r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9552
Expires: Wed, 23 Nov 2022 16:25:29 GMT
Date: Wed, 23 Nov 2022 13:46:17 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 770d09773b5f304acf141fd66a4862b4
5ddc46ab75de26c858a9a6f6d1beaaec9bb181f5
c7bcc6928fa1c0bb225ce8a2f6badd6cb1bd6ea002fb808ed34e8dafbd7b3b26
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5927
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 13:46:17 GMT
Last-Modified: Wed, 23 Nov 2022 12:07:30 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
beyondcryptofx.com/
301 Moved Permanently 707 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET / HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Wed, 23 Nov 2022 13:46:16 GMT
server: LiteSpeed
location: https://beyondcryptofx.com/
x-turbo-charged-by: LiteSpeed
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9480
Expires: Wed, 23 Nov 2022 16:24:17 GMT
Date: Wed, 23 Nov 2022 13:46:17 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 23 Nov 2022 13:17:07 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1750
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Px3X8vNvOdfTpWBaDxjzRx0uBOrfRLHEPACKG0Cx6ynwy6EvuoBF59NySuJt+FGGfLDlBKsNrYs=
x-amz-request-id: RYPAD58NVV13ZZB3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 23 Nov 2022 13:40:01 GMT
age: 376
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 13:46:17 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 23 Nov 2022 13:08:53 GMT
cache-control: public,max-age=3600
age: 2244
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 3341a21d9104a2f85131434c14275224
ea32954d4b6d8ffa4ad574a03c53086febec1cff
0316e7fbc863d19d21febab61931ae58f1b7272e07e877b430818f627d20d9fd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 13:46:17 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 21 Nov 2022 19:28:48 GMT
Expires: Mon, 28 Nov 2022 19:28:47 GMT
Etag: "ea32954d4b6d8ffa4ad574a03c53086febec1cff"
Cache-Control: max-age=451949,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76ea59a39897b521-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash eb52164d651f5f45416e873aec29eb04
405b29bb7e7cd4367cf82988f8603e53db65f139
ed885e05db822ff30fe951e10b6d4f21e574d053939afca792992a1549a15301
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4486
Cache-Control: max-age=160522
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 13:46:17 GMT
Etag: "637de2ad-1d7"
Expires: Fri, 25 Nov 2022 10:21:39 GMT
Last-Modified: Wed, 23 Nov 2022 09:06:53 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
beyondcryptofx.com/
200 OK 5.7 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (471)
Hash ba2bc3cb94348e0b90d49993ba1e8d1e
45c824edd4aba41d518a79dfdec9586e50d16f67
2b5ef254ee3f2e73cc3ddf39e2608aaa8018066dcb8bf271ca8c35299f56a971
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET / HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 01 Mar 2022 08:41:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5668
date: Wed, 23 Nov 2022 13:46:17 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gv66tcdeUcPNXVgdstI3ug==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fD4Qufs01GWlWHJmUrbD+BMmyUo=
beyondcryptofx.com/css/bootstrap.min.css
200 OK 16 kB URL HTTP/2 beyondcryptofx.com/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65009)
Hash 1a8d38522d7bd81676dc68825ed90a11
640e0f326b8d8f78d964985f8b5bcd247a1cfec3
3854f7b758dcf28b23ecbd443a05a4227cd2ece4bd03f16fd13756341161ee08
Analyzer Verdict Alert quad9 Sinkholed
GET /css/bootstrap.min.css HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: text/css
last-modified: Tue, 01 Mar 2016 20:05:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 16421
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/css/owl.carousel.css
200 OK 994 B URL HTTP/2 beyondcryptofx.com/css/owl.carousel.css
IP
Hash 4f3f6bf1517abdbc8537086cc90f52d4
b94807522468504dbbceec23f031fe8c8e38bd67
a10ca7793015a3b7a347fd5904623d854a25b6cabd35518ad7c9b6c47692f17c
Analyzer Verdict Alert quad9 Sinkholed
GET /css/owl.carousel.css HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: text/css
last-modified: Fri, 27 Jun 2014 04:51:42 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 994
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/css/owl.transitions.css
200 OK 652 B URL HTTP/2 beyondcryptofx.com/css/owl.transitions.css
IP
Hash 2ed21aa96cf87b0c0284ccc8c32da2a0
24632a081fbdb19ae4962d8aaa720c08f0249acf
5fe9880a5013fa216f1d57c448d657b4beae1ddc74568d8b3d3718633e9c31b3
Analyzer Verdict Alert quad9 Sinkholed
GET /css/owl.transitions.css HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: text/css
last-modified: Tue, 15 Apr 2014 04:33:26 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 652
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/css/flaticon.css
200 OK 716 B URL HTTP/2 beyondcryptofx.com/css/flaticon.css
IP
Hash 2b9071ecdf4de1a137a64ab226e9b7d4
93be17d85dc9aad4e2d56e15dd01d0cf6862fc2d
47e81017de07966222971be70cdd0050b8e3c889a2f7e1af5158b0c81b3f19e4
Analyzer Verdict Alert quad9 Sinkholed
GET /css/flaticon.css HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: text/css
last-modified: Fri, 17 Jan 2020 22:22:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 716
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/css/themify-icons.css
200 OK 2.7 kB URL HTTP/2 beyondcryptofx.com/css/themify-icons.css
IP
Hash 5e01182e7660225841c0664f9541307d
12b3cb99d96f37a75d6d94b6316101b5be1c9140
3bebfcfc5df4fd9595717e3f0492dbd12de1a61d5e56cdac04bd628379639d01
Analyzer Verdict Alert quad9 Sinkholed
GET /css/themify-icons.css HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: text/css
last-modified: Wed, 18 May 2016 06:31:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2673
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/css/magnific.min.css
200 OK 1.5 kB URL HTTP/2 beyondcryptofx.com/css/magnific.min.css
IP
File type ASCII text, with CRLF line terminators
Hash 982320dc260b08b77f00239277753a1e
fdda2255e383803d702ef3c532ad37a34d708a61
bd53f3d090b7ecba4f657f67534c15bdbf6590b5656496005e3de1eed729a605
Analyzer Verdict Alert quad9 Sinkholed
GET /css/magnific.min.css HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: text/css
last-modified: Wed, 06 Dec 2017 21:05:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1459
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/css/meanmenu.min.css
200 OK 750 B URL HTTP/2 beyondcryptofx.com/css/meanmenu.min.css
IP
File type ASCII text, with CRLF line terminators
Hash 96088384c7633c655c415f997aecd449
41ac5ff0f960a9bead3239843c4ccb007e16f5b9
8dcad589038bc2dd3ef3114d7e46c3bf8a599559f2962882a96c2176f370215d
Analyzer Verdict Alert quad9 Sinkholed
GET /css/meanmenu.min.css HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: text/css
last-modified: Thu, 11 Jun 2020 09:09:26 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 750
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/css/font-awesome.min.css
200 OK 5.9 kB URL HTTP/2 beyondcryptofx.com/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (27327)
Hash 1d8267d35fd4b26e0b38f094bd9419ac
5dbe6b38d377009ac67e2e80c8cb07e8d6a4e202
0da155482828bf61d6ed7dc8b29d126245dd4a3424c8909d4db4ce3ef7555c20
Analyzer Verdict Alert quad9 Sinkholed
GET /css/font-awesome.min.css HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: text/css
last-modified: Thu, 25 Feb 2016 01:45:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5886
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10571
Expires: Wed, 23 Nov 2022 16:42:30 GMT
Date: Wed, 23 Nov 2022 13:46:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10571
Expires: Wed, 23 Nov 2022 16:42:30 GMT
Date: Wed, 23 Nov 2022 13:46:19 GMT
Connection: keep-alive
beyondcryptofx.com/css/animate.css
200 OK 4.4 kB URL HTTP/2 beyondcryptofx.com/css/animate.css
IP
File type ASCII text, with very long lines (54297), with CRLF line terminators
Hash 11616af75ef64830c764ccea6b9ff578
ad7f4f29c13d57e16b0d3565e35ca8e83c8efc00
a994399ad9b551566b8336c7d301e90a96eb18303dae3b983ca027557dd0b0d1
Analyzer Verdict Alert quad9 Sinkholed
GET /css/animate.css HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: text/css
last-modified: Thu, 01 Aug 2019 18:51:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4407
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/js/vendor/modernizr-2.8.3.min.js
200 OK 6.0 kB URL HTTP/2 beyondcryptofx.com/js/vendor/modernizr-2.8.3.min.js
IP
File type HTML document, ASCII text, with very long lines (14856)
Hash d28a3a6cc89f8d1af1c4f354ee0013cb
457bc78a4d6fb63dfd01b69ff45c8b7afe41f356
1e6321e05015600b85c1b3c56a62e073fd2c1a56a24b8a2bdc28d7ce80df7f24
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /js/vendor/modernizr-2.8.3.min.js HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: application/javascript
last-modified: Tue, 12 Jan 2016 18:12:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6009
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/css/responsive.css
200 OK 1.7 kB URL HTTP/2 beyondcryptofx.com/css/responsive.css
IP
File type ASCII text, with CRLF line terminators
Hash 238ad6926da88e695daec299c35cc5be
4d1de3d421be6d651760bf25c61e1e4367f8b113
f24ae501eb383b86d7e752689a2b78c5dab7dc9d8a13b33d8341cdacc8aba8d0
Analyzer Verdict Alert quad9 Sinkholed
GET /css/responsive.css HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: text/css
last-modified: Sun, 21 Jun 2020 08:48:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1721
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/icon/w1.png
200 OK 1.5 kB URL HTTP/2 beyondcryptofx.com/img/icon/w1.png
IP
File type PNG image data, 16 x 11, 8-bit/color RGB, interlaced\012- data
Hash 31f1ef86df43c940411d97432f215dc3
387d4ab0a2f177c53ba35ec3b2cec8e857db0333
7c27713daa9f354b1fde8c4d7dbe45d959f72f9605cf523a936b274a69be8261
Analyzer Verdict Alert quad9 Sinkholed
GET /img/icon/w1.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Tue, 14 Apr 2020 07:33:38 GMT
accept-ranges: bytes
content-length: 1478
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/icon/w2.png
200 OK 1.4 kB URL HTTP/2 beyondcryptofx.com/img/icon/w2.png
IP
File type PNG image data, 16 x 11, 8-bit/color RGB, interlaced\012- data
Hash cacad410e1f41a5f126e9a5813ce9c91
fa300548f70214bb8c7fe46f97da19fedf6fe602
7f3a93427a0c57204b0cc3baba82dc5001dbe784fd7e0c86b7b345679ad8fc07
Analyzer Verdict Alert quad9 Sinkholed
GET /img/icon/w2.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Tue, 14 Apr 2020 07:34:04 GMT
accept-ranges: bytes
content-length: 1437
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/icon/w4.png
200 OK 1.4 kB URL HTTP/2 beyondcryptofx.com/img/icon/w4.png
IP
File type PNG image data, 16 x 11, 8-bit/color RGB, interlaced\012- data
Hash 2554dae4c9d1f83bbf7ef3ec159a36b9
3ab3916ab7d40e8836d802b8f5155d81b817ee69
9fad0d73a6195c78d1d9af55d70f79797e65e152d9d55f3cb9706f0ec8e060f6
Analyzer Verdict Alert quad9 Sinkholed
GET /img/icon/w4.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Tue, 14 Apr 2020 07:34:58 GMT
accept-ranges: bytes
content-length: 1448
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f13f0a4-9e67-4f61-9165-83b87312d9cb.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f13f0a4-9e67-4f61-9165-83b87312d9cb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 309227dc1b5f9193c6be8f5a010fa348
dff12e88a784a954012f257d3689862c52251d01
2d52b83ff0a58c41bf2e38abf8fce13eb87b5ecfce144ff0edc1bfadd254b452
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f13f0a4-9e67-4f61-9165-83b87312d9cb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8081
x-amzn-requestid: cafd3337-7bb8-4e2d-91d4-a33439a32b80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBcAMEwgoAMFl-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d4067-6074dcae15d9194513916d48;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:34:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0qleUIXFjvOqr3SeTpnFnVnhacI-ps0Fc33zsWp3eynFDhYOasUpPw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:56:48 GMT
age: 56971
etag: "dff12e88a784a954012f257d3689862c52251d01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F719df867-6e3b-42ad-bb29-bacd6908c756.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F719df867-6e3b-42ad-bb29-bacd6908c756.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 858121146f13af8b53e7bfb9d143490c
2a0aa4d6e3d648b23e15db38559fa9be9ca2cdd8
5c79f7d9479cdaca6fca1abc2af768f8dbe2e7df70959a6620c676a4a4060b9e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F719df867-6e3b-42ad-bb29-bacd6908c756.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5721
x-amzn-requestid: d6a84920-e8e5-4160-aea1-ccabce26d36f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bvCq5EH4IAMFlSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375e4ab-7835c4341c7b2fb700784aa2;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 07:37:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KX8eExctOwlkCuEo1G-yxhL4FaM-DquAvgfYTjwekflhfWccr5LU1Q==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 05:08:10 GMT
age: 31089
etag: "2a0aa4d6e3d648b23e15db38559fa9be9ca2cdd8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d582ed2-f829-4647-9113-832d4500a207.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d582ed2-f829-4647-9113-832d4500a207.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6d2c986e076309d51d199332caebb07a
343a5bfba0f8fec28f9345f276b44f44c6eaf6a6
64e6fba6a45c70c1db6040a2273472774c00257bef373cc45b6ca00cb819681a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d582ed2-f829-4647-9113-832d4500a207.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9138
x-amzn-requestid: 524e565e-a9fb-45f9-b786-d64cf26a3cdf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBcAAHG8IAMFhwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d4066-3689e70e6212e9e77dc134f4;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:34:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cwu__NPGaU0zyAG0H1yZhmjGsFzvNmzsGv6Zt9hrF5gwSysEio2MjA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:09:16 GMT
age: 56223
etag: "343a5bfba0f8fec28f9345f276b44f44c6eaf6a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 481c033b9ffd030ff0de6e35cf788b47
85d3baad9217af2b5d75c019d2ef95dbb919a788
02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bubSsHbZoAMFZNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: _j5ykGwKHIQEFLyuJK_OMvs-CsCvkUQhZc_YD8gAtbyOECQ894zvjw==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 abbf2df97f9d83839470842dc2e68cb6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 04:50:29 GMT
age: 32150
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c6380f73d47906bd63b9c48137e4df61
94e053461d2db89e9d08321f26a2555ebcd7e0b9
84144e3c3e7acc7339fd1da9b373f18582734b6f4d235b2aef8c90616ed1c8a7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5914
x-amzn-requestid: 8dea187e-ee61-4691-aff7-59202f978565
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b2P4MF0UIAMFWBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6378c69a-011430f86689624a29d71215;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 12:05:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: c2w_q7fYc60JSQ4GcAlmUFyp7csfflgG8GvCXJuy_wWlvf9mIG0u9g==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:38:55 GMT
age: 54444
etag: "94e053461d2db89e9d08321f26a2555ebcd7e0b9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f159cda-2152-46b5-8f3f-971d5d406960.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f159cda-2152-46b5-8f3f-971d5d406960.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 050f43f830803646a2ece48e01ac8d24
d359314799f8873b35580dd5f8c64b75dfa4ffe3
d4ad8c9e5e1fe428c55c02e567aba32664055f8a881ee6aff8438c3a09124f3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f159cda-2152-46b5-8f3f-971d5d406960.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6475
x-amzn-requestid: b3f37508-ce80-4bfd-8f40-d98c1ee57f7d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: byQlaF-9IAMFh8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63772e22-42b6d99c69142d1e37161d69;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 07:02:58 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: QUkCjTAybAgpQQtHzlnzyOGXy7K7mB8G6iap0_OlDkTVGJe_sK3-zQ==
via: 1.1 cca7d60248a961ff8fc8c5640024b652.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 07:43:39 GMT
age: 21760
etag: "d359314799f8873b35580dd5f8c64b75dfa4ffe3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
beyondcryptofx.com/img/icon/w3.png
200 OK 1.4 kB URL HTTP/2 beyondcryptofx.com/img/icon/w3.png
IP
File type PNG image data, 16 x 11, 8-bit/color RGB, interlaced\012- data
Hash 4d9d85cfcc2ea155b3b2f70f3e4ef78f
74ccd809dab1d510ff2a5a752547372805fada09
465968c625f5f816fac660c9c9ff9f702001c7052cd635ffec675e2e8f8cd87d
Analyzer Verdict Alert quad9 Sinkholed
GET /img/icon/w3.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Tue, 14 Apr 2020 07:34:34 GMT
accept-ranges: bytes
content-length: 1447
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/icon/w5.png
200 OK 524 B URL HTTP/2 beyondcryptofx.com/img/icon/w5.png
IP
File type PNG image data, 16 x 11, 8-bit/color RGBA, non-interlaced\012- data
Hash 8f9ad9ad9034edf7aeab7c7ae4b4d302
8f04b8452b43fb3708ee76fc75e375cd7ca66404
966791778b175144ea4ed5ee869d66f66b9d06748e08e5450728ac90794f75a7
Analyzer Verdict Alert quad9 Sinkholed
GET /img/icon/w5.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Sun, 17 Apr 2016 19:49:20 GMT
accept-ranges: bytes
content-length: 524
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/icon/login.png
200 OK 1.5 kB URL HTTP/2 beyondcryptofx.com/img/icon/login.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, interlaced\012- data
Hash 78a5ea8fd5251cb0059e47810f725ad8
84882a1a3a4078b1ec10d55ed42149b28a8cd7be
dd22d5a887259f6e55736f8e099ab7172eb57afcbc08d0462e6365e8edff8330
Analyzer Verdict Alert quad9 Sinkholed
GET /img/icon/login.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Fri, 12 Jun 2020 20:31:32 GMT
accept-ranges: bytes
content-length: 1519
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/icon/m.png
200 OK 3.3 kB URL HTTP/2 beyondcryptofx.com/img/icon/m.png
IP
File type PNG image data, 40 x 40, 8-bit/color RGBA, interlaced\012- data
Hash 38ed0b2dfc6471b2aa4b2d87b1ec8cc9
61d163a0061df17d2a0a9cbcb4571855b3f34724
1f72ba6ee07bff132555571de41750d5c4e88ef197257c8722e566e798e747ca
Analyzer Verdict Alert quad9 Sinkholed
GET /img/icon/m.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Tue, 14 Apr 2020 05:25:12 GMT
accept-ranges: bytes
content-length: 3267
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/style.css
200 OK 9.1 kB URL HTTP/2 beyondcryptofx.com/style.css
IP
File type ASCII text, with CRLF line terminators
Hash c67e6af121c5be729adf0ee7c01f69af
99831a1ae2ab5f378308098e3639f94883f707d1
7fc70d69309f5e87e486d5582ba7c9046f4b17e3826b3f6ab543150a8305bc85
Analyzer Verdict Alert quad9 Sinkholed
GET /style.css HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: text/css
last-modified: Thu, 25 Jun 2020 08:25:04 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 9137
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 065495ec7a963a205abd9c8dbc75cb5d
ea416d0df4f6706150bda5da2077174f5cdd986b
1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 13:46:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 065495ec7a963a205abd9c8dbc75cb5d
ea416d0df4f6706150bda5da2077174f5cdd986b
1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 13:46:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f22437494cab8f3b1de6d48c3677f43
42461557365b59e300ae356c37b95f652e10dacd
420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 13:46:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Nunito:300,400,600,700,800&display=swap
200 OK 36 kB URL HTTP/2 fonts.googleapis.com/css?family=Nunito:300,400,600,700,800&display=swap
IP
Hash 06532d923bb6f755278b5ce5ef604fbc
16a5b94723bf9b82d5f5629cf01c347cefd20778
6b74d61a96709000415b5ed0bb8cc7525f30ba2e44d1d81578c4e697278bad69
GET /css?family=Nunito:300,400,600,700,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 23 Nov 2022 13:46:19 GMT
date: Wed, 23 Nov 2022 13:46:19 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f22437494cab8f3b1de6d48c3677f43
42461557365b59e300ae356c37b95f652e10dacd
420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 13:46:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
beyondcryptofx.com/img/logo/logo2.png
200 OK 5.2 kB URL HTTP/2 beyondcryptofx.com/img/logo/logo2.png
IP
File type PNG image data, 200 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 431fca9f722ef3c2cf75df157bdf627a
784ac1a6204d689d8782939016dc15c14aa43260
dc4c651bc0c2217dbc694f82395086eb85473b4de5975743ef4b904940d897c3
Analyzer Verdict Alert quad9 Sinkholed
GET /img/logo/logo2.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Mon, 28 Feb 2022 02:00:30 GMT
accept-ranges: bytes
content-length: 5247
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/js/bootstrap.min.js
200 OK 9.5 kB URL HTTP/2 beyondcryptofx.com/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (32056)
Hash aa828ba86d6e0a05512e7c61d022df98
c0af2c67663dc68867c96cbe9b45a90dadf3d92f
a25c2f88e3fc81954d0c31d6fab7ef26def52532a879eabf2be4d4d5d6b78fe0
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /js/bootstrap.min.js HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2016 20:05:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 9522
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/icon/m1.png
200 OK 3.7 kB URL HTTP/2 beyondcryptofx.com/img/icon/m1.png
IP
File type PNG image data, 40 x 40, 8-bit/color RGBA, interlaced\012- data
Hash 386114c74143bab22dc10c2169888640
dffe91dbfdad881bdbcbfc9738fd14b08759de8d
fc45469af5d338d2a8bf16178b07b80cc8a9cae719412aecc1f967d04eb93af8
Analyzer Verdict Alert quad9 Sinkholed
GET /img/icon/m1.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Tue, 14 Apr 2020 05:25:50 GMT
accept-ranges: bytes
content-length: 3655
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/icon/m5.png
200 OK 2.6 kB URL HTTP/2 beyondcryptofx.com/img/icon/m5.png
IP
File type PNG image data, 40 x 40, 8-bit/color RGB, interlaced\012- data
Hash 24c6d10c0d59a5a3ea6a688f98ef848f
4abfb3a63f64ea966821cfd68a2baeab25f6b4e7
6ceca55f346fdf7774fae64625066dbec6d9acae1440e7d9e213d45304d4d1c5
Analyzer Verdict Alert quad9 Sinkholed
GET /img/icon/m5.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Wed, 15 Apr 2020 00:43:34 GMT
accept-ranges: bytes
content-length: 2623
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/js/wow.min.js
200 OK 2.6 kB URL HTTP/2 beyondcryptofx.com/js/wow.min.js
IP
File type ASCII text, with very long lines (8385), with CRLF line terminators
Hash f101be151d34fc6aa063c15fca9424c7
e07274f12af2ebac7e04cd43c406054b041da795
769d7bb6f79a961d1292584985c450a0bbe1c2e3f8bb2cca160e4d66222dae3b
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /js/wow.min.js HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: application/javascript
last-modified: Sun, 18 Aug 2019 18:43:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2576
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/icon/m2.png
200 OK 4.5 kB URL HTTP/2 beyondcryptofx.com/img/icon/m2.png
IP
File type PNG image data, 40 x 40, 8-bit/color RGBA, interlaced\012- data
Hash fa5cea621897bdacf6fdfd92a25fe4e4
4b812a65f4968edc62772a0e9b4233e03eb02bd5
79e29292750536c5382c59d4d0cb2e5afd5d616221d91eacc0efb7db38909bc9
Analyzer Verdict Alert quad9 Sinkholed
GET /img/icon/m2.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Wed, 15 Apr 2020 00:40:28 GMT
accept-ranges: bytes
content-length: 4529
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/brand/3.png
200 OK 7.4 kB URL HTTP/2 beyondcryptofx.com/img/brand/3.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, interlaced\012- data
Hash 11d71636b0fcabe473f0bb64a19409f0
e5842a844ebe5fbe68968e6e29a3b48986315d4b
634bbe34ff0f560b21034490c8897a2530497a050b8c9fe5d9468a12f08de4da
Analyzer Verdict Alert quad9 Sinkholed
GET /img/brand/3.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Sun, 03 May 2020 01:35:48 GMT
accept-ranges: bytes
content-length: 7427
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/icon/m3.png
200 OK 4.3 kB URL HTTP/2 beyondcryptofx.com/img/icon/m3.png
IP
File type PNG image data, 40 x 40, 8-bit/color RGBA, interlaced\012- data
Hash 28047e0e14a23c5873ed86f66f7c7f64
a7292ab846f2fc39995dde7749bd18292ae293a5
35b34a19db844713f09868c2ba46eb08819495c1e48aa90bc30590fd1eaeb5b7
Analyzer Verdict Alert quad9 Sinkholed
GET /img/icon/m3.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Wed, 15 Apr 2020 00:41:10 GMT
accept-ranges: bytes
content-length: 4267
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/brand/1.png
200 OK 14 kB URL HTTP/2 beyondcryptofx.com/img/brand/1.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, interlaced\012- data
Hash 92c2bca081fadfa2408bc31f3777343b
688e694dbe4983b30404c96a9ab95e5489ccada0
79ed1fd22099645a7d0576d20f8b63279eb89eb897388060d78fabb7c4a284fa
Analyzer Verdict Alert quad9 Sinkholed
GET /img/brand/1.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Sun, 03 May 2020 01:21:40 GMT
accept-ranges: bytes
content-length: 13556
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/icon/m4.png
200 OK 4.4 kB URL HTTP/2 beyondcryptofx.com/img/icon/m4.png
IP
File type PNG image data, 40 x 40, 8-bit/color RGBA, interlaced\012- data
Hash faa2ab05d33f844f68a819da880e095b
5c35d16ac84e17914c559cb6d07866ac6e37aaff
349bdea9c29a9b5a5cb37ba99a48961845b92906935fdc40d8180a9a7b2b30c6
Analyzer Verdict Alert quad9 Sinkholed
GET /img/icon/m4.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Wed, 15 Apr 2020 00:41:36 GMT
accept-ranges: bytes
content-length: 4398
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/brand/2.png
200 OK 7.1 kB URL HTTP/2 beyondcryptofx.com/img/brand/2.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, interlaced\012- data
Hash 6ac3f1e9f5b92bee690c2fe0e9602665
25f80467b61e1c49724feb5e7cb5f65395d4cc35
a8f3debfe6dba33010cceebcbb48699b786393aa051345addd65a88127d44e4e
Analyzer Verdict Alert quad9 Sinkholed
GET /img/brand/2.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Sun, 03 May 2020 01:26:24 GMT
accept-ranges: bytes
content-length: 7120
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/brand/5.png
200 OK 8.9 kB URL HTTP/2 beyondcryptofx.com/img/brand/5.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, interlaced\012- data
Hash c3a3bde09889e484505eb1b8b355221b
6120786d21adbe52875ea64af174690647d3b09d
a6bb76138ec1507a9d0516ca471a62f737f4f6ffd09bfbf951bffd7e2b39faac
Analyzer Verdict Alert quad9 Sinkholed
GET /img/brand/5.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Sun, 03 May 2020 01:33:48 GMT
accept-ranges: bytes
content-length: 8933
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/brand/4.png
200 OK 8.5 kB URL HTTP/2 beyondcryptofx.com/img/brand/4.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, interlaced\012- data
Hash c353b02ad8c374e402be3398c8256d97
3a993b20a4b28f400fbea985fea1cd863ef00b66
8bc615bc41e4163b89cc58838bc8179a1f180dc7514b2124e757f21b9a3ccf06
Analyzer Verdict Alert quad9 Sinkholed
GET /img/brand/4.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Sun, 03 May 2020 01:34:14 GMT
accept-ranges: bytes
content-length: 8512
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/brand/6.png
200 OK 11 kB URL HTTP/2 beyondcryptofx.com/img/brand/6.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, interlaced\012- data
Hash 88f95468a082dbb61f1c6bc2766cce1b
7370b6caa9caea4b903f1400fc3c2738d64c40e6
8220021ca6f73f622fe9db82b9b50b80e9cd5a93ce5520c56fe3716a139bd65e
Analyzer Verdict Alert quad9 Sinkholed
GET /img/brand/6.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Sun, 03 May 2020 01:33:18 GMT
accept-ranges: bytes
content-length: 11419
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/brand/8.png
200 OK 5.7 kB URL HTTP/2 beyondcryptofx.com/img/brand/8.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, interlaced\012- data
Hash 3cb770aa3215beb00075fa5b80872223
c059fe445ef56badf5b7fbb2003ff76046456a55
d9dfef8d32d3aae0bda64580deba29559f9547c4694a484fe5b7f208fc443454
Analyzer Verdict Alert quad9 Sinkholed
GET /img/brand/8.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Sun, 03 May 2020 01:32:08 GMT
accept-ranges: bytes
content-length: 5731
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/js/owl.carousel.min.js
200 OK 10 kB URL HTTP/2 beyondcryptofx.com/js/owl.carousel.min.js
IP
File type ASCII text, with very long lines (32068)
Hash c5ab7705dea5ddb6d30090d2ad7e6682
3714f59200b94de16cecf505ea6916450106cd06
351617f04b0f83670ecb6e44125667a7dbd6f44499a15310c5ef01a9ba030aa3
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /js/owl.carousel.min.js HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: application/javascript
last-modified: Fri, 27 Jun 2014 04:51:42 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10319
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/js/magnific.min.js
200 OK 7.1 kB URL HTTP/2 beyondcryptofx.com/js/magnific.min.js
IP
File type ASCII text, with very long lines (20092), with CRLF line terminators
Hash 2f59fe341438ca8ba2d54e82a0ea4b8b
1d9e6d29c5ac1015d47b3b880158394d4fa7ba84
04cc707f8b94cc8913e93c12284861f49651750f4e40bec6d5b545ee198edb6a
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /js/magnific.min.js HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: application/javascript
last-modified: Wed, 04 Oct 2017 05:37:26 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7050
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/js/jquery.meanmenu.js
200 OK 3.3 kB URL HTTP/2 beyondcryptofx.com/js/jquery.meanmenu.js
IP
File type ASCII text, with CRLF line terminators
Hash 8c19d1c2e623376e806b557822a181ec
984773b7ef2f5ab5b06dcc0643268139311f5d1a
779dd90ca482ba2989be3363b31b23b214351ca20d465b4e89508c2fceedf9b1
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /js/jquery.meanmenu.js HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: application/javascript
last-modified: Sat, 29 Aug 2015 01:28:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3263
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/js/plugins.js
200 OK 1.2 kB URL HTTP/2 beyondcryptofx.com/js/plugins.js
IP
File type Unicode text, UTF-8 text, with very long lines (1872)
Hash 7e763b10ea80b3c60be7a68d1174e56c
283b817c8628716775641693a515dc1eaf9cbb7d
3935c2b4c6ecb6a0b0625e552cffc1031030a9a8c666287cc5823187c7e37e19
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /js/plugins.js HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2016 20:15:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1155
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/js/form-validator.min.js
200 OK 1.9 kB URL HTTP/2 beyondcryptofx.com/js/form-validator.min.js
IP
File type ASCII text, with very long lines (5862)
Hash 4a0b7fd9db204e0a8fb4f2d156f115d2
21ff7c15767ae4cb90a5e40237b8da3ead26b24b
be50e018c9b00c3d5599312adeb7582741bec109dd57a12f9d6f8b580f7aa716
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /js/form-validator.min.js HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: application/javascript
last-modified: Sun, 06 Dec 2015 10:36:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1913
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/js/main.js
200 OK 1.2 kB URL HTTP/2 beyondcryptofx.com/js/main.js
IP
File type ASCII text, with CRLF line terminators
Hash 8e16e43359f74083d0e7db07f3d427e6
38a29bd6268614714748cbd04bdb4672ca20de19
2fff5aa801162d1bf138466fea5a7745d8757a8197e9e6e45142b2ae05531503
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /js/main.js HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: application/javascript
last-modified: Thu, 25 Jun 2020 08:25:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1233
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/js/vendor/jquery-1.12.4.min.js
200 OK 33 kB URL HTTP/2 beyondcryptofx.com/js/vendor/jquery-1.12.4.min.js
IP
File type ASCII text, with very long lines (32060)
Hash 90e82bff109601fbc3d53e02a13c4745
fc61efedca365105715886cb468b27f1382cc642
100265d79b3d919af50ee00973e911a8473d063e6baa02ffa485e96da9bed09b
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /js/vendor/jquery-1.12.4.min.js HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: application/javascript
last-modified: Tue, 12 Jan 2016 18:12:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 32931
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/brand/7.png
200 OK 17 kB URL HTTP/2 beyondcryptofx.com/img/brand/7.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, interlaced\012- data
Hash c831afc20b2bf83ac623e8994bffde11
90d8b1a550f619c4194cc26c35a483ee7bbc7204
b6c8be2416c002656fc84d51e7fcb866008c5ff154c772edb9e7c6926b727aff
Analyzer Verdict Alert quad9 Sinkholed
GET /img/brand/7.png HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/png
last-modified: Sun, 03 May 2020 01:32:52 GMT
accept-ranges: bytes
content-length: 17007
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/about/ab2.jpg
200 OK 87 kB URL HTTP/2 beyondcryptofx.com/img/about/ab2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1000x900, components 3\012- data
Hash 53b44e92e6aae4e1c19be97372a0c079
cc0742afc76f4d6d51f90e5559342289b769d0d9
a3f09bfe51dc8569385077c19a1cffbc13e05696698d55eb628573cf8a4d8188
Analyzer Verdict Alert quad9 Sinkholed
GET /img/about/ab2.jpg HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/jpeg
last-modified: Mon, 28 Feb 2022 04:27:04 GMT
accept-ranges: bytes
content-length: 87042
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/background/slide1.jpg
200 OK 113 kB URL HTTP/2 beyondcryptofx.com/img/background/slide1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3\012- data
Size 113 kB (112967 bytes)
Hash b78a2076738fa5b4fdbb4a4d8f0a530f
524ea489e46411823d199d37fc3b806949843cfc
22faeede1ab5b30c030e06550a98ca5f257532587d92c214dcf3aa9ef2c84ee9
Analyzer Verdict Alert quad9 Sinkholed
GET /img/background/slide1.jpg HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/jpeg
last-modified: Sat, 06 Jun 2020 01:08:38 GMT
accept-ranges: bytes
content-length: 112967
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
beyondcryptofx.com/img/about/ab.jpg
200 OK 0 B URL HTTP/2 beyondcryptofx.com/img/about/ab.jpg
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /img/about/ab.jpg HTTP/1.1
Host: beyondcryptofx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://beyondcryptofx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 13:46:18 GMT
content-type: image/jpeg
last-modified: Mon, 28 Feb 2022 12:25:46 GMT
accept-ranges: bytes
content-length: 214489
date: Wed, 23 Nov 2022 13:46:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
198.54.115.219
104.18.32.68
23.36.77.32
93.184.220.29