL GET HTTP/2sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/style/js/jquery.min.js IP108.167.181.37:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Requested byhttps://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php CertificateIssuerLet's Encrypt Subjectwebdisk.sam.hwf.temporary.site Fingerprint48:1A:21:C2:19:91:F8:6A:D5:94:66:3E:D0:66:56:76:FA:A6:93:C0 ValidityTue, 12 Mar 2024 02:46:17 GMT - Mon, 10 Jun 2024 02:46:16 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Size293 kB (293072 bytes) Hash796b7948cbe79d3498e76e395bff5a2b e620c80f65fbcb252e91f12c8d7d36d3dc5b57e4 692d421d5c163409a5918e802f507abbaa6bec90baa454c5252977a5b3b7ff0d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix |
GET /wp-incloud/Myaccount/Wait/style/js/jquery.min.js HTTP/1.1
Host: sam.hwf.temporary.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sam.hwf.temporary.site/wp-incloud/Myaccount/Wait/index1.php
Cookie: PHPSESSID=5e853b854f3b42b9e62ebd300815d693
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Sun, 01 Nov 2020 14:57:32 GMT
accept-ranges: none
cache-control: max-age=21600
expires: Wed, 08 May 2024 22:16:32 GMT
vary: Accept-Encoding
content-encoding: gzip
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: application/javascript
date: Wed, 08 May 2024 16:16:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|