firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 02 Oct 2022 23:03:22 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 19d5615c4d307c11803beb015d8f6562.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: qNi12Uat8wYe6xpqYP4EquXHH0o0oViHfJ_g_6xvvyl1pbaJ9dmCnA==
Age: 1327
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9955bda9c9ef64bc5700a14af0bae25e
8de7b7469e905af0374bdfcc3006bbb844f13e94
1f611155394fac39439b8ec8217d8cd493d6b588d372d264e0d66c03129c50c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13073
Expires: Mon, 03 Oct 2022 03:03:22 GMT
Date: Sun, 02 Oct 2022 23:25:29 GMT
Connection: keep-alive
www.mining989.com/
301 Moved Permanently 185 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cb6ffbb4043c88e63023bdbe1273e7f6
51ab256fee07ae97343aea50861f5b9b0214cac2
e2085b8ac766c65a76f7e31e2ee5d257f7728465331a46ee58005fd212575348
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:29 GMT
Content-Type: text/html
Content-Length: 185
Connection: keep-alive
Location: https://mining989.com/
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 02 Oct 2022 03:33:17 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 ed393405ff603a61a1e63909cf1c1a44.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: X1MEowEnGr6O0jAGAOL3G6g6Piwidxm0_4ydWAddOeiao0DTipXG7g==
age: 71533
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 23:25:29 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Cache-Control, Alert, Last-Modified, Backoff, Retry-After, Expires, Content-Length, Pragma, ETag
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Sun, 02 Oct 2022 22:32:53 GMT
Expires: Sun, 02 Oct 2022 22:38:20 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 1a6cd18714da9809fa8cb07ad66fd4f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: DHOtsqZ2530LqrdEJo71gkT8CXqx5SRxoBbMrY4t7VWHXwaUT_2zBg==
Age: 3156
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash d29ad8074cca77512357331576e00e73
2b5d4f520db0dbdc62992c2b867113039b4d0107
0049e78c40c07e0f1880b2face9508f5800f4b6996ee39cbc1e52aabc2401618
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: MISS
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=900
Date: Sun, 02 Oct 2022 23:25:29 GMT
Connection: keep-alive
X-N: S
ocsp.digicert.com/
200 OK 471 B IP
Hash 4eb30b4a4234809cf7d5f89fa1f6ceeb
797242aab2f13c820050aa9accd11b7b950cd177
ce9d833a0ac321a908184b655d6632c481f758a04a9c936a7c303bb253444146
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3385
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 23:25:30 GMT
Last-Modified: Sun, 02 Oct 2022 22:29:05 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
mining989.com/
200 1.3 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3342), with CRLF line terminators
Hash 0a13673a66d8645f8aec5761855e3b41
ce3f7d32e845fb20b492cbf364dd1bb35c43f76a
3dfb39b3e27cc7417fc9ed0067a195e60c2d4ac2c38104404953666830720c34
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:30 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"3798-1663818342000"
Last-Modified: Thu, 22 Sep 2022 03:45:42 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 165b2dbf56e36edf32811cc7eea70f58
f9e101da2c4f0f6dcca9cb9d0b36a7b77ef3114e
fcd8956f2d96a85e696ee4ba5eb8d575ad3319bc84c543188f3997ea1079c4e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 23:25:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 165b2dbf56e36edf32811cc7eea70f58
f9e101da2c4f0f6dcca9cb9d0b36a7b77ef3114e
fcd8956f2d96a85e696ee4ba5eb8d575ad3319bc84c543188f3997ea1079c4e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 23:25:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 054CqEOAsjIHze50DNjyxg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0Qb/iOUDPuQbQrh1cPoC4QNGMPU=
mining989.com/assets/css/index.ec3bbacd.css
200 11 kB URL HTTP/1.1 mining989.com/assets/css/index.ec3bbacd.css
IP
File type ASCII text, with very long lines (28313), with no line terminators
Hash 2dd0eaff0705da73d75e2d6ee39f1777
d96eaab6deb31687427a61196fa5ca4536a783d6
6d2190c89b98e9cf3cc297ad18c931b3bc2c6849d471e2a9d8117a2a428ff194
GET /assets/css/index.ec3bbacd.css HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:30 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"28313-1663818365000"
Last-Modified: Thu, 22 Sep 2022 03:46:05 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/css/chunk-vendors.be622a32.css
200 34 kB URL HTTP/1.1 mining989.com/assets/css/chunk-vendors.be622a32.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 41aafd83fd109874a721b4de71b90db6
5c4d398f02415aa6e70c81cc600fe109fb4a1095
653ee50e08a1bd4b899cd6a741d39458d0a7aa91b6ee118088039e55b57ba807
GET /assets/css/chunk-vendors.be622a32.css HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:30 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"71420-1663818366000"
Last-Modified: Thu, 22 Sep 2022 03:46:06 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/js/index.19023852.js
200 74 kB URL HTTP/1.1 mining989.com/assets/js/index.19023852.js
IP
File type Unicode text, UTF-8 text, with very long lines (65312), with no line terminators
Hash ec0e56176ceb8321cbdd90555fca7f1d
682b0b65d60b9b03fdf9d542c8dbdf4599f3362c
83fef574516a96b68e4d8db70fca3f487269d4f223695c2bff2f396ff47dd62c
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/index.19023852.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"209998-1663818344000"
Last-Modified: Thu, 22 Sep 2022 03:45:44 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/js/chunk-vendors.862b4be9.js
200 122 kB URL HTTP/1.1 mining989.com/assets/js/chunk-vendors.862b4be9.js
IP
File type ASCII text, with very long lines (41430)
Size 122 kB (121852 bytes)
Hash e8c012959cd5398bec0bd9b3b3a47400
931dad715aca5f0a6123b41f64a4176339223821
0d5ee683d7f079cd618a6b34b8de4c7bd70a9981e2074bfe1fb979f60db78b93
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/chunk-vendors.862b4be9.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"317881-1663818347000"
Last-Modified: Thu, 22 Sep 2022 03:45:47 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/js/web3.min.js
200 449 kB URL HTTP/1.1 mining989.com/js/web3.min.js
IP
File type ASCII text, with very long lines (63684), with CRLF line terminators
Size 449 kB (448607 bytes)
Hash c02f971f2c774bb3267f0c2d40c766c5
92e21f5d3ab190da9b09e8f23845027c422a90c1
7881c8b49d3bccdfaf119eb6b8ccbedefde185986c4c49610cf1a71c9be8ad7a
Analyzer Verdict Alert fortinet Phishing
GET /js/web3.min.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"1412199-1663818373000"
Last-Modified: Thu, 22 Sep 2022 03:46:13 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8d59ee7b197f347e30ac793231158927
3316937f84c08ad1857d2f663dca353e250815f0
c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2211
Expires: Mon, 03 Oct 2022 00:02:22 GMT
Date: Sun, 02 Oct 2022 23:25:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8d59ee7b197f347e30ac793231158927
3316937f84c08ad1857d2f663dca353e250815f0
c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2211
Expires: Mon, 03 Oct 2022 00:02:22 GMT
Date: Sun, 02 Oct 2022 23:25:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8d59ee7b197f347e30ac793231158927
3316937f84c08ad1857d2f663dca353e250815f0
c17a343ceb786a421f8c3abfffae350e12c92271a69fc88eb8e8bab568877d6b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2211
Expires: Mon, 03 Oct 2022 00:02:22 GMT
Date: Sun, 02 Oct 2022 23:25:31 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 206fb65e75dbadf119512f71e0b78402
58ff0bf8ce7528b303d28bab01a80ad721705569
56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 04:41:00 GMT
age: 67471
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb166fe-e146-46cf-a93b-905deefbae87.jpeg
200 OK 3.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb166fe-e146-46cf-a93b-905deefbae87.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9a96da552b7ddb23b1f2fb506de2aed4
2926163d332abfb70f9565a45f7546f2efdc7716
2da0e160e0e8a116ab76614e29609e43d132cc9e56636ad91399f33e53346a23
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb166fe-e146-46cf-a93b-905deefbae87.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3272
x-amzn-requestid: b2ace456-0abd-416c-9c1c-799eb5c73269
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZWabG8zIAMF-PQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a0442-3e61e1e9283bd78e76731b47;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:36:02 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: oHEIG44XMoSu6XEYOPW8LNkvZPbIrgo6KuLHluknV7Hgfv-3IOWL2A==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:44:42 GMT
age: 6049
etag: "2926163d332abfb70f9565a45f7546f2efdc7716"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d589035-4143-4e43-a45c-b842ae27b9a3.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d589035-4143-4e43-a45c-b842ae27b9a3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 34ba42086104460665f7f4f579235592
58f10485c5273cbed8159c98b9065b192ba3d00b
79f1febc020ab611c5d9a8bc1af237a63420f8215963fd97f6c4b9bccfa17d24
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d589035-4143-4e43-a45c-b842ae27b9a3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4522
x-amzn-requestid: cc836204-3c4f-48d0-9569-b1622e6d2178
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMVoRH9toAMFwig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334cfce-096ff90412945ca06335e987;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 22:50:54 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BzgI7sWS7fsSOANaDI0S4qrT_2iIkp2TOt3bPfm56T0m9jmxRFfSIA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 12:52:35 GMT
age: 37976
etag: "58f10485c5273cbed8159c98b9065b192ba3d00b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd83b23eb-68b3-46bd-9d4d-05e5e1be89ab.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd83b23eb-68b3-46bd-9d4d-05e5e1be89ab.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6ab1ce00e8c17325c25f149ae89cc52d
a55c26805a7c70997f0821e56e701609e43eca0e
26c6add2b400560f46cb7637550582b55c48e600bc96994339249b19c5c642f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd83b23eb-68b3-46bd-9d4d-05e5e1be89ab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10899
x-amzn-requestid: 90b0ec9e-a9d7-4f33-9be4-c398c94105fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZQumwH5zIAMFhyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6336915e-589bc1371a77b528417c5538;Sampled=0
x-amzn-remapped-date: Fri, 30 Sep 2022 06:49:02 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 01vK76TVAQMgefWTWvlDZou5zQ4iamzmFkIQUrO5h6_ger2ErBWEpA==
via: 1.1 bd6f70221217681265382902c6157c76.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:59:15 GMT
age: 5176
etag: "a55c26805a7c70997f0821e56e701609e43eca0e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a090b5-0736-4ddd-b6ca-3c76661e7051.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a090b5-0736-4ddd-b6ca-3c76661e7051.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 721a8d8f94c3796abf021978fcdbc831
3fc3aeae907a0ce0db21753c67c1000681e48b8e
cb497b15e7c2e49930b99f8d6659f0394acefb7b11613ca04397ee782dac759d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a090b5-0736-4ddd-b6ca-3c76661e7051.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8158
x-amzn-requestid: 424c8c6c-7075-4ace-97e6-2b0a609d1b7e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZXDxGRlIAMFZrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a054b-046d963a345c15e81dc74e4d;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:40:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: AM8Ox9ObWGoXI-QnnoI7QkY5mOh8j6xBPetTrhyVktVO40ekk4X2Eg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:45:27 GMT
age: 6004
etag: "3fc3aeae907a0ce0db21753c67c1000681e48b8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F780fc623-fddc-49c7-99c9-1dd66ce64db7.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F780fc623-fddc-49c7-99c9-1dd66ce64db7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bfb6fbd0b91416a5a7cc7f7d0fcbf27c
ced4806b7cc4d08e2c3f1c5e591184f462e86ec2
9a217da43a32c70ebd39b3076b3c14b16d8931ccebfe5d41139fa706b3b3e149
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F780fc623-fddc-49c7-99c9-1dd66ce64db7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8279
x-amzn-requestid: fed6efac-3419-4ecc-89f8-d4c3e0c22915
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZWbsHpBIAMFT1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a044a-5fc3bf5b7126d4a835d93e3d;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:36:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7g6tucmoqeX5RFtet3L9XllP1G6fx4RWt5XqTsVvhtxZnPxV0EVpqA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:57:37 GMT
age: 5274
etag: "ced4806b7cc4d08e2c3f1c5e591184f462e86ec2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mining989.com/assets/js/chunk-7cc7d9f9.98fa5e76.js
200 915 B URL HTTP/1.1 mining989.com/assets/js/chunk-7cc7d9f9.98fa5e76.js
IP
File type ASCII text, with very long lines (2282), with no line terminators
Hash e31b2ef03871fd442cd8b59ea4442c80
61d682b80545e217b34ddbe9c0506e97addf9a6e
b553a45b43d45e25168d6874f64827eb8b8016093bba9b863c76472a8dad41ad
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/chunk-7cc7d9f9.98fa5e76.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:31 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"2282-1663818348000"
Last-Modified: Thu, 22 Sep 2022 03:45:48 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/api/config
200 23 kB IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (22903), with no line terminators
Hash 8b7a06dbdd6c469d318555f72b869a49
2745a9d3c50f66f818ecde9ed6f067ad3147cc3b
7486a5e659b90f2623439262dd500e9e4ce614ebc6ff5de0009a4ce6d97bba83
Analyzer Verdict Alert fortinet Phishing
POST /api/config HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
lang: en-US
Content-Type: application/json
Content-Length: 52
Origin: https://mining989.com
Connection: keep-alive
Referer: https://mining989.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:31 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Credentials: true
Set-Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348; Path=/; HttpOnly
Access-Control-Allow-Origin: https://mining989.com, *
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/css/chunk-1dac3aa2.87802726.css
200 26 kB URL HTTP/1.1 mining989.com/assets/css/chunk-1dac3aa2.87802726.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash c8661eb596b97510ad9a56ca9282ea35
a9f1b4bdcba7e0ba1af6b5491c52593a91650bcf
d12898be0017811c3c0aa71d454ed5d68ef07a408c96f5b4ef9dbccdcb592c7b
GET /assets/css/chunk-1dac3aa2.87802726.css HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://mining989.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:31 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"77206-1663818369000"
Last-Modified: Thu, 22 Sep 2022 03:46:09 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/css/chunk-74a23f77.0e1185f1.css
200 5.7 kB URL HTTP/1.1 mining989.com/assets/css/chunk-74a23f77.0e1185f1.css
IP
File type ASCII text, with very long lines (18680), with no line terminators
Hash 696705c3209d8331f06b4eb7632bdf84
cc0a068ee40f3e605d2de7e680bdf4e031265d0a
b6b73a9535918fe2f3a9bdb6a7ebb928966897abddcb2e087828607fcae81456
GET /assets/css/chunk-74a23f77.0e1185f1.css HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://mining989.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:31 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"18680-1663818367000"
Last-Modified: Thu, 22 Sep 2022 03:46:07 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/css/chunk-422a1c38.501ef72f.css
200 398 B URL HTTP/1.1 mining989.com/assets/css/chunk-422a1c38.501ef72f.css
IP
File type ASCII text, with very long lines (1085), with no line terminators
Hash be43f5440f9b11d9d366c105a29b4103
0977ab883758c52c49b9039b0da61cdb19dd361c
53f929968a532373baae017bb203055fcb1bd74db8ff782ea05ed713eee4cea4
GET /assets/css/chunk-422a1c38.501ef72f.css HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://mining989.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:31 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"1085-1663818368000"
Last-Modified: Thu, 22 Sep 2022 03:46:08 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/css/chunk-74b6eb24.b4f8ac33.css
200 15 kB URL HTTP/1.1 mining989.com/assets/css/chunk-74b6eb24.b4f8ac33.css
IP
File type ASCII text, with very long lines (35036), with no line terminators
Hash 8d6300c288fb53efe3b92afe00ec4dc9
c9be6992ea50a2ab1ca8d6674ff0931c29fe3947
95dfe67e91788e189be044785fcd2aa2126912f80b25f1639ca2a3c993e3fec7
GET /assets/css/chunk-74b6eb24.b4f8ac33.css HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://mining989.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:31 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"35036-1663818367000"
Last-Modified: Thu, 22 Sep 2022 03:46:07 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/css/chunk-774ac8cd.2e6b1f12.css
200 16 kB URL HTTP/1.1 mining989.com/assets/css/chunk-774ac8cd.2e6b1f12.css
IP
File type ASCII text, with very long lines (36796), with no line terminators
Hash 29be22768cd0f0680036cc8f489ce17d
ec6f69ae95daaaf3ac5c0bad232e459281da634e
00fc46fd56a57bc0b55bcadac865fb2669de454fd287c79aa064cc6b3af1d808
GET /assets/css/chunk-774ac8cd.2e6b1f12.css HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://mining989.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:31 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"36796-1663818367000"
Last-Modified: Thu, 22 Sep 2022 03:46:07 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/js/chunk-774ac8cd.12133253.js
200 104 B URL HTTP/1.1 mining989.com/assets/js/chunk-774ac8cd.12133253.js
IP
File type ASCII text, with no line terminators
Hash 73dda9114dae7d878d3104ca0eb24bf7
5de9aa2f7f9d09a628208c185d37849a507f7526
8827a7caff734301d6508fc2b00f8f8026ed3844933c360a85e83a6edb717937
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/chunk-774ac8cd.12133253.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: application/javascript
Content-Length: 104
Connection: keep-alive
Accept-Ranges: bytes
ETag: W/"104-1663818348000"
Last-Modified: Thu, 22 Sep 2022 03:45:48 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/js/chunk-6a68a7c7.676ce6ef.js
200 6.9 kB URL HTTP/1.1 mining989.com/assets/js/chunk-6a68a7c7.676ce6ef.js
IP
File type Unicode text, UTF-8 text, with very long lines (20391), with no line terminators
Hash 171a780e2b7342f663485b2f4fe40fe4
22f00921339875333bcad55022ce5849d2952ecc
07ee26aff2ff735d4dd4277fb757c1274be66491f380b1d7cdbd3b5217997880
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/chunk-6a68a7c7.676ce6ef.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"20394-1663818349000"
Last-Modified: Thu, 22 Sep 2022 03:45:49 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/js/chunk-1dac3aa2.602922a0.js
200 106 B URL HTTP/1.1 mining989.com/assets/js/chunk-1dac3aa2.602922a0.js
IP
File type ASCII text, with no line terminators
Hash fd80ff51f55a7ad0134c164d0d94684d
e13b4595d42464509ec3093ec3c3ce555566c23b
273e01a259a4c7368a3b8f8b9765ab05bc585b0d404978a200563365efc643f6
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/chunk-1dac3aa2.602922a0.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: application/javascript
Content-Length: 106
Connection: keep-alive
Accept-Ranges: bytes
ETag: W/"106-1663818351000"
Last-Modified: Thu, 22 Sep 2022 03:45:51 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/js/chunk-e160b714.2d99b87c.js
200 34 kB URL HTTP/1.1 mining989.com/assets/js/chunk-e160b714.2d99b87c.js
IP
File type Unicode text, UTF-8 text, with very long lines (65500), with no line terminators
Hash 95a6ec9ebf5c5d00b92fd4f1ff3f7777
1749f352154f512322128865c32298fe7fcf4119
10cae2c4151a2c3682076a5127568aa5d27bb1a555ee1e63c5bf612193e177f0
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/chunk-e160b714.2d99b87c.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"91086-1663818347000"
Last-Modified: Thu, 22 Sep 2022 03:45:47 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/js/chunk-24c337ed.d3370be1.js
200 6.4 kB URL HTTP/1.1 mining989.com/assets/js/chunk-24c337ed.d3370be1.js
IP
File type ASCII text, with very long lines (20498), with no line terminators
Hash 45e73f779e15c0a4e4957b886e114219
db1f0ec38a1f4aad4d0a24602afeddfe5eb7d3dc
201613b09509506425209425c892f540be5e3a47dfaef124d522f60480768e90
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/chunk-24c337ed.d3370be1.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"20498-1663818351000"
Last-Modified: Thu, 22 Sep 2022 03:45:51 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/js/chunk-2d0a555d.4f85040f.js
200 16 kB URL HTTP/1.1 mining989.com/assets/js/chunk-2d0a555d.4f85040f.js
IP
File type Unicode text, UTF-8 text, with very long lines (52422), with no line terminators
Hash a60bf01760e7a1efffab27ade013a77f
eb27d6d7b61fd1fa0e2ead02c39c84d392aa7f85
5230ff4692c7840dd5f3132a6b5211f649bfe8d05d6d6fad93523ba2f47959b0
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/chunk-2d0a555d.4f85040f.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"52423-1663818351000"
Last-Modified: Thu, 22 Sep 2022 03:45:51 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/js/chunk-2d0c91a9.30fed26d.js
200 14 kB URL HTTP/1.1 mining989.com/assets/js/chunk-2d0c91a9.30fed26d.js
IP
File type Unicode text, UTF-8 text, with very long lines (46292), with no line terminators
Hash dd2739865943f3e5b3b58b2ec0189852
83ab5bc19c3b5f73275aec1a05c7ef969b1838e3
2b6fd672e102f3d71e82803c6a7044aed3ab54ef08de45ebf1497cfa65ff46b9
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/chunk-2d0c91a9.30fed26d.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"46326-1663818350000"
Last-Modified: Thu, 22 Sep 2022 03:45:50 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/js/chunk-17b6bbed.de0d3360.js
200 5.1 kB URL HTTP/1.1 mining989.com/assets/js/chunk-17b6bbed.de0d3360.js
IP
File type ASCII text, with very long lines (15901), with no line terminators
Hash 727c278753f0ccd6de1c4eaf746375ce
6b3bcb7a7ebdf9c5da86e625e84992bc6a86a919
4f11620e12730ed8972f3239528af2a89d69901e5eb0f6910c93224b83cf81f5
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/chunk-17b6bbed.de0d3360.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://mining989.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"15901-1663818351000"
Last-Modified: Thu, 22 Sep 2022 03:45:51 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/js/chunk-422a1c38.2c0ee5bd.js
200 44 kB URL HTTP/1.1 mining989.com/assets/js/chunk-422a1c38.2c0ee5bd.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 5d696d0aae5c02935a28bc06ad7486b1
bbb2aa5968faa753ea5c346c18ace4a33a845bc9
6a6f0b1069f31f042af189cd02a9b3813a6dba3ff7404b35d05d7b7fb6518ed3
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/chunk-422a1c38.2c0ee5bd.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"106833-1663818350000"
Last-Modified: Thu, 22 Sep 2022 03:45:50 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/js/chunk-74a23f77.e7227b6f.js
200 106 B URL HTTP/1.1 mining989.com/assets/js/chunk-74a23f77.e7227b6f.js
IP
File type ASCII text, with no line terminators
Hash 6edaefbee42043a40523113895a9865a
4653e50c123a6c0a48639ec1ea7b810d1e807e09
1b263fae95630e68b08b9d147958fbce62fc06a532f8a79583b4ff2a4b04b809
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/chunk-74a23f77.e7227b6f.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: application/javascript
Content-Length: 106
Connection: keep-alive
Accept-Ranges: bytes
ETag: W/"106-1663818349000"
Last-Modified: Thu, 22 Sep 2022 03:45:49 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/js/chunk-74b6eb24.d3951a2b.js
200 106 B URL HTTP/1.1 mining989.com/assets/js/chunk-74b6eb24.d3951a2b.js
IP
File type ASCII text, with no line terminators
Hash 454179d8428bfa15491584b77fc9e529
604dc832b68b0a69258d9bb3b129032481dc610e
565948a6e98d141b5636199571da323fa3177e4c8a0dc4600c9296a98036a022
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/chunk-74b6eb24.d3951a2b.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: application/javascript
Content-Length: 106
Connection: keep-alive
Accept-Ranges: bytes
ETag: W/"106-1663818349000"
Last-Modified: Thu, 22 Sep 2022 03:45:49 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/img/bg_top.92ba63c5.png
200 58 kB URL HTTP/1.1 mining989.com/assets/img/bg_top.92ba63c5.png
IP
File type PNG image data, 656 x 676, 8-bit colormap, non-interlaced\012- data
Hash 48a3545c7b5a413bb53b73f3156e6a9d
6b29a2d372e258a08c8b32b2117221aad1bcbbc6
deecc8bbc9077a2e5894e8f38772b91fb7e44a7fec080d7b5e270742283ff4f4
GET /assets/img/bg_top.92ba63c5.png HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"57717-1663818365000"
Last-Modified: Thu, 22 Sep 2022 03:46:05 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/img/bottom_icon3.b9a37af9.png
200 5.9 kB URL HTTP/1.1 mining989.com/assets/img/bottom_icon3.b9a37af9.png
IP
File type PNG image data, 208 x 76, 8-bit/color RGBA, non-interlaced\012- data
Hash 79cb5435d5bc1ba27ac6eef6250d91c0
9c935aaf8b3bb6cc53341d69a297b650dd3048d2
77929b13ac78a3a926632ca949a837360f48700b91e067c0dcca83c572efc185
GET /assets/img/bottom_icon3.b9a37af9.png HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5857-1663818362000"
Last-Modified: Thu, 22 Sep 2022 03:46:02 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/img/bottom_icon4.dec0426a.png
200 4.3 kB URL HTTP/1.1 mining989.com/assets/img/bottom_icon4.dec0426a.png
IP
File type PNG image data, 400 x 144, 8-bit colormap, non-interlaced\012- data
Hash 78e251f2a7241430d30c385c4f1f6346
ba5aaa55dceaea13459444677399576e29e66631
4c5287c3edb4fbea0ba83bed9126ae55590d72b279c77b2eed72f5f1b3a35587
GET /assets/img/bottom_icon4.dec0426a.png HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"4324-1663818362000"
Last-Modified: Thu, 22 Sep 2022 03:46:02 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/img/bottom_icon5.847aeb71.png
200 7.0 kB URL HTTP/1.1 mining989.com/assets/img/bottom_icon5.847aeb71.png
IP
File type PNG image data, 400 x 144, 8-bit colormap, non-interlaced\012- data
Hash 15274e1a304c4c8f008e7488183867ba
5375ed6316987a5e1b4bbebe675abe081e4ac6bb
94ece28f7d6dfcb263c29e9bb40dd07ab954089943984ffe85ad6eabddaff92a
GET /assets/img/bottom_icon5.847aeb71.png HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"7011-1663818361000"
Last-Modified: Thu, 22 Sep 2022 03:46:01 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/img/bottom_icon6.b259b57c.png
200 5.5 kB URL HTTP/1.1 mining989.com/assets/img/bottom_icon6.b259b57c.png
IP
File type PNG image data, 400 x 144, 8-bit colormap, non-interlaced\012- data
Hash 120534404a7fb741e10e1ce41c3eed60
2bb048ed9ac5e2e23a72c7c709aa80f09e5bdf26
f4380fabe1a915853c7fa12bfd7032ddc9440b93ae8c090377667ac4ca23a90b
GET /assets/img/bottom_icon6.b259b57c.png HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5500-1663818361000"
Last-Modified: Thu, 22 Sep 2022 03:46:01 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/img/img_top_bg.4664403c.png
200 91 kB URL HTTP/1.1 mining989.com/assets/img/img_top_bg.4664403c.png
IP
File type PNG image data, 1500 x 900, 8-bit colormap, non-interlaced\012- data
Hash 577cf1a45520c7d2bed745e666b94f0c
3006eefc261cd102a415caae2d114bab6d72d784
e640be29ba739979dcf5e23b3e8ec042d539fbf86d92482196203f6d8e4003a7
GET /assets/img/img_top_bg.4664403c.png HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"91538-1663818358000"
Last-Modified: Thu, 22 Sep 2022 03:45:58 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/img/bottom_icon9.2464ff0f.png
200 4.3 kB URL HTTP/1.1 mining989.com/assets/img/bottom_icon9.2464ff0f.png
IP
File type PNG image data, 400 x 144, 8-bit colormap, non-interlaced\012- data
Hash 0d9f13301243726fb700a576be7d9e7c
ec0231e4a01a9304f0844b6d07d2d7c31f469834
e466e1d74e64b59f7e5b28ef59d3c936263c19b7827636e8be79c3570627d8e1
GET /assets/img/bottom_icon9.2464ff0f.png HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"4252-1663818359000"
Last-Modified: Thu, 22 Sep 2022 03:45:59 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/api/plan/planOPtionsList
200 168 B URL HTTP/1.1 mining989.com/api/plan/planOPtionsList
IP
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash f21704d405c7e29bade4d356428f6b93
d1a23fda2f277d8a5e398d4b62c3b4266006d9db
640f7ea64332cbbf5c791ad28851be53318dd9bf801788faafa3b1d657564ede
Analyzer Verdict Alert fortinet Phishing
POST /api/plan/planOPtionsList HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
lang: en-US
Content-Type: application/json
Content-Length: 52
Origin: https://mining989.com
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://mining989.com, *
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/api/get_config
200 125 B URL HTTP/1.1 mining989.com/api/get_config
IP
File type JSON data\012- , Unicode text, UTF-8 text, with no line terminators
Hash c676f8c9a8a8896871abc7d4a73aa250
af2d16df6f1aaffc2b86792f95f7ab03e08b1368
850397900990329234f325f9a8249405d57a14a53ff64d09b0ea2707120f6de7
Analyzer Verdict Alert fortinet Phishing
POST /api/get_config HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
lang: en-US
Content-Type: application/json
Content-Length: 81
Origin: https://mining989.com
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://mining989.com, *
Access-Control-Allow-Headers: X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/img/nodata_icon.564ba5a9.svg
200 23 kB URL HTTP/1.1 mining989.com/assets/img/nodata_icon.564ba5a9.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (4751), with CRLF line terminators
Hash 564ba5a9432edccd08c3efab68a539cc
cccbf3dded72c61e92e31fb1abba6efe533a3635
3fe6e9135a185ba070fa9bde8854059514daac4bd97f81ef68be85731ddf35d0
Analyzer Verdict Alert fortinet Phishing
GET /assets/img/nodata_icon.564ba5a9.svg HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: image/svg+xml
Content-Length: 23175
Connection: keep-alive
Accept-Ranges: bytes
ETag: W/"23175-1663818354000"
Last-Modified: Thu, 22 Sep 2022 03:45:54 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/assets/js/chunk-ab831770.9a6a3eda.js
200 28 kB URL HTTP/1.1 mining989.com/assets/js/chunk-ab831770.9a6a3eda.js
IP
File type Unicode text, UTF-8 text, with very long lines (49734), with no line terminators
Hash fefa9c665d56b58fa8ab96d78c1f9bbd
aedd0ab7c8e04cf55b231f738e14ea4426418192
56069b694d48e1468adc8e957665251c401a46a76ab5adb06bfe1d86d3dc4f0b
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/chunk-ab831770.9a6a3eda.js HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"49736-1663818348000"
Last-Modified: Thu, 22 Sep 2022 03:45:48 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
mining989.com/favicon.png?v=2
200 1.4 kB URL HTTP/1.1 mining989.com/favicon.png?v=2
IP
File type PNG image data, 80 x 80, 8-bit colormap, non-interlaced\012- data
Hash acf6780ef109a8addc424e037c544242
6448a4476470da02c4513738d0c8e45ce9f3c954
6e9ccefdb617fd23f6a5b765939b6645a944b3a825b96dc8cecb6a024fe3942b
Analyzer Verdict Alert fortinet Phishing
GET /favicon.png?v=2 HTTP/1.1
Host: mining989.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Cookie: JSESSIONID=0E2B3D84D4104075E5D4D2B1EA216348
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.12.2
Date: Sun, 02 Oct 2022 23:25:32 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"1402-1649576642000"
Last-Modified: Sun, 10 Apr 2022 07:44:02 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Headers: X-Requested-With, X-Requested-With
Access-Control-Allow-Methods: GET,POST,OPTIONS, GET,POST,OPTIONS
X-Via: 1.1 ip-172-31-19-137.ap-southeast-1.compute.internal (random:275412 Fikker/Webcache/3.7.7)
fonts.googleapis.com/css2?family=Fredoka+One&family=Montserrat:wght@400;600;700;800;900&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Fredoka+One&family=Montserrat:wght@400;600;700;800;900&display=swap
IP
GET /css2?family=Fredoka+One&family=Montserrat:wght@400;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mining989.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 02 Oct 2022 23:25:30 GMT
date: Sun, 02 Oct 2022 23:25:30 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.33.129.28
23.36.79.17
93.184.220.29