| www.eservicebits.com/landingpages/f9bbf3ed-0bb3-4f30-ba81-ed76841adca3/qHtRW9GwSWUpqb32hkGiWapaNn280zwjWL6mLrR7hbw |  54.230.111.78 | 200 OK | 2.2 kB |
URL User Request GET HTTP/2www.eservicebits.com/landingpages/f9bbf3ed-0bb3-4f30-ba81-ed76841adca3/qHtRW9GwSWUpqb32hkGiWapaNn280zwjWL6mLrR7hbw IP54.230.111.78:443
CertificateIssuerAmazon Subjecteservicebits.com Fingerprint22:19:AA:DD:AA:CA:C7:5D:E4:C1:21:30:90:71:82:65:85:60:C5:9E ValidityTue, 07 Nov 2023 00:00:00 GMT - Thu, 05 Dec 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (6069) Hash47daac4660f95ab6569cb2c09b413094 51bf4547acd37c51ba76334d70e10197fc19ca5b 9aff8ddc8bb02494cde1dde7478847ea8810be8c59c32e8888ff2fe53358be5c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | Quad9 DNS | malicious | Sinkholed |
GET /landingpages/f9bbf3ed-0bb3-4f30-ba81-ed76841adca3/qHtRW9GwSWUpqb32hkGiWapaNn280zwjWL6mLrR7hbw HTTP/1.1
Host: www.eservicebits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 2198
date: Thu, 25 Apr 2024 06:23:24 GMT
x-amzn-requestid: 7c38dd71-0f0e-492d-849d-168a32bb49b4
content-encoding: br
x-amzn-remapped-content-length: 2198
x-amz-apigw-id: WxOCeF_LjoEEudg=
x-amzn-trace-id: Root=1-6629f6dc-70c55e1047329839154ae476
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: R09EQX3fIbR1DtbBLNU9XDDoOE2xz8Tp8NGAKWFUricm1_74cRMwgA==
X-Firefox-Spdy: h2
|
| cloud.phishinsight.trendmicro.com/content/lps/assets/system/img/microsoft_key.svg | 54.230.111.4 | 200 OK | 1.6 kB |
URL GET HTTP/2cloud.phishinsight.trendmicro.com/content/lps/assets/system/img/microsoft_key.svg IP54.230.111.4:443
Requested byhttps://www.eservicebits.com/landingpages/f9bbf3ed-0bb3-4f30-ba81-ed76841adca3/qHtRW9GwSWUpqb32hkGiWapaNn280zwjWL6mLrR7hbw CertificateIssuerEntrust, Inc. Subject*.phishinsight.trendmicro.com Fingerprint56:60:6E:9D:00:AA:1E:D3:FD:93:1C:DD:21:78:24:D2:87:DC:75:35 ValidityTue, 18 Jul 2023 09:05:11 GMT - Sat, 17 Aug 2024 09:05:10 GMT
File typeSVG Scalable Vector Graphics image Hash4e48046ce74f4b89d45037c90576bfac 4a41b3b51ed787f7b33294202da72220c7cd2c32 8e6db1634f1812d42516778fc890010aa57f3e39914fb4803df2c38abbf56d93
GET /content/lps/assets/system/img/microsoft_key.svg HTTP/1.1
Host: cloud.phishinsight.trendmicro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eservicebits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1592
date: Wed, 24 Apr 2024 14:04:36 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 20 Dec 2023 03:45:22 GMT
etag: "4e48046ce74f4b89d45037c90576bfac"
x-amz-server-side-encryption: AES256
x-amz-version-id: rLc1XKzaeBPY6FGVc__wclb9wMHtit.D
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wShPyR6YydbXiKuqSVABuF7OJEz7pjwf2qRmKT_F8lBERRT1cqefqA==
age: 58729
X-Firefox-Spdy: h2
|
| www.eservicebits.com/favicon.ico | 54.230.111.78 | 403 Forbidden | 42 B |
URL GET HTTP/2www.eservicebits.com/favicon.ico IP54.230.111.78:443
Requested byhttps://www.eservicebits.com/landingpages/f9bbf3ed-0bb3-4f30-ba81-ed76841adca3/qHtRW9GwSWUpqb32hkGiWapaNn280zwjWL6mLrR7hbw CertificateIssuerAmazon Subjecteservicebits.com Fingerprint22:19:AA:DD:AA:CA:C7:5D:E4:C1:21:30:90:71:82:65:85:60:C5:9E ValidityTue, 07 Nov 2023 00:00:00 GMT - Thu, 05 Dec 2024 23:59:59 GMT
Hash905b1fbb26e082557ff0b3b3553cda6c 8fe0790d6026998bdb2c9ffa3b915952e613e1b4 f249b63cb2fcb66b47e86f906c98f8fd912e82dd035b4e53d7e72fc1960cfd16
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: www.eservicebits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eservicebits.com/landingpages/f9bbf3ed-0bb3-4f30-ba81-ed76841adca3/qHtRW9GwSWUpqb32hkGiWapaNn280zwjWL6mLrR7hbw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
content-type: application/json
content-length: 42
date: Thu, 25 Apr 2024 06:23:25 GMT
x-amzn-requestid: af81b274-1aaf-442c-b4dd-35838f4f5c21
x-amzn-errortype: MissingAuthenticationTokenException
x-amz-apigw-id: WxOCmE1FjoEEHcw=
x-amzn-trace-id: Root=1-6629f6dd-0ecc4880133765c354b692af
x-cache: Error from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AGM9o0tVEF8xmkCxQG_TIF5HObGHcBy3XolMzDauiJ3iEsZ4jPFaPg==
X-Firefox-Spdy: h2
|