| bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/logo.jpg |  209.94.90.1 | 200 OK | 4.7 kB |
URL GET HTTP/2bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/logo.jpg IP209.94.90.1:443
Requested byhttps://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 240x56, components 3 Hash79a96bc19b6f2272fe4bd8d40c0cd8a0 8efd8ecf46ff6505df918de628c7a901fa147a7e c4e89edd8eea8796e000d919c2f08c25521a8578f55fa21ba4d6e62c8ba98c4f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /index_files/logo.jpg HTTP/1.1
Host: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 19 Apr 2024 04:59:27 GMT
content-type: image/jpeg
content-length: 4740
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
etag: "bafkreige5cpn3dxkq6loaagzdhbpbdbfkinik6hvl6rbxjgw4ywixkmmj4"
x-ipfs-path: /ipfs/bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi/index_files/logo.jpg
x-ipfs-roots: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi,bafybeicelldjnhgvfxrkdefpcjeh7bfb5vjf5dntq4d45yxp5zwebdne2i,bafkreige5cpn3dxkq6loaagzdhbpbdbfkinik6hvl6rbxjgw4ywixkmmj4
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 310cf4af4f9e48ab46989976aebc515c
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| quirky-shaw-20dc92.netlify.app/polina.jpg |  52.58.254.253 | 404 Not Found | 50 B |
URL GET HTTP/2quirky-shaw-20dc92.netlify.app/polina.jpg IP52.58.254.253:443
Requested byhttps://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ CertificateIssuerDigiCert Inc Subject*.netlify.app FingerprintB0:8E:E9:A5:C3:D9:B5:C1:FF:B6:51:7A:DF:98:CF:2D:28:18:41:9B ValidityMon, 15 Jan 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hashdff1ee4bb70608dbce1e84f3292acbd3 3821d94bcff3baa886b07ef96bc089751ff3b86a afcb8b990c910a89c39c2416c78a423fdd34b092e9db413630435d2b9a84ef1e
GET /polina.jpg HTTP/1.1
Host: quirky-shaw-20dc92.netlify.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cache-control: private, max-age=0
content-type: text/plain; charset=utf-8
date: Fri, 19 Apr 2024 04:59:27 GMT
server: Netlify
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nf-request-id: 01HVTBJJSHXGD2HTE1GHYME64W
content-length: 50
X-Firefox-Spdy: h2
|
|
| bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/vd.mp4 | 209.94.90.1 | 206 Partial Content | 95 kB |
URL GET HTTP/2bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/vd.mp4 IP209.94.90.1:443
Requested byhttps://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
Hashe57360c7f18c959ce571f8e8fe5086d4 8c09bfc5266b739739872b9eb350eb72a8a0a507 15e5b2fd859af1a947f9443b4510191886b661335bacd794166d5b7e74de1506
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /index_files/vd.mp4 HTTP/1.1
Host: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=28344320-
DNT: 1
Connection: keep-alive
Referer: https://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/
Cookie: __session:0.948919861333146:=https:
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
server: openresty
date: Fri, 19 Apr 2024 04:59:28 GMT
content-type: video/mp4
content-length: 94825
accept-ranges: bytes
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
content-range: bytes 28344320-28439144/28439145
etag: "bafybeigirvo66op5zdq7ceidn22rxhx6xklxpbvvawwt6l3arkpw6dxhju"
x-ipfs-path: /ipfs/bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi/index_files/vd.mp4
x-ipfs-roots: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi,bafybeicelldjnhgvfxrkdefpcjeh7bfb5vjf5dntq4d45yxp5zwebdne2i,bafybeigirvo66op5zdq7ceidn22rxhx6xklxpbvvawwt6l3arkpw6dxhju
x-ipfs-pop: ipfs-bank4-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: c68f6dc79cc63e341b83584de884ad78
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: MISS
X-Firefox-Spdy: h2
|
|
| bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/logo.jpg | 209.94.90.1 | 200 OK | 4.7 kB |
URL GET HTTP/2bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/logo.jpg IP209.94.90.1:443
Requested byhttps://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 240x56, components 3 Hash79a96bc19b6f2272fe4bd8d40c0cd8a0 8efd8ecf46ff6505df918de628c7a901fa147a7e c4e89edd8eea8796e000d919c2f08c25521a8578f55fa21ba4d6e62c8ba98c4f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /index_files/logo.jpg HTTP/1.1
Host: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/
Cookie: __session:0.948919861333146:=https:
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 19 Apr 2024 04:59:28 GMT
content-type: image/jpeg
content-length: 4740
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
etag: "bafkreige5cpn3dxkq6loaagzdhbpbdbfkinik6hvl6rbxjgw4ywixkmmj4"
x-ipfs-path: /ipfs/bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi/index_files/logo.jpg
x-ipfs-roots: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi,bafybeicelldjnhgvfxrkdefpcjeh7bfb5vjf5dntq4d45yxp5zwebdne2i,bafkreige5cpn3dxkq6loaagzdhbpbdbfkinik6hvl6rbxjgw4ywixkmmj4
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 9a0b7f7f8daf857d19be0ba50201a077
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/bootstrap.js | 209.94.90.1 | 200 OK | 20 kB |
URL GET HTTP/2bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/bootstrap.js IP209.94.90.1:443
Requested byhttps://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typegzip compressed data, from Unix Hash6fa194a43523c8afde0e0a5619c5c2b0 5b0197b014011a2a73459de4932cd57051644932 42543a8ba85f00a16e13c14710704f4f17b6255cca22ec86df4744c2fa62dcf7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /index_files/bootstrap.js HTTP/1.1
Host: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 19 Apr 2024 04:59:27 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreidzywm525qm5qgbminbv5e5tivetws5ixq3g7kfow5m4cs6aitfqi"
x-ipfs-path: /ipfs/bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi/index_files/bootstrap.js
x-ipfs-roots: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi,bafybeicelldjnhgvfxrkdefpcjeh7bfb5vjf5dntq4d45yxp5zwebdne2i,bafkreidzywm525qm5qgbminbv5e5tivetws5ixq3g7kfow5m4cs6aitfqi
x-ipfs-pop: ipfs-bank4-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: a871486477fea98b159c72bdc40dbc98
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/popper_002.js | 209.94.90.1 | 200 OK | 17 kB |
URL GET HTTP/2bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/popper_002.js IP209.94.90.1:443
Requested byhttps://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typegzip compressed data, from Unix Hash5d8b9d5805300048406cb29876ac1e51 8fdd676ca486b48bad40b8e40f595832128d68df 6ec739dbe6397fd001ed634001956d163353b55a763ab9f7a57f4ed3e2edfb38
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /index_files/popper_002.js HTTP/1.1
Host: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 19 Apr 2024 04:59:27 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreighoymvvvddgpdmtkp6hr2fal76vgqc7lyseoeounlhsiwmmwrqma"
x-ipfs-path: /ipfs/bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi/index_files/popper_002.js
x-ipfs-roots: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi,bafybeicelldjnhgvfxrkdefpcjeh7bfb5vjf5dntq4d45yxp5zwebdne2i,bafkreighoymvvvddgpdmtkp6hr2fal76vgqc7lyseoeounlhsiwmmwrqma
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 93be1ac849a2f79c222ea8e92b3c9347
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/jquery-3.js | 209.94.90.1 | 200 OK | 70 kB |
URL GET HTTP/2bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/jquery-3.js IP209.94.90.1:443
Requested byhttps://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeJavaScript source, ASCII text, with very long lines (32012) Hash5f48fc77cac90c4778fa24ec9c57f37d 9e89d1515bc4c371b86f4cb1002fd8e377c1829f 9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /index_files/jquery-3.js HTTP/1.1
Host: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 19 Apr 2024 04:59:27 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreietmwjarb5rdmz2hxclukfa7e4vd4qagqjghy5zz36tqr4y4s7dta"
x-ipfs-path: /ipfs/bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi/index_files/jquery-3.js
x-ipfs-roots: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi,bafybeicelldjnhgvfxrkdefpcjeh7bfb5vjf5dntq4d45yxp5zwebdne2i,bafkreietmwjarb5rdmz2hxclukfa7e4vd4qagqjghy5zz36tqr4y4s7dta
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 56398f8584ffa765b68070a6e41df6b9
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/jquery.js | 209.94.90.1 | 200 OK | 86 kB |
URL GET HTTP/2bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/jquery.js IP209.94.90.1:443
Requested byhttps://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /index_files/jquery.js HTTP/1.1
Host: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 19 Apr 2024 04:59:27 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreiafxbozn5a774knr5qi3lidvny6fqibpqw2beknprmssg5npjkpry"
x-ipfs-path: /ipfs/bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi/index_files/jquery.js
x-ipfs-roots: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi,bafybeicelldjnhgvfxrkdefpcjeh7bfb5vjf5dntq4d45yxp5zwebdne2i,bafkreiafxbozn5a774knr5qi3lidvny6fqibpqw2beknprmssg5npjkpry
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 12cbff78e1946221bdb5c16cae1e1688
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/jquery_002.js | 209.94.90.1 | 200 OK | 2.3 kB |
URL GET HTTP/2bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/jquery_002.js IP209.94.90.1:443
Requested byhttps://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeASCII text, with very long lines (2368), with no line terminators Hash0e6e66d900256c806b3a9dac174b2ebb 68dd2a54579d1895fbe35383da6f56ed841e6d7a 785b2383673ae9ccb86d36969c8e8d9593edaeb6d435aab4adad805898dce5f8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /index_files/jquery_002.js HTTP/1.1
Host: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 19 Apr 2024 04:59:27 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreidwvvsyjlc33vczsoo4ouzpvz6cxxmoellxh7yw2iyg6qvb77cwtq"
x-ipfs-path: /ipfs/bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi/index_files/jquery_002.js
x-ipfs-roots: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi,bafybeicelldjnhgvfxrkdefpcjeh7bfb5vjf5dntq4d45yxp5zwebdne2i,bafkreidwvvsyjlc33vczsoo4ouzpvz6cxxmoellxh7yw2iyg6qvb77cwtq
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 741d86be68414f1d6ccfe6fc0f41f412
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ | 209.94.90.1 | 200 OK | 7.5 kB |
URL User Request GET HTTP/2bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ IP209.94.90.1:443
CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeHTML document, ASCII text, with very long lines (8179), with no line terminators Hashbdeeeaa9b6ff73e70289b0443cb5c3e4 2d0a0c9dec968d01dd337d30404924359a2a7d6e 258b922602fedc52fb1229d13eadd0b05af321d556009fe6dea06eacf3278ca6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET / HTTP/1.1
Host: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 19 Apr 2024 04:59:27 GMT
content-type: text/html
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
etag: W/"bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi"
x-ipfs-path: /ipfs/bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi/
x-ipfs-roots: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 703a892ab88109d33e319625e3fd19f0
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/jquery_003.js | 209.94.90.1 | 200 OK | 90 kB |
URL GET HTTP/2bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/jquery_003.js IP209.94.90.1:443
Requested byhttps://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /index_files/jquery_003.js HTTP/1.1
Host: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 19 Apr 2024 04:59:27 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreihx62systy5dho2235dskzozywf4v4mx562j2ualnuil23jqw3ohu"
x-ipfs-path: /ipfs/bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi/index_files/jquery_003.js
x-ipfs-roots: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi,bafybeicelldjnhgvfxrkdefpcjeh7bfb5vjf5dntq4d45yxp5zwebdne2i,bafkreihx62systy5dho2235dskzozywf4v4mx562j2ualnuil23jqw3ohu
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 6571ad71982ddec652271b0b00911bef
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/popper.js | 209.94.90.1 | 200 OK | 19 kB |
URL GET HTTP/2bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/popper.js IP209.94.90.1:443
Requested byhttps://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeJavaScript source, ASCII text, with very long lines (19015) Hash70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /index_files/popper.js HTTP/1.1
Host: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 19 Apr 2024 04:59:27 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreifff55kktl3zkx2avxobicqeyw7yvuuvyun52fuzlbufgxtp7ynmy"
x-ipfs-path: /ipfs/bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi/index_files/popper.js
x-ipfs-roots: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi,bafybeicelldjnhgvfxrkdefpcjeh7bfb5vjf5dntq4d45yxp5zwebdne2i,bafkreifff55kktl3zkx2avxobicqeyw7yvuuvyun52fuzlbufgxtp7ynmy
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: fa0e0bef581572dec547cbf8d328fc8e
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/bootstrap_003.js | 209.94.90.1 | 200 OK | 49 kB |
URL GET HTTP/2bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/bootstrap_003.js IP209.94.90.1:443
Requested byhttps://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeJavaScript source, ASCII text, with very long lines (48664) Hash14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /index_files/bootstrap_003.js HTTP/1.1
Host: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 19 Apr 2024 04:59:27 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreihh5u3m53sukc2cio54gumiv6v57nbibr6fowlqahpa5ulhfgnqdm"
x-ipfs-path: /ipfs/bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi/index_files/bootstrap_003.js
x-ipfs-roots: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi,bafybeicelldjnhgvfxrkdefpcjeh7bfb5vjf5dntq4d45yxp5zwebdne2i,bafkreihh5u3m53sukc2cio54gumiv6v57nbibr6fowlqahpa5ulhfgnqdm
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: ded38b4bab9fb9dee449fef80f6df190
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/bootstrap.css | 209.94.90.1 | 200 OK | 160 kB |
URL GET HTTP/2bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/bootstrap.css IP209.94.90.1:443
Requested byhttps://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeASCII text, with very long lines (65326) Size160 kB (160302 bytes) Hash816af0eddd3b4822c2756227c7e7b7ee c470239d4c7db36d56dc3a74a080c62218c6edc4 5b0fbe5b7ad705f6a937c4998ad02f73d8f0d976fe231b74aef0ec996990c93a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /index_files/bootstrap.css HTTP/1.1
Host: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 19 Apr 2024 04:59:27 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreic3b67fw6wxax3ksn6etgfnal3t3dyns5x6emnxjlxq5smwtegjhi"
x-ipfs-path: /ipfs/bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi/index_files/bootstrap.css
x-ipfs-roots: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi,bafybeicelldjnhgvfxrkdefpcjeh7bfb5vjf5dntq4d45yxp5zwebdne2i,bafkreic3b67fw6wxax3ksn6etgfnal3t3dyns5x6emnxjlxq5smwtegjhi
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: a7f156087cb2f7cb646f69cb1c15a36a
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/bootstrap_002.js | 209.94.90.1 | 200 OK | 51 kB |
URL GET HTTP/2bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/bootstrap_002.js IP209.94.90.1:443
Requested byhttps://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
File typeJavaScript source, ASCII text, with very long lines (50758) Hash67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /index_files/bootstrap_002.js HTTP/1.1
Host: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 19 Apr 2024 04:59:27 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreicwyevbewycduq2nhtb24mqz35bndlmfdhhcutfz2q3hmarfuljyq"
x-ipfs-path: /ipfs/bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi/index_files/bootstrap_002.js
x-ipfs-roots: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi,bafybeicelldjnhgvfxrkdefpcjeh7bfb5vjf5dntq4d45yxp5zwebdne2i,bafkreicwyevbewycduq2nhtb24mqz35bndlmfdhhcutfz2q3hmarfuljyq
x-ipfs-pop: ipfs-bank2-fr2
timing-allow-origin: *
x-ipfs-lb-pop: gateway-bank1-fr2
x-bfid: 2b009f1a1ed41f3f2cb7496294dd20c5
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-proxy-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/vd.htm |  0.0.0.0 | | 0 B |
URL GET bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/index_files/vd.htm IP0.0.0.0:0
Requested byhttps://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/ CertificateIssuerLet's Encrypt Subjectdweb.link Fingerprint2A:D2:03:4C:D3:15:24:93:EF:9E:1F:8F:5A:9C:AF:C4:E2:63:C9:42 ValidityTue, 06 Feb 2024 17:40:37 GMT - Mon, 06 May 2024 17:40:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /index_files/vd.htm HTTP/1.1
Host: bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://bafybeibml5jr24naaptk53bmjhrt6oghfz7nbau5ie7nqsdzm7ofhwxvzi.ipfs.dweb.link/
Cookie: __session:0.948919861333146:=https:
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
|
|