Report - zmforever.digital/alwheelpropzm/index.html

Report Overview

Submitted URL
zmforever.digital/alwheelpropzm/index.html
IP
217.69.13.14
ASN
#20473 AS-CHOOPA
Submitted
2023-02-05 08:04:17
Access
Website Title
Final URL
Tags
urlquery detections
Scam / Brand infringement

Detections

urlquery
1
Network Intrusion Detection
0
Threat Detection Systems
28

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2.4 kB	6.2 kB	23.36.76.226
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
deefauph.com	135892	2021-03-12T14:41:43Z	2023-03-13T06:45:57Z	950 B	700 B	139.45.197.251
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	34.210.143.205
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	49 kB	34.120.237.76
zmforever.digital	unknown	2022-08-04T17:43:02Z	2023-03-10T17:02:21Z	10 kB	650 kB	217.69.13.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-05	medium	zmforever.digital/alwheelpropzm/index.html	Phishing
2023-02-05	medium	zmforever.digital/alwheelpropzm/index.html	Phishing
2023-02-05	medium	zmforever.digital/alwheelpropzm/like_user_1.jpeg	Phishing
2023-02-05	medium	zmforever.digital/alwheelpropzm/7.jpeg	Phishing
2023-02-05	medium	zmforever.digital/alwheelpropzm/2.jpeg	Phishing
2023-02-05	medium	zmforever.digital/alwheelpropzm/3.jpeg	Phishing
2023-02-05	medium	zmforever.digital/alwheelpropzm/like_user_2.jpeg	Phishing
2023-02-05	medium	zmforever.digital/alwheelpropzm/4.jpeg	Phishing
2023-02-05	medium	zmforever.digital/alwheelpropzm/6.jpeg	Phishing
2023-02-05	medium	zmforever.digital/alwheelpropzm/1.jpeg	Phishing
2023-02-05	medium	zmforever.digital/alwheelpropzm/8.jpeg	Phishing
2023-02-05	medium	zmforever.digital/alwheelpropzm/main_script.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-02-05	medium	deefauph.com	Sinkholed
2023-02-05	medium	deefauph.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (23)

	URL	Size	First Seen	Last Seen
	zmforever.digital/alwheelpropzm/index.html	497 B	2023-03-08	2023-12-20
Pretty URL zmforever.digital/alwheelpropzm/index.html IP 217.69.13.14 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 16:09:13 Last Seen2023-12-20 22:50:26 Times Seen552 Hash 8d9d8967f9188e16df5c4196573360c4 c0e7e2d81b18cb1266e462aa955ad97a171e334f 83f5bf2586836b700d20e3a2144433cc4261385965a8f4224b9eef3537a92db7 Loading...

	zmforever.digital/alwheelpropzm/index.html	844 B	2023-03-07	2023-05-23
Pretty URL zmforever.digital/alwheelpropzm/index.html IP 217.69.13.14 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:18 Last Seen2023-05-23 10:02:57 Times Seen380 Hash 37eacabc3fce7045dfa1c495db7953fb 736e479c572579d1f7ea04cfc2a5647682546faa 9220e3d76a53d07e9a12894a8f4e22f90d64631288ad5ee993f6ae606b3f5692 Loading...

	zmforever.digital/alwheelpropzm/index.html	62 B	2023-03-07	2024-04-19
Pretty URL zmforever.digital/alwheelpropzm/index.html IP 217.69.13.14 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:18 Last Seen2024-04-19 16:10:49 Times Seen4256 Hash b0a7a72de754cef5d187f68f46fe650f 17ee306e84f47e85aa08d322096ae1adcecb3f04 1851dcdb31bf0126a88f682225a7fc268a6786c216003371267d357a19753556 Loading...

	zmforever.digital/alwheelpropzm/index.html	56 B	2023-03-07	2024-04-19
Pretty URL zmforever.digital/alwheelpropzm/index.html IP 217.69.13.14 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:18 Last Seen2024-04-19 16:10:50 Times Seen3743 Hash a27f2054003e74e74e2b92f37b6a2b4e 13a65a252a704ea3dc346ce6025819ad10d17e8c 9e4c9f97fbd42628763f6e6226b0d561342ca86d4da13f805d078760087b82b0 Loading...

	zmforever.digital/alwheelpropzm/index.html	63 B	2023-03-07	2024-04-19
Pretty URL zmforever.digital/alwheelpropzm/index.html IP 217.69.13.14 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:18 Last Seen2024-04-19 16:10:50 Times Seen3738 Hash 4ea644fbd5eac3cd150c6a6bd9376381 0569e4eccc6268d6269d62d668a6a0f0037136fa 74fc66c86f7576a6d4320c0697e7a140f42643f5b2de18c0b397f415a9f85cc4 Loading...

	zmforever.digital/alwheelpropzm/index.html	55 B	2023-03-07	2024-04-19
Pretty URL zmforever.digital/alwheelpropzm/index.html IP 217.69.13.14 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:18 Last Seen2024-04-19 16:10:50 Times Seen4291 Hash f2789015e0649bc72614431b78924b41 1818b8205140a52a257456968badd5d9a82947a4 291750e177d954fe5585629e317b30eb5e83bb21e461162e42965ca4c151793b Loading...

	zmforever.digital/alwheelpropzm/index.html	362 B	2023-03-07	2023-04-05
Pretty URL zmforever.digital/alwheelpropzm/index.html IP 217.69.13.14 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:18 Last Seen2023-04-05 02:12:01 Times Seen528 Hash 8f51a97ca0c4873c36d4503bfe63530a c148c4ed810bc01a41ecc8fecd1e1c12303a1927 1680a51f619894d45cebb9cc61b5adf1788049e23dcd1e97af7fda56ac37ed3a Loading...

	zmforever.digital/alwheelpropzm/index.html	53 B	2023-03-07	2024-04-19
Pretty URL zmforever.digital/alwheelpropzm/index.html IP 217.69.13.14 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:18 Last Seen2024-04-19 16:10:49 Times Seen4269 Hash dd8e86846df7475f64bbc9c4367b8391 e1ce18194173fe35c6e8631ee16f6b2949f4da47 26c421f08b61018d4992f49af505a4fab8131f3a86e83fbce1e313bb6916ebca Loading...

	zmforever.digital/alwheelpropzm/index.html	63 B	2023-03-07	2024-04-19
Pretty URL zmforever.digital/alwheelpropzm/index.html IP 217.69.13.14 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:18 Last Seen2024-04-19 16:10:50 Times Seen3759 Hash 0834480c4fa7f04b51060b13dfe109b3 6cd16ed7608f670d4c7ce372042143796c969e29 d7c4a3583b05f0bd80a69334065977f4d2f392e9ef06eed87615de595c48a96f Loading...

	zmforever.digital/alwheelpropzm/index.html	55 B	2023-03-07	2024-04-19
Pretty URL zmforever.digital/alwheelpropzm/index.html IP 217.69.13.14 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:18 Last Seen2024-04-19 16:10:50 Times Seen4290 Hash cbecd830ce9c4a4e21070d3ed1e7dfb6 11a2d16ff0e9587d5661b3248e82cc8b68d64306 25ca77c9862cfb75bc014afb8aff17ddbfb25b6f60e40dd8bb2694fbc56ba93a Loading...

	zmforever.digital/alwheelpropzm/main_script.js	2.9 kB	2023-03-13	2023-05-22
Pretty URL zmforever.digital/alwheelpropzm/main_script.js IP 217.69.13.14 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 17:27:11 Last Seen2023-05-22 17:31:47 Times Seen27 Hash b300d2e84180c4416cc87aa422d028b1 8c025b13552ca78d2359186fd44d759879424b08 5e90f58cb455767177b6415d78c8b3eee0d3d881d44a8f8130d8fa2f4e7a1c6b Loading...

	zmforever.digital/alwheelpropzm/index.html	296 B	2023-03-13	2024-02-23
Pretty URL zmforever.digital/alwheelpropzm/index.html IP 217.69.13.14 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 13:22:48 Last Seen2024-02-23 21:19:13 Times Seen1349 Hash caa70c3389889769f32bdcd9dc92132f 810546bf51f680ad73225845f59e2a4969d3decf 5a9ef2f0fc5213bc22aaa47964548bd312d53fa6e35d5d952a336d309986f5cc Loading...

	deefauph.com/pfe/current/micro.tag.min.js?z=5545814&sw=/sw-check-permissions-d7d09.js	41 kB	2023-03-13	2023-03-13
Pretty URL deefauph.com/pfe/current/micro.tag.min.js?z=5545814&sw=/sw-check-permissions-d7d09.js IP 139.45.197.251 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 08:25:20 Last Seen2023-03-13 18:55:01 Times Seen1 Hash 386a139211798e88764a8940c90f14b6 1c907137bc8a9f215fbc16f2a1889393bd444f57 80df95d65ab59bdffb81e65828d0fff10ed685bd8666f1666ccc1c88355e702b Loading...

	zmforever.digital/alwheelpropzm/index.html	103 B	2023-03-13	2023-03-13
Pretty URL zmforever.digital/alwheelpropzm/index.html IP 217.69.13.14 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 17:27:11 Last Seen2023-03-13 17:27:11 Times Seen1 Hash a9c32e04878f2e55c3c64aa88cece845 7a28fa978b3ec62292ad72a438dddc7a54eee2db b4de3a5154503d3848538bd9fa0a4a7ce5979536437814bbb08d31a9a3d8a020 Loading...

	zmforever.digital/alwheelpropzm/index.html	55 B	2023-03-07	2024-04-19
Pretty URL zmforever.digital/alwheelpropzm/index.html IP 217.69.13.14 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:18 Last Seen2024-04-19 16:10:50 Times Seen4290 Hash 96cff319c449c289afc205a47063a52e 8a179621613722b918cb18a6e3e301334338498b 433e2dd9df18b9b78d8a9a199f9999918b0d9bce9d5a903b9c40c0c20979d7e2 Loading...

	zmforever.digital/alwheelpropzm/index.html	240 B	2023-03-07	2024-02-26
Pretty URL zmforever.digital/alwheelpropzm/index.html IP 217.69.13.14 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:27 Last Seen2024-02-26 23:02:32 Times Seen1556 Hash 178dd2db43c01ce0fcf4ff9e9f4b17e1 606d1231e54289b3f3c2d4c63b70f1af0c33614d 0f386fa632fad419832d940990410d8ad1a797c391e9962f59789e9c294d1dbe Loading...

		Size	First Seen	Last Seen
	#1 Eval - 4fb80ed637a501fb0914349a9d00d2db	80 B	2023-03-13	2023-03-13
Pretty Observations First Seen2023-03-13 17:27:11 Last Seen2023-03-13 17:27:11 Times Seen1 Hash 4fb80ed637a501fb0914349a9d00d2db 839153168efaf09225468bc47b7873b1cc1d809f a747d2976bf7f76439aaa26996d81ede05936e501760ac82924727d2a5d541ba Loading...

		Size	First Seen	Last Seen
	#1 Write - 0e51705da2efb5de7336e614f1ea06a0	10 B	2023-03-13	2024-02-06
Pretty Observations First Seen2023-03-13 16:02:52 Last Seen2024-02-06 12:47:41 Times Seen18 Hash 0e51705da2efb5de7336e614f1ea06a0 05ca1ba5d98924e5a6a924424ab357a0f271a639 3ac2694b8849df0cf68732300a63a646bb19e0c3131db20f4277e6a60fb22d45 Loading...

	#2 Write - bea7d4c2f914d8d09ed2fdfb55053668	10 B	2023-03-13	2024-02-07
Pretty Observations First Seen2023-03-13 15:20:50 Last Seen2024-02-07 04:52:40 Times Seen16 Hash bea7d4c2f914d8d09ed2fdfb55053668 b218afc41718e8f17e85cb04345e3f7fc7f5ae08 7b19ed69335dcf8c4999e0e2f1e8f85b216ee6e9020502e783e2fe74a3392a3f Loading...

	#3 Write - 16e1a154ccdad55367495a7e5ecee68d	18 B	2023-03-13	2023-03-13
Pretty Observations First Seen2023-03-13 17:19:59 Last Seen2023-03-13 17:58:09 Times Seen1 Hash 16e1a154ccdad55367495a7e5ecee68d 2627a6c2b69b16fd097191c23244403fbed7e9dc c621842303c86b00a5680a66136684bb234f227786efda43e07c9e84162bf669 Loading...

	#4 Write - 9d1a0949c39e66a0cd65240bc0ac9177	6 B	2023-03-07	2024-04-21
Pretty Observations First Seen2023-03-07 01:02:27 Last Seen2024-04-21 21:45:36 Times Seen525 Hash 9d1a0949c39e66a0cd65240bc0ac9177 bc5dd045b8623ddfc4bd0bce98ca5fda42accf88 873fef760e5d001ba0a843bf1846713fd92538699f323ef00d51f97a2ad2756c Loading...

	#5 Write - d41d8cd98f00b204e9800998ecf8427e	0 B	2023-03-07	2024-04-23
Pretty Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-23 13:05:15 Times Seen37019571 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	#6 Write - c5718d3fff1c2ebfc44b843ee003d7e5	10 B	2023-03-13	2024-02-07
Pretty Observations First Seen2023-03-13 16:50:15 Last Seen2024-02-07 10:09:10 Times Seen12 Hash c5718d3fff1c2ebfc44b843ee003d7e5 749dd0d9950cc9b8cefd157e777e59b84bd0bb83 0401ce3c43a5d09f99e5907c84b9e346f51f116392e15f990de5437a6b4ecc78 Loading...

HTTP Transactions (43)

URL IP Response Size

zmforever.digital/alwheelpropzm/index.html

217.69.13.14

301 Moved Permanently

433 B

URL HTTP/1.1
zmforever.digital/alwheelpropzm/index.html
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
433 B (433 bytes)
Hash
21ae55e09a56cc9b727e5f3f5d6857f2
7e2496f7ad592d0afd57bace8c5de65d7600a2e1
2bd1d02e9368793d21feb9ef4699a03defe318d1671982726173360716daa3c3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /alwheelpropzm/index.html HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 05 Feb 2023 08:04:05 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 433
Connection: keep-alive
Location: https://zmforever.digital/alwheelpropzm/index.html

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1cdc095521e9ee2606059be447d1fdd5
02b5d0a5b5823e2338daf7e144700babe2a213af
8bda3aabcf331c2bfcc4c7023cd797c760fd301dc353641bb95048e072f66c66

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BDA3AABCF331C2BFCC4C7023CD797C760FD301DC353641BB95048E072F66C66"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2381
Expires: Sun, 05 Feb 2023 08:43:47 GMT
Date: Sun, 05 Feb 2023 08:04:06 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5493
Expires: Sun, 05 Feb 2023 09:35:39 GMT
Date: Sun, 05 Feb 2023 08:04:06 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13176
Expires: Sun, 05 Feb 2023 11:43:42 GMT
Date: Sun, 05 Feb 2023 08:04:06 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 05 Feb 2023 07:36:17 GMT
content-type: application/json
age: 1669
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: KLaM0XnXUIG8jYkBHgJAOBfqlctjLNLNV/BNkZ5bXfLdNLhB/GeHk5sWENvmN+f6Jn7BYa756k0=
x-amz-request-id: T99GNY75RGT6RDAP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 05 Feb 2023 07:24:23 GMT
age: 2383
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/index.html

217.69.13.14

200 OK

46 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/index.html
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
46 kB (45952 bytes)
Hash
f0755ffec59db954b39801bc747075f5
aa6e63711ad7731bb89cccf5001fc06d70ff02e3
a8fbee1a6de9c82720e40060c30be4ccf2217f3b0639eaddc73ae46e4f0a500e

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /alwheelpropzm/index.html HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Sat, 04 Feb 2023 19:29:52 GMT
etag: W/"3b09-5f3e4d26cec00"
content-encoding: br
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7d97aa90c4ec941bc2e20617ca04aa83
96cd4ae9239e792a6b7714dfc3de6ee02f49c2ae
e870b0a69c05df859c46ae07255245f24c9fa752bde4e4d431cf7983d963cf7b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E870B0A69C05DF859C46AE07255245F24C9FA752BDE4E4D431CF7983D963CF7B"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10824
Expires: Sun, 05 Feb 2023 11:04:30 GMT
Date: Sun, 05 Feb 2023 08:04:06 GMT
Connection: keep-alive

zmforever.digital/alwheelpropzm/menu_2x.png

217.69.13.14

200 OK

124 B

URL HTTP/2
zmforever.digital/alwheelpropzm/menu_2x.png
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
PNG image data, 40 x 36, 8-bit gray+alpha, non-interlaced\012- data
Size
124 B (124 bytes)
Hash
8f68efd9388ccd80b43759b2ed542305
9f2cf96efe3bdec2ab64bc51856619cc02958fe6
455b82fa1e54fc88fe0699eabecb02155f1d6228e0ae3d7f72e1abe92dae8f3c

HTTP Headers

GET /alwheelpropzm/menu_2x.png HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/png
content-length: 124
last-modified: Sun, 09 Jan 2022 11:58:46 GMT
etag: "7c-5d524f136e980"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/notify_2x.png

217.69.13.14

200 OK

229 B

URL HTTP/2
zmforever.digital/alwheelpropzm/notify_2x.png
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
PNG image data, 36 x 32, 8-bit gray+alpha, non-interlaced\012- data
Size
229 B (229 bytes)
Hash
988234626ae7a880ed9c6a92f6336c0f
173967c2b59baed4a06997d874aba32ab65da201
4566dd8f59a09f51415a7c8955f48f75298522fc6db554bc1a59ad79c3e3e314

HTTP Headers

GET /alwheelpropzm/notify_2x.png HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/png
content-length: 229
last-modified: Sun, 09 Jan 2022 11:58:38 GMT
etag: "e5-5d524f0bcd780"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/spin_prize2.png

217.69.13.14

200 OK

2.8 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/spin_prize2.png
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
PNG image data, 142 x 173, 8-bit colormap, non-interlaced\012- data
Size
2.8 kB (2814 bytes)
Hash
f278c8d30fc51b72e0774b9ecb49214c
03b574db82b31ee5758eb5093fda8ea25d1b00d8
43f3e6d7e7b011430b39020bc5ff8fe6be2947100c597de44ca549ea96a0fd7c

HTTP Headers

GET /alwheelpropzm/spin_prize2.png HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/png
content-length: 2814
last-modified: Sun, 09 Jan 2022 11:43:52 GMT
etag: "afe-5d524bbed8e00"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/action_icons_20px_2x.png

217.69.13.14

200 OK

1.7 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/action_icons_20px_2x.png
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
PNG image data, 40 x 360, 8-bit colormap, non-interlaced\012- data
Size
1.7 kB (1726 bytes)
Hash
b699975b5fe73b087e711a33ff24ee1e
0e33cc5c32a5e7d18440751e3946076664caaf53
4e06866c22bb275c6c4f01265e1f3e9f00fe9face9739f6531371d688a8e7a7e

HTTP Headers

GET /alwheelpropzm/action_icons_20px_2x.png HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/png
content-length: 1726
last-modified: Sun, 09 Jan 2022 11:59:28 GMT
etag: "6be-5d524f3b7c800"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/comment_action_2x.png

217.69.13.14

200 OK

641 B

URL HTTP/2
zmforever.digital/alwheelpropzm/comment_action_2x.png
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
PNG image data, 24 x 120, 8-bit colormap, non-interlaced\012- data
Size
641 B (641 bytes)
Hash
e9b3872b3e63e19728176d45f0aa6986
b638f89d5d80c4cd65327da973c52f778e30bd55
a3f59e07404f1745bed88a314113a86da376526e7e1e555c99b3e249178c6ba5

HTTP Headers

GET /alwheelpropzm/comment_action_2x.png HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/png
content-length: 641
last-modified: Sun, 09 Jan 2022 11:59:18 GMT
etag: "281-5d524f31f3180"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/i14phone.jpg

217.69.13.14

200 OK

562 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/i14phone.jpg
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
PNG image data, 423 x 880, 8-bit/color RGBA, non-interlaced\012- data
Size
562 kB (561946 bytes)
Hash
3db6e9a86a250c13268be4a224a40333
63fdc9bdf962bd044cc99800e68a7c945298e05b
0f3a2e2e7f8ab18b9513fd334f82e227911e2f0f378ddc63b8b34347f12534c6

HTTP Headers

GET /alwheelpropzm/i14phone.jpg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/jpeg
content-length: 561946
last-modified: Mon, 24 Oct 2022 08:15:28 GMT
etag: "8931a-5ebc364eda800"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/index.jpg

217.69.13.14

200 OK

5.8 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/index.jpg
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 203x249, components 3\012- data
Size
5.8 kB (5846 bytes)
Hash
038a492cc0a3488f0547dafc24c15838
e49b0adb8e08131c54b71c3325b8e9cb9ce716f9
e25ba7e0c1b7e4bb61773bd32df4cf010a0d6c65e773fcc2bdc3454edf3401c0

HTTP Headers

GET /alwheelpropzm/index.jpg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/jpeg
content-length: 5846
last-modified: Fri, 04 Nov 2022 00:21:47 GMT
etag: "16d6-5ec9a0f28bcc0"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/14.jpg

217.69.13.14

200 OK

6.3 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/14.jpg
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 165x212, components 3\012- data
Size
6.3 kB (6271 bytes)
Hash
83dea2fa1f2cff1c3c228260b4bbef9f
069c3bb290335ec373202bd52e9b064a372acf5d
64b10a435c7d01c123b1ad3c5b6c2a3a66b95e0dd5601d6c6b5bcb786881beca

HTTP Headers

GET /alwheelpropzm/14.jpg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/jpeg
content-length: 6271
last-modified: Thu, 03 Nov 2022 01:26:51 GMT
etag: "187f-5ec86da03acc0"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/like_user_1.jpeg

217.69.13.14

200 OK

1.3 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/like_user_1.jpeg
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.3 kB (1293 bytes)
Hash
2aa0d43e70d60d76ac4bdff139f8c7cb
d7e3433297ad90f5d99249aee29b645265c9f3eb
e7c85bfa7ba6d75dd0de72e51da2e185351ced82b32090ab35395766ef4849fa

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /alwheelpropzm/like_user_1.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/jpeg
content-length: 1293
last-modified: Sun, 09 Jan 2022 11:40:48 GMT
etag: "50d-5d524b0f5f000"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/7.jpeg

217.69.13.14

200 OK

1.1 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/7.jpeg
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size
1.1 kB (1111 bytes)
Hash
93a68c406cecabf85d9cca80150cff97
cb051ce9d579bc5886afc137ec9ff4a42e4fbbc4
8b55e2390a6206d5bbc8947c9003c1381e64a064239c0aa757826683b168d755

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /alwheelpropzm/7.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/jpeg
content-length: 1111
last-modified: Sun, 14 Apr 2019 06:25:01 GMT
etag: "457-58677987b4940"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/2.jpeg

217.69.13.14

200 OK

1.2 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/2.jpeg
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size
1.2 kB (1154 bytes)
Hash
dba9ae7a7ddca56332daa3db554873ee
42c44132ec0e635fbd95b431c49c01345c963bcf
6d52f1bed6a64a89473c9b39f74c4900b8534a75d52e6bb4785d8c9046d12b8e

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /alwheelpropzm/2.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/jpeg
content-length: 1154
last-modified: Sun, 14 Apr 2019 06:25:56 GMT
etag: "482-586779bc28500"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/3.jpeg

217.69.13.14

200 OK

1.1 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/3.jpeg
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size
1.1 kB (1129 bytes)
Hash
8d0a835746e47abd0e612753cd3b8500
adbb56e921d194390557dbb9afbfea9ffc29f81a
a9ab01d3ccd9fad247c4d19343f45a1de228542b166e5cfe6dd0c2a613ddd064

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /alwheelpropzm/3.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/jpeg
content-length: 1129
last-modified: Sun, 14 Apr 2019 06:26:10 GMT
etag: "469-586779c982480"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/like_user_2.jpeg

217.69.13.14

200 OK

1.2 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/like_user_2.jpeg
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.2 kB (1216 bytes)
Hash
f9299c2023539a8f27a6e1b12ed260e5
046baf9bcd1bbdf9d51ca63e3899ea2e7f5de0b2
ba0c57dd9fbd100462ac62c8c8b3156caf1283d250fb56ee8ce5b0f53e575ccd

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /alwheelpropzm/like_user_2.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/jpeg
content-length: 1216
last-modified: Sun, 09 Jan 2022 11:40:54 GMT
etag: "4c0-5d524b1517d80"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/4.jpeg

217.69.13.14

200 OK

1.3 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/4.jpeg
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size
1.3 kB (1268 bytes)
Hash
2d7f012ab9054524c755b469917c86c4
4012a215511c950261b9a612ea9a504f01e785bc
c8159e3c4734f421942fa3cabec5481d80500e395b1652f22dbd18aa1150ea4f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /alwheelpropzm/4.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/jpeg
content-length: 1268
last-modified: Sun, 14 Apr 2019 06:26:30 GMT
etag: "4f4-586779dc95180"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/6.jpeg

217.69.13.14

200 OK

1.3 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/6.jpeg
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size
1.3 kB (1314 bytes)
Hash
8224e96358b5f3cff15b5a95dda8bf16
159b632deb160c901c9b8754715272a070c1945b
c67dfaceacc0ecf671300a3636ae7d464d873385a9077f3fa207f4053b681dfc

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /alwheelpropzm/6.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/jpeg
content-length: 1314
last-modified: Sun, 14 Apr 2019 06:26:44 GMT
etag: "522-586779e9ef100"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/1.jpeg

217.69.13.14

200 OK

1.1 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/1.jpeg
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size
1.1 kB (1051 bytes)
Hash
04ab47334cf6507aba4897fc6184fad3
bf1018551225f851a7620e3abf84567c11e24edb
1f4e1ed5e3694cd7c748c27a2081cf05ab76866b945d55ce8a7cf8c21c424fda

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /alwheelpropzm/1.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/jpeg
content-length: 1051
last-modified: Sun, 14 Apr 2019 06:25:39 GMT
etag: "41b-586779abf1ec0"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/8.jpeg

217.69.13.14

200 OK

1.4 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/8.jpeg
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Size
1.4 kB (1377 bytes)
Hash
2f1e9ab76a99474f6ab6e56f6f9609d1
6913bd46092337f0398ee3e2a964406fcee7bb8e
1e31e659dabaaa79c7efa58b72d2e982e7598db298084cd2865e354425287330

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /alwheelpropzm/8.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/jpeg
content-length: 1377
last-modified: Sun, 14 Apr 2019 06:25:20 GMT
etag: "561-58677999d3400"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/footer_right.png

217.69.13.14

200 OK

4.9 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/footer_right.png
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
PNG image data, 168 x 66, 8-bit colormap, non-interlaced\012- data
Size
4.9 kB (4919 bytes)
Hash
0e786b7344ac0b63609290a3a415fc4f
c2e77827e895aaa13522f1c5c0ef79d4caef0bb2
f044237e4439b415a4947127f26fb14b4d32cf1d32ff51fd8f0ff4d21d2692e5

HTTP Headers

GET /alwheelpropzm/footer_right.png HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/png
content-length: 4919
last-modified: Sun, 09 Jan 2022 11:55:53 GMT
etag: "1337-5d524e6e72440"
accept-ranges: bytes
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/clip_footer_3.png

217.69.13.14

200 OK

2.5 kB

URL HTTP/2
zmforever.digital/alwheelpropzm/clip_footer_3.png
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type
PNG image data, 52 x 59, 8-bit colormap, non-interlaced\012- data
Size
2.5 kB (2460 bytes)
Hash
e1b626392882cc25b4d891afaa68afd4
454d7abdbc2548d04feb95436ea0ab4126b4f00b
ef3b8785199a0a640150a9d9ceb9b7cff2b118ee377ce36317d4a3e716bd944f

HTTP Headers

GET /alwheelpropzm/clip_footer_3.png HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: image/png
content-length: 2460
last-modified: Sun, 09 Jan 2022 11:56:02 GMT
etag: "99c-5d524e7707880"
accept-ranges: bytes
X-Firefox-Spdy: h2

deefauph.com/zone?&pub=0&zone_id=5545814&is_mobile=false&domain=zmforever.digital&var=&ymid=&var_3=&dsig=&action=prerequest

139.45.197.251

200 OK

0 B

URL HTTP/2
deefauph.com/zone?&pub=0&zone_id=5545814&is_mobile=false&domain=zmforever.digital&var=&ymid=&var_3=&dsig=&action=prerequest
IP
139.45.197.251:0
ASN
#9002 RETN Limited

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

POST /zone?&pub=0&zone_id=5545814&is_mobile=false&domain=zmforever.digital&var=&ymid=&var_3=&dsig=&action=prerequest HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zmforever.digital
Connection: keep-alive
Referer: https://zmforever.digital/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-length: 0
x-trace-id: 306bd6a13eb942b190aadd7e1be05626
access-control-allow-origin: https://zmforever.digital
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 05 Feb 2023 07:49:07 GMT
age: 900
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2439
Expires: Sun, 05 Feb 2023 08:44:46 GMT
Date: Sun, 05 Feb 2023 08:04:07 GMT
Connection: keep-alive

push.services.mozilla.com/

34.210.143.205

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.210.143.205:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6dLbuDJgd0noQH3b8DB2wA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: gaG4SluFHHZ9pPq3XkmepfWOILk=

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7499
Expires: Sun, 05 Feb 2023 10:09:07 GMT
Date: Sun, 05 Feb 2023 08:04:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7499
Expires: Sun, 05 Feb 2023 10:09:07 GMT
Date: Sun, 05 Feb 2023 08:04:08 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b593b5-5093-4504-8ab7-492c62b14ca7.jpeg

34.120.237.76

200 OK

5.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b593b5-5093-4504-8ab7-492c62b14ca7.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.8 kB (5801 bytes)
Hash
c1f3df5bbad5048923e29c0767d703d3
48c408d37a7bd7f96653174359178eed46ddf298
c8bae041c3d64334964b2aa771a07bc2709ced4c497e1795f864d9416fed728f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b593b5-5093-4504-8ab7-492c62b14ca7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5801
x-amzn-requestid: 441284a8-923a-4b22-b39f-95dec713c292
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fjj9jHu_IAMFZ-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d7b389-788174a773fcd695540cc95e;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 12:09:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DgvqiQwdytO2caPNzg2OhGcv8ly9N_YeQTzpuf6iwAVt8AQZEXRLqw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:44:03 GMT
age: 37205
etag: "48c408d37a7bd7f96653174359178eed46ddf298"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10905 bytes)
Hash
1a4eed23b240d04a3cd6b085cfa93375
f29b9dc3f6bbd2ba76a5a4570ce044d5f240fd00
93e8371f80c12d3753842e36001dbb8d3dc2223b10a594639752cd816c492d4e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10905
x-amzn-requestid: 093778fc-231c-452f-a6fc-15f4eb41ade0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmNJCEDzIAMFmxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8c239-7f56d6e56392f373541db219;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:24:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WVfpilnwhnRXBhJkHBWjxxoP09f7SqlRk8CdWRWOubIIwe0CX89bUA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:09:58 GMT
age: 35650
etag: "f29b9dc3f6bbd2ba76a5a4570ce044d5f240fd00"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

3.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
3.5 kB (3474 bytes)
Hash
d7a466d89c75ff3459b7328591db52cf
c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb
e73243be3d01d12a224c4e9826c4f52610cf7722eee69f62755278d7550705f1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 3474
x-amzn-requestid: 5846c080-9f25-4590-863c-8af2126cdbe1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f1WXEEbnoAMFRdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ded0f9-1bd490125feadc14366e7ca0;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 21:41:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: d8aQmkW-aqLFpb79RynlJG2vY1GTDbjLNY0Qukgg_WIjdI6cmbVKFw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:51:26 GMT
age: 36762
etag: "c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.2 kB (6202 bytes)
Hash
251f1a5d671fb797fb98e9a71754c341
335425603d9eec146a3c03422dbca91134272e53
74932f07561287e33302aabcf9c639e9df7ae0fbc4bf71f5467310aabafea208

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6202
x-amzn-requestid: 01b85fcd-69a0-49da-8640-32a3ef19378a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bUFEJoAMFapg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c48-14817e717361e09170714e9d;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1_1mEN4j5cciWEiimz4PRjx3PNGnrSRib9oEJAdYLrrtyjqnz_zvcQ==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 11:30:27 GMT
age: 74021
etag: "335425603d9eec146a3c03422dbca91134272e53"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.0 kB (5014 bytes)
Hash
5b6c30ad03669b66bf2f63b3edd69882
e630bd132b52b965a5ade646ea8a165d1abf6d7b
f8233d879ec17fd91909655ff8881f2ebfad84272fde3ed5e5be37580378a989

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5014
x-amzn-requestid: a434aae4-fe4b-4fc7-9b7e-eeb552484e8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bIE0aoAMF6YQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c47-5556d14757190c842bbc6b06;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k6YqagXr3Wr-u1uDKojEnIGW0CxU5yvWPtlzNpzoIvmg9F-rJb9uFQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 11:30:27 GMT
age: 74021
etag: "e630bd132b52b965a5ade646ea8a165d1abf6d7b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c8da623-73ab-4c2d-afaa-03d28de3a280.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11056 bytes)
Hash
3e0c38abfcd86f8074d4182d49fc354f
1367bebb73fa652695242100b26c394f1bfe4457
e42d110060133ac05e6cdfafa6473c55473220fdc7eaf03e3a89f58aa3603670

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c8da623-73ab-4c2d-afaa-03d28de3a280.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11056
x-amzn-requestid: 4acc3364-4a33-4934-bdcb-41284d952113
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPFrwEW4IAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf8317-33872f461a2faab552322837;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:04:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4xmWa9XVzQ3xzjzIZyrdv3GpFSaTcoacse6b0lgGch2IMvV69AZ57w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:45:28 GMT
age: 37120
etag: "1367bebb73fa652695242100b26c394f1bfe4457"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/main_script.js

217.69.13.14

200 OK

0 B

URL HTTP/2
zmforever.digital/alwheelpropzm/main_script.js
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /alwheelpropzm/main_script.js HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sun, 29 Jan 2023 15:17:15 GMT
etag: W/"b2c-5f36897f334c0"
content-encoding: br
X-Firefox-Spdy: h2

deefauph.com/pfe/current/micro.tag.min.js?z=5545814&sw=/sw-check-permissions-d7d09.js

139.45.197.251

200 OK

0 B

URL HTTP/2
deefauph.com/pfe/current/micro.tag.min.js?z=5545814&sw=/sw-check-permissions-d7d09.js
IP
139.45.197.251:0
ASN
#9002 RETN Limited

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /pfe/current/micro.tag.min.js?z=5545814&sw=/sw-check-permissions-d7d09.js HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: application/javascript
last-modified: Fri, 27 Jan 2023 11:03:52 GMT
etag: W/"63d3af98-a083"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

zmforever.digital/alwheelpropzm/style.css

217.69.13.14

200 OK

0 B

URL HTTP/2
zmforever.digital/alwheelpropzm/style.css
IP
217.69.13.14:0
ASN
#20473 AS-CHOOPA

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /alwheelpropzm/style.css HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 08:04:06 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sun, 09 Jan 2022 12:10:13 GMT
etag: W/"3a51-5d5251a29b340"
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (23)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML