Report - poolcoin-aapp.us/

Report Overview

Submitted URL
poolcoin-aapp.us/
IP
190.115.18.159
ASN
#262254 DDOS-GUARD CORP.
Submitted
2022-10-06 00:36:10
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
60

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	458 B	746 B	142.250.74.10
unpkg.com	11693	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	370 B	576 B	104.16.124.175
poolcoin-aapp.us	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	7.4 kB	1.3 MB	190.115.18.159
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	34.160.144.191
metamask.io	81413	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	393 B	8.7 kB	185.199.111.153
e1.o.lencr.org	6159	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	652 B	1.5 kB	23.36.77.32
cloudflareinsights.com	84344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	812 B	172.64.156.26
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	54.230.111.7
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	329 B	737 B	93.184.220.29
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	932 B	48 kB	216.58.207.195
bsc-dataseed1.ninicoin.io	63770	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.3 kB	2.8 kB	76.223.50.140
ocsp.sca1b.amazontrust.com	1015	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	676 B	1.9 kB	54.230.245.100
static.cloudflareinsights.com	1294	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	367 B	393 B	104.18.47.230
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.6 kB	4.4 kB	23.36.76.226
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.3 kB	2.8 kB	142.250.74.3
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.1 kB	18 kB	34.120.237.76
api1.poocoin.app	136044	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	460 B	414 B	172.67.27.213

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-10-06	medium	poolcoin-aapp.us/	Phishing
2022-10-06	medium	poolcoin-aapp.us/	Phishing
2022-10-06	medium	poolcoin-aapp.us/ajax/ext?id=6d9ab90147be5f890eff071374fd38ab	Phishing
2022-10-06	medium	poolcoin-aapp.us/ajax/ext?id=1b7352fa0c25f70e314d29a96982f8b2	Phishing
2022-10-06	medium	poolcoin-aapp.us/ajax/ext?id=f86c1b475f0cea8668420bb05ee9a670	Phishing
2022-10-06	medium	poolcoin-aapp.us/charts1/datafeeds/udf/dist/polyfills.js	Phishing
2022-10-06	medium	poolcoin-aapp.us/static/js/main.73ab8857.chunk.js	Phishing
2022-10-06	medium	poolcoin-aapp.us/static/js/5.8d78701f.chunk.js	Phishing
2022-10-06	medium	poolcoin-aapp.us/static/media/fa-regular-400.7a333762.woff2	Phishing
2022-10-06	medium	poolcoin-aapp.us/ajax/ext?id=52bd2e74d8b078528d3c952ba6ffed94	Phishing
2022-10-06	medium	poolcoin-aapp.us/charts1/charting_library/charting_library.js	Phishing
2022-10-06	medium	poolcoin-aapp.us/ajax/ext?id=8c00fd7f84393f0105f5fcdc14ba4d95	Phishing
2022-10-06	medium	poolcoin-aapp.us/charts1/datafeeds/udf/dist/bundle.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed
2022-10-06	medium	poolcoin-aapp.us	Sinkholed

JavaScript (11)

	URL	Size	First Seen	Last Seen
	poolcoin-aapp.us/ajax/ext?id=6d9ab90147be5f890eff071374fd38ab	15 kB	2023-03-07	2023-03-17
Pretty URL poolcoin-aapp.us/ajax/ext?id=6d9ab90147be5f890eff071374fd38ab IP 190.115.18.159 ASN #262254 DDOS-GUARD CORP. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:25:36 Last Seen2023-03-17 11:39:18 Times Seen1 Hash 0017539ab916778615876f8bc01de793 d2f9f8833b9851597060ec6a78336c81acd63d74 5574a9cec3c56253f5a835679f94f499c172bdebdece0a46ba0202a7a54eaca5 Loading...

	poolcoin-aapp.us/	164 B	2023-03-07	2023-03-17
Pretty URL poolcoin-aapp.us/ IP 190.115.18.159 ASN #262254 DDOS-GUARD CORP. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:29:25 Last Seen2023-03-17 11:39:18 Times Seen1 Hash f6f722e027b440307b743431c17f7101 4b7394246c798ac7aaca047dbde363042c3d2c37 928a53d41e98302c03b6b1f6dabac36ab68021813f72cd501ae0b527cc6f69d7 Loading...

	poolcoin-aapp.us/ajax/ext?id=f86c1b475f0cea8668420bb05ee9a670	2.5 kB	2023-03-07	2023-03-17
Pretty URL poolcoin-aapp.us/ajax/ext?id=f86c1b475f0cea8668420bb05ee9a670 IP 190.115.18.159 ASN #262254 DDOS-GUARD CORP. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09:34 Last Seen2023-03-17 11:39:18 Times Seen1 Hash 6489ccd50144e052650214b884b9bd5e a62266b09594c5589aa582a164df76741b8ec095 57b176d35abf4bf9245e3a63ce13588a85f6bae2ad6d2664cdeaaa350f331304 Loading...

	poolcoin-aapp.us/charts1/datafeeds/udf/dist/bundle.js	12 kB	2023-03-07	2023-03-17
Pretty URL poolcoin-aapp.us/charts1/datafeeds/udf/dist/bundle.js IP 190.115.18.159 ASN #262254 DDOS-GUARD CORP. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:25:36 Last Seen2023-03-17 11:39:18 Times Seen1 Hash f4d83be107dadfd287e2bec18aaa4bc8 7ea57d098108d7a6097d93b36e1b29120fe0fa9c 27d97f7e76d25f9d5854c82768eb133c94d27c02e3f25195ebdc041c4710ed63 Loading...

	unknown	0 B	2023-03-07	2024-05-07
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 18:31:51 Times Seen37414264 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	poolcoin-aapp.us/ajax/ext?id=1b7352fa0c25f70e314d29a96982f8b2	90 kB	2023-03-07	2024-05-07
Pretty URL poolcoin-aapp.us/ajax/ext?id=1b7352fa0c25f70e314d29a96982f8b2 IP 190.115.18.159 ASN #262254 DDOS-GUARD CORP. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-05-07 18:31:50 Times Seen267430 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	poolcoin-aapp.us/	3.6 kB	2023-03-07	2023-03-17
Pretty URL poolcoin-aapp.us/ IP 190.115.18.159 ASN #262254 DDOS-GUARD CORP. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:25:36 Last Seen2023-03-17 11:39:18 Times Seen1 Hash ebdbd932acb683a0a8b7e9a23cefe868 3a92f0143d331c5739ddc8a5a03d13bfe6922355 e2b4923d8f3442c175b181e0d997d4f3e17e80f565992bb4e28de4796aecd6a8 Loading...

	poolcoin-aapp.us/static/js/main.73ab8857.chunk.js	1.1 MB	2023-03-07	2023-03-17
Pretty URL poolcoin-aapp.us/static/js/main.73ab8857.chunk.js IP 190.115.18.159 ASN #262254 DDOS-GUARD CORP. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:29:25 Last Seen2023-03-17 11:39:18 Times Seen1 Hash 5b9fbc3fe2484e9208a7d62dbaa1fe50 82bded0447744afc9d26c581bfb34b3834ece050 0530e2515626a18e3992786e01612303e15b0296698e68e51ba9ecf75f664630 Loading...

	poolcoin-aapp.us/charts1/charting_library/charting_library.js	13 kB	2023-03-07	2023-03-17
Pretty URL poolcoin-aapp.us/charts1/charting_library/charting_library.js IP 190.115.18.159 ASN #262254 DDOS-GUARD CORP. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:25:36 Last Seen2023-03-17 11:39:18 Times Seen1 Hash 53fc572be01a7756772e5445956b1f09 bfae90cdbdcedb2b158b2b4c76d0d5d4a8479127 83bc58260a15957421350bf431e1a0816f64bcca9d43626afa2458328b84dcf5 Loading...

	static.cloudflareinsights.com/beacon.min.js	14 kB	2023-03-07	2024-05-06
Pretty URL static.cloudflareinsights.com/beacon.min.js IP 104.18.47.230 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-05-06 19:04:24 Times Seen1652 Hash 19514b1be5ee33b45d32c1fcd4c67ec2 bdeab77b43cafcc638df9d7c26f1aa7f46bf1fd5 fd0a1ac929c11b08e819fe4b0a18c5574012c44f09de8987c6be99a0f055a505 Loading...

	poolcoin-aapp.us/charts1/datafeeds/udf/dist/polyfills.js	9.6 kB	2023-03-07	2023-03-17
Pretty URL poolcoin-aapp.us/charts1/datafeeds/udf/dist/polyfills.js IP 190.115.18.159 ASN #262254 DDOS-GUARD CORP. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:25:36 Last Seen2023-03-17 11:39:18 Times Seen1 Hash 38b1c6979456bd13fc7c2f55f27a85da 20d1ab142542cd08868ad1a37c677ae5a09ed1e2 5e214e2d05ccfc9674d8c8ce02ae33ce2cfd8ba59e824508ab4b75eca9d95d56 Loading...

HTTP Transactions (52)

URL IP Response Size

poolcoin-aapp.us/

190.115.18.159

301 Moved Permanently

568 B

URL HTTP/1.1
poolcoin-aapp.us/
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (564), with no line terminators
Size
568 B (568 bytes)
Hash
2761b98db33884ab29711096ab315edb
8cea6e53464aea178b72e06a906205d040f14ca5
9f7a07f69d9b9a5af186a79159ccea18935ab4103128ca967e3f3f8ae45fb3ee

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Server: ddos-guard
Date: Thu, 06 Oct 2022 00:35:59 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Location: https://poolcoin-aapp.us/
Content-Type: text/html; charset=utf8
Content-Length: 568

firefox.settings.services.mozilla.com/v1/

54.230.111.7

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
54.230.111.7:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: fy2n8O6-iOKCwBXd10r3JbJCxkt-cALFDjOa3VAJPQHJApUEhaahtA==
Age: 31721

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
eabb7d9ffae717f7305d63c057755470
3b7f0baccfdbb8d9ffefa4a2215d4d6094be454a
ab48f17e54075e1ecf034278e82bcacd2e3689773186cc84fba9b79aac907294

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AB48F17E54075E1ECF034278E82BCACD2E3689773186CC84FBA9B79AAC907294"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5916
Expires: Thu, 06 Oct 2022 02:14:35 GMT
Date: Thu, 06 Oct 2022 00:35:59 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a1073a68ed38c8e3575e889224db944c
ee2a7a3e2da77a8540131f9ffaa0a20d4dd486bd
a9fb1f7ade7c8a79d2ee83e9b7215e66dc89ac733b11079297a8f4b9aceae1f5

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A9FB1F7ADE7C8A79D2EE83E9B7215E66DC89AC733B11079297A8F4B9ACEAE1F5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6805
Expires: Thu, 06 Oct 2022 02:29:25 GMT
Date: Thu, 06 Oct 2022 00:36:00 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 1lFBLJifTlWXpTANgo0svDJd6IZqSkDtmXmbL//zIDdx4BEjBvVYfPnSNoK1jMxQCY0fvgTIyJs=
x-amz-request-id: 7NNGVZQHBH8Q69YY
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 06 Oct 2022 00:30:32 GMT
age: 328
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 00:36:00 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ce7e11f0e0a20943b50c917ca1196080
d9974eb7a898a5913af2e1bdbfe1397ccbae11bb
c15c27c379c996bc77333a2700c70dad8bd57aa6fd0454564127e850b897a82c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C15C27C379C996BC77333A2700C70DAD8BD57AA6FD0454564127E850B897A82C"
Last-Modified: Tue, 04 Oct 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21572
Expires: Thu, 06 Oct 2022 06:35:32 GMT
Date: Thu, 06 Oct 2022 00:36:00 GMT
Connection: keep-alive

poolcoin-aapp.us/

190.115.18.159

200 OK

5.1 kB

URL HTTP/2
poolcoin-aapp.us/
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (926)
Size
5.1 kB (5149 bytes)
Hash
2d9ca996ed82289243971643a7dc9931
8973cf49caad1e78845a4759e27cbe5ed2d6ca39
865bc62b2d5c7a816e86385072de9a8ce9a77a12aac0abf42380cd43927fdc8c

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
set-cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn; Domain=.poolcoin-aapp.us; HttpOnly; Path=/; Expires=Fri, 06-Oct-2023 00:36:00 GMT
date: Thu, 06 Oct 2022 00:36:00 GMT
last-modified: Tue, 04 Oct 2022 08:29:45 GMT
etag: "3936-5ea314334d836-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5149
content-type: text/html
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 00:36:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

54.230.111.7

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
54.230.111.7:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Thu, 06 Oct 2022 00:29:33 GMT
Expires: Thu, 06 Oct 2022 00:55:57 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Y5vJok0Zp9_c7edd7WxDysmzxCqEJpBu2L6nwlTrESeABdzsQ5m8lw==
Age: 387

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 00:36:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

metamask.io/icons/icon-256x256.png

185.199.111.153

200 OK

8.0 kB

URL HTTP/2
metamask.io/icons/icon-256x256.png
IP
185.199.111.153:0
ASN
#54113 FASTLY

File type
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Size
8.0 kB (8035 bytes)
Hash
0f1e6b56059a85e4037c274c0d3fde27
50d3443c39ed8fff82e68277a2214640572465da
c8bad732ba3e66232cc638880859fb94beb242bc82ac197565d2d6783064f8b1

HTTP Headers

GET /icons/icon-256x256.png HTTP/1.1
Host: metamask.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
x-origin-cache: HIT
last-modified: Wed, 05 Oct 2022 10:01:34 GMT
access-control-allow-origin: *
etag: "633d55fe-1f63"
expires: Thu, 06 Oct 2022 00:46:00 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 0805:C6C2:31893B:331CD3:633E22F0
accept-ranges: bytes
date: Thu, 06 Oct 2022 00:36:00 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1641-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1665016560.497236,VS0,VE127
vary: Accept-Encoding
x-fastly-request-id: ee3be3d7c99114ee5f98a0927bb6b41f47f99335
content-length: 8035
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
1561c6be7c89d1357a80d12de47b6e74
9a705277922ecca583c867af58b3efce099f83bd
e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2795
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 00:36:00 GMT
Last-Modified: Wed, 05 Oct 2022 23:49:25 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

poolcoin-aapp.us/ajax/ext?id=6d9ab90147be5f890eff071374fd38ab

190.115.18.159

200 OK

6.0 kB

URL HTTP/2
poolcoin-aapp.us/ajax/ext?id=6d9ab90147be5f890eff071374fd38ab
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type
ASCII text, with very long lines (15218), with no line terminators
Size
6.0 kB (6034 bytes)
Hash
829a29ed367fc8e36a089af20f9b72e5
dc20ab2dce4b52b1ba3752155d302fd5adb9fcfb
3072412aec91e0cf18298178684bc57c0b418fce1c98bbd3020e170f280f6a39

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /ajax/ext?id=6d9ab90147be5f890eff071374fd38ab HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 06 Oct 2022 00:36:01 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 6034
content-type: application/javascript; charset=utf-8
X-Firefox-Spdy: h2

poolcoin-aapp.us/ajax/ext?id=1b7352fa0c25f70e314d29a96982f8b2

190.115.18.159

200 OK

31 kB

URL HTTP/2
poolcoin-aapp.us/ajax/ext?id=1b7352fa0c25f70e314d29a96982f8b2
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type
ASCII text, with very long lines (65447)
Size
31 kB (30902 bytes)
Hash
31d53c8cdce8012a24abc8e84aa972e5
7287b1ec5d88304ba44fc1958b8de9596274c4e3
1b72bc7f54bc9170e605f6c4bb5529668c4ee3efeee602fdb63036b45b49f41c

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /ajax/ext?id=1b7352fa0c25f70e314d29a96982f8b2 HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 06 Oct 2022 00:36:00 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 30902
content-type: application/javascript; charset=utf-8
X-Firefox-Spdy: h2

poolcoin-aapp.us/ajax/ext?id=f86c1b475f0cea8668420bb05ee9a670

190.115.18.159

200 OK

1.0 kB

URL HTTP/2
poolcoin-aapp.us/ajax/ext?id=f86c1b475f0cea8668420bb05ee9a670
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type
ASCII text, with very long lines (757)
Size
1.0 kB (1041 bytes)
Hash
527596b9914f7c946e7271a224e46f7c
5487ee6b60acba543b8f7985cd20e1afca849c81
edf4f2d3d355369fbb5714016e590005ed8152f2f7915e068ad5a4ac07315860

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /ajax/ext?id=f86c1b475f0cea8668420bb05ee9a670 HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 06 Oct 2022 00:36:01 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 1041
content-type: application/javascript; charset=utf-8
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11963
Expires: Thu, 06 Oct 2022 03:55:24 GMT
Date: Thu, 06 Oct 2022 00:36:01 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11963
Expires: Thu, 06 Oct 2022 03:55:24 GMT
Date: Thu, 06 Oct 2022 00:36:01 GMT
Connection: keep-alive

poolcoin-aapp.us/charts1/datafeeds/udf/dist/polyfills.js

190.115.18.159

200 OK

13 kB

URL HTTP/2
poolcoin-aapp.us/charts1/datafeeds/udf/dist/polyfills.js
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type
ASCII text, with very long lines (9620)
Size
13 kB (13375 bytes)
Hash
7e7199367679b12d42d80a0a1a4995ec
62da60af16452efa24bc74e22d18fa0f2457bc68
60ce38ca187d53761618ecb4781cfc87947860498d58635228be1d4abc7cb0b2

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /charts1/datafeeds/udf/dist/polyfills.js HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 06 Oct 2022 00:36:00 GMT
last-modified: Tue, 04 Oct 2022 08:29:51 GMT
etag: W/"2595-5ea314390a42e-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: application/javascript
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d3175ca-da8b-4a6f-a315-9f1d92299891.jpeg

34.120.237.76

200 OK

6.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d3175ca-da8b-4a6f-a315-9f1d92299891.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.7 kB (6693 bytes)
Hash
57f90a95d91632baf3b89d7b3b46361f
0f37ee870c8855919900c99204ffffe736548a3f
a3449e46854b90fdcda4a0ba83b4b0892a7888b17211d814c0db930116bb9a32

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d3175ca-da8b-4a6f-a315-9f1d92299891.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6693
x-amzn-requestid: 1531f482-cdf5-4506-ba1c-18a66173457b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQNxF45oAMFxJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfa57-28e8e572281d5f110c26dcf1;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:42:47 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: RIa9NLHuV7fSlBeUyYv0LF3sapZQiWMRqKgY9Oa3cdLywQznXbTDOQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 a4479a6315f90864adc6175b280f8f44.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 22:56:19 GMT
age: 5982
etag: "0f37ee870c8855919900c99204ffffe736548a3f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

poolcoin-aapp.us/images/logo/poocoin512.png

190.115.18.159

200 OK

36 kB

URL HTTP/2
poolcoin-aapp.us/images/logo/poocoin512.png
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size
36 kB (36527 bytes)
Hash
ac9f1ca0c655226c6e7ee8ac5daea6ce
dbd1f44751a0cd7cc79bd53ab5084a6b7375a217
b66b609676de60e3f5292ac6ff0165e8fa8cd26c1195c09b7bf2e3f485fb199b

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /images/logo/poocoin512.png HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 06 Oct 2022 00:36:01 GMT
last-modified: Tue, 04 Oct 2022 08:29:38 GMT
accept-ranges: bytes
content-length: 36527
content-type: image/png
ddg-cache-status: MISS,MISS
etag: "8eaf-5ea3142d022ff"
age: 0
X-Firefox-Spdy: h2

poolcoin-aapp.us/static/css/main.2c6bf9ed.chunk.css

190.115.18.159

200 OK

75 kB

URL HTTP/2
poolcoin-aapp.us/static/css/main.2c6bf9ed.chunk.css
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type
ASCII text, with very long lines (57239)
Size
75 kB (74586 bytes)
Hash
8cc404dcf7fbb48bde2b2854be5f11f0
fdb77e45aa8ca777798434934f6acdfe927afff1
da64dcc3ee676cbd004260d4a318bf947bf5411fd12b1b81a9f12a52da3d06a9

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /static/css/main.2c6bf9ed.chunk.css HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 06 Oct 2022 00:36:00 GMT
last-modified: Tue, 04 Oct 2022 08:29:44 GMT
etag: W/"70d92-5ea31431fc998-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/css
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

poolcoin-aapp.us/static/js/main.73ab8857.chunk.js

190.115.18.159

200 OK

136 kB

URL HTTP/2
poolcoin-aapp.us/static/js/main.73ab8857.chunk.js
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type
ASCII text, with very long lines (6857)
Size
136 kB (136509 bytes)
Hash
281b593773092290fc589f29a4b18ed1
2bb35d01fb58ce48c0c3b0727d9b68f81eb8722b
4d9618378f25c3bf1ec332ebb9e4e84550181b2ea6f08796e15557869a5369b5

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /static/js/main.73ab8857.chunk.js HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 06 Oct 2022 00:36:01 GMT
last-modified: Tue, 04 Oct 2022 08:29:45 GMT
etag: W/"107730-5ea31433dfff5-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: application/javascript
age: 2
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

poolcoin-aapp.us/static/js/5.8d78701f.chunk.js

190.115.18.159

200 OK

983 kB

URL HTTP/2
poolcoin-aapp.us/static/js/5.8d78701f.chunk.js
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type
ASCII text, with very long lines (317)
Size
983 kB (983442 bytes)
Hash
c23b0cbac12b5e0fc3cac148d2c7ee14
7cc91a12f76bccd2d8ab49e61837581ae371b6e7
76e9720fde6c93a7f597dd90bd7556d84d8c573ce31a40db420d1f33b11cba3b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /static/js/5.8d78701f.chunk.js HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 06 Oct 2022 00:36:00 GMT
last-modified: Tue, 04 Oct 2022 08:29:54 GMT
etag: W/"84f71e-5ea3143b91b8a-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: application/javascript
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb1f9d9-58f2-4af5-b299-6a59b5768aba.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8651 bytes)
Hash
2d101e6535dfc8ea8c193d3e97c07e1d
d839f3aa41455d818da9a794b0688b1144b3a03a
d73e79f203ef50354e078de30fcb52d298e14ad53924e0387ab586a9cb4376a2

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb1f9d9-58f2-4af5-b299-6a59b5768aba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8651
x-amzn-requestid: 8bbdbc11-92fe-4cdf-8469-1c1ffac9e65b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjPLIGG0IAMFehw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df8ad-132ee26478d791850dd14462;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:35:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: KBuHj1vlNgk4oflp8uIxuxuPoWh7B7O0SWrMrNP-lAhnp2m53ttPMw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 22:01:22 GMT
age: 9279
etag: "d839f3aa41455d818da9a794b0688b1144b3a03a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

e1.o.lencr.org/

23.36.77.32

200 OK

345 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
345 B (345 bytes)
Hash
ff07f370a73e1e1ef6c142858bcf03f1
474b0fdc5cad9d91d1b36a0a614aa97e1fd803ce
e66709a8a2f684a491a9bffb807462f0533346a318b2c3fc4a4cec9503f18fef

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E66709A8A2F684A491A9BFFB807462F0533346A318B2C3FC4A4CEC9503F18FEF"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4002
Expires: Thu, 06 Oct 2022 01:42:44 GMT
Date: Thu, 06 Oct 2022 00:36:02 GMT
Connection: keep-alive

e1.o.lencr.org/

23.36.77.32

200 OK

345 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
345 B (345 bytes)
Hash
ff07f370a73e1e1ef6c142858bcf03f1
474b0fdc5cad9d91d1b36a0a614aa97e1fd803ce
e66709a8a2f684a491a9bffb807462f0533346a318b2c3fc4a4cec9503f18fef

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E66709A8A2F684A491A9BFFB807462F0533346A318B2C3FC4A4CEC9503F18FEF"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4002
Expires: Thu, 06 Oct 2022 01:42:44 GMT
Date: Thu, 06 Oct 2022 00:36:02 GMT
Connection: keep-alive

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 00:36:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

api1.poocoin.app/ads

172.67.27.213

200 OK

0 B

URL HTTP/2
api1.poocoin.app/ads
IP
172.67.27.213:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /ads HTTP/1.1
Host: api1.poocoin.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://poolcoin-aapp.us/
Origin: https://poolcoin-aapp.us
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 06 Oct 2022 00:36:02 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://poocoin.app
access-control-allow-headers: *,Accept,Content-Type,Content-Length,Accept-Encoding,Origin,Referer,User-Agent
access-control-allow-methods: *,GET,POST,OPTIONS
vary: Accept-Encoding
server: cloudflare
cf-ray: 755a5208cc4ab515-OSL
X-Firefox-Spdy: h2

fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2

216.58.207.195

200 OK

24 kB

URL HTTP/2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Size
24 kB (23580 bytes)
Hash
e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537

HTTP Headers

GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://poolcoin-aapp.us
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Oct 2022 17:10:21 GMT
expires: Wed, 04 Oct 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 113141
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2

216.58.207.195

200 OK

23 kB

URL HTTP/2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Size
23 kB (23040 bytes)
Hash
de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49

HTTP Headers

GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://poolcoin-aapp.us
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Oct 2022 17:10:21 GMT
expires: Wed, 04 Oct 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 113141
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 00:36:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.sca1b.amazontrust.com/

54.230.245.100

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
54.230.245.100:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
3645e2594b39c5732ec986cea8cb2618
08d0a159a47082feed972023e1a22fab6d8b8429
ac38b236f975e18b66c7acbbe81c188f431ae8d101dde0458d8ea9592469d6a3

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 00:36:02 GMT
Last-Modified: Wed, 05 Oct 2022 23:03:28 GMT
Server: ECS (nyb/1D23)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: X1qa4ujeIrWOCX9v86M7pESE8mpaiGcCJe0nLoO2qza_tCE2OIy4ZA==
Age: 5554

ocsp.sca1b.amazontrust.com/

54.230.245.100

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
54.230.245.100:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
3645e2594b39c5732ec986cea8cb2618
08d0a159a47082feed972023e1a22fab6d8b8429
ac38b236f975e18b66c7acbbe81c188f431ae8d101dde0458d8ea9592469d6a3

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 00:36:02 GMT
Last-Modified: Wed, 05 Oct 2022 23:32:34 GMT
Server: ECS (nyb/1D14)
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: fHDwB1wMEvJWFHXFpZC2iQbR8fQIv627760u_-occmU0yEKdBVUM7A==
Age: 3808

bsc-dataseed1.ninicoin.io/

76.223.50.140

204 No Content

0 B

URL HTTP/2
bsc-dataseed1.ninicoin.io/
IP
76.223.50.140:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS / HTTP/1.1
Host: bsc-dataseed1.ninicoin.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://poolcoin-aapp.us/
Origin: https://poolcoin-aapp.us
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 204 No Content
date: Thu, 06 Oct 2022 00:36:02 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2

poolcoin-aapp.us/icons/favicon-16x16.png

190.115.18.159

404 Not Found

23 kB

URL HTTP/2
poolcoin-aapp.us/icons/favicon-16x16.png
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
23 kB (22705 bytes)
Hash
caba2cbbd1b7f5777542f0b1e1a6596f
a4f96128dac754610fea52428aef4b8a89584219
571b0f7d044e5df1d5f9631d65ba04ca6bb427201f62239c5b95fdf33355243c

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /icons/favicon-16x16.png HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 06 Oct 2022 00:36:02 GMT
content-type: text/html; charset=iso-8859-1
content-encoding: br
vary: Accept-Encoding
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

poolcoin-aapp.us/static/media/fa-regular-400.7a333762.woff2

190.115.18.159

200 OK

13 kB

URL HTTP/2
poolcoin-aapp.us/static/media/fa-regular-400.7a333762.woff2
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type
Web Open Font Format (Version 2), TrueType, length 13224, version 331.-31196\012- data
Size
13 kB (13224 bytes)
Hash
b91d376b8d7646d671cd820950d5f7f1
13517529affa39e2585c591acae6dc336b6aa917
e42a88444448ac3d60549cc7c1ff2c8a9cac721034c073d80a14a44e79730cca

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /static/media/fa-regular-400.7a333762.woff2 HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://poolcoin-aapp.us/static/css/main.2c6bf9ed.chunk.css
Cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 06 Oct 2022 00:36:02 GMT
last-modified: Tue, 04 Oct 2022 08:29:47 GMT
accept-ranges: bytes
content-length: 13224
ddg-cache-status: MISS,MISS
etag: "33a8-5ea3143557f93"
age: 0
X-Firefox-Spdy: h2

bsc-dataseed1.ninicoin.io/

76.223.50.140

204 No Content

0 B

URL HTTP/2
bsc-dataseed1.ninicoin.io/
IP
76.223.50.140:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS / HTTP/1.1
Host: bsc-dataseed1.ninicoin.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://poolcoin-aapp.us/
Origin: https://poolcoin-aapp.us
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 204 No Content
date: Thu, 06 Oct 2022 00:36:02 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2

bsc-dataseed1.ninicoin.io/

76.223.50.140

204 No Content

0 B

URL HTTP/2
bsc-dataseed1.ninicoin.io/
IP
76.223.50.140:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS / HTTP/1.1
Host: bsc-dataseed1.ninicoin.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://poolcoin-aapp.us/
Origin: https://poolcoin-aapp.us
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 204 No Content
date: Thu, 06 Oct 2022 00:36:02 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2

bsc-dataseed1.ninicoin.io/

76.223.50.140

200 OK

172 B

URL HTTP/2
bsc-dataseed1.ninicoin.io/
IP
76.223.50.140:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with no line terminators
Size
172 B (172 bytes)
Hash
29671d3c432342e8b43142811a674fdf
ff2c72d1a2a19919940dcff0494f1d0e637e2fb9
c4228c55a385a26e990592cead33c8475b3f42b5b40107ed726e6b20cbe9640e

HTTP Headers

POST / HTTP/1.1
Host: bsc-dataseed1.ninicoin.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 328
Origin: https://poolcoin-aapp.us
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 06 Oct 2022 00:36:02 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2

poolcoin-aapp.us/static/css/5.ccb64771.chunk.css

190.115.18.159

200 OK

0 B

URL HTTP/2
poolcoin-aapp.us/static/css/5.ccb64771.chunk.css
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /static/css/5.ccb64771.chunk.css HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 06 Oct 2022 00:36:00 GMT
last-modified: Tue, 04 Oct 2022 08:29:43 GMT
etag: W/"4d5d-5ea3143131799-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/css
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

cloudflareinsights.com/cdn-cgi/rum

172.64.156.26

200 OK

0 B

URL HTTP/2
cloudflareinsights.com/cdn-cgi/rum
IP
172.64.156.26:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

POST /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 6623
Origin: https://poolcoin-aapp.us
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 06 Oct 2022 00:36:02 GMT
server: cloudflare
cf-ray: 755a520a4ecab4e8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

bsc-dataseed1.ninicoin.io/

76.223.50.140

200 OK

0 B

URL HTTP/2
bsc-dataseed1.ninicoin.io/
IP
76.223.50.140:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

POST / HTTP/1.1
Host: bsc-dataseed1.ninicoin.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 328
Origin: https://poolcoin-aapp.us
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 06 Oct 2022 00:36:02 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2

poolcoin-aapp.us/ajax/ext?id=52bd2e74d8b078528d3c952ba6ffed94

190.115.18.159

200 OK

0 B

URL HTTP/2
poolcoin-aapp.us/ajax/ext?id=52bd2e74d8b078528d3c952ba6ffed94
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /ajax/ext?id=52bd2e74d8b078528d3c952ba6ffed94 HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 06 Oct 2022 00:36:00 GMT
vary: Accept-Encoding
content-encoding: br
content-type: text/css; charset=utf-8
age: 3
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

cloudflareinsights.com/cdn-cgi/rum

172.64.156.26

200 OK

0 B

URL HTTP/2
cloudflareinsights.com/cdn-cgi/rum
IP
172.64.156.26:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

POST /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 349
Origin: https://poolcoin-aapp.us
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 06 Oct 2022 00:36:08 GMT
server: cloudflare
cf-ray: 755a5232e9b4b4e8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

poolcoin-aapp.us/charts1/charting_library/charting_library.js

190.115.18.159

200 OK

0 B

URL HTTP/2
poolcoin-aapp.us/charts1/charting_library/charting_library.js
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /charts1/charting_library/charting_library.js HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 06 Oct 2022 00:36:00 GMT
last-modified: Tue, 04 Oct 2022 08:29:50 GMT
etag: W/"31cc-5ea314387e9ce-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: application/javascript
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

static.cloudflareinsights.com/beacon.min.js

104.18.47.230

200 OK

0 B

URL HTTP/2
static.cloudflareinsights.com/beacon.min.js
IP
104.18.47.230:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /beacon.min.js HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 06 Oct 2022 00:36:00 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2021.12.0
last-modified: Thu, 09 Dec 2021 19:55:17 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 755a51febb21b529-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

poolcoin-aapp.us/ajax/ext?id=8c00fd7f84393f0105f5fcdc14ba4d95

190.115.18.159

200 OK

0 B

URL HTTP/2
poolcoin-aapp.us/ajax/ext?id=8c00fd7f84393f0105f5fcdc14ba4d95
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /ajax/ext?id=8c00fd7f84393f0105f5fcdc14ba4d95 HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 06 Oct 2022 00:36:02 GMT
vary: Accept-Encoding
content-encoding: br
content-type: text/css; charset=utf-8
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&display=swap

142.250.74.10

200 OK

0 B

URL HTTP/2
fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&display=swap
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 06 Oct 2022 00:36:00 GMT
date: Thu, 06 Oct 2022 00:36:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

unpkg.com/aos@2.3.1/dist/aos.css

104.16.124.175

200 OK

0 B

URL HTTP/2
unpkg.com/aos@2.3.1/dist/aos.css
IP
104.16.124.175:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /aos@2.3.1/dist/aos.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 06 Oct 2022 00:36:00 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Thu, 17 May 2018 22:11:13 GMT
etag: W/"65c5-BVfTdFS2f0LyyxAeV+UHD7EZNXA"
via: 1.1 fly.io
fly-request-id: 01G754J040XBCARD93ACQA76A4-fra
cf-cache-status: HIT
age: 8060233
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 755a51febb4ab523-OSL
content-encoding: br
X-Firefox-Spdy: h2

poolcoin-aapp.us/charts1/datafeeds/udf/dist/bundle.js

190.115.18.159

200 OK

0 B

URL HTTP/2
poolcoin-aapp.us/charts1/datafeeds/udf/dist/bundle.js
IP
190.115.18.159:0
ASN
#262254 DDOS-GUARD CORP.

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /charts1/datafeeds/udf/dist/bundle.js HTTP/1.1
Host: poolcoin-aapp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poolcoin-aapp.us/
Cookie: __ddg1_=Lt43rMOoNtCbfxieZoOn
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 06 Oct 2022 00:36:00 GMT
last-modified: Tue, 04 Oct 2022 08:29:51 GMT
etag: W/"2f8d-5ea31438ecf6e-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: application/javascript
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

cloudflareinsights.com/cdn-cgi/rum

172.64.156.26

200 OK

0 B

URL HTTP/2
cloudflareinsights.com/cdn-cgi/rum
IP
172.64.156.26:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

OPTIONS /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://poolcoin-aapp.us/
Origin: https://poolcoin-aapp.us
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 06 Oct 2022 00:36:02 GMT
content-type: text/plain
access-control-allow-origin: https://poolcoin-aapp.us
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 755a520a4ec5b4e8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP