Fishing SMS via 8t0.host : ‘Le colis FR… vers … se trouve au centre de distribution. Vous pouvez suivre votre colis ici .. ‘

Quand je vois que 8t0.host est au Panama : https://who.is/whois/8t0.host c’est forcément du fishing.

En résumé : 8t0.host ( Panama ) => frtplive07985.blogspot.com => kingkongclicks.com ( Panama ) .

!!! NE PAS CLIQUER !!! C’est du fishing …

Misère.

$ curl -v http://www.8t0.host/s/42a2ev/he3
...
> 
< HTTP/1.1 302 Found
< Cache-Control: private
< Transfer-Encoding: chunked
< Content-Type: text/html; charset=utf-8
< Location: https://frtplive07985.blogspot.com/
< Server: Microsoft-IIS/10.0
< X-AspNetMvc-Version: 4.0
< X-AspNet-Version: 4.0.30319
< X-Powered-By: ASP.NET
< Date: Mon, 07 Sep 2020 10:11:11 GMT
<
$ curl -v https://frtplive07985.blogspot.com
....
* TLSv1.3 (OUT), TLS Unknown, Unknown (23):
* TLSv1.3 (OUT), TLS Unknown, Unknown (23):
* TLSv1.3 (OUT), TLS Unknown, Unknown (23):
* Using Stream ID: 1 (easy handle 0x556025d9f710)
* TLSv1.3 (OUT), TLS Unknown, Unknown (23):
> GET / HTTP/2
> Host: frtplive07985.blogspot.com
> User-Agent: curl/7.58.0
> Accept: */*
>
* TLSv1.3 (IN), TLS Unknown, Certificate Status (22):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS Unknown, Unknown (23):
* Connection state changed (MAX_CONCURRENT_STREAMS updated)!
* TLSv1.3 (OUT), TLS Unknown, Unknown (23):
* TLSv1.3 (IN), TLS Unknown, Unknown (23):
* TLSv1.3 (IN), TLS Unknown, Unknown (23):
< HTTP/2 200
< x-robots-tag: noindex, nofollow
< content-type: text/html; charset=UTF-8
< expires: Mon, 07 Sep 2020 10:12:43 GMT
< date: Mon, 07 Sep 2020 10:12:43 GMT
< cache-control: private, max-age=0
< last-modified: Mon, 07 Sep 2020 07:40:54 GMT
< x-content-type-options: nosniff
< x-xss-protection: 1; mode=block
< server: GSE
< accept-ranges: none
< vary: Accept-Encoding
<
* TLSv1.3 (IN), TLS Unknown, Unknown (23):

Laisser un commentaire

Votre adresse e-mail ne sera pas publiée. Les champs obligatoires sont indiqués avec *

Time limit is exhausted. Please reload CAPTCHA.