| mystery-boxs1yy.vercel.app/css/fonts.css |  76.76.21.123 | 200 OK | 466 B |
URL GET HTTP/2mystery-boxs1yy.vercel.app/css/fonts.css IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Hashb032dbbc3bbb93ca80d2f189570da51c ce3f373c28e1d35a7adb9dca8f6db95cb24fbccc 41503bfbefe3bc434e1eacc84da2af0e27c9101874345d6c5fb15cf5a6db528a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /css/fonts.css HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 327882
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="fonts.css"
content-type: text/css; charset=utf-8
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: "b032dbbc3bbb93ca80d2f189570da51c"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::dqntv-1713373064475-2ec38ce44ceb
content-length: 466
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/img/load%202.gif | 76.76.21.123 | 200 OK | 48 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/img/load%202.gif IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeGIF image data, version 89a, 178 x 178 Hash1e9028a3ca980be63e7a0b7ff86223a3 fb795c53f646947550416ace4d870a4825d96863 b1c2a203ad9d2d0a22c70bf7a162d8440b2905f724b29b373e8aa52612220639
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img/load%202.gif HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 327882
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="load 2.gif"
content-type: image/gif
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: "1e9028a3ca980be63e7a0b7ff86223a3"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::wnr75-1713373064477-06f9e41d87e2
content-length: 48279
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/img/2.jpg | 76.76.21.123 | 200 OK | 92 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/img/2.jpg IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJPEG image data, baseline, precision 8, 2048x2048, components 3 Hashb332377a8c696ba08b13419e4ce02e12 e9fc8643b3259d50417e377106361bd188fc054f e32d53f1bc3e89014a167c97dd865a56a548242b96eab4330f12e5196dd44b15
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img/2.jpg HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 327882
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="2.jpg"
content-type: image/jpeg
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: "b332377a8c696ba08b13419e4ce02e12"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::dqntv-1713373064479-7f7f05b38290
content-length: 92392
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/img/3.jpg | 76.76.21.123 | 200 OK | 83 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/img/3.jpg IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJPEG image data, baseline, precision 8, 2048x2048, components 3 Hash771f140bde258a487bc21351400ffa64 fa67b66ed8750974e577e06c02b6fc03bcff9bc7 70c339af14ed704d438838a1f18d59997c615b85fe463333a37eb1c964c9f568
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img/3.jpg HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 327881
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="3.jpg"
content-type: image/jpeg
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: "771f140bde258a487bc21351400ffa64"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::wnr75-1713373064480-f2fea3722b4c
content-length: 82867
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/img3.svg | 76.76.21.123 | 200 OK | 688 B |
URL GET HTTP/2mystery-boxs1yy.vercel.app/img3.svg IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeSVG Scalable Vector Graphics image Hash67693c6771bc947c16eef5f185633b09 488cd91334cdc30bc4afdf4aba889cf00d08e8cc 0590c635d707c2afec47ffe6e01f77f19015499b9a0d5cb005058b10966e71a4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img3.svg HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 327881
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="img3.svg"
content-type: image/svg+xml
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: "67693c6771bc947c16eef5f185633b09"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::m8pl5-1713373064484-485cf343ccfc
content-length: 688
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/css/drops.css | 76.76.21.123 | 200 OK | 820 B |
URL GET HTTP/2mystery-boxs1yy.vercel.app/css/drops.css IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Hashf2785d929e72ee822c03f3a5d9d953ee 6532c19276434337669c349a903d5fb4357cb552 417b6655bfb887f5aa86d902f7e2ed9c82b36ae74a3a00a7bc34288cead3606a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /css/drops.css HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 327882
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="drops.css"
content-type: text/css; charset=utf-8
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: "f2785d929e72ee822c03f3a5d9d953ee"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::7fgw8-1713373064474-82690c77706c
content-length: 820
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/img/1.jpg | 76.76.21.123 | 200 OK | 96 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/img/1.jpg IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJPEG image data, baseline, precision 8, 2048x2048, components 3 Hash45ba137f084cfef082d4987955c80371 987a9ad295bfa6126ee55e98a5f59e7c8e5d7b78 9927d7bd10d01982147d311ed9c0fff7066f3389985804e5cea8b6f3eeaa6610
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img/1.jpg HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 327882
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="1.jpg"
content-type: image/jpeg
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: "45ba137f084cfef082d4987955c80371"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::8r26b-1713373064478-bc561181ff89
content-length: 96370
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/389-9bec97c22fa2e411.gif | 76.76.21.123 | 200 OK | 660 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/389-9bec97c22fa2e411.gif IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeGIF image data, version 87a, 750 x 750 Size660 kB (660432 bytes) Hashb9f393bd75705f60c29e15ceddfd2db9 9b3c4261f673b54903d47a5df6b6c981cdd1276e 09268325243816ed6fe7a556c9e33ff179eae6e4a1e9de2194f590aef36d905e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /389-9bec97c22fa2e411.gif HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 327881
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="389-9bec97c22fa2e411.gif"
content-type: image/gif
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: "b9f393bd75705f60c29e15ceddfd2db9"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::wrqrq-1713373064484-223b28b273cb
content-length: 660432
X-Firefox-Spdy: h2
|
|
| nfts-opensea.web.app/cdn-icons-png.flaticon.com/512/1828/1828640.png | 199.36.158.100 | 404 Not Found | 11 kB |
URL GET HTTP/2nfts-opensea.web.app/cdn-icons-png.flaticon.com/512/1828/1828640.png IP199.36.158.100:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT
File typeHTML document, ASCII text, with very long lines (8125) Hash9043fb5164b8a1a5fea8031025fe9ef8 929b04d5b3de29ecf9d5035b2505aef81483089b d03f43cc42168a501c987baf21973182472e4fd7453f75e0184db46079693c1e
GET /cdn-icons-png.flaticon.com/512/1828/1828640.png HTTP/1.1
Host: nfts-opensea.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cache-control: max-age=0
content-type: text/html; charset=utf-8
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Wed, 17 Apr 2024 16:57:44 GMT
x-served-by: cache-hel1410029-HEL
x-cache: HIT
x-cache-hits: 2
x-timer: S1713373065.575705,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10601
X-Firefox-Spdy: h2
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-05-20-00-15-28.chain; p384ecdsa=ZeEoJogHRMskNe-kkWE_leU0ZmShGublftRotdkpUzormV_rQTY6l54xAv72jmMpMDcB4jnJUcRAm5GF4fezbPYh29ru0wSIhvHWkQJSGF8yFp9zMwhITU1eiXwxGVas
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
content-encoding: gzip
via: 1.1 google
content-length: 444
date: Wed, 17 Apr 2024 16:57:03 GMT
age: 60
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/img2.svg | 76.76.21.123 | 200 OK | 1.3 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/img2.svg IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeSVG Scalable Vector Graphics image Hash0976bc5869ddbc257855c4abab8f1068 9cd54fc9b764c3d3f95e853cfe638e51a3abe27f 958cfdf8019bf631a225439bfaf1b4382f228aad05398444dbcc2e189bf0139a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img2.svg HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 327881
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="img2.svg"
content-encoding: br
content-type: image/svg+xml
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: W/"e8dba30bee3108f131930268cc44a96e"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::dqntv-1713373064483-cac298c090c4
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/img9.svg | 76.76.21.123 | 200 OK | 1.5 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/img9.svg IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeSVG Scalable Vector Graphics image Hash81a84cfa2e0531e6039fedd0c146a26a 0059a0039dde445106594c89583f74ce36c13c46 e90bce3b4303a4d60ecedf6601e48dc6efbd71c949793e4649c1de8185bf85c8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img9.svg HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 327881
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="img9.svg"
content-encoding: br
content-type: image/svg+xml
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: W/"867bc3ff0bd2b6278d0fd18cbe75c668"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::v55hf-1713373064488-3c5e70a6e550
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/ | 76.76.21.123 | 200 OK | 23 kB |
URL User Request GET HTTP/2mystery-boxs1yy.vercel.app/ IP76.76.21.123:443
CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 327882
cache-control: public, max-age=0, must-revalidate
content-disposition: inline
content-encoding: br
content-type: text/html; charset=utf-8
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: W/"eddad2b5e4824e1f9583f3d73c2ddb33"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::45hsg-1713373064079-d6d2acbcf2f3
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/style.css | 76.76.21.123 | 200 OK | 2.7 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/style.css IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (2780), with no line terminators Hash8d8466ab6b9b96b5f52e6aa0516d9b2b de67d07f7954f6026c6748e179a7062cbd96bb35 60471c4975f3309b43b14a412193c5c5ba31043b3480d178eba865cb8c34c1ad
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /style.css HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 327882
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="style.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: W/"4c2f40713d5cd334e6a367ed5aea6e77"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::wnr75-1713373064474-cf829b852f3d
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/img1.svg | 76.76.21.123 | 200 OK | 18 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/img1.svg IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeSVG Scalable Vector Graphics image Hashe2aef8525b3d533cf59ba41d99bbd5b2 e6b67a7c5f526d22bafce4f871365913f2d7fb7b e68a099073d806d6b3743db37da3becd2de23cb7a4eb6bcb2537bf5a561eb0b0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img1.svg HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 327881
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="img1.svg"
content-encoding: br
content-type: image/svg+xml
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: W/"e2aef8525b3d533cf59ba41d99bbd5b2"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::6fkqs-1713373064480-b2356085bdff
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/img4.svg | 76.76.21.123 | 200 OK | 2.1 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/img4.svg IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeSVG Scalable Vector Graphics image Hashf6706aa693cbe12861737563aa5daae0 1a9db401fb7a4ed30756bca939eef7eba52411b9 923bb34f69a03c606059dad174b223bcf77c9c13efd20b5b538e8b700053cd5b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img4.svg HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 327881
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="img4.svg"
content-encoding: br
content-type: image/svg+xml
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: W/"565246e205e3ebba059c3df115d71b59"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::wnr75-1713373064484-179ad28708d5
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/img5.svg | 76.76.21.123 | 200 OK | 1.5 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/img5.svg IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeSVG Scalable Vector Graphics image Hasha5ae1231b5f61fe31c25f0dac51760b6 4503e48c5dcfb64732f7e60b912c4dec871fc91d a4bc851a1281e87ba3b1da3454ccd8835c2afaadbacb414e2ccc4f073bebb0e8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img5.svg HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 327881
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="img5.svg"
content-encoding: br
content-type: image/svg+xml
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: W/"7dfceb09756db0969a40d0fabc755d18"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::c4rjs-1713373064484-8b7a8b75d1d2
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/img6.svg | 76.76.21.123 | 200 OK | 1.8 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/img6.svg IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeSVG Scalable Vector Graphics image Hash03a453c2fb9b61ed4023092a7a5b13de d789feebffff1d8793b6e89a0759a42f4ee6f86c 2f3a9e04ba67792a88a65b81a50b1df214da5642abde84f767901be5ccf5e9d2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img6.svg HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 327881
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="img6.svg"
content-encoding: br
content-type: image/svg+xml
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: W/"17328916676c076e487ff117e486e738"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::llcmj-1713373064484-a0ace9e92bc9
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/css/index.css | 76.76.21.123 | 200 OK | 15 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/css/index.css IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /css/index.css HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 327882
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="index.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: W/"4b80021a785d89aaa0f69aa83989238c"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::zzlv9-1713373064476-c5c12215d0e6
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/img7.svg | 76.76.21.123 | 200 OK | 1.8 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/img7.svg IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeSVG Scalable Vector Graphics image Hash0fdcf32351ba5af04887292e5e39e57b e28f1dfa6a313fae807a15357818585a76d1f7e5 b3d7a78158d6b416cbf23e762e6da94ac342635e80c3631b5273be042591f2bf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img7.svg HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 327881
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="img7.svg"
content-encoding: br
content-type: image/svg+xml
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: W/"1162b3bcd247e5d8f2c3f41fb55bb0b6"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::8mmbd-1713373064485-b61cf2cdd93a
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/img8.svg | 76.76.21.123 | 200 OK | 1.9 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/img8.svg IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (1879), with no line terminators Hashe0e771eb4b84e17100005025973eba9e 98e8f71c71afeba629a5f78dd930201049d9a80b fcccdbfc6048b01cf390689b50902be9ad79ced901b34e0cbac75e9056030dd9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img8.svg HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 327881
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="img8.svg"
content-encoding: br
content-type: image/svg+xml
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: W/"137790a7b365cef8a8151f7149039ccf"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::t4stk-1713373064487-5e481aed9cfa
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/img10.svg | 76.76.21.123 | 200 OK | 1.3 kB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/img10.svg IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeSVG Scalable Vector Graphics image Hashc99061aba74bb837701a1498c9fb6600 d1025aaeaba13b265cac22963bb433d83cbe1922 5407a4ed34af6a0580c360d08bd034b4913dbbd7847de1f96047cfe703121e5b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img10.svg HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 327881
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="img10.svg"
content-encoding: br
content-type: image/svg+xml
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: W/"55b4d38ca0ff75d355d7f35ceb0ba049"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::8mmbd-1713373064488-04b39ff6cc34
X-Firefox-Spdy: h2
|
|
| mystery-boxs1yy.vercel.app/bobo.js | 76.76.21.123 | 200 OK | 2.3 MB |
URL GET HTTP/2mystery-boxs1yy.vercel.app/bobo.js IP76.76.21.123:443
Requested byhttps://mystery-boxs1yy.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Size2.3 MB (2293557 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /bobo.js HTTP/1.1
Host: mystery-boxs1yy.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mystery-boxs1yy.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 327882
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="bobo.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 17 Apr 2024 16:57:44 GMT
etag: W/"0571f556c2706839b78c50fcfaebf206"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::fktwl-1713373064473-f4c004046d41
X-Firefox-Spdy: h2
|
|