| appleid.xmanl.com/static/css/ac-globalfooter.built.css |  188.114.97.1 | 200 OK | 12 kB |
URL GET HTTP/3appleid.xmanl.com/static/css/ac-globalfooter.built.css IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeUnicode text, UTF-8 text, with very long lines (48845), with CRLF line terminators Hash65284df67d19414dce09fef086a7e2ce 41b1739ea5250f19f056a6e3cf9d3ac9313fe40a e351c16027d7affbccf319a0650b1e93ff88184bc1ddfce027ec0af2e8ef1f5e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/css/ac-globalfooter.built.css HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:42 GMT
content-type: text/css
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
vary: Accept-Encoding
etag: W/"6369883e-bf88"
expires: Thu, 25 Apr 2024 00:06:50 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 13732
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MWDdmq6MTeFfrEMsYV57cw43Mh9pYFUHn5VCOoahRe4zFSfatfrMu9IhX6Tpcp7RCPn1DSrpKn5sbFuM9druJL3qEnzZEHF9dHoc0owME9Wk8wi5z56Cer3uwrtiyZpaboQ0Cw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87974774af6b56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/css/228-3f644e07cb9c5c2e5340.css | 188.114.97.1 | 200 OK | 16 kB |
URL GET HTTP/3appleid.xmanl.com/static/css/228-3f644e07cb9c5c2e5340.css IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeUnicode text, UTF-8 text, with very long lines (64278), with no line terminators Hash0d46e56dc40c78f2802230c50e9bde3a f53095570a662165bf7b562c7cddd11cf6f3a7fa 4e080ad2f916b47277e65c2e31d59e14cd1ae2b0d6e36467e3e733489c29f4f3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/css/228-3f644e07cb9c5c2e5340.css HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:42 GMT
content-type: text/css
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
vary: Accept-Encoding
etag: W/"6369883e-15c8f"
expires: Thu, 25 Apr 2024 00:06:50 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 13732
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OaTZCPkcRiCSJhN3Kau7kVaUed0%2F6RG8ra8NV%2BF34AXVvcW7VZaa%2Fm7JWX2wZBzE%2BTPGTglZOGn%2BXrS%2FhsBvuxGYUXvSUuqFWRcC%2BK%2F0aPSZ7puhO6f%2BF6j%2BNoXD0fQVokEcsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87974774af6f56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/css/ac-globalnav.built.css | 188.114.97.1 | 200 OK | 22 kB |
URL GET HTTP/3appleid.xmanl.com/static/css/ac-globalnav.built.css IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash5983cd44414cac4f6dc5eed0bb1b1b64 a45c4782f7226609afe3c77df161540020cb5ba5 0cdb96d1f18ff7e157bdb1c2134c138fe706d7ae84896e1f887ca2ca171dfbdc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/css/ac-globalnav.built.css HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:42 GMT
content-type: text/css
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
vary: Accept-Encoding
etag: W/"6369883e-1d0f1"
expires: Thu, 25 Apr 2024 00:06:50 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 13732
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dAlXDxpqIMlJ%2FDo3XO7kLLVvVK4d0dgFhYYpBU%2BOc34DDtDBUR9Gc%2F1D8n179xM%2BP%2FXF5krEBGU5UufNMogzRxTsMVH2EqT70FVsiw7rOGANeOS1A6yGMf%2FE2Ih30afF1aJ9yw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87974774af6a56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/fonts/sf-pro-display_semibold.woff2 | 188.114.97.1 | 200 OK | 231 kB |
URL GET HTTP/3appleid.xmanl.com/static/fonts/sf-pro-display_semibold.woff2 IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/index/signin.html CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 231048, version 1.0 Size231 kB (231048 bytes) Hash01ae716a31eb383e1df472e09888379c 9480b4273e241238e688fadd8a6e854b4236b08d 39e23831b68995dbe602a60faa248be99e52b71730972ddb53378ebfc40a3a4f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/fonts/sf-pro-display_semibold.woff2 HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/fonts/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:48 GMT
content-type: font/woff2
content-length: 231048
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
etag: "6369883e-38688"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q7bZUCw4P9M%2BHlfWqfJcia5fT8HTY7WrW9AmDB2X7kffQti%2F1FoQEnhRgLWRsfZaL4CXqmptsKqnGZszhTgzT2SkgzdncbCstsKbUmUa1G8FMg0HCcS7rLlO7%2B%2Fcufg8N%2BMm5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747867aec56a4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/images/HR_gradient_dark.png | 188.114.97.1 | 200 OK | 1.2 kB |
URL GET HTTP/3appleid.xmanl.com/static/images/HR_gradient_dark.png IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/index/signin.html CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typePNG image data, 382 x 50, 4-bit colormap, non-interlaced Hashafe4bc3227b4889fc78a8181e014a931 e3ff6c0083fbeded76e33ace08bacac04e7ad35b e39f78e3fd9428c8ad22060046d9cc07d65cf9fa784a16a3925b9acb52f35c3d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/images/HR_gradient_dark.png HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/app-sk7.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:49 GMT
content-type: image/png
content-length: 1240
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: "63698840-4d8"
expires: Fri, 24 May 2024 12:32:34 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 12195
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O5DGpgXMxoftgH6%2FedFdapoXTIuJMInW8S1Mab6jiPa2eBB97DMu6K3NN9XrEPZ%2BGxKPgPIVPnhEn%2FAKq1dGGRwRnGgE9P0s36V1F7xtT10SW4ee43F1XYLmLLKwkPVnnhOSuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797479fcc7056a4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/fonts/sf-pro-display_semibold.woff2 | 188.114.97.1 | 200 OK | 231 kB |
URL GET HTTP/3appleid.xmanl.com/static/fonts/sf-pro-display_semibold.woff2 IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/index/signin.html CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 231048, version 1.0 Size231 kB (231048 bytes) Hash01ae716a31eb383e1df472e09888379c 9480b4273e241238e688fadd8a6e854b4236b08d 39e23831b68995dbe602a60faa248be99e52b71730972ddb53378ebfc40a3a4f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/fonts/sf-pro-display_semibold.woff2 HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/fonts/fontss.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:49 GMT
content-type: font/woff2
content-length: 231048
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
etag: "6369883e-38688"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gxZCpe%2FNhBcYEJv97%2BIDMu6dtRln0%2FumopR752%2BebgJ3zT1L7P9z%2BeGuaTi65beqqDs2U7M6MswIHYyBPYAgshzFmxqsvYlU%2FCztqBQGiYEaHlNd9%2BdWbOxtZAVtbrH%2BSCKRfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797479fcc8056a4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/fonts/sf-pro-display_semibold.woff2 | 188.114.97.1 | 200 OK | 231 kB |
URL GET HTTP/3appleid.xmanl.com/static/fonts/sf-pro-display_semibold.woff2 IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/index/signin.html CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 231048, version 1.0 Size231 kB (231048 bytes) Hash01ae716a31eb383e1df472e09888379c 9480b4273e241238e688fadd8a6e854b4236b08d 39e23831b68995dbe602a60faa248be99e52b71730972ddb53378ebfc40a3a4f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/fonts/sf-pro-display_semibold.woff2 HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/fonts/fontss.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:49 GMT
content-type: font/woff2
content-length: 231048
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
etag: "6369883e-38688"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cfj7LiguITtYMgF2V6nqGfALjxve9%2B%2BP2igrsocAJVnZIRmjwZyv3HkYT3vb%2F49CoreZasltceysH6QVBWU2FR9TskttiUEfHIEfIlTPWlcLCHxmiLE%2BZtSw5C4PvjDT9mXwRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747a10ddb56a4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/fonts/sf-pro-display_semibold.woff2 | 188.114.97.1 | 200 OK | 231 kB |
URL GET HTTP/3appleid.xmanl.com/static/fonts/sf-pro-display_semibold.woff2 IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/index/signin.html CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 231048, version 1.0 Size231 kB (231048 bytes) Hash01ae716a31eb383e1df472e09888379c 9480b4273e241238e688fadd8a6e854b4236b08d 39e23831b68995dbe602a60faa248be99e52b71730972ddb53378ebfc40a3a4f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/fonts/sf-pro-display_semibold.woff2 HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/fonts/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:49 GMT
content-type: font/woff2
content-length: 231048
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
etag: "6369883e-38688"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GuGiZQK%2FKtFmDpcCaj0GTazB0BgQUgoeNX6WcHAByU0GJ%2ByoFPKLP8KNg%2BIkj3E8J1PpkxGsvDPTvubgtrHuDilGmzw1phbwk%2BHdTzQm31G7t%2BTlh7QIc6VC7xTl%2B8iaQ%2BlQOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747a12e0e56a4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/images/globalnav_links_store_image__c7jy08initqq_large.svg | 188.114.97.1 | 200 OK | 10 kB |
URL GET HTTP/3appleid.xmanl.com/static/images/globalnav_links_store_image__c7jy08initqq_large.svg IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeSVG Scalable Vector Graphics image Hash3fc87f5bd5d299ad718727c3abbac9da 8cbaf20f7f9efc46808d91da72f3916f8c2a130f 1d45056a53097eda6719ae552ad2a53bc5d982fec19107961ab29c3c49c34ab2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/images/globalnav_links_store_image__c7jy08initqq_large.svg HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/ac-globalnav.built.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:45 GMT
content-type: image/svg+xml
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: W/"63698840-542"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rjAwg4UqGeGyqDApw8EGM%2BIVZBd1NzpELle4A0futDtDpolhg1kFggr3gq47tRNVif3IhJbuxVViAWHv2zTryRDekszBWzI5s6eEb308TDoP8C7YjtnXhafHuL1jIQGwhzicCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747865ac656a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/js/signin.js | 188.114.97.1 | 200 OK | 12 kB |
URL GET HTTP/3appleid.xmanl.com/static/js/signin.js IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/index/signin.html CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hash7b335be671e4af4393b5e8494045c5f6 5167b932145529e92a1983244c651ef5af845930 b7d53e2fba7138b896ce18c09dae7563cc621d1ecfadbf969856b2fc107655e8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/js/signin.js HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/index/signin.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:49 GMT
content-type: application/javascript
last-modified: Tue, 08 Nov 2022 02:45:44 GMT
vary: Accept-Encoding
etag: W/"6369c2d8-202e"
expires: Thu, 25 Apr 2024 00:32:33 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 12196
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZCURMVbViN84P2SkE2prYWPUH2KU%2FbJgppCuMZ1VxUfu9o48Luh%2FZ7AK8fTz2ScAk8bpFH%2FpLKw2WJmYLsJGVC5b5Hl4P6bICve%2B%2BV6ZnmUS5fN%2BCk8d4m1x4nC0eF0CGrnPDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797479f4be956a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/fonts/sf-pro-text_regular.woff2 | 188.114.97.1 | 200 OK | 220 kB |
URL GET HTTP/3appleid.xmanl.com/static/fonts/sf-pro-text_regular.woff2 IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/index/signin.html CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 220536, version 1.0 Size220 kB (220536 bytes) Hash059d2edeb663a16de959975d5ed21db8 3674a0e6fbc086cf109a1b192ef5016d328fdfa5 3231b77ee2775dadbaa76de85f95763976aff1091f63a67fa553d727a6edb933
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/fonts/sf-pro-text_regular.woff2 HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/fonts/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:46 GMT
content-type: font/woff2
content-length: 220536
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
etag: "6369883e-35d78"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pCrElj9ocCVm7wvtSXgTN%2BeG0C4fjVYRp5Nkb8ndvYov0A5V%2BwHWcC3Xj4cziH4eTJCwQjGan08T%2BV5Pn%2FqkdMrswkxoT4kmZ9j49h1pNTVZLf%2FRt%2F%2FoMpdWa07qRcR1ewxxVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747867ae656a4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/images/globalnav_apple_image__b5er5ngrzxqq_large.svg | 188.114.97.1 | 200 OK | 221 kB |
URL GET HTTP/3appleid.xmanl.com/static/images/globalnav_apple_image__b5er5ngrzxqq_large.svg IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeSVG Scalable Vector Graphics image Size221 kB (221035 bytes) Hash4dae9194a5e65e014b2041b611b48cb8 d483dc0b8dfa26b582d3c317f7321f274ddd486a 185fef753937fdebf36104cf6481152e587d964a1b3496ab5d7623922a147a44
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/images/globalnav_apple_image__b5er5ngrzxqq_large.svg HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/ac-globalnav.built.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:46 GMT
content-type: image/svg+xml
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: W/"63698840-35f"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O0VvkPAFJ5lGmhHVz9Jqsv3uWjKSjQrmNQ8aPGYBjdKwkdgcomRrhJRi%2BFD%2BpF6dSU%2FhiDo9Dmh3eGDcq2EAm5nBPxAXATrpLrVX7SfFBRPZ%2BDgOrlzAH%2Fi%2FpJPCsVVkdvbpFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747865ac556a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/images/globalnav_links_airpods_image__f969s84ivmaa_large.svg | 188.114.97.1 | 200 OK | 221 kB |
URL GET HTTP/3appleid.xmanl.com/static/images/globalnav_links_airpods_image__f969s84ivmaa_large.svg IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeSVG Scalable Vector Graphics image Size221 kB (221382 bytes) Hash532c4211677add3e58c31720ac151c35 9400f7e77d5fd117ec45dbc376ae6eb887ff12d2 e7f5e4bb2a9897973aad5732fa800bcf8609ce74f54b6d5621077e51d0cdd800
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/images/globalnav_links_airpods_image__f969s84ivmaa_large.svg HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/ac-globalnav.built.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:45 GMT
content-type: image/svg+xml
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: W/"63698840-6ba"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8MycuS5yJfb%2FMCaPbFCOOSdosQ%2F%2BUFzrBuXD5Pns60fdWrLq6clLSdeZbxj2P6WEKzbpO6QnZbQyC6fQviJbH8F8kNKmfTS38qRdT06knqXrj2o%2FlBjnj7fjbuuTKnFuo7E0QQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747866acf56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/fonts/sf-pro-text_regular.woff2 | 188.114.97.1 | 200 OK | 220 kB |
URL GET HTTP/3appleid.xmanl.com/static/fonts/sf-pro-text_regular.woff2 IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/index/signin.html CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 220536, version 1.0 Size220 kB (220536 bytes) Hash059d2edeb663a16de959975d5ed21db8 3674a0e6fbc086cf109a1b192ef5016d328fdfa5 3231b77ee2775dadbaa76de85f95763976aff1091f63a67fa553d727a6edb933
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/fonts/sf-pro-text_regular.woff2 HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/fonts/fontss.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:49 GMT
content-type: font/woff2
content-length: 220536
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
etag: "6369883e-35d78"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AgqzKEodvFRpab6iYN7k36l7%2F2lUunAE%2FYnIQyvnRfD2YcdzJQhNoy5VLwwcdVUeXWvIkk5SEk4SiSO12pgSa4%2BWxDWJYpUxK44A5bRsAs3Hv5IHPS61flVNK4RxU%2FONTTSbEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747a10dd756a4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/fonts/fontss.css | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3appleid.xmanl.com/static/fonts/fontss.css IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/index/signin.html CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeUnicode text, UTF-8 text, with CRLF, LF line terminators Hash15eb49f12633f1ce9c09dc08f22b3c5f 340cf2fcb7d7559470ff65d6b1bf4a49a6483955 eefea27fc0a3757b82883695d5dd266beb03e8dd22a2d0df3821e829ea1bfe50
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/fonts/fontss.css HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/index/signin.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:49 GMT
content-type: text/css
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
vary: Accept-Encoding
etag: W/"6369883e-3a5e"
expires: Thu, 25 Apr 2024 00:32:33 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 12196
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hGxsdWanOLIH3CNMq1f6%2FJJrA7o2%2BJhLM4RnVStgBm%2FZGT%2FMOiFiqSZlz3W5r%2Bfo0fT%2BkBJntwmyZCApxy%2FpViMLwQRbTKyvyBDXEZM29CyJzbJrHhV7J8gTfPDVD5UKYZNElA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797479f3bdb56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/js/jquery-3.6.1.min.js | 188.114.97.1 | 200 OK | 43 kB |
URL GET HTTP/3appleid.xmanl.com/static/js/jquery-3.6.1.min.js IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash00727d1d5d9c90f7de826f1a4a9cc632 ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2 a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/js/jquery-3.6.1.min.js HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/index/signin.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:49 GMT
content-type: application/javascript
last-modified: Tue, 08 Nov 2022 00:11:32 GMT
vary: Accept-Encoding
etag: W/"63699eb4-15e40"
expires: Thu, 25 Apr 2024 00:06:55 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 13734
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MPu0R5VQu4ex1nsi5R1kYX%2Frfobk71dgy18lbSL3DdSTJZMpX2%2BbWiw0CjddCvWTfj4Clh1SLQhJV66K5bOgV15MG2hJaMPLoElyQfKUQADCJyhOQYQkvJaLj9PijS7dB9zzRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797479f4be356a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/fonts/PingFangSC-Regular.woff2 | 188.114.97.1 | 200 OK | 624 kB |
URL GET HTTP/3appleid.xmanl.com/static/fonts/PingFangSC-Regular.woff2 IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 623592, version 2.66 Size624 kB (623592 bytes) Hashc732fac66fda8f5d0828cb21794bb627 87aa33697efce97502dd503ea48715ecf6ddb0ca 790eedf3abb1b3cf702a4b76c0bd109a5c54e120d5531a13e12ae82f17655204
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/fonts/PingFangSC-Regular.woff2 HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/fonts/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:46 GMT
content-type: font/woff2
content-length: 623592
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
etag: "6369883e-983e8"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=COHoq8BhU%2BZ0k%2FzwHZPsIbdtloDDvGVZztEMo0KTDBv2s%2Bem1aZ0J27IOFNhiOYOq6BI95RO92e5WxP1Bn3vLUG%2BBzmHrUQ6k29AMvoalpxaL7FGNYsJb3EL9fb2%2BMPfFIce8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747867aed56a4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/fonts/PingFangSC-Regular.woff2 | 188.114.97.1 | 200 OK | 624 kB |
URL GET HTTP/3appleid.xmanl.com/static/fonts/PingFangSC-Regular.woff2 IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 623592, version 2.66 Size624 kB (623592 bytes) Hashc732fac66fda8f5d0828cb21794bb627 87aa33697efce97502dd503ea48715ecf6ddb0ca 790eedf3abb1b3cf702a4b76c0bd109a5c54e120d5531a13e12ae82f17655204
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/fonts/PingFangSC-Regular.woff2 HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/fonts/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:49 GMT
content-type: font/woff2
content-length: 623592
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
etag: "6369883e-983e8"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1v0ItAgdR3COySlxRqoxlgYSxtxN4KbFY56HR2d%2B5dWHAFKOXpSEFfJbsFS52KKvk9XeaFBApaF%2Bqq67Ueywfo0Nh%2B9YhUP88Jq4AhPuXCOJHjksIXw7h6e50oTgYOfeOa3%2Frg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747a12e0f56a4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/fonts/appleicons_text.woff | 188.114.97.1 | 200 OK | 1.0 kB |
URL GET HTTP/3appleid.xmanl.com/static/fonts/appleicons_text.woff IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeWeb Open Font Format, TrueType, length 1032, version 1.0 Hashdbfb39700c2ae4be64e11f56f67b8800 594a44bafbe3c796dcd000c8a8a6ebbdea553f6b b36e10199ae62e788fab5e154b2694409745e146f026219436b71d5bca185c69
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/fonts/appleicons_text.woff HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/ac-globalfooter.built.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:50 GMT
content-type: font/woff
content-length: 1032
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
etag: "6369883e-408"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XRZcVkky1yrfGIOG1juKPoJhDjWF0t7zqVjrQJVvOOcb7k3cELA%2Bh0CH%2B68Co5Ma4kauB2Kwv5joaaiXvwDwfGnO6GKqVyLPKrX9CTuwDdlgIq%2BVcX8%2FaPL%2BhxdlX%2ByGB32ZyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747a7282156a4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/images/globalnav_links_ipad_image__fw9qyj9lloi2_large.svg | 188.114.97.1 | 200 OK | 1.2 kB |
URL GET HTTP/3appleid.xmanl.com/static/images/globalnav_links_ipad_image__fw9qyj9lloi2_large.svg IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeSVG Scalable Vector Graphics image Hash46634571cb185b2115280b25c1e115f0 b49ae8dbaa8ac8c4bca89e4671b85377f248bfab f439f2ec278788114c7f2c06ca129469f6530c839ecf55bfeab7315b95e14bfc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/images/globalnav_links_ipad_image__fw9qyj9lloi2_large.svg HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/ac-globalnav.built.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:45 GMT
content-type: image/svg+xml
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: W/"63698840-48c"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=szWhvXeY3NPD%2B45TlZ8EYK9DE%2FZxviOOIkBZU51dw%2Fwf4gozn3lwBMMGcp6RmFDG7EYEMzUNaFhEteZwxzaTvf8%2F7C%2Fbl8q%2BJJ2R%2BzfTMyELeG3DQ%2Fsesc3UnYbEnT0vs4JHrg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747865ac856a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/css/signin.css | 188.114.97.1 | 200 OK | 6.1 kB |
URL GET HTTP/3appleid.xmanl.com/static/css/signin.css IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/index/signin.html CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeUnicode text, UTF-8 text, with very long lines (6742), with no line terminators Hash5794a833a3de2ab292a66fa30da2fbee 6734dfad48f4549950734316c694e04162d62af0 9d46a683f0ae017c6fb8a6aba8b169c25f34fe16f6c8996efccde15edf7e9cd4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/css/signin.css HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/index/signin.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:49 GMT
content-type: text/css
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
vary: Accept-Encoding
etag: W/"6369883e-17c4"
expires: Thu, 25 Apr 2024 00:32:33 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 12196
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hdVoXN0jj3I9Se26ie4h46BdnrUODGWzHtxQecUYvrz7z9fzogo8fuAFpOfPS8izyntR82cI9N55vHYPtqBvi8b7yyRw%2BUOqwdTKiERU%2B0%2FhYL2FHj%2FQuA1VsZpvu270nEWOAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797479f3bdd56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/fonts/shared-icons.woff | 188.114.97.1 | 200 OK | 9.6 kB |
URL GET HTTP/3appleid.xmanl.com/static/fonts/shared-icons.woff IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/index/signin.html CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeWeb Open Font Format, TrueType, length 9552, version 1.0 Hashe9e7624727ba14678b9a71b6f90745e3 0f0b7625cd06387c601f1632b0f69719b920f68a 6de3580fdeace0ff74927b2449e34587dd0b2a03c7711cf0087925e25429efe3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/fonts/shared-icons.woff HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/app-sk7.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:49 GMT
content-type: font/woff
content-length: 9552
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: "63698840-2550"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5ekY2lLSfE%2BnQ131FamyHFcBPCYZqATEtoVIGAyDr%2BxTMlQW3arCQEh3znL%2F76iDXCn%2FfMxsyvq8YxJcHm8qnnnctqFmgYZt7ugyQfm7AZG9Q8T8X3c5kuj4pShhUqNHki5QkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797479fdc8856a4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/images/globalnav_links_onlyonapple_image__c4t8k97tougm_large.svg | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3appleid.xmanl.com/static/images/globalnav_links_onlyonapple_image__c4t8k97tougm_large.svg IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeSVG Scalable Vector Graphics image Hash7cf022dfd5a426a93aac04d9dbf3f3c0 7342f4744f175b872c7810571771424cecd4ba58 97d72861192892baa592df55901cf046246f983438e9be36702a7e40a337a4c9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/images/globalnav_links_onlyonapple_image__c4t8k97tougm_large.svg HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/ac-globalnav.built.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:45 GMT
content-type: image/svg+xml
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: W/"63698840-e41"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: HIT
age: 5466
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Op6Z4DKIZu1wEptL%2BLP5j2ZIR3SyP7xLsMzEyk9QLpjmBLRe8fxsV8wncqbmuBftICku%2BofQruFd3k6W03WC3Te07XYhNr5nXTBxbcS0fPfYFVfqu%2FGuLnexmT0%2FuMTN7mFvRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747866ad956a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/images/globalnav_links_support_image__bw9kctll7u3m_large.svg | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3appleid.xmanl.com/static/images/globalnav_links_support_image__bw9kctll7u3m_large.svg IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeSVG Scalable Vector Graphics image Hash24e0bd8dfaee336f9298e08212d69053 3369ec022f2712568335a7a80e16bd4bf965c4a5 7d8275949f8c3632a4bd49dc3ebce15f00a69e0e99cb7db82911213e7aadb032
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/images/globalnav_links_support_image__bw9kctll7u3m_large.svg HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/ac-globalnav.built.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:45 GMT
content-type: image/svg+xml
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: W/"63698840-b25"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PEvif3yQImDPr1z9A5I4hoxkUyFgdK%2BK40lmvZ5huK1rmx0nDz7a%2FqEU0kyfB6jiCp8P2z0ZuJrszjlNJzTlxYF6oSJI20T5Ikq1ajDJf09T7rpiqwPXSeEnEM7O1EKyxGnrvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747866adf56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/images/globalnav_bag_image__yzte50i47ciu_large.svg | 188.114.97.1 | 200 OK | 477 B |
URL GET HTTP/3appleid.xmanl.com/static/images/globalnav_bag_image__yzte50i47ciu_large.svg IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeSVG Scalable Vector Graphics image Hash652d919b8292cd6ca9ddf1cef4b0fd70 09e7d68952dd70e710b5c55882f7b66fafffa4a1 6fefde156aca84df0e04dcfc6bf3fd0a78c744fb65c50cb0f4b105c6abfcae53
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/images/globalnav_bag_image__yzte50i47ciu_large.svg HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/ac-globalnav.built.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:45 GMT
content-type: image/svg+xml
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: W/"63698840-1dd"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JDMdPXqyPttnnVs8emqlu3rBXPfY1m44D%2F7vhGWITqTVQJu4d37ntQc4HJoqoH024O%2FmUloQld44ONyKOiJ4lgyjVJ7C9ZGip5dFk8Hn8l1BfRbGQ6PiaYLZhsVPSxT2wxuEog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747867ae556a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/css/home.css | 188.114.97.1 | 200 OK | 725 kB |
URL GET HTTP/3appleid.xmanl.com/static/css/home.css IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
Size725 kB (725001 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/css/home.css HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:42 GMT
content-type: text/css
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
vary: Accept-Encoding
etag: W/"6369883e-b1009"
expires: Thu, 25 Apr 2024 00:06:50 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 13732
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TEnfvF46vp8yTyeXnHWhRvtppnNANNijZlH%2FVMToUgG4YwkLIZ%2FOWfwPqYIhs%2BvTxgDem1lN91AieFTMi0VtxEQGnHw8ID9p4d7%2FJimp088M9r%2Blr6G55RUsXp1XfsoZQ01IDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87974774af6d56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/css/WebApp.css | 188.114.97.1 | 200 OK | 223 kB |
URL GET HTTP/3appleid.xmanl.com/static/css/WebApp.css IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
Size223 kB (222856 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/css/WebApp.css HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:42 GMT
content-type: text/css
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
vary: Accept-Encoding
etag: W/"6369883e-36688"
expires: Thu, 25 Apr 2024 00:06:49 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 13733
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I25n725YaKzOfqH2%2FCAvtgZ4MsuxkVcbvvVKzyL4%2Fw%2Bky5PG7H6lqqqw8HI7l03hBFPQHl4j%2FaOJWksHyDJtQlhaq2rC%2Fi%2F2F0Z8OLPTCZS28bmYXOsSCL1su8ZTHu2MPxFItQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87974774af7156a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/images/globalnav_links_watch_image__gkoblojrlsqe_large.svg | 188.114.97.1 | 200 OK | 1.3 kB |
URL GET HTTP/3appleid.xmanl.com/static/images/globalnav_links_watch_image__gkoblojrlsqe_large.svg IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeSVG Scalable Vector Graphics image Hash3cd028531211b59d36448998151be5ff 35fc96ce1f9bdf5ba10499288c67137a35624bb0 064539ac7d6cc3483e38e768e200aee60937bf9c34adba2130f51811a4ca8c0d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/images/globalnav_links_watch_image__gkoblojrlsqe_large.svg HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/ac-globalnav.built.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:45 GMT
content-type: image/svg+xml
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: W/"63698840-51d"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6CJ3dZKw8GqvfC%2BufSxxHllkk2HFwxEY14hj%2FBjvhMhWzFaszEiP%2B7HoFEmoNIjaRRMc4uL9fEgaSTm83lRHfr7BA2gSr89U8DopcbRnG8x2wepfi29giz1HUmhf3zdsWblUEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747865aca56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/images/globalnav_links_accessories_image__edj0wqmfwxyu_large.svg | 188.114.97.1 | 200 OK | 1.4 kB |
URL GET HTTP/3appleid.xmanl.com/static/images/globalnav_links_accessories_image__edj0wqmfwxyu_large.svg IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeSVG Scalable Vector Graphics image Hashf9cf6a2a5406c16ed85aad4003f51fb7 b91ce3a61e9bed98c32c200b05a5be0d5cc98a15 96fec8d04f89783dbaff56e82c167714ed8c63b410dd99eca00e3e8b7826b8cf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/images/globalnav_links_accessories_image__edj0wqmfwxyu_large.svg HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/ac-globalnav.built.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:46 GMT
content-type: image/svg+xml
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: W/"63698840-56f"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xtTb0K9ZIBXoByAKg0xzbkhkzlKXU%2Fxg%2BIvmhJQo2FtixQVgh5qrh3ssjNox8W1kRLIfBPqwVuiavmdk65cq91rAv21A5WtIeuoSUEhJpv5vvMATheBMrJRYXS%2BGjNHSdIJwAw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747866adb56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/images/globalnav_search_image__cbllq1gkias2_large.svg | 188.114.97.1 | 200 OK | 541 B |
URL GET HTTP/3appleid.xmanl.com/static/images/globalnav_search_image__cbllq1gkias2_large.svg IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeSVG Scalable Vector Graphics image Hash570fbe7bec9b75042d1b9db4f75894b2 3b806abaee23dbc3e150fa3c6d85fa9f158e2945 c8294321a647d2c8f7ef2da2895dfd6cc3d1642330ac7740e4faba7fba92562e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/images/globalnav_search_image__cbllq1gkias2_large.svg HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/ac-globalnav.built.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:45 GMT
content-type: image/svg+xml
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: W/"63698840-21d"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9iwFl%2Bhj2nxozm9RuYM1JtZIGpNXz%2F%2BXO5qH%2BiRgxBVr5jmAPYP51AtUKNETytucT2gnYOyVAVOBapQhOKGDvtyMXbx7IyHih6miVI4kE2zq3nn2P7QVFbBA%2BQgEFX3Avsg86w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747867ae356a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/css/app-sk7.css | 188.114.97.1 | 200 OK | 433 kB |
URL GET HTTP/3appleid.xmanl.com/static/css/app-sk7.css IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/index/signin.html CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
Size433 kB (432951 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/css/app-sk7.css HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/index/signin.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:49 GMT
content-type: text/css
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
vary: Accept-Encoding
etag: W/"6369883e-69b37"
expires: Thu, 25 Apr 2024 00:32:33 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 12196
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OtIVAc%2FSvHSfcCEonS%2FZKC0uTWK3PD0DKul6E2nDegVUiScDRK%2BxG47p%2B4Gk8mgxzI%2FyJXu%2B7EGgnvnW0L3yNJKF42L9jsT7I4E5ZjqfKi6Lb5NROckQRuYQ6axVbN190ZRQdA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797479f3bdc56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 188.114.97.1 | 200 OK | 2.3 MB |
URL User Request GET HTTP/2IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
Size2.3 MB (2291207 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET / HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 15:55:42 GMT
content-type: text/html; charset=HTML-ENTITIES
vary: Accept-Encoding
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e85cFXuTggoBCffLGnb3XThTe9%2BAHiNYK0565PzXIDumVIrF4wAsrpYu2ZhEet1LA05pwp0lo6EUAafqOnLrybobMJB2zlZbWw0D0qqgLv2xoAgyk46DLaEnmOcAfTqcshb%2FRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797476f3c387130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| appleid.xmanl.com/static/fonts/fonts.css | 188.114.97.1 | 200 OK | 21 kB |
URL GET HTTP/3appleid.xmanl.com/static/fonts/fonts.css IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/fonts/fonts.css HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:42 GMT
content-type: text/css
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
vary: Accept-Encoding
etag: W/"6369883e-5048"
expires: Thu, 25 Apr 2024 00:06:50 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 13732
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XTkhGEOdlC0Ec18No34eSc66tpCMeFhIn9mjaQl4p5tIJADfV4f2BWuJEnVLOYYbsFTbwahsozVE2i3PRr7OlLJ31ytGkIGWkEketomGpfaVCV2dTi04Pn3m3yl71Z5%2FrGiEXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87974774af6856a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/images/globalnav_links_iphone_image__ko7x4isga4ia_large.svg | 188.114.97.1 | 200 OK | 1.4 kB |
URL GET HTTP/3appleid.xmanl.com/static/images/globalnav_links_iphone_image__ko7x4isga4ia_large.svg IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeSVG Scalable Vector Graphics image Hash6f0c50cfa0c18753a9971ce8c0a44e83 f7ba3b634f2967930f87c2d1c500744a4e712e01 3c805071e194dc8fc7fca89fb88c2fc2ad20a1cf5a8b0e548767dc44fd94d226
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/images/globalnav_links_iphone_image__ko7x4isga4ia_large.svg HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/ac-globalnav.built.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:45 GMT
content-type: image/svg+xml
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: W/"63698840-57d"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rtGNi54O3XTShRfL%2FwNW%2BPB1tnrIkI1MqDDPinblKh8G1xyKE7dGrj5lA26hsygQWpRH4hshvAWlgYSxqu6NM89SxnVq%2Fe4I%2FE%2B18%2F8MC2%2BY8VGv8w6%2F5aJCLs8t54VRYNSDQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747865ac956a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/js/WebApp.js | 188.114.97.1 | 200 OK | 868 B |
URL GET HTTP/3appleid.xmanl.com/static/js/WebApp.js IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (898), with no line terminators Hash8e450fd7bd22f84525067094052c3876 c528888a500b8576b3aac3aa99285f4890dbced4 35890485f47ef35adb87fe5368e756febd700fb5dba4687e7873912cab65914d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/js/WebApp.js HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:48 GMT
content-type: application/javascript
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
etag: W/"6369883e-364"
expires: Thu, 25 Apr 2024 00:06:55 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 13733
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XagLsN%2FhYOEWLjaHGcsCGVOkxsHGawGyyks4wh2PxTVzfrFoDGKQdQ1y8CCiSftyQ%2FGQBiexgLcSXtRzzrDQDFCGsvItyWcGkWU7K0sPgrBc1gypRo8gp3jngGlUbWQaLxZFBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797479a9f3b56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/fonts/SFProIcons_regular.woff | 188.114.97.1 | 200 OK | 10 kB |
URL GET HTTP/3appleid.xmanl.com/static/fonts/SFProIcons_regular.woff IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/index/signin.html CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeWeb Open Font Format, TrueType, length 10380, version 1.0 Hash9caca193fe7bff016ef17e26937711d9 121e523fe8f27d18017c2f7a056f2f14bf43bfc9 3b7d2b4c5417a697678081ed3b344955f0b25e694171178b0c01e029b4a18e8b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/fonts/SFProIcons_regular.woff HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/fonts/fontss.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:49 GMT
content-type: font/woff
content-length: 10380
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: "63698840-288c"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KO%2B2m2aFWI%2BH7Lc7Go26FzQQoJHz%2BMnYSPtKsorSdGDicCFPacdkhePWoOtyrazlE6%2Bm2CXfN88%2FJnmypE3aRC%2FPYdxVji%2BZg4hh%2BS8w%2Bb2Obq2dFEbn9fgb3LukhCoHwIWlYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797479fecb156a4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/fonts/SFProIcons_regular.woff | 188.114.97.1 | 200 OK | 10 kB |
URL GET HTTP/3appleid.xmanl.com/static/fonts/SFProIcons_regular.woff IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/index/signin.html CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeWeb Open Font Format, TrueType, length 10380, version 1.0 Hash9caca193fe7bff016ef17e26937711d9 121e523fe8f27d18017c2f7a056f2f14bf43bfc9 3b7d2b4c5417a697678081ed3b344955f0b25e694171178b0c01e029b4a18e8b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/fonts/SFProIcons_regular.woff HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/fonts/fontss.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:49 GMT
content-type: font/woff
content-length: 10380
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: "63698840-288c"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q0UauHO2yjPJVVdmEwIaFPJgCGxy6OFaLqoR%2BX%2FCUETNhSUI0LnRxmO%2Bl0ooKGLlvG%2B3O3cvecIBNURXL2i2uH%2BOF%2FiD89scfmWeykh3AVXugwr3zbJ0u54S%2BRNOf1h0Wr2O4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747a11de856a4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/images/globalnav_links_mac_image__dazlko3t9a6a_large.svg | 188.114.97.1 | 200 OK | 1.1 kB |
URL GET HTTP/3appleid.xmanl.com/static/images/globalnav_links_mac_image__dazlko3t9a6a_large.svg IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeSVG Scalable Vector Graphics image Hash185437899428790d9305f74cc829883c 3e7ec53b55e63838e7db4f49ca808c00eee670ef e5f04d66cfd2638b389921ba5e0b85428201d2ba818baa67594c104de80ec822
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/images/globalnav_links_mac_image__dazlko3t9a6a_large.svg HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/ac-globalnav.built.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:45 GMT
content-type: image/svg+xml
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: W/"63698840-451"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: HIT
age: 5466
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r89MtG1eppVIYARvQ5CY%2B4vMfFjT9mK0lExSq6l14RpHmDeuMFzLeMfvV%2BOssHHU9XqP5viG2MyPP2rWXuBAUZiCdxb46KxeZlNEOnD27%2BVlxtxSFb1SEKYJ6aXjQ0RlC9Dyjw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747865ac756a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/images/globalnav_links_home_image__f1clf2wcnbe6_large.svg | 188.114.97.1 | 200 OK | 1.6 kB |
URL GET HTTP/3appleid.xmanl.com/static/images/globalnav_links_home_image__f1clf2wcnbe6_large.svg IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeSVG Scalable Vector Graphics image Hash639716cdad11ed195e8cbbfb740fde86 299c9fe9c58e44a701fd042a37538c731126dec7 02ca648ae535a9b44e85f0cd0fa0b057a1662756fd8cfd0ec5cdb7ec5e18a5c2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/images/globalnav_links_home_image__f1clf2wcnbe6_large.svg HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/css/ac-globalnav.built.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:45 GMT
content-type: image/svg+xml
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: W/"63698840-669"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yixrs59c5zj%2FQZ1nE9vhCriaBlDe514FkUE%2F0rWrsL5aVEh3ZPNfB4SPR3INJ%2FbZTFQbJ6ekTl0D%2FbrlzkiPCHZRVwMQr%2F3l7WapPkDjJw7xGvJlnSmZTUmCPf5lv5A4oPxjZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747866ad656a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/index/signin.html | 188.114.97.1 | 200 OK | 18 kB |
URL GET HTTP/3appleid.xmanl.com/index/signin.html IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeHTML document, ASCII text Hash8c8c288039a1e1d667f636ffff7d8d4c 53186f616b2d40ef225c9ea1080a2d05ac44f2ec 1eb6120d5c52f89e0a12f71c8ea0a6765df1d3f35cebed06d35b860e650682cf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /index/signin.html HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:48 GMT
content-type: text/html; charset=HTML-ENTITIES
vary: Accept-Encoding
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x2A55vmZca7P3DwtLE%2BzBNVQxwzbeZHaGn%2BU6dNX9DSl47pbHMgGIA3FkWuBYaG%2B5d%2BIjAG3GkCuovYr%2BMrykEbe3DeTsIbESDod30soNVB2EiXwUG0XZUxGFvE5ysJMC514GQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797479acf6d56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/images/favicon.ico | 188.114.97.1 | 200 OK | 22 kB |
URL GET HTTP/3appleid.xmanl.com/static/images/favicon.ico IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash891e510219786f543ca998282ed99f45 19fe2ff6a2418bcb44b02308b998cef84199ee08 e4bdf72e2f803f7e19907c12f407ac7f7cd5f1f94bfd730b9be24b0d49191b48
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/images/favicon.ico HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:48 GMT
content-type: image/x-icon
last-modified: Mon, 07 Nov 2022 22:35:44 GMT
etag: W/"63698840-576e"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gGCtsJwqmRA%2FFiVVwuhDxacbEApc5bTQ95AQx6klTDcokkh%2BFhC9h8FBZqZAG0hyPctn%2Fww3a8jDHpvUa2rGnG19RLh41wdswusr7tTmlib%2F3vdxvliIzLYcp8P7Eld%2BXql%2FJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797479d097d56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/fonts/sf-pro-icons_regular.woff2 | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3appleid.xmanl.com/static/fonts/sf-pro-icons_regular.woff2 IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/ CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11208, version 1.0 Hash56a40637c72cf6dbcd2200af11618a31 c18ff150d83558ff5325d4e2c5c98d67a5669934 17424fe5cf3a4f4c4c762989dd9c4d40eb8b14ac2d80c16d70879cd7f4067b39
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Apple | | OpenPhish | phishing | Apple Inc. |
GET /static/fonts/sf-pro-icons_regular.woff2 HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/static/fonts/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:50 GMT
content-type: font/woff2
content-length: 11208
last-modified: Mon, 07 Nov 2022 22:35:42 GMT
etag: "6369883e-2bc8"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uFSaCa%2BXsecivkU0899UVnEYEFTLajKs4%2FsDz6fP6wIE3qhDb1lKyAP0bAMD0CXKXjX%2B2bt1%2B2bryMMVxRrLprWE%2FikpH%2Bza%2BoN9jg0n%2BDTc3ZjsxRRZ5zbHX38koYx%2BrtN%2BpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879747a51c8e56a4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appleid.xmanl.com/static/js/jquery.cookie.js | 188.114.97.1 | 200 OK | 3.1 kB |
URL GET HTTP/3appleid.xmanl.com/static/js/jquery.cookie.js IP188.114.97.1:443
Requested byhttps://appleid.xmanl.com/index/signin.html CertificateIssuerLet's Encrypt Subjectxmanl.com FingerprintF5:9A:6E:46:D5:EB:11:8C:BE:30:95:C4:3A:ED:20:69:DC:9F:EC:8F ValidityThu, 14 Mar 2024 23:24:52 GMT - Wed, 12 Jun 2024 23:24:51 GMT
File typeJavaScript source, ASCII text, with very long lines (3462), with no line terminators Hash05a727adbd0e891bb7360e4c252d000e 7c91c70a432c50259b924e687d67fe1829b4ff45 bb421816f6dbef118848bebf04934c96c236210db2bfd88edcf81a15409266f3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Apple Inc. |
GET /static/js/jquery.cookie.js HTTP/1.1
Host: appleid.xmanl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://appleid.xmanl.com/index/signin.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:55:49 GMT
content-type: application/javascript
last-modified: Mon, 07 Nov 2022 23:20:26 GMT
vary: Accept-Encoding
etag: W/"636992ba-c44"
expires: Thu, 25 Apr 2024 00:06:55 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 13734
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xs3%2FFjn%2BAyH5zwD2UYQ%2F0hxhqxn%2B9PuFvi4xyuDo1ExDS6koI3C7H0fWh9Xm%2BkhYkh3qf%2FLJN8wyZifC8gtHyw4NDTDCM2nMpq%2FtTVGxxiupMhQAzZKAcIgshGUGPGAs6wSJ6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797479f4be756a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|