| mail.eventt-m4-battlegrounds.sadeghii.com/ |  164.92.125.204 | 200 OK | 83 kB |
URL User Request GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/ IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (911), with CRLF line terminators Hash589e2de20156ee8947709b0b1bff370a c43cd0585e8434ef9144d8d82e29b1bbf7952a78 8ff88333d0e7c62405e6f29fcb2f5ebed6d419d0505bec9814124da91ca13e34
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET / HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:15 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css |  104.17.24.14 | 200 OK | 19 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css IP104.17.24.14:443
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (52276) Hash5222e06b77a1692fa2520a219840e6be 8b4236206a8b86af3761a244277663046d7ff7ee 0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5
GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:17:16 GMT
content-type: text/css; charset=utf-8
content-length: 18778
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64cac444-495a"
last-modified: Wed, 02 Aug 2023 21:01:56 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 604229
expires: Sun, 27 Apr 2025 17:17:16 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wYBNyxy%2FTFvmY0%2FetMXbKW0RuHy55t7SAP1lw2bantNnE0bgUzFnwD6htocCAZp762SR63iPjOh2LFFi3kKan4mFIku7oH1Yc7SWbfsNkN5%2Fjp4oswC%2FvS0YxgxAd8DgR51fngQ7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8802dcd15f88b527-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css | 104.17.24.14 | 200 OK | 5.8 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css IP104.17.24.14:443
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashe9365fe85b7e4db79a87015e52c3db6c 2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9 dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56
GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:17:16 GMT
content-type: text/css; charset=utf-8
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 599929
expires: Sun, 27 Apr 2025 17:17:16 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CI8YeMKAZGRsiBft1IpkbyMpEtWvSiig%2FBOctDQmm64Qzp2eeL458SOzwa4OAbfhikQuqw3Y%2B8qOYAgTKZ9l0kSX%2F%2FbO7Vli1GHfkIvCHIQQ6sD4wZZsFMGbfA5z1yl9Krr3fgTi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8802dcd17fc4b527-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css | 104.17.24.14 | 200 OK | 5.8 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css IP104.17.24.14:443
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashe9365fe85b7e4db79a87015e52c3db6c 2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9 dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56
GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mail.eventt-m4-battlegrounds.sadeghii.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:17:16 GMT
content-type: text/css; charset=utf-8
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 599929
expires: Sun, 27 Apr 2025 17:17:16 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gvp68x0R4PE%2FUBPFE3s6VLM3cDzb4Sm%2Foi6i5oXGVogmwkY7X5jUVcU9aI9Y2RQ%2BxZJDJPfx%2FhoZ%2FsIYqZT%2B%2F5M04u4xkBHfeTwH5qNV%2FoixwoHWd630zfdyO7HawQBCRMAKJWd8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8802dcd17df8b4fa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/css/codeflag-link.css | 164.92.125.204 | 200 OK | 15 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/css/codeflag-link.css IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeASCII text, with very long lines (14693), with no line terminators Hash9482d8981f4e215bbb32016e34b6fa20 d9696b027ada4640a2e984324d2a73615aac6470 acc8459a462def2104f6ba5dbfd055c04ecd55a21afded6e353f88edbebb9a5f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/codeflag-link.css HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:16 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:41:16 GMT
Accept-Ranges: bytes
Content-Length: 14693
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/css/style.css?ver=1708518624 | 164.92.125.204 | 200 OK | 58 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/css/style.css?ver=1708518624 IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeASCII text, with very long lines (911) Hash0ef4368631f6509617da911a7a8c7158 fc71d200d7cd5daa1f43755d79f0f855a526fe13 3041c18a4cff4e18fc9778fba06a7a2ad8d6d087f29dc62355ebe04e8777ea37
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/style.css?ver=1708518624 HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:16 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:41:38 GMT
Accept-Ranges: bytes
Content-Length: 58433
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/css/loader.css | 164.92.125.204 | 200 OK | 4.8 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/css/loader.css IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeASCII text, with very long lines (4812), with no line terminators Hashd1381745ae5fe30ca58906cbcd4d9ade 947df8977ec81317a5369ae254fea360f92b2844 b02be119005317ec456772e7f9f4e227824717117f1856a0f4ec84cbc8858c01
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/loader.css HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:16 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:41:28 GMT
Accept-Ranges: bytes
Content-Length: 4812
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/css/facebook.css | 164.92.125.204 | 200 OK | 5.0 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/css/facebook.css IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
Hashfd24dce22baa30365f7e7e1cd05b2683 711eb5c1f2a68d64c8434de4edc01d6b8de0a4eb 250240f7d78dfb0d799e199d89956b303a62d28cc1c0db24a514e96b7b6d802f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/facebook.css HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:16 GMT
Server: Apache
Last-Modified: Tue, 19 Mar 2024 13:40:02 GMT
Accept-Ranges: bytes
Content-Length: 4991
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/css/twitter.css | 164.92.125.204 | 200 OK | 7.1 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/css/twitter.css IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
Hash54b0095a7672e6b73d5e76df043962c4 45fc740de06e2680246d692c5f30d5d7a12a7e66 c0b584c408f633822d68fb3cc90163ed201f788aa74bbe1a35d5764a55d21b5f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/twitter.css HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:16 GMT
Server: Apache
Last-Modified: Tue, 19 Mar 2024 13:41:02 GMT
Accept-Ranges: bytes
Content-Length: 7116
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/css/link.css | 164.92.125.204 | 200 OK | 5.9 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/css/link.css IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
Hash165f199656b2dcaba5755ba2539c2066 df8c006836e34e91251001e4a641f7b3756eeb2f f1adc37d50c5e73a3add157f2d2148656bba80e8a30769c2f863b212875e4d4e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/link.css HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:16 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:41:24 GMT
Accept-Ranges: bytes
Content-Length: 5928
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.pubgmobile.com/act/a20180515iggamepc/logo.png |  23.36.76.227 | 200 OK | 6.1 kB |
URL GET HTTP/2www.pubgmobile.com/act/a20180515iggamepc/logo.png IP23.36.76.227:443 ASN#20940 Akamai International B.V.
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerDigiCert Inc Subjectwetv.acc.qq.com Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
Hasha74329a2054a9e096a43ba8742dd9523 4ccac3041bf854721b91dcb45286b8488dd9f072 cde9945e91f0e51058869d687cd24c8f58804f25623999f1291c71b3697093b6
GET /act/a20180515iggamepc/logo.png HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "5ff6baa2-3bf2"
last-modified: Mon, 08 May 2023 08:25:46 GMT
server: Akamai Image Manager
content-length: 6055
content-type: image/avif
cache-control: private, no-transform, max-age=43200
expires: Wed, 08 May 2024 05:17:17 GMT
date: Tue, 07 May 2024 17:17:17 GMT
akamai-grn: 0.df4c2417.1715102236.20f78807
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js IP142.250.74.106:443
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeJavaScript source, ASCII text, with very long lines (32061) Hashe40ec2161fe7993196f23c8a07346306 afb90752e0a90c24b7f724faca86c5f3d15d1178 874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4
GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29671
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 23:24:46 GMT
expires: Fri, 02 May 2025 23:24:46 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 409950
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js IP142.250.74.106:443
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeJavaScript source, ASCII text, with very long lines (32180) Hash32015dd42e9582a80a84736f5d9a44d7 41b4bfbaa96be6d1440db6e78004ade1c134e276 8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29707
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 16:37:20 GMT
expires: Fri, 02 May 2025 16:37:20 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 434397
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-1.10.2.min.js | 151.101.66.137 | 200 OK | 33 kB |
URL GET HTTP/2code.jquery.com/jquery-1.10.2.min.js IP151.101.66.137:443
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32072) Hash628072e7212db1e8cdacb22b21752cda 0511abe9863c2ea7084efa7e24d1d86c5b3974f1 0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988
GET /jquery-1.10.2.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-16bb3"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 07 May 2024 17:17:17 GMT
age: 20301631
x-served-by: cache-lga13622-LGA, cache-hel1410025-HEL
x-cache: HIT, HIT
x-cache-hits: 1, 4086
x-timer: S1715102237.009042,VS0,VE0
vary: Accept-Encoding
content-length: 32788
X-Firefox-Spdy: h2
|
|
| i.ibb.co/PYpHF6b/Twitter-Show-Password.png |  162.19.58.158 | 200 OK | 28 kB |
URL GET HTTP/2i.ibb.co/PYpHF6b/Twitter-Show-Password.png IP162.19.58.158:443
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectibb.co Fingerprint0C:8B:6F:2F:B8:9F:91:1E:3A:DD:B1:1B:45:47:B4:65:FD:56:73:3D ValidityMon, 22 Apr 2024 06:29:44 GMT - Sun, 21 Jul 2024 06:29:43 GMT
File typePNG image data, 656 x 656, 8-bit/color RGBA, non-interlaced Hash2fd203703821d5ce5d18bee2a51b779a a78d7b1369ce8bc34de57909af142043cae446f0 6b82611fa96f118128b0db9692dd982ca0fe79b1b4d8048946880600cc4f97c8
GET /PYpHF6b/Twitter-Show-Password.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 17:17:17 GMT
content-type: image/png
content-length: 28355
last-modified: Tue, 17 Jan 2023 04:04:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js | 142.250.74.106 | 200 OK | 33 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js IP142.250.74.106:443
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeJavaScript source, ASCII text, with very long lines (32089) Hash397754ba49e9e0cf4e7c190da78dda05 ae49e56999d82802727455f0ba83b63acd90a22b c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4
GET /ajax/libs/jquery/1.9.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33018
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:52:39 GMT
expires: Fri, 02 May 2025 01:52:39 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 487478
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.ibb.co/pZDr8sd/Twitter-Hide-Password.png | 162.19.58.158 | 200 OK | 28 kB |
URL GET HTTP/2i.ibb.co/pZDr8sd/Twitter-Hide-Password.png IP162.19.58.158:443
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectibb.co Fingerprint0C:8B:6F:2F:B8:9F:91:1E:3A:DD:B1:1B:45:47:B4:65:FD:56:73:3D ValidityMon, 22 Apr 2024 06:29:44 GMT - Sun, 21 Jul 2024 06:29:43 GMT
File typePNG image data, 656 x 656, 8-bit/color RGBA, non-interlaced Hash8d1f08b46884df302bf7300fc234832c 5735d57b6fa211c400d439095d5ff2f5bb57e691 e4cff1f68b85c3343554090b3479273a54e5eed2dbb3e56ceb9f86c4ebe8b0e7
GET /pZDr8sd/Twitter-Hide-Password.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 17:17:17 GMT
content-type: image/png
content-length: 28029
last-modified: Tue, 17 Jan 2023 04:04:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/js/script.js?ver=171139142585438 | 164.92.125.204 | 200 OK | 5.3 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/js/script.js?ver=171139142585438 IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJavaScript source, ASCII text Hashbae14fc564ff3a7f46dd7f36e931f7c4 28bab8a569cd71a1fda82659d671408101b5a25c 91e5d2fe4bc565f620afaef6f714cd4e54f41b3c04a293b850ca19965bf1bc2d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /js/script.js?ver=171139142585438 HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:16 GMT
Server: Apache
Last-Modified: Tue, 26 Mar 2024 06:42:02 GMT
Accept-Ranges: bytes
Content-Length: 5293
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/js/scriptv2.js?ver=791801150416155 | 164.92.125.204 | 200 OK | 1.8 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/js/scriptv2.js?ver=791801150416155 IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJavaScript source, ASCII text Hashdb8ad75a8c6a4009f6da96c14d288f08 bdcbcaa1645105b30f203ec94818589cbd537cba a56c89c84826612a447111ad1ebeb0d391f18d937bf31d698c84f10813dd8dc5
GET /js/scriptv2.js?ver=791801150416155 HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:16 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:43:22 GMT
Accept-Ranges: bytes
Content-Length: 1842
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/js/senderv2.js?ver=797809100226155 | 164.92.125.204 | 200 OK | 21 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/js/senderv2.js?ver=797809100226155 IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashe2d048b11868739d706c229951982767 e51d63e72bd1993f2da8965139f34abbddead1ad ccaead2cb26e16c155be0c88055722094bb597bd73c2bf15182648b3c9ddfe8c
GET /js/senderv2.js?ver=797809100226155 HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:16 GMT
Server: Apache
Last-Modified: Tue, 26 Mar 2024 06:45:34 GMT
Accept-Ranges: bytes
Content-Length: 20857
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/css/animate.css | 164.92.125.204 | 200 OK | 60 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/css/animate.css IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeASCII text, with very long lines (59852) Hash9df4f9d9eacb7924f625a9f5df77c8de 73bed68ad9defb97bd930a38dec3afe685a94fcd 9c448d6954414d7a1cab4da944bc11fe3a72b300c36f3193bc3c24c867ce70de
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/animate.css HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:16 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:41:12 GMT
Accept-Ranges: bytes
Content-Length: 60055
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/js/slide-notif-zone.js | 164.92.125.204 | 200 OK | 573 B |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/js/slide-notif-zone.js IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
Hash0975d2891b10e81edad28480928c669f cffbc80b54b36987c7508f06887ecfbd1afb38e9 9e389a4d6adbe79dbbd4afe97f47ca6f6f40e081632737368491984014f8ee67
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /js/slide-notif-zone.js HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:43:46 GMT
Accept-Ranges: bytes
Content-Length: 573
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/js/slide-header-zone.js | 164.92.125.204 | 200 OK | 464 B |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/js/slide-header-zone.js IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
Hash7e88e58fc27633eb53c94577d7d17daf e35b3429924a4c5caa3dee78d4e0f3d810ac913b 150e6e8dd6433b03963f0e6c69429056183592668139545a88105f2190f57ebd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /js/slide-header-zone.js HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:43:42 GMT
Accept-Ranges: bytes
Content-Length: 464
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.pubgmobile.com/en/images/footer_link_bg.png | 23.36.76.227 | 200 OK | 1.6 kB |
URL GET HTTP/2www.pubgmobile.com/en/images/footer_link_bg.png IP23.36.76.227:443 ASN#20940 Akamai International B.V.
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerDigiCert Inc Subjectwetv.acc.qq.com Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File typePNG image data, 560 x 127, 8-bit/color RGBA, non-interlaced Hash92ae645b6114492e8c1c5464d949466a 1d27f2644c0f5e899e9478c78136a9bc94131150 f1bd509f6032d31635a91d57de9428b83929221b854768c38c8f1643877a9417
GET /en/images/footer_link_bg.png HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/png
content-length: 1630
last-modified: Mon, 21 Mar 2022 13:24:17 GMT
etag: "62387c81-65e"
accept-ranges: bytes
cache-control: max-age=199
expires: Tue, 07 May 2024 17:20:36 GMT
date: Tue, 07 May 2024 17:17:17 GMT
akamai-grn: 0.df4c2417.1715102237.20f7888b
X-Firefox-Spdy: h2
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/btn-next.png | 164.92.125.204 | 200 OK | 630 B |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/btn-next.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 35 x 34, 8-bit/color RGBA, non-interlaced Hash682380e1004549a67e1ae55da9e0c04d f498fe92492b9111d3bd134692cfe156e90a3235 62d46d16d87472b4a4f6c11dd731d3598e20ab0505f811f75b95bbe1032e5131
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/btn-next.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:50:52 GMT
Accept-Ranges: bytes
Content-Length: 630
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/header/headerfront.png | 164.92.125.204 | 200 OK | 73 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/header/headerfront.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 1280 x 650, 8-bit colormap, non-interlaced Hash12cab7a8645982ac3364cabd4e4f795b 9b7efe7e855b4c74fc5401595b8fd81575d115f1 23b45d6be76da2ed1433956f54def370162a965a1c303db74270ebacb3abed9c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/header/headerfront.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:50:20 GMT
Accept-Ranges: bytes
Content-Length: 72631
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/1.png | 164.92.125.204 | 200 OK | 93 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/1.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 1280 x 1280, 8-bit colormap, non-interlaced Hash3a50b19c36a07cf5fb3c368385ceba1b 6782a066ebebd66b76b5deee29f6e9dd84f285dc f1acbe776d1946aba7ae5b90b177ecab4532361ce0ad577c655ad25f087adbc5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/1.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:52:52 GMT
Accept-Ranges: bytes
Content-Length: 93005
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/killmess1.png | 164.92.125.204 | 200 OK | 23 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/killmess1.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 1280 x 195, 8-bit colormap, non-interlaced Hash665e6710f95c5c6df754b0fed9a5f42a f139a5786a13778216055a80fa34590be57ceedc 9df9c9021468fed2557106c31380a7f82126c2a5c12ccaf0ee855d8c2a3ab0f6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/killmess1.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:50:56 GMT
Accept-Ranges: bytes
Content-Length: 22754
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
|
|
| fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQ.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/teko/v20/LYjNdG7kmE0gfaN9pQ.woff2 IP216.58.207.227:443
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15044, version 1.0 Hash4806226b885b3b3d0ae52142f6bfb3af 2ea5cc6d5e4adb874989a2b74bda062296fb1ad3 714088bef569d6981bfae79530ef315f4d6505f302a944ce9063601919977e6f
GET /s/teko/v20/LYjNdG7kmE0gfaN9pQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mail.eventt-m4-battlegrounds.sadeghii.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15044
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 11:50:19 GMT
expires: Sat, 03 May 2025 11:50:19 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 21:55:11 GMT
content-type: font/woff2
age: 365218
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.postimg.cc/02KwtTc7/footer-bg.jpg | 162.19.61.80 | 200 OK | 13 kB |
URL GET HTTP/2i.postimg.cc/02KwtTc7/footer-bg.jpg IP162.19.61.80:443
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectpostimg.cc Fingerprint53:90:A2:AC:6E:D0:9C:56:06:D5:4F:6E:EE:C9:67:58:10:CF:9A:D6 ValidityMon, 22 Apr 2024 06:32:22 GMT - Sun, 21 Jul 2024 06:32:21 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 579x800, components 3 Hashd1371c19862911f28e8a82df40b99bdd be41c9f953d7b8cd6bcedd75321d11a711e01548 2e941582ccd035c15c6d6003745300a0f1a2ad587774e255a8482939f58a6d16
GET /02KwtTc7/footer-bg.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 17:17:17 GMT
content-type: image/jpeg
content-length: 12634
last-modified: Wed, 23 Mar 2022 19:15:53 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/js/codeflag-link.js | 164.92.125.204 | 200 OK | 212 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/js/codeflag-link.js IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators Size212 kB (212386 bytes) Hash71265f03b29f12786fa4875dd0fcd969 dfe93bb771002f96dbba3741677b6127dbac7c68 93591bc5651c6e9b71c21693b9cfa0f7b893ca11b479d47b8fb5d2f50341d2b4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /js/codeflag-link.js HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:16 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:43:02 GMT
Accept-Ranges: bytes
Content-Length: 212386
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/fonts/selow.woff2 | 164.92.125.204 | 200 OK | 22 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/fonts/selow.woff2 IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 22220, version 1.0 Hash345579e8566a3dd6dc9feb5362fbe7e1 df075dd0c26e72fd7df19948f07904c1eaa72ded 1d0dfcc32b3be2bf3b3dbc371e9b7c5ce205f4bc6f7c8ce0226256cc7064c3e4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /fonts/selow.woff2 HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Thu, 01 Feb 2024 21:10:00 GMT
Accept-Ranges: bytes
Content-Length: 22220
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: font/woff2
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/2.png | 164.92.125.204 | 200 OK | 84 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/2.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 1280 x 1280, 8-bit colormap, non-interlaced Hash4c4a21c6c2ed6470adf5947cded54011 471837b9b84575d7c34701894b434dba4985e280 e6ddb0de8f118e9caf53c6dcfb2a0a53e004e28852432dc2c7fd03e202147ddf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/2.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:52:56 GMT
Accept-Ranges: bytes
Content-Length: 84041
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/css/fonts/DINMITTELSCHRIFTSTD.ae4cacf317c4c9c6befd.woff | 164.92.125.204 | 404 Not Found | 315 B |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/css/fonts/DINMITTELSCHRIFTSTD.ae4cacf317c4c9c6befd.woff IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/fonts/DINMITTELSCHRIFTSTD.ae4cacf317c4c9c6befd.woff HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/css/style.css?ver=1708518624
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/bg.jpg | 164.92.125.204 | 200 OK | 39 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/bg.jpg IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1632x904, components 3 Hasha317aac4ec6a3db677375431c4355ba0 dcdff818580ff2fb524a0ce7d44fc098142a9c33 46d12e103f082a9a8d0e64878aa4934bae9b6e6813d03ec8f90a72b3f0eee8c3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/bg.jpg HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:46:18 GMT
Accept-Ranges: bytes
Content-Length: 38924
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/kecap-notif.png | 164.92.125.204 | 200 OK | 25 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/kecap-notif.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 1280 x 207, 8-bit colormap, non-interlaced Hash33356e0bb6de420a6255f2e5dc910ddb 614ae308e00075c32fb3d3ada9a1ceb15265e3fd ca7c6046ec386a42651165ece409ac33fd7e736490fba4146e0cf07f1ce30bc0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/kecap-notif.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:46:30 GMT
Accept-Ranges: bytes
Content-Length: 25253
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/not.png | 164.92.125.204 | 200 OK | 9.1 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/not.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 512 x 512, 8-bit colormap, non-interlaced Hash3b92cd43b4fc725b4507f16fd6dc5fe7 fc0dd8c7bc7ba29a736201e71f4d5f26080107df ebaf9d84c413c369027f1f0d5106ab93d277bb79e9c99fc8cf81a976a5cf505f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/not.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:46:36 GMT
Accept-Ranges: bytes
Content-Length: 9102
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/show.png | 164.92.125.204 | 200 OK | 10 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/show.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 96 x 96, 8-bit/color RGB, non-interlaced Hash84e1db4820a50152ec50efc618da07f1 961c1dbc5be922d710a725b83540f9d9b860ee05 ad57b1b9c00f85c6377397cb3b336213a4b7207425412ef025aff44794a434df
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/show.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:52:18 GMT
Accept-Ranges: bytes
Content-Length: 9972
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/btn-on.png | 164.92.125.204 | 200 OK | 4.2 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/btn-on.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 194 x 57, 8-bit colormap, non-interlaced Hash806db9071d52ed8d4a840e82fdad69c8 e94956bdd47380f96651a84e2d93e8964217482f 09d40ceeec9f33dbe338ebeab541b87880d5b378b9d085c52c8b2895894352ef
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/btn-on.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:46:22 GMT
Accept-Ranges: bytes
Content-Length: 4163
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/4.png | 164.92.125.204 | 200 OK | 107 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/4.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 1280 x 1280, 8-bit colormap, non-interlaced Size107 kB (107151 bytes) Hash54ea0aed7680fd7313a98607b3bfbbfa 48cb573c86da11629d4f990a61994667fc49d8b3 81eda4de3dff483c05ace819d830d326c7ebb271dc6fc650561f76695a158e09
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/4.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:52:58 GMT
Accept-Ranges: bytes
Content-Length: 107151
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/css/fonts/DINMITTELSCHRIFTSTD.a7bfa1ad62bf8ba2fa46.ttf | 164.92.125.204 | 404 Not Found | 315 B |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/css/fonts/DINMITTELSCHRIFTSTD.a7bfa1ad62bf8ba2fa46.ttf IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/fonts/DINMITTELSCHRIFTSTD.a7bfa1ad62bf8ba2fa46.ttf HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/css/style.css?ver=1708518624
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css | 104.18.11.207 | 200 OK | 8.4 kB |
URL GET HTTP/2stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css IP104.18.11.207:443
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:17:16 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 03/18/2024 12:28:12
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1078
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 9e01696f4dd85a48838a9ea9ee82ef4a
cdn-cache: HIT
cf-cache-status: HIT
age: 608381
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8802dcd16f1856c6-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/container-bg.png | 164.92.125.204 | 200 OK | 150 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/container-bg.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 426x873, components 3 Size150 kB (149862 bytes) Hash47850df65f309cca51d0a60a0064d489 91cffa050b8675f9cb1cf398af4eb72a54fe40b6 5a8c00b1c334a8db0a52222ca8f7cee61f330fb15d651efd04aaf3dcde122d79
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/container-bg.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:46:28 GMT
Accept-Ranges: bytes
Content-Length: 149862
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/7.png | 164.92.125.204 | 200 OK | 50 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/7.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hashee8c2e0332f27cbcdef426ac96159760 3cb3795c1b3d05b78324c54a217a4ebd71477e41 91140a6970f4c0cf633252c19db44e92a9d1c8de11199d0ae88b15002e340f67
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/7.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:53:06 GMT
Accept-Ranges: bytes
Content-Length: 50505
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/cdn-cgi/challenge-platform/scripts/jsd/main.js | 164.92.125.204 | 404 Not Found | 315 B |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/cdn-cgi/challenge-platform/scripts/jsd/main.js IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/5.png | 164.92.125.204 | 200 OK | 92 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/5.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 1280 x 1280, 8-bit colormap, non-interlaced Hashee10ee2c642ee53b1cd1a376404421ae d818f9cc2a03fc464c5dfd13b6545c1b77eccaf1 4fd0f5e67377dbab7b28d46e082a327a5e0a3138321a075c6b4f2e2d89c62564
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/5.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:53:02 GMT
Accept-Ranges: bytes
Content-Length: 91648
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/6.png | 164.92.125.204 | 200 OK | 108 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/6.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 1280 x 1280, 8-bit colormap, non-interlaced Size108 kB (108028 bytes) Hash6bbdcecd3f0eefe68a94acbf51cbc62b 9238ec2974e8d7a3698f3adc94ee1f1d76d6c566 c1a201a9bac53b71ee55125fa42e7d2f604c9c34914bf3e670c6008d5050e28b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/6.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:53:04 GMT
Accept-Ranges: bytes
Content-Length: 108028
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/8.png | 164.92.125.204 | 200 OK | 47 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/8.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hash32cb786bd126eb4b1b69ff7ff7b6eaa6 25deba3b444f951cc674c26af07f6b5c68726ad4 e77107eb96039d125d6ea56a5844475725277d4ef56e3bcc67be647559aeec7e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/8.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:53:08 GMT
Accept-Ranges: bytes
Content-Length: 46782
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/9.png | 164.92.125.204 | 200 OK | 50 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/9.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hash797e568759cd248cb874d07298f6c951 708bf0e471d8aea8d669eedac326c0ea4ef178b9 8ce3e61d09c7585cd5bcb7425d74d13def122c2648ea71a13c6f47120730380d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/9.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:53:10 GMT
Accept-Ranges: bytes
Content-Length: 50037
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500 | 216.58.207.234 | 200 OK | 50 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500 IP216.58.207.234:443
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hasha2539322fef9c1d808c7b3bb61166a27 ea52cd3d3c56d721040b867d8e26fa2a50714dc1 830603f9e6a9ba8404884283402c6ad9c07b595af97ef91202d502f48368769c
GET /css?family=Roboto:300,400,500,700|Teko:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 May 2024 17:17:16 GMT
date: Tue, 07 May 2024 17:17:16 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/xsuit2.png | 164.92.125.204 | 200 OK | 60 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/xsuit2.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hash98bdb8451e565f63f7a356b0b6112b2f 723d7536a7397e327245c9c06746604de68de0c3 d6732a6bb15e6e87d5a4126c2176300c6f493e9b36883270453e56395e53bb62
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/xsuit2.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:53:26 GMT
Accept-Ranges: bytes
Content-Length: 59819
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/12.png | 164.92.125.204 | 200 OK | 50 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/12.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hashc2e8f5c7058c50212526b44fab31fa1e c1c2e837d74f80438fd6424e6add6f9db17a2832 34d491a6bf3093cf264fc6074c62a6b1735aec089c39eb3fb79090c34d61be86
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/12.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:53:16 GMT
Accept-Ranges: bytes
Content-Length: 50511
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/10.png | 164.92.125.204 | 200 OK | 47 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/10.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hash890e16f9082ed92468061933fb1b475c cb854ab7c056c8dbfa769601b084df24afd15c61 a64d0028d501aa0c3ebbe7ee2691a5fc526a2992ae9101bf971d8745c81863cd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/10.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:53:12 GMT
Accept-Ranges: bytes
Content-Length: 46944
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/11.png | 164.92.125.204 | 200 OK | 57 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/11.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hash8f6317aa20e5aaaaa3a30cd8377aa687 279def25445a1de8675273e75728b7981ae00acd da0a8357451e22c1e76d3ca0cec651fb8d24a9d4587bab9940816ca3e6ca7dc5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/11.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:53:14 GMT
Accept-Ranges: bytes
Content-Length: 57355
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/starforgestone.png | 164.92.125.204 | 200 OK | 36 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/starforgestone.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hash63e02d8f417bf2d11c872f27319aa6ff 3defc78baf982dbeed29f93bcf62de7860882f55 5865b90f4098e419b746ceaa64bd56640bfdc8d59df3feacb434ec22c7419329
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/starforgestone.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:53:20 GMT
Accept-Ranges: bytes
Content-Length: 35577
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer-socmed-1.png | 164.92.125.204 | 200 OK | 434 B |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer-socmed-1.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 50 x 50, 8-bit colormap, non-interlaced Hash9abe0e37f34cead0507be72c8017bc07 c5af4724782dab45c50b3a984e36ef6dab48956e 5f26c54671a69571d72b2e35be96993dd60d32e9538cc70de5d6a5e89f353e9f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/footer-socmed-1.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:48:56 GMT
Accept-Ranges: bytes
Content-Length: 434
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer-socmed-2.png | 164.92.125.204 | 200 OK | 667 B |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer-socmed-2.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 51 x 42, 8-bit colormap, non-interlaced Hash89baf4057ad0bc0bb604fb513bd4dfd0 46ee2db9117ec96d7c054248acbd7f725dc086ff 1a2998dced422019f9b92e5277cc033134494fbf1898fa17506c574f002ef01f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/footer-socmed-2.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:48:58 GMT
Accept-Ranges: bytes
Content-Length: 667
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer-socmed-3.png | 164.92.125.204 | 200 OK | 571 B |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer-socmed-3.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 52 x 37, 8-bit colormap, non-interlaced Hashae13e697fdcbd86e9eeb8088bf18f8f7 acaedce8ba92f52c026a72b54515278668ade870 80748727e4804a4ea65ace1439e2dc36ed6f35e3d77a2425e5ca2d91b1445795
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/footer-socmed-3.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:00 GMT
Accept-Ranges: bytes
Content-Length: 571
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer-socmed-4.png | 164.92.125.204 | 200 OK | 656 B |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer-socmed-4.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 50 x 50, 8-bit colormap, non-interlaced Hash54fc7df7ea8771ac1a1a5bcfb16cd271 0475132527acd1149289dbb841f09719d5739a4a 40e5dff32b31a1b03d5c5fd369137cfd3b8a96ffa2801852dc66b633e956a6ea
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/footer-socmed-4.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:02 GMT
Accept-Ranges: bytes
Content-Length: 656
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer-socmed-5.png | 164.92.125.204 | 200 OK | 612 B |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer-socmed-5.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 51 x 51, 8-bit colormap, non-interlaced Hash1ae246f27dc5dc95d78682200aff05a0 bb61848c4099a806227c77a77f3cb48e3bcf326f 65b815dc321daeea149c443bf6e53509ac4c1144fe9e9c115613d509b25ce485
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/footer-socmed-5.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:06 GMT
Accept-Ranges: bytes
Content-Length: 612
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer-socmed-6.png | 164.92.125.204 | 200 OK | 2.0 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer-socmed-6.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 184 x 140, 8-bit colormap, non-interlaced Hash6498448382c156ebebbd7aa0e8eeaa48 966b1a0ba20ae489631bf1fd5fd056e66772bfea cf6d0384999aa848ec96bbfb25c8b4e64319954a501bc7f5b95a2ff6db43991c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/footer-socmed-6.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:08 GMT
Accept-Ranges: bytes
Content-Length: 1957
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/materials.png | 164.92.125.204 | 200 OK | 32 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/materials.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hashb477112c39123d6932ccc945132f9967 fa1db42d1d56f85c53f3ff63774b47c4de7cc961 449be5515f0c1e6830cb9bdf988b931d4f72e669aa2d31841dbe67fe6200b0ba
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/materials.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:53:18 GMT
Accept-Ranges: bytes
Content-Length: 32527
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/media/open.mp3 | 164.92.125.204 | 404 Not Found | 315 B |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/media/open.mp3 IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /media/open.mp3 HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/media/close.mp3 | 164.92.125.204 | 404 Not Found | 315 B |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/media/close.mp3 IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /media/close.mp3 HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/header/header-bape.png | 164.92.125.204 | 200 OK | 125 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/header/header-bape.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1632x829, components 3 Size125 kB (124663 bytes) Hash15af997efb2b674d71081e6abcb4891e 975f15ef2f3ab135b14184ffb442be7f75bf20f9 b9696bda0949a35fd8771f1b07d18b1da2fffa4e5f4a2f1303d06c4dc26998c3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/header/header-bape.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:50:18 GMT
Accept-Ranges: bytes
Content-Length: 124663
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/header/header1.png | 164.92.125.204 | 200 OK | 107 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/header/header1.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1632x829, components 3 Size107 kB (106894 bytes) Hasha55edddf9cd6773d2a7f105d27dcb157 717f6434e0423a5bba34711e251cae9529ecbc76 0df87b456de5c097bc337acb9d08b22432fb8abffaabae6deff9e5a3403a088f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/header/header1.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:50:10 GMT
Accept-Ranges: bytes
Content-Length: 106894
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/header/header2.png | 164.92.125.204 | 200 OK | 106 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/header/header2.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1632x829, components 3 Size106 kB (105514 bytes) Hashbbfd66c0a8cc99da5617083af573d02c 12d91e595d9860775f6ce3869d8a1ca4801ede2b 53c0bb7632950166034a6fe84328b9d0a4db8b7bce2b440fe0ed0848039ddaa3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/header/header2.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:50:12 GMT
Accept-Ranges: bytes
Content-Length: 105514
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/header/header3.png | 164.92.125.204 | 200 OK | 96 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/header/header3.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1632x829, components 3 Hasha5fa2cce1d38ee888e6143ae424ba985 66e55d8040a647952d958ae08543a77d22090b37 c35a28da948fcd90f4dee817c736d82c72f28c7dab157186c98284f34d6e81b2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/header/header3.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:50:14 GMT
Accept-Ranges: bytes
Content-Length: 96082
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/header/header4.png | 164.92.125.204 | 200 OK | 116 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/header/header4.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1632x829, components 3 Size116 kB (115682 bytes) Hash0f977e3d2a8d36aa9af96f9086b4b713 055e98b4e594a6f4f7d1ffe255ba7d23a7d3435a 888543f7bdb8e07ed54d1c059e72528c5956355457b6425f82e283c6ed113a6b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/header/header4.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:50:16 GMT
Accept-Ranges: bytes
Content-Length: 115682
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/1.png | 164.92.125.204 | 200 OK | 38 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/1.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 408 x 196, 8-bit/color RGB, non-interlaced Hash4e46aa782d601fddb3ee75171f7ecf70 55ec78f64a428f0436b87ce17d500c941e21b2ed 62a504b355cf5d27c1010be23672f0e3ef0c1b2a66bf51a451a17ee2bfc091a1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/1.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:50:42 GMT
Accept-Ranges: bytes
Content-Length: 38058
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/2.png | 164.92.125.204 | 200 OK | 39 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/2.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 408 x 196, 8-bit/color RGB, non-interlaced Hash3c61541dc38504a89901a91dd87ba172 b613ea1c63ee9be81280657d67e9b21d44807661 d4251132b08bea2911ca6785366d85182efb5dc26ed42c2a50f9777cb5069ce4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/2.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:50:44 GMT
Accept-Ranges: bytes
Content-Length: 39104
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/4.png | 164.92.125.204 | 200 OK | 37 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/4.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 408 x 196, 8-bit/color RGB, non-interlaced Hash066537a2dd90a276ef12d6f7362ca794 21f837de7fd9a8b9eb1975a7caf456e18d468236 aec3e5785c4e5d3d34178bb6ee6be8e83527b5dac75087675d8b16a002f9e4eb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/4.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:50:46 GMT
Accept-Ranges: bytes
Content-Length: 37197
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/png
|
|
| site-assets.fontawesome.com/releases/v6.4.2/css/all.css | 104.18.40.68 | 200 OK | 132 kB |
URL GET HTTP/2site-assets.fontawesome.com/releases/v6.4.2/css/all.css IP104.18.40.68:443
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File typegzip compressed data, from Unix Size132 kB (132240 bytes) Hash5a1d0e43b84b6f8a33eccba30f853197 4043fd2a0409c3b4e72fa4ec181586f4639001ff 57403693f3bb78348b844106fd058e88fba9e598e9c66aa491de19874f6dea1e
GET /releases/v6.4.2/css/all.css HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mail.eventt-m4-battlegrounds.sadeghii.com
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:17:16 GMT
content-type: text/css
x-amz-id-2: kHsBpvQPDfI7BkW8PIY88Te8iUNhISqFrkd2hrQ+YWAez4Axod5WrsOrXTA9nTvGussQ8qvK/jk=
x-amz-request-id: CPH3DX874F66MPHS
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Tue, 01 Aug 2023 19:17:11 GMT
etag: W/"bf2a5dfaa82bf7a17ae051d0fc06aa60"
x-amz-server-side-encryption: AES256
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 8802dcd16b63568f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/6.png | 164.92.125.204 | 200 OK | 39 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/6.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 408 x 196, 8-bit/color RGB, non-interlaced Hash3310f058e57855b9b4d285f2c0240ef3 7386506d01405c9b45a16cd859fc7323e51cc7ad 8bf8459ed55e188c1c83bf73f4bbeca367abaa07f09542a657f0fb18c2b34c1d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/6.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:50:50 GMT
Accept-Ranges: bytes
Content-Length: 39171
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select2.png | 164.92.125.204 | 200 OK | 46 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select2.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGB, non-interlaced Hashf0ffe0ebabd431c0e54a38c2d276d46f e3057cb63d729da2713d5b5cb8c5b67ad58c14af fa2ee00d8b34cc7153310eb6adbb6918e95c97a9afe2c6e297380f550dabcbe1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/select2.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:51:58 GMT
Accept-Ranges: bytes
Content-Length: 46349
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select3.png | 164.92.125.204 | 200 OK | 43 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select3.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGB, non-interlaced Hash5a21e7fd2b8c86232d92eba6ff1abd1e d03ee0ce1f0628cfbdf061fb41745ebab4583311 051abbaa902cf15e63f3bfc84ccb9f190e5ddd5b3674f6c393b8081f490fc137
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/select3.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:52:00 GMT
Accept-Ranges: bytes
Content-Length: 42714
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select1.png | 164.92.125.204 | 200 OK | 41 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select1.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGB, non-interlaced Hashf8a8294131d37a2d46af93b6e44cb83b 47ed3e4b59550a8ec7b9bd4f139fd63df494b185 22c8699de1493b56e61fb7cabe8637228447aa030e61add3fbe8c25ed34003c1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/select1.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:51:56 GMT
Accept-Ranges: bytes
Content-Length: 40861
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/xsuit1.png | 164.92.125.204 | 200 OK | 18 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/xsuit1.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x320, components 3 Hash6d4f7bb0f61c74da8eaa488a04256b62 a87fdc45f560393e9bbd3174b90069a2f7cc4d0e 18fb5b62e82c50d762abe0e9517485eec14e8d331d32be2b7180678dd9c58125
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/xsuit1.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:52:20 GMT
Accept-Ranges: bytes
Content-Length: 18171
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/xsuit2.png | 164.92.125.204 | 200 OK | 21 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/xsuit2.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x320, components 3 Hashb15edd72e437742f8c46237477b17894 421542f921f5a6fe73c964b71a9c66acc6a5e6c9 d0ccd0341716da2c556567761e46f228292202c0f118bba6717a2bf591bd42d4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/xsuit2.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:52:22 GMT
Accept-Ranges: bytes
Content-Length: 20647
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select6.png | 164.92.125.204 | 200 OK | 76 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select6.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGB, non-interlaced Hash74e57ba056989499c7e1baed4e8248bc 8382c198ad46ac7ae941a92df0210204f86c40aa 139575c3f12344cfaba8d413e7debb19b7b9443e2dd2f0c96137675e16a92bb5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/select6.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:52:06 GMT
Accept-Ranges: bytes
Content-Length: 75582
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select4.png | 164.92.125.204 | 200 OK | 74 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select4.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGB, non-interlaced Hashe61c70f1b33c566794f3f544aff2bb3a 4adb5eb2d113a8877a5ede94a301a2835026c235 0bb0cbd9728f55f2ee70255e8c24214923f8cae054d37e10a824334f25af471c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/select4.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:52:02 GMT
Accept-Ranges: bytes
Content-Length: 74296
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select5.png | 164.92.125.204 | 200 OK | 81 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select5.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGB, non-interlaced Hashde78e42f3d7c5dd6fdf3a1671e4beca0 919658f7348d94f0ed3228e9c94ba9a249e018ea 6d019233c5955d0a47f6243c1e490d49199085eeacc5c21d9ecbe29e060b4d81
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/select5.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:52:04 GMT
Accept-Ranges: bytes
Content-Length: 81435
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select9.png | 164.92.125.204 | 200 OK | 12 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select9.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x320, components 3 Hashf7189986cb919e60965a548e867a26af 71ca3da8bfcc1d4cf5b1287d0bd6f7cf02c87c72 e269abc8d8aef85e5c3795cb3435fa236e091747e798e6daa11ce74c4cbcfb91
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/select9.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:52:10 GMT
Accept-Ranges: bytes
Content-Length: 11982
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select7.png | 164.92.125.204 | 200 OK | 37 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select7.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGB, non-interlaced Hash0284fd1aa42983925452ff0e61e05a22 cf4057280fa7c73d426e0c2b3ecc71c9f35cc54f 28dae16463b0a2b39501b08e495c288bb2e435407e42e6bcd2c8cc3720115807
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/select7.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:52:08 GMT
Accept-Ranges: bytes
Content-Length: 37280
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select11.png | 164.92.125.204 | 200 OK | 28 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select11.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGB, non-interlaced Hashe3392f88d024716ba290733f34423136 51633c494848b46d4010dd369792e70c2194ca6c fd8e06a90a6f375cdb5529b318fbb7c77edc73950e2a6346d4d27637d0b79c74
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/select11.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:52:12 GMT
Accept-Ranges: bytes
Content-Length: 28510
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select12.png | 164.92.125.204 | 200 OK | 14 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/select12.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x320, components 3 Hashbb501811c5df564118acd3e0b4d67ee5 4168db8a7ea9f24c920319fd3fabba9f56625602 2d93a7b94479c40f2c2285d4ed45e9fca1b9186ee429358ca0dac7d8a8f627ad
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/select12.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:52:14 GMT
Accept-Ranges: bytes
Content-Length: 13459
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer.png | 164.92.125.204 | 200 OK | 23 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 1280 x 189, 8-bit colormap, non-interlaced Hashc6b56cf1fbbb63620e8558afde759e96 4d50888d8a17c2dcdbd05e6068ca4b4b587c7f29 34f7601064bb7cc3cce9ba942dd92d7f53889c703daea37bf34e1e71a1de03f8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/footer.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:10 GMT
Accept-Ranges: bytes
Content-Length: 22718
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/paints.png | 164.92.125.204 | 200 OK | 27 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/paints.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hash142a716e646623e42df07219a93c94ff 389aa669869b92002a6062cb97f02feb2f70e1f7 d779ab0159e4f1b47a58c5437b946f1f46c2a3818b88392e4cdf1307f3236f32
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/paints.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:54:22 GMT
Accept-Ranges: bytes
Content-Length: 26817
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/starfragment.png | 164.92.125.204 | 200 OK | 45 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/starfragment.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hash958e7674303b86a2cce2674b58983943 124112fe34bb4792706acbb9b8e2fc5528ffaa9b 84ebd703a1b3af47ffa15d71c1580527bd861466ef69072a25dcd3e0da574ed4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/starfragment.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:53:22 GMT
Accept-Ranges: bytes
Content-Length: 44551
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/killmess2.png | 164.92.125.204 | 200 OK | 19 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/killmess2.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 1280 x 195, 8-bit colormap, non-interlaced Hash94c8e03b67b519eee68c4792bc467d7e f6882e65519f72688e7049622b91bc8da537b094 68e01967a2f9067216e5d9a9f8a991cb587a681317e852caea65bfb2dd1d1c8e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/killmess2.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:50:58 GMT
Accept-Ranges: bytes
Content-Length: 19447
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/killmess5.png | 164.92.125.204 | 200 OK | 29 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/killmess5.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 1280 x 195, 8-bit colormap, non-interlaced Hash348d61b0f716a722686632170df4b156 ac7e0ffd87743742b1498b81357bec5960a62498 58d927bec390b8f72f69d469d09aa130b7f5b67243106113ba3cdac0f69c7016
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/killmess5.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:51:04 GMT
Accept-Ranges: bytes
Content-Length: 28957
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/killmess4.png | 164.92.125.204 | 200 OK | 20 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/killmess4.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 1280 x 195, 8-bit colormap, non-interlaced Hash2ea54b408e8d91e1790ddb64a9ae8400 0c0395cfc9f6a33cfb26743876989f3d16b65005 dd68dd8a07961fc53153621aa624bf7688604387bccac08e25c513ef3f8ee86a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/killmess4.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:51:02 GMT
Accept-Ranges: bytes
Content-Length: 19478
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/killmess6.png | 164.92.125.204 | 200 OK | 30 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/killmess6.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 1280 x 195, 8-bit colormap, non-interlaced Hash814bab059ef4236459f12bb0e0b151ec fb01299308625fa0aaf2c5c5fc9d28375f195ba9 db91f3e09f675c065ce52d89d15151ea46a97c9b22cb1e94a79dd6dcb54b04d6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/killmess6.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:51:06 GMT
Accept-Ranges: bytes
Content-Length: 30307
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/close.png | 164.92.125.204 | 200 OK | 1.2 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/close.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 43 x 45, 8-bit/color RGBA, non-interlaced Hash68fb5b6f86421b10e17cb96a65cbe4d3 80dd39fc67e874953d49ceb2321a1147d0018821 d0eda953f3d7bb15aa078cb44b27702566108120d8b9b37e9a3324e2b767aa08
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/close.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:46:26 GMT
Accept-Ranges: bytes
Content-Length: 1170
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/icon-facebook.png | 164.92.125.204 | 200 OK | 5.5 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/icon-facebook.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 1024 x 1024, 8-bit colormap, non-interlaced Hash2d797a69acc678581d3a4ea0fb0636ed 3c13f1b3e8fa01cc284ed3492dcb2efd447d06bc 44a4d8218d1a959cd0ff8d764fcf5306aeb21e1689725b63825bd7ee79186baa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/icon-facebook.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:12 GMT
Accept-Ranges: bytes
Content-Length: 5468
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/icon_2.jpg | 164.92.125.204 | 200 OK | 42 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/icon_2.jpg IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 554x554, components 3 Hasha3f64c4dbc59578bde87272fab800586 3d458492b06598b93382b3675e5b59aad8aac436 0fa244d4efd45a45b32d1319ec495e307381445f62dceb071892f47e431daa81
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/icon_2.jpg HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:16 GMT
Accept-Ranges: bytes
Content-Length: 41672
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/icon_fb.png | 164.92.125.204 | 200 OK | 4.5 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/icon_fb.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 512 x 512, 8-bit colormap, non-interlaced Hash55eef055b7e3c9a7b01e75bf1d946602 298bedf186fdcc606901513a2edbb5bc3ca233e6 9af17159dff494810a71a37678db1df805f264b935730d1c2e5a4d970305917f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/icon_fb.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:20 GMT
Accept-Ranges: bytes
Content-Length: 4549
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/icon-twitter.png | 164.92.125.204 | 200 OK | 6.0 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/icon-twitter.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 86 x 86, 8-bit/color RGBA, non-interlaced Hash3102bd5ece1855fd21122d8f0e2f6b43 79e8a83aa0eaa45dd07914726ad40736fd0bcbcf 4b3a0f6de375b108b3fd927b85f45660478919a1dcc7051ff227e4bf8d49d9de
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/icon-twitter.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:14 GMT
Accept-Ranges: bytes
Content-Length: 5997
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/alert.png | 164.92.125.204 | 200 OK | 3.2 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/alert.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 86 x 86, 8-bit/color RGBA, non-interlaced Hash647348a6c16dc7ffa7582cef63d47247 8ef22a07be992cc94060b8b855be9ebfaed98d9c 5717e656143df2f6d333dc7d08fe1c25727cd8a2076e5d8242e65cf256e8a1ef
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/alert.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:48:50 GMT
Accept-Ranges: bytes
Content-Length: 3209
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/kotak.png | 164.92.125.204 | 200 OK | 111 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/kotak.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 396 x 396, 8-bit/color RGBA, non-interlaced Size111 kB (110688 bytes) Hash10cb6a2da72f74f0783993831c68ee01 a8bb4739cdbd42beef1c9c26397ac47db610bf3d f8d5fdd7704bc05e7bf6b331e65af394ec5d09b67917cc53e711ffca7f97f99a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/kotak.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:22 GMT
Accept-Ranges: bytes
Content-Length: 110688
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/load.gif | 164.92.125.204 | 200 OK | 6.5 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/load.gif IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeGIF image data, version 89a, 164 x 38 Hash144bb7d6f1e1cb408835fcd849acaf41 8bc47b81f5b2231fe6ef713f70dfff07961c6720 9a8c5f0bc8f65663a4bd8afee1623cfecb94f3c327e86705685f46a622ff6b66
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/load.gif HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:26 GMT
Accept-Ranges: bytes
Content-Length: 6518
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: image/gif
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/guide/e4eb1c730c28901ed581443a28f421d3.png | 164.92.125.204 | 200 OK | 42 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/guide/e4eb1c730c28901ed581443a28f421d3.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 350x200, components 3 Hash2cffdf981f6e507ab0e247efd0abb1d6 16e29910c12456808fc0b4264c80701dcf18ae0c 16168eac028d2dc822d14f510caa506dc8e2a706c1883108f7e43d8f4649e700
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/guide/e4eb1c730c28901ed581443a28f421d3.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:50 GMT
Accept-Ranges: bytes
Content-Length: 41758
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/guide/e7acdbd75bf8259cae9cc3a6f3d6ca01.png | 164.92.125.204 | 200 OK | 29 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/guide/e7acdbd75bf8259cae9cc3a6f3d6ca01.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 350x200, components 3 Hash766039d78bd5674c819db24244539ff4 31765fa105e4e0dfc7778ec77e89bdfe0ea399bb 680f159f2ffd2583ddcac5783bbd8ff63c9ae9be0d94ff56948d9b41051ccab7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/guide/e7acdbd75bf8259cae9cc3a6f3d6ca01.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:52 GMT
Accept-Ranges: bytes
Content-Length: 28733
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/load.png | 164.92.125.204 | 200 OK | 3.0 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/load.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced Hashc5ac1db50750a1177795f474678b2be2 ef0ab1883cbc85bd4d0a53ca3963236d268d908c 9ee0b7416b35942defe3c7c7840abf3af799a478ebf8b9c437ccf96898b808fd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/load.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:28 GMT
Accept-Ranges: bytes
Content-Length: 2996
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/link.png | 164.92.125.204 | 200 OK | 6.5 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/link.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 77 x 74, 8-bit/color RGBA, non-interlaced Hash48c050386aace34c60f16a01fdf74c3f 53768d24571ce30d02d038a196cee350baf19d8f b318d6f5d2b095f2ee11e25716a02d4de816c93eb2d0ccd26459e03b65962b14
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/link.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:24 GMT
Accept-Ranges: bytes
Content-Length: 6526
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer-login.png | 164.92.125.204 | 200 OK | 63 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/footer-login.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 1280 x 54, 8-bit/color RGBA, non-interlaced Hash9c9b804ab29f89bbaf74631f98574278 1ade26603615d5f820880201137c48f4bfa80a60 a7204f9c6e9885587b2d096189b97f58c5b3bdda908df5bd355066723900dfef
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/footer-login.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:19 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:48:54 GMT
Accept-Ranges: bytes
Content-Length: 63387
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Content-Type: image/png
|
|
| www.pubgmobile.com/common/images/icon_logo.jpg | 23.36.76.227 | 200 OK | 982 kB |
URL GET HTTP/2www.pubgmobile.com/common/images/icon_logo.jpg IP23.36.76.227:443 ASN#20940 Akamai International B.V.
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerDigiCert Inc Subjectwetv.acc.qq.com Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File typeJPEG image data, baseline, precision 8, 1024x1024, components 3 Size982 kB (982437 bytes) Hashb83d8d3e9beecfac081f4e742d27661c 448330670bef8c2ee17baf6d2410ca974341cb88 5899c82b2f0563679a9c1ee79b5b28f2545864d95c7627c1a70e36a2f034497d
GET /common/images/icon_logo.jpg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/jpeg
content-length: 982437
last-modified: Mon, 30 Nov 2020 12:10:45 GMT
etag: "5fc4e145-efda5"
accept-ranges: bytes
cache-control: max-age=280
expires: Tue, 07 May 2024 17:21:59 GMT
date: Tue, 07 May 2024 17:17:19 GMT
akamai-grn: 0.df4c2417.1715102239.20f78bb3
X-Firefox-Spdy: h2
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/xsuit1.png | 164.92.125.204 | 200 OK | 49 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/rewards-list/xsuit1.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hashb537a47cdd402a0f98d4055ba4e1609b ef3c9ffe0dd921d07c29c4dc98bb65ab469c0f61 5ccf6dd6a79d7bc77489f24a4f9c361001a5abd754ca4b85108f79e4dff43bb8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/rewards-list/xsuit1.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:53:24 GMT
Accept-Ranges: bytes
Content-Length: 49076
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/5.png | 164.92.125.204 | 200 OK | 37 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/menu/5.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 408 x 196, 8-bit/color RGB, non-interlaced Hashf8b095f5d8c2de6cf6a3b9f414675fb1 fca9080751f8777b36d7ef07c769f8854c6f3774 c5974ba6a822ad0cf53be4d99c54e4a5287b643d6c33581a0c2d1d0a880283a8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/menu/5.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:18 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:50:48 GMT
Accept-Ranges: bytes
Content-Length: 36652
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
|
|
| mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/ques.png | 164.92.125.204 | 200 OK | 1.2 kB |
URL GET HTTP/1.1mail.eventt-m4-battlegrounds.sadeghii.com/img/assets/ques.png IP164.92.125.204:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://mail.eventt-m4-battlegrounds.sadeghii.com/ CertificateIssuerLet's Encrypt Subjectcpanel.eventt-m4-battlegrounds.sadeghii.com FingerprintCF:DC:AF:E7:4C:2F:C2:55:F0:20:03:71:2D:5B:16:4B:6A:B5:56:DE ValidityMon, 06 May 2024 19:40:25 GMT - Sun, 04 Aug 2024 19:40:24 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashc8f8db784a0b9739748db65ecc336734 a201887918b1d23d08f452f6d8a3691196b51b7f 5029b66ed6bb3de931e1a0d075b4e1a0118ee4b5bd02ed2f8fe2c23dc0f2e29e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/ques.png HTTP/1.1
Host: mail.eventt-m4-battlegrounds.sadeghii.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.eventt-m4-battlegrounds.sadeghii.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:17 GMT
Server: Apache
Last-Modified: Fri, 23 Feb 2024 18:49:32 GMT
Accept-Ranges: bytes
Content-Length: 1223
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
|
|