Report - distribuidorelectricotrujillo.com/

Report Overview

Submitted URL
distribuidorelectricotrujillo.com/
IP
192.254.180.201
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2024-05-09 17:31:10
Access
public
Website Title
American Express | 1 of 2
Final URL
distribuidorelectricotrujillo.com/
Tags
phishing
urlquery detections
Phishing - Generic phishing

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
distribuidorelectricotrujillo.com	unknown	unknown	No data	No data	488 B	13 kB	192.254.180.201
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-05-09	448 B	31 kB	216.58.207.234
rawcdn.githack.com	72170	2013-10-12	2016-07-04	2024-05-07	1.5 kB	217 kB	104.21.234.230
www.aexp-static.com	12486	2010-10-07	2012-05-24	2024-05-08	1.7 kB	111 kB	104.110.3.84
www.americanexpress.com	13613	1995-06-04	2013-04-24	2024-04-26	448 B	1.9 kB	104.110.22.253
cdaas.americanexpress.com	36912	1995-06-04	2017-10-27	2024-04-30	483 B	11 kB	139.71.16.29

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-09	medium	distribuidorelectricotrujillo.com/	American Express

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	distribuidorelectricotrujillo.com/	28 kB	2024-05-09	2024-05-09
Pretty URL distribuidorelectricotrujillo.com/ IP 192.254.180.201 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-09 19:31:17 Last Seen2024-05-09 19:31:17 Times Seen1 Hash 05b31af5ff9b3535cbdd8dbd7e16a991 0dfd428388c96db2556af90259d12901336ca589 d59112db5e1a105212fe004191c077287d87cb4d4bcaebbb6307f856240f21dc Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js	88 kB	2023-08-31	2024-05-20
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js IP 216.58.207.234 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 16:03:19 Last Seen2024-05-20 11:10:36 Times Seen9902 Hash 2c872dbe60f4ba70fb85356113d8b35e ee48592d1fff952fcf06ce0b666ed4785493afdc fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a Loading...

	unknown	587 B	2024-05-09	2024-05-10
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-09 19:31:17 Last Seen2024-05-10 03:37:06 Times Seen2 Hash d0e6270c5f1a02c18f98d5f522639469 12e79f6c0af0d107117cbb7478de5450dab8ac86 7022b6bc8d09a9acb982512c45ab79955c644e049b2ee6493a13de5ce531f5f8 Loading...

		Size	First Seen	Last Seen
	#1 Write - 4cb27d51fb352f1b80bf490c4a8703ed	9.4 kB	2024-05-09	2024-05-10
Pretty Observations First Seen2024-05-09 19:31:17 Last Seen2024-05-10 03:37:06 Times Seen2 Hash 4cb27d51fb352f1b80bf490c4a8703ed 8defb94d8705c6c21b9251933dc2308981fccda6 44e74a876e63626a26df2dac1a414cd3470df68f5be90dbaaa47becf8cb3b4f5 Loading...

HTTP Transactions (10)

URL IP Response Size

distribuidorelectricotrujillo.com/

192.254.180.201

200 OK

13 kB

URL User Request GET HTTP/2
distribuidorelectricotrujillo.com/
IP
192.254.180.201:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuerLet's Encrypt
Subject*.distribuidorelectricotrujillo.com
FingerprintB0:DC:04:F4:8D:D1:F8:27:BA:37:75:72:02:A4:BE:C2:EB:9C:3A:48
ValidityWed, 20 Mar 2024 03:10:27 GMT - Tue, 18 Jun 2024 03:10:26 GMT

File type
HTML document, ASCII text, with very long lines (28364), with no line terminators
Size
13 kB (12658 bytes)
Hash
aea0cfc1e78fa4b1b866263f039f32be
9c42d8facd9d7fe392ce3e5ba1d33e41354e7267
d679578fd963b955a9936b356cc64315a7d3444b4160c094ee991ba773c02e6a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	American Express

HTTP Headers

GET / HTTP/1.1
Host: distribuidorelectricotrujillo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-length: 12658
content-type: text/html; charset=UTF-8
date: Thu, 09 May 2024 17:30:40 GMT
server: Apache
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js

216.58.207.234

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
IP
216.58.207.234:443
ASN
#15169 GOOGLE

Requested by
https://distribuidorelectricotrujillo.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
30 kB (30462 bytes)
Hash
2c872dbe60f4ba70fb85356113d8b35e
ee48592d1fff952fcf06ce0b666ed4785493afdc
fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a

HTTP Headers

GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://distribuidorelectricotrujillo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30462
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 02:07:52 GMT
expires: Sat, 03 May 2025 02:07:52 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 12 Sep 2023 02:38:22 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 573768
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

rawcdn.githack.com/tokenaxp/min/419ad35709f1ea82983b9460c208f1d99fa1f4d5/oce-min.css

104.21.234.230

200 OK

50 kB

URL GET HTTP/2
rawcdn.githack.com/tokenaxp/min/419ad35709f1ea82983b9460c208f1d99fa1f4d5/oce-min.css
IP
104.21.234.230:443
ASN
#13335 CLOUDFLARENET

Requested by
https://distribuidorelectricotrujillo.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectgithack.com
FingerprintDC:63:93:31:3E:B5:DA:14:7A:C8:3F:81:0B:A3:69:FD:4D:FF:1B:F2
ValidityMon, 29 Apr 2024 12:34:40 GMT - Sun, 28 Jul 2024 12:34:39 GMT

File type
ASCII text, with very long lines (2662)
Size
50 kB (50299 bytes)
Hash
136419d426a9264d5c5865718b8d68fb
495f980bd3f648b41b9b0f2b401643a07d75f23d
22ac73d718eefac83c6f65ec81fb08c201cda95fa7bb753407059f48df09e147

HTTP Headers

GET /tokenaxp/min/419ad35709f1ea82983b9460c208f1d99fa1f4d5/oce-min.css HTTP/1.1
Host: rawcdn.githack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://distribuidorelectricotrujillo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 09 May 2024 17:30:40 GMT
content-type: text/css; charset=utf-8
etag: W/"58070408e19e0d997d1cd2ac1dd1e10e18e3f485a00e53d104893719c98df2e0"
x-github-request-id: 9A5E:0E70:15E167E:16F9476:6600810E
via: 1.1 varnish
x-served-by: cache-hel1410028-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1711309070.450354,VS0,VE213
vary: Authorization,Accept-Encoding,Origin
cross-origin-resource-policy: cross-origin
x-fastly-request-id: 75308388e85a874efb8bec222f06f3f1591a1d00
source-age: 0
cache-control: max-age=31536000, public, immutable
x-robots-tag: none
access-control-allow-origin: *
x-githack-cache-status: MISS
cf-cache-status: HIT
age: 49661
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l8A68SmC9tA%2BhSLBzNMajeuRmigX8B28%2FhzNC%2B28CnGbXm4DeVV2RuLEqVZuOG4VlTtT48jmiGADE6P%2FjsB0XYh4Gvy31M3AO6e2N7DSIBsnihexPBdi77gjZQhOsOh2AFNxbjE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88136b33cac5dd83-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

rawcdn.githack.com/tokenaxp/min/419ad35709f1ea82983b9460c208f1d99fa1f4d5/oce-font.css

104.21.234.230

200 OK

104 kB

URL GET HTTP/2
rawcdn.githack.com/tokenaxp/min/419ad35709f1ea82983b9460c208f1d99fa1f4d5/oce-font.css
IP
104.21.234.230:443
ASN
#13335 CLOUDFLARENET

Requested by
https://distribuidorelectricotrujillo.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectgithack.com
FingerprintDC:63:93:31:3E:B5:DA:14:7A:C8:3F:81:0B:A3:69:FD:4D:FF:1B:F2
ValidityMon, 29 Apr 2024 12:34:40 GMT - Sun, 28 Jul 2024 12:34:39 GMT

File type
ASCII text, with very long lines (57394)
Size
104 kB (104456 bytes)
Hash
b885858fefee25a02f288315d3824f61
e6c33910da9b1777ecd3f8b3f281f0c28e6602d8
bcf4b83f0c88cac6c69c6a37010429b5db8af648c0bb5a7ddaed4fc357e2e46d

HTTP Headers

GET /tokenaxp/min/419ad35709f1ea82983b9460c208f1d99fa1f4d5/oce-font.css HTTP/1.1
Host: rawcdn.githack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://distribuidorelectricotrujillo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 09 May 2024 17:30:40 GMT
content-type: text/css; charset=utf-8
etag: W/"26f8b7f629b0547cd04bfb9027a9336ada7ef041ebdc3500b73a4178d52339f7"
x-content-type-options: nosniff
x-github-request-id: 72C6:2ABA5C:3B43737:3DE5D8E:65DB54B3
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1708872884.810971,VS0,VE203
vary: Authorization,Accept-Encoding,Origin
cross-origin-resource-policy: cross-origin
x-fastly-request-id: e4c129a08b618f11a6417ef8afa497d4a6caba11
source-age: 0
expires: Mon, 24 Feb 2025 14:54:44 GMT
cache-control: max-age=31536000, public, immutable
x-robots-tag: none
access-control-allow-origin: *
x-githack-cache-status: MISS
cf-cache-status: HIT
age: 49661
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FRK7fNzRs67Se5Bd451oe77UqF%2BRENlIaoWD6rXtyBOnTS1MuMdvCFmGTFPrMgxayWIRJ6fsyrseII08ryUsZm1taB4wdp5BwiVooLnfjmgMmBuTRuofcZLCr%2Fm2JLESd49swvM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88136b33ba9fdd83-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.aexp-static.com/nav/ngn/fonts/0fababca-4914-46dd-9b0f-efbd51f67ae8-3.woff

104.110.3.84

200 OK

38 kB

URL GET HTTP/2
www.aexp-static.com/nav/ngn/fonts/0fababca-4914-46dd-9b0f-efbd51f67ae8-3.woff
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://distribuidorelectricotrujillo.com/
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 37949, version 1.0
Size
38 kB (37949 bytes)
Hash
5ad4796fabf0460a3f3dfeca32c0d7d0
2baa8fb40b9970b2c5fd18dd0f0d4e10b532d1a3
568d1bad8ef5d3ee9e14e5bdc304985d4d9a8d791bfe4fdb689fc2bef638466c

HTTP Headers

GET /nav/ngn/fonts/0fababca-4914-46dd-9b0f-efbd51f67ae8-3.woff HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://distribuidorelectricotrujillo.com
DNT: 1
Connection: keep-alive
Referer: https://rawcdn.githack.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: font/woff
content-length: 37949
last-modified: Wed, 15 Aug 2018 20:46:09 GMT
etag: "5b749111-943d"
expires: Fri, 27 Nov 2020 03:31:12 GMT
access-control-allow-origin: *
timing-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
accept-ranges: bytes
date: Thu, 09 May 2024 17:30:41 GMT
X-Firefox-Spdy: h2

rawcdn.githack.com/tokenaxp/min/419ad35709f1ea82983b9460c208f1d99fa1f4d5/oce-fonts.css

104.21.234.230

200 OK

59 kB

URL GET HTTP/2
rawcdn.githack.com/tokenaxp/min/419ad35709f1ea82983b9460c208f1d99fa1f4d5/oce-fonts.css
IP
104.21.234.230:443
ASN
#13335 CLOUDFLARENET

Requested by
https://distribuidorelectricotrujillo.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectgithack.com
FingerprintDC:63:93:31:3E:B5:DA:14:7A:C8:3F:81:0B:A3:69:FD:4D:FF:1B:F2
ValidityMon, 29 Apr 2024 12:34:40 GMT - Sun, 28 Jul 2024 12:34:39 GMT

File type
Unicode text, UTF-8 text
Size
59 kB (58698 bytes)
Hash
283134482ff97a9bcc578ddea7273c69
534a3af11cef617ee68ffe21e7e1865e9b519956
18f3644f71d444e98a23bcccbd33e41a5dd356642e195559227879f10a182b19

HTTP Headers

GET /tokenaxp/min/419ad35709f1ea82983b9460c208f1d99fa1f4d5/oce-fonts.css HTTP/1.1
Host: rawcdn.githack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://distribuidorelectricotrujillo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 09 May 2024 17:30:40 GMT
content-type: text/css; charset=utf-8
etag: W/"c408e28284057fe7f3c7b84b6e9edcbc528d33d19d43196d8f74f1e25da59d31"
x-content-type-options: nosniff
x-github-request-id: 1CAA:2ABA5C:3B43737:3DE5D92:65DB54B3
via: 1.1 varnish
x-served-by: cache-hel1410027-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1708872884.832085,VS0,VE190
vary: Authorization,Accept-Encoding,Origin
cross-origin-resource-policy: cross-origin
x-fastly-request-id: d5f609f8bb44c2c886f87253c9d4c82ade539585
source-age: 0
expires: Mon, 24 Feb 2025 14:54:44 GMT
cache-control: max-age=31536000, public, immutable
x-robots-tag: none
access-control-allow-origin: *
x-githack-cache-status: MISS
cf-cache-status: HIT
age: 49661
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xQbcQigo0EsIqXTj8itfX3N4926ONlcOFbt0p598k3r8BQtRAWi2vzrLryPne5LCVt0EjtWZZAvYZeFy5ThRkYvJcJTGXhNQ0wbgJQ2XXqA2OP5z9C5oBXRO3giAJyrGaERW5%2FU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88136b33cacadd83-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.americanexpress.com/favicon.ico

104.110.22.253

1.4 kB

URL GET
www.americanexpress.com/favicon.ico
IP
104.110.22.253:0
ASN
#16625 AKAMAI-AS

Requested by
https://distribuidorelectricotrujillo.com/
Certificate
IssuerDigiCert Inc
Subjectwww.americanexpress.com
Fingerprint64:A2:B0:4D:11:47:D0:C0:37:73:B5:62:91:90:F7:0D:1F:42:FA:10
ValidityThu, 03 Aug 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
1.4 kB (1381 bytes)
Hash
974ccc6c4c6e1c7f04606973beb3ba20
0f96f86d488a4b5805744fa067c3cfd57c928406
265d3f591d92fadfe95f4660c382ee64a23538a7353b9880434205a102833de0

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://distribuidorelectricotrujillo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
strict-transport-security: max-age=15552000;
last-modified: Fri, 07 Jun 2019 04:05:21 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1381
x-cnection: close
content-type: image/x-icon
date: Thu, 09 May 2024 17:30:41 GMT
set-cookie: agent-id=4f252c47-6e82-40d2-a130-7e7827964ddd; expires=Fri, 09-May-2025 17:30:41 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2

cdaas.americanexpress.com/myca/oce/latest/content/images/common/amex-desktop-logo.png

139.71.16.29

200 OK

11 kB

URL GET HTTP/1.1
cdaas.americanexpress.com/myca/oce/latest/content/images/common/amex-desktop-logo.png
IP
139.71.16.29:443
ASN
#6307 AMERICAN-EXPRESS

Requested by
https://distribuidorelectricotrujillo.com/
Certificate
IssuerDigiCert Inc
Subjectcdaas.americanexpress.com
Fingerprint85:14:2D:76:FA:1D:AD:6F:B8:10:2B:70:65:AB:0B:16:81:50:E9:BF
ValidityWed, 11 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
PNG image data, 470 x 30, 8-bit/color RGBA, interlaced
Size
11 kB (11134 bytes)
Hash
b82e61a35dabd32331d831c9bc5ee82f
4e958b3164982e8ff92f76336f3549bd1e8908c2
610166ddd2d965283356d314f592522c1907a5334cec1daa0874fc61639a667c

HTTP Headers

GET /myca/oce/latest/content/images/common/amex-desktop-logo.png HTTP/1.1
Host: cdaas.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rawcdn.githack.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 09 May 2024 17:30:41 GMT
Content-Type: image/png
Content-Length: 11134
Last-Modified: Tue, 23 Apr 2024 18:22:52 GMT
Connection: keep-alive
ETag: "6627fc7c-2b7e"
Timing-Allow-Origin: *
Vary: Origin
Cache-Control: max-age=31536000, must-revalidate
Accept-Ranges: bytes

www.aexp-static.com/nav/ngn/fonts/3be50273-0b2e-4aef-ae68-882eacd611f9-3.woff

104.110.3.84

200 OK

37 kB

URL GET HTTP/2
www.aexp-static.com/nav/ngn/fonts/3be50273-0b2e-4aef-ae68-882eacd611f9-3.woff
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://distribuidorelectricotrujillo.com/
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 37153, version 1.0
Size
37 kB (37153 bytes)
Hash
c0e3b5653c803f69c05862736a765e4a
4ae2328614d48c62388c8409cbd1d9e7b5d4dfda
48050d8eeb740bb31aaad9eb82bcd4a493b474c9385eeda5fc2ca2ea279cffad

HTTP Headers

GET /nav/ngn/fonts/3be50273-0b2e-4aef-ae68-882eacd611f9-3.woff HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://distribuidorelectricotrujillo.com
DNT: 1
Connection: keep-alive
Referer: https://rawcdn.githack.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: font/woff
content-length: 37153
last-modified: Wed, 15 Aug 2018 20:46:09 GMT
etag: "5b749111-9121"
expires: Mon, 25 Jan 2021 11:07:20 GMT
cache-control: max-age=15552000
access-control-allow-origin: *
timing-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
accept-ranges: bytes
date: Thu, 09 May 2024 17:30:41 GMT
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/axp-dls/5.10.1/package/dist/iconfont/dls-icons.woff?v=5.10.1

104.110.3.84

200 OK

35 kB

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/axp-dls/5.10.1/package/dist/iconfont/dls-icons.woff?v=5.10.1
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://distribuidorelectricotrujillo.com/
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 34756, version 1.0
Size
35 kB (34756 bytes)
Hash
00e1ece1ed6008465632d7b9800e3f4c
75e8f21ce1cf3fe13515c602bdcd8679581b6229
3ab0045c7cec2bd10b33c094d7ff82145efe1e75345bc49166dc5236db831b08

HTTP Headers

GET /cdaas/one/statics/axp-dls/5.10.1/package/dist/iconfont/dls-icons.woff?v=5.10.1 HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://distribuidorelectricotrujillo.com
DNT: 1
Connection: keep-alive
Referer: https://rawcdn.githack.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: font/woff
content-length: 34756
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "1dc09d84-87c4"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
access-control-allow-origin: *
access-control-allow-methods: GET
accept-ranges: bytes
date: Thu, 09 May 2024 17:30:41 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (10)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type