| unpkg.com/element-ui@2.15.10/lib/theme-chalk/index.css |  104.17.249.203 | 200 OK | 53 kB |
URL GET HTTP/2unpkg.com/element-ui@2.15.10/lib/theme-chalk/index.css IP104.17.249.203:443
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerGoogle Trust Services LLC Subjectunpkg.com Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3 ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashce1985a9415530801645ce50434436d5 00c8f556dd3ec944fb5a2e37699659c536709b8f 21e9b2ac8a56081ba038afc7fd0fa3db0fe814c74cb3a1142fa0c29e1a775a7a
GET /element-ui@2.15.10/lib/theme-chalk/index.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 03 May 2024 21:04:44 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "3a588-AMj1Vt0+yUT7Wi43aZZZxTZwm48"
via: 1.1 fly.io
fly-request-id: 01HWR2HKE6EZG63XVJ94CXT7TZ-arn
cf-cache-status: HIT
age: 270353
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87e33482f8501c16-OSL
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/icon?family=Material+Icons |  142.250.74.170 | 200 OK | 4.9 kB |
URL GET HTTP/2fonts.googleapis.com/icon?family=Material+Icons IP142.250.74.170:443
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hash6276eba45972a148b433f3ae82ccee5a 21c1b06ce8a24b751d141f0ee00743038e776bf7 13b724528eee5900dc47dede8cf2ca2af7054c1e3c5730365c075427bde66114
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 03 May 2024 21:04:44 GMT
date: Fri, 03 May 2024 21:04:44 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,500,700&display=swap | 142.250.74.170 | 200 OK | 5.3 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,500,700&display=swap IP142.250.74.170:443
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hashcbe76d12af2036f8f694599fe86293a4 9c97b78331cda5199accaaed2f6580d2a52902d3 cd810b680aaa2d4389511c9a8188e19cc0e3ac89b2cb36a3f033b7cf77e81063
GET /css?family=Roboto:300,400,500,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 03 May 2024 21:04:44 GMT
date: Fri, 03 May 2024 21:04:44 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/imgq/a1.png |  34.150.74.44 | 200 OK | 4.1 kB |
URL GET HTTP/2www.cinode-work.com/imgq/a1.png IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typePNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced Hash1d297a0753bae6743083826d8c331803 85cf3241fa06b70d57d054d710e3275d876ac384 c5617cfb289abf965afe1bf2cd9023c95c068c46c036959e90333f4c07027285
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /imgq/a1.png HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: image/png
content-length: 4103
last-modified: Tue, 19 Dec 2023 06:41:02 GMT
etag: "65813afe-1007"
expires: Sun, 02 Jun 2024 21:04:44 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.livechatinc.com/tracking.js |  95.101.10.171 | 200 OK | 28 kB |
URL GET HTTP/2cdn.livechatinc.com/tracking.js IP95.101.10.171:443 ASN#20940 Akamai International B.V.
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerDigiCert Inc Subjectlivechat.com FingerprintAD:E9:73:3D:F9:98:EE:AF:EA:A1:C6:F0:07:27:92:13:66:F0:44:6E ValidityWed, 31 Jan 2024 00:00:00 GMT - Fri, 31 Jan 2025 23:59:59 GMT
Hash52a78fcf72d0166547200e7d9d4fbd69 76d8e3d81b7a65149d6f85a79921705994f1b105 461392b213abc8c0a46c62dbbaa6ca6076c70ba70808b8187da16cb8680b0a3d
GET /tracking.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 30 Apr 2024 13:11:19 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 8aBpNQU.HnYj4xT8vSeqvwU.DzHwjHJD
server: AmazonS3
content-encoding: br
etag: W/"52a78fcf72d0166547200e7d9d4fbd69"
vary: Accept-Encoding
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: b_hLUwDZBTswIwDqy3A1R2jTqKWJbKyfLWw78FbAxpCDY6PLwNTvmQ==
content-length: 27482
cache-control: max-age=28800
expires: Sat, 04 May 2024 05:04:44 GMT
date: Fri, 03 May 2024 21:04:44 GMT
content-type: application/javascript; charset=utf-8
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/static_new/css/public.css?v=V1.24 | 34.150.74.44 | 200 OK | 3.3 kB |
URL GET HTTP/2www.cinode-work.com/static_new/css/public.css?v=V1.24 IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typegzip compressed data, from Unix Hash7675ddb966127537525fda024123f984 735f807a7b449ecc78d1144a9f39d0686497c337 638ccfe6964c9b212536d59d7d4314f14a32f07c5d9200b07426b82c353ab0d7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /static_new/css/public.css?v=V1.24 HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: text/css
last-modified: Fri, 25 Mar 2022 13:11:14 GMT
vary: Accept-Encoding
etag: W/"623dbf72-4083"
expires: Sat, 04 May 2024 09:04:44 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cinode-work.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 22:40:35 GMT
expires: Fri, 02 May 2025 22:40:35 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 80649
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/red/swiper/swiper-bundle.min.css | 34.150.74.44 | 200 OK | 5.0 kB |
URL GET HTTP/2www.cinode-work.com/red/swiper/swiper-bundle.min.css IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typegzip compressed data, from Unix Hashce67a5b186cf5efdf8655fd3b77a05bb 44e2c6c33cf2bea552913b5c3bb2cecdfab6003f d20d75c3e004928e085dcbbea6097bea907095e3bec62a81495eab032467aece
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /red/swiper/swiper-bundle.min.css HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: text/css
last-modified: Fri, 05 Mar 2021 16:40:04 GMT
vary: Accept-Encoding
etag: W/"60425ee4-3661"
expires: Sat, 04 May 2024 09:04:44 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15920, version 1.0 Hash3a44e06eb954b96aa043227f3534189d 23cef6993ddb2b2979e8e7647fc3763694e2ba7d b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cinode-work.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:03:54 GMT
expires: Fri, 02 May 2025 02:03:54 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 154850
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cinode-work.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:55:00 GMT
expires: Fri, 02 May 2025 01:55:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 155385
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/red/bootstrap/css/bootstrap.min.css | 34.150.74.44 | 200 OK | 30 kB |
URL GET HTTP/2www.cinode-work.com/red/bootstrap/css/bootstrap.min.css IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typegzip compressed data, from Unix Hashe82c10dd1bbf707cb880d1277add6da1 f1fda48b7b4adc59f961b712de100b69a5a9c902 fd20e3c092815131b22589e895c80169a9e93f2426e9e2d8aeb6e3a37c7e6ce4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /red/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: text/css
last-modified: Sat, 06 Mar 2021 03:08:24 GMT
vary: Accept-Encoding
etag: W/"6042f228-27681"
expires: Sat, 04 May 2024 09:04:44 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/imgq/w1.png | 34.150.74.44 | 200 OK | 21 kB |
URL GET HTTP/2www.cinode-work.com/imgq/w1.png IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typePNG image data, 404 x 227, 8-bit/color RGBA, non-interlaced Hasha27d1ab72585255da07c2b2abbc942ba 2281571f3b1bb7b7869880f4fbb3c735adec9674 d4149f5c4fddfbed17487cd8e9af355d191b8bf3eeda6f8e200842a2557dd2fd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /imgq/w1.png HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: image/png
content-length: 20845
last-modified: Sun, 10 Mar 2024 10:51:42 GMT
etag: "65ed90be-516d"
expires: Sun, 02 Jun 2024 21:04:44 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/imgq/download.png | 34.150.74.44 | 200 OK | 6.0 kB |
URL GET HTTP/2www.cinode-work.com/imgq/download.png IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typePNG image data, 176 x 176, 8-bit/color RGBA, non-interlaced Hash4780f369733d8c396e067eb48ada2411 d7295b8dc8dc82a455d410f08e500105f85aefcc 94c681af321d0a7d0a9f458dd032e8c5784a19b31a4a8f90a40273707b9f3426
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /imgq/download.png HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: image/png
content-length: 6047
last-modified: Sun, 10 Mar 2024 11:18:10 GMT
etag: "65ed96f2-179f"
expires: Sun, 02 Jun 2024 21:04:44 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/imgq/HomeDesc3.2168b47ae882823c1950.png | 34.150.74.44 | 200 OK | 10 kB |
URL GET HTTP/2www.cinode-work.com/imgq/HomeDesc3.2168b47ae882823c1950.png IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typePNG image data, 176 x 176, 8-bit/color RGBA, non-interlaced Hashb011d64d0347bbdbb75829dcb1684eb2 efa050aaf81ca07ef705b6c16dd2e11213329322 8fdfe73265a3f6761f0877dde3e62ea0c89ec6878de2ac4f68ef14d1afc15a8f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /imgq/HomeDesc3.2168b47ae882823c1950.png HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: image/png
content-length: 10124
last-modified: Sun, 10 Mar 2024 11:11:56 GMT
etag: "65ed957c-278c"
expires: Sun, 02 Jun 2024 21:04:44 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/imgq/download1.png | 34.150.74.44 | 200 OK | 8.6 kB |
URL GET HTTP/2www.cinode-work.com/imgq/download1.png IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typePNG image data, 176 x 176, 8-bit/color RGBA, non-interlaced Hash6adc935c8f011c988863410a732e0e03 119ef2dcc6cda45b492529b6cef2e342e6c04a93 830be9c6c5c9ea47f498c7e888c5004275409460d2cd8ddfba09c641e3a1a598
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /imgq/download1.png HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: image/png
content-length: 8630
last-modified: Sun, 10 Mar 2024 11:18:16 GMT
etag: "65ed96f8-21b6"
expires: Sun, 02 Jun 2024 21:04:44 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?license_id=17239629&client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5&url=https%3A%2F%2Fwww.cinode-work.com%2Findex%2Fuser%2Fkp.html&channel_type=code&jsonp=__afz7d5xkauo | 95.101.10.171 | 200 OK | 347 B |
URL GET HTTP/2api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?license_id=17239629&client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5&url=https%3A%2F%2Fwww.cinode-work.com%2Findex%2Fuser%2Fkp.html&channel_type=code&jsonp=__afz7d5xkauo IP95.101.10.171:443 ASN#20940 Akamai International B.V.
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerDigiCert Inc Subjectlivechat.com FingerprintAD:E9:73:3D:F9:98:EE:AF:EA:A1:C6:F0:07:27:92:13:66:F0:44:6E ValidityWed, 31 Jan 2024 00:00:00 GMT - Fri, 31 Jan 2025 23:59:59 GMT
File typeASCII text, with very long lines (347), with no line terminators Hash661b0bf8da5e484ea052d4b9f89d894f feea6a604606583d31110784ea9938a730ad055d 3d6f8f9874e4f8ec6964e8a308af7127846c3f4b9524fcf86efa6c349402842e
GET /v3.6/customer/action/get_dynamic_configuration?license_id=17239629&client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5&url=https%3A%2F%2Fwww.cinode-work.com%2Findex%2Fuser%2Fkp.html&channel_type=code&jsonp=__afz7d5xkauo HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: frame-ancestors https://www.cinode-work.com/;
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
x-frame-options: allow-from https://www.cinode-work.com/
content-length: 347
date: Fri, 03 May 2024 21:04:45 GMT
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/imgq/HomeAward1.81770fc5836a0fb08cfe.webp | 34.150.74.44 | 200 OK | 7.3 kB |
URL GET HTTP/2www.cinode-work.com/imgq/HomeAward1.81770fc5836a0fb08cfe.webp IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typeRIFF (little-endian) data, Web/P image Hash167255a928af7928c10edf78a8b6a1e6 9b6a60b3f6c917e74a2cec75ca93027781470fe3 4580e8252c8e13be31497fba4d0d7377334c8f26a83f11fae9bd3e73ea561e23
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /imgq/HomeAward1.81770fc5836a0fb08cfe.webp HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: image/webp
content-length: 7284
last-modified: Sun, 10 Mar 2024 11:12:00 GMT
etag: "65ed9580-1c74"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/imgq/HomeAward2.06a84e83ab43647a1e62.webp | 34.150.74.44 | 200 OK | 7.3 kB |
URL GET HTTP/2www.cinode-work.com/imgq/HomeAward2.06a84e83ab43647a1e62.webp IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typeRIFF (little-endian) data, Web/P image Hash55e2659af18696c94c25d430d1e523ea 888b06f4aeae41b131161612b9bca97abb11e113 72f4fb387f73bc1b180e9ea96f16cb6cd94a9ec67238decea02d9c1b017e2d05
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /imgq/HomeAward2.06a84e83ab43647a1e62.webp HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: image/webp
content-length: 7348
last-modified: Sun, 10 Mar 2024 11:12:02 GMT
etag: "65ed9582-1cb4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/imgq/HomeAward3.e3f55b83bb8e8d43714b.webp | 34.150.74.44 | 200 OK | 7.5 kB |
URL GET HTTP/2www.cinode-work.com/imgq/HomeAward3.e3f55b83bb8e8d43714b.webp IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typeRIFF (little-endian) data, Web/P image Hash55757f5c59ffb53ce40e1af17f15c734 83c51c6779cdd1aa9194494061321dffa4355cff 4622d0fc8ac7eb24c3aac44b578876f5f6ccc20c9356ea0b265becdf7b41fe9e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /imgq/HomeAward3.e3f55b83bb8e8d43714b.webp HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: image/webp
content-length: 7486
last-modified: Sun, 10 Mar 2024 11:12:04 GMT
etag: "65ed9584-1d3e"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/imgq/HomeAward4.7c35488871ad394d5e7d.webp | 34.150.74.44 | 200 OK | 7.2 kB |
URL GET HTTP/2www.cinode-work.com/imgq/HomeAward4.7c35488871ad394d5e7d.webp IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typeRIFF (little-endian) data, Web/P image Hash668953af4aa0b2f3eebfe9003c7fd1f9 c79671deefab413f59bc040dfd52c2b2d66338a4 7d4a0a429ffd4729f0fbee576cc5821f45c8101eed99b34da0674236cb347c7a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /imgq/HomeAward4.7c35488871ad394d5e7d.webp HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: image/webp
content-length: 7152
last-modified: Sun, 10 Mar 2024 11:12:06 GMT
etag: "65ed9586-1bf0"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/imgq/HomeAward5.399db3e88125115a049d.webp | 34.150.74.44 | 200 OK | 8.4 kB |
URL GET HTTP/2www.cinode-work.com/imgq/HomeAward5.399db3e88125115a049d.webp IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typeRIFF (little-endian) data, Web/P image Hash5a8ba89f5de95a199d49c802f9ad82f7 005b5ef665127306434514474456a64382deba07 12119b362f1e008a3f4f36bd90a3d5bacbb0d5af5e78f436e2408906ba519bf2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /imgq/HomeAward5.399db3e88125115a049d.webp HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: image/webp
content-length: 8436
last-modified: Sun, 10 Mar 2024 11:12:08 GMT
etag: "65ed9588-20f4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/imgq/HomeLockIcon.b40aaf613bdb7e8174a1ee38ed14b5f6.svg | 34.150.74.44 | 200 OK | 714 B |
URL GET HTTP/2www.cinode-work.com/imgq/HomeLockIcon.b40aaf613bdb7e8174a1ee38ed14b5f6.svg IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typeSVG Scalable Vector Graphics image Hash57f49c71f9f67068f444691fe5276732 61625d717ad5443e1c9c377783774825752648d1 8516ffcc194b6b06eece463e99e8c53dfe9acf748871947cd2884e72ad0318f5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /imgq/HomeLockIcon.b40aaf613bdb7e8174a1ee38ed14b5f6.svg HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: image/svg+xml
content-length: 714
last-modified: Sun, 10 Mar 2024 11:23:54 GMT
etag: "65ed984a-2ca"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/imgq/HomeCardIcon.57aff0bb1964dbdb8c3b992a8756d933.svg | 34.150.74.44 | 200 OK | 681 B |
URL GET HTTP/2www.cinode-work.com/imgq/HomeCardIcon.57aff0bb1964dbdb8c3b992a8756d933.svg IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typeSVG Scalable Vector Graphics image Hash27da8738cc4898a8ef2c898b7934e9c5 70c6e33d7e3f4d13a54dc8a0aa1ddcffcf1731ed b67e8b58bcfdc7829697f027b86b360de4503209f8837eb7dedbc8d64070686a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /imgq/HomeCardIcon.57aff0bb1964dbdb8c3b992a8756d933.svg HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: image/svg+xml
content-length: 681
last-modified: Sun, 10 Mar 2024 11:23:52 GMT
etag: "65ed9848-2a9"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/imgq/FooterCert.f69832d0dd761d1527dc.webp | 34.150.74.44 | 200 OK | 34 kB |
URL GET HTTP/2www.cinode-work.com/imgq/FooterCert.f69832d0dd761d1527dc.webp IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typeRIFF (little-endian) data, Web/P image Hashedad7512f83c86ed3a5859ae75c5725c 3f0d47be2b56333bf963dc89adc9f674db61be8c 91ba38903fda0edce152bc7a735aa47a9c590b94097296819889efa07589e87b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /imgq/FooterCert.f69832d0dd761d1527dc.webp HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: image/webp
content-length: 33786
last-modified: Wed, 06 Mar 2024 09:22:06 GMT
etag: "65e835be-83fa"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/imgq/a2.png | 34.150.74.44 | 200 OK | 285 B |
URL GET HTTP/2www.cinode-work.com/imgq/a2.png IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typePNG image data, 42 x 42, 4-bit colormap, non-interlaced Hashaf8ca9bbfb53d9aa8cf6da13fd2b9597 198d3c4914ccf65f73000690afbb89b259dc875e 59f6479acc0cb44badc11fef7c14715d5cd983504ab787589e21a71b8cb4e607
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /imgq/a2.png HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: image/png
content-length: 285
last-modified: Sun, 08 Oct 2023 18:07:36 GMT
etag: "6522efe8-11d"
expires: Sun, 02 Jun 2024 21:04:44 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| api.livechatinc.com/v3.4/customer/action/get_configuration?organization_id=534f6b3a-f0d8-43b5-8c91-316ef74fe635&version=97.0.1.1.1.24.1.4.1.1.1.5.6&group_id=0&jsonp=__lc_static_config | 95.101.10.171 | 200 OK | 1.4 kB |
URL GET HTTP/2api.livechatinc.com/v3.4/customer/action/get_configuration?organization_id=534f6b3a-f0d8-43b5-8c91-316ef74fe635&version=97.0.1.1.1.24.1.4.1.1.1.5.6&group_id=0&jsonp=__lc_static_config IP95.101.10.171:443 ASN#20940 Akamai International B.V.
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerDigiCert Inc Subjectlivechat.com FingerprintAD:E9:73:3D:F9:98:EE:AF:EA:A1:C6:F0:07:27:92:13:66:F0:44:6E ValidityWed, 31 Jan 2024 00:00:00 GMT - Fri, 31 Jan 2025 23:59:59 GMT
File typeASCII text, with very long lines (4060), with no line terminators Hashf1acc9176dce36c89a17414cfaba6106 04554123a7e0a7f9d4352bb266d6cdc50f169662 e8753e1ed95d18a3410aac83d2be8a70a5c5f6eaa575cbe58a4bfdcc53e62472
GET /v3.4/customer/action/get_configuration?organization_id=534f6b3a-f0d8-43b5-8c91-316ef74fe635&version=97.0.1.1.1.24.1.4.1.1.1.5.6&group_id=0&jsonp=__lc_static_config HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
legacy: 2024-05-31
vary: Accept-Encoding
content-length: 1402
cache-control: public, max-age=600
expires: Fri, 03 May 2024 21:14:45 GMT
date: Fri, 03 May 2024 21:04:45 GMT
X-Firefox-Spdy: h2
|
|
| api.livechatinc.com/v3.4/customer/action/get_localization?organization_id=534f6b3a-f0d8-43b5-8c91-316ef74fe635&version=384c496c023913b78d3837c106ac447e&language=en&group_id=0&jsonp=__lc_localization | 95.101.10.171 | 200 OK | 3.9 kB |
URL GET HTTP/2api.livechatinc.com/v3.4/customer/action/get_localization?organization_id=534f6b3a-f0d8-43b5-8c91-316ef74fe635&version=384c496c023913b78d3837c106ac447e&language=en&group_id=0&jsonp=__lc_localization IP95.101.10.171:443 ASN#20940 Akamai International B.V.
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerDigiCert Inc Subjectlivechat.com FingerprintAD:E9:73:3D:F9:98:EE:AF:EA:A1:C6:F0:07:27:92:13:66:F0:44:6E ValidityWed, 31 Jan 2024 00:00:00 GMT - Fri, 31 Jan 2025 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (11302), with no line terminators Hash462ee9b402f24d235d06846034dfd8a6 be6ffe045ab011751374f791c946e228f70d1f2e a7025ab713e8df6878624d25cc045e3c948f363dfa2818d6944b5bbec074d580
GET /v3.4/customer/action/get_localization?organization_id=534f6b3a-f0d8-43b5-8c91-316ef74fe635&version=384c496c023913b78d3837c106ac447e&language=en&group_id=0&jsonp=__lc_localization HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
legacy: 2024-05-31
vary: Accept-Encoding
cache-control: public, max-age=600
expires: Fri, 03 May 2024 21:14:45 GMT
date: Fri, 03 May 2024 21:04:45 GMT
content-length: 3925
X-Firefox-Spdy: h2
|
|
| secure.livechatinc.com/customer/action/open_chat?license_id=17239629&group=0&embedded=1&widget_version=3&unique_groups=0 | 95.101.10.171 | 200 OK | 2.6 kB |
URL GET HTTP/2secure.livechatinc.com/customer/action/open_chat?license_id=17239629&group=0&embedded=1&widget_version=3&unique_groups=0 IP95.101.10.171:443 ASN#20940 Akamai International B.V.
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerDigiCert Inc Subjectlivechat.com FingerprintAD:E9:73:3D:F9:98:EE:AF:EA:A1:C6:F0:07:27:92:13:66:F0:44:6E ValidityWed, 31 Jan 2024 00:00:00 GMT - Fri, 31 Jan 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (8894), with no line terminators Hashd2331fe6db6c27a556a18a2d2a1f77c7 7a77fa85b59875612f3c35654607bba6e3d48393 413df09cec80a2e90ac88192cb546eea891b5f0f704f016f1046bed317588390
GET /customer/action/open_chat?license_id=17239629&group=0&embedded=1&widget_version=3&unique_groups=0 HTTP/1.1
Host: secure.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: text/html; charset=utf-8
vary: Accept-Encoding
date: Fri, 03 May 2024 21:04:45 GMT
content-length: 2600
X-Firefox-Spdy: h2
|
|
| cdn.livechatinc.com/widget/static/js/0.c662232b.chunk.js | 95.101.10.171 | 200 OK | 66 kB |
URL GET HTTP/2cdn.livechatinc.com/widget/static/js/0.c662232b.chunk.js IP95.101.10.171:443 ASN#20940 Akamai International B.V.
Requested byhttps://secure.livechatinc.com/customer/action/open_chat?license_id=17239629&group=0&embedded=1&widget_version=3&unique_groups=0 CertificateIssuerDigiCert Inc Subjectlivechat.com FingerprintAD:E9:73:3D:F9:98:EE:AF:EA:A1:C6:F0:07:27:92:13:66:F0:44:6E ValidityWed, 31 Jan 2024 00:00:00 GMT - Fri, 31 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65462) Hashac1b9724f6e6781a506d9c1680a44b84 3edeb0fa635d4cbb4a855647c733a75cf9985d78 0723231b5ea38a06f08f621162e51cc56bc53b08e626087d7260127f808ea928
GET /widget/static/js/0.c662232b.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Apr 2024 13:11:22 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 7kC.itQ.Ypj0BYDgcp9jBDxxhaTS9ku.
server: AmazonS3
content-encoding: br
etag: W/"ac1b9724f6e6781a506d9c1680a44b84"
vary: Accept-Encoding
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: wPNy1q57X7tqTeSUrM2AeoBV_S4EqOddHu4yQEeQf9DY5-yP1zbs7w==
content-length: 66444
cache-control: max-age=31536000
expires: Sat, 03 May 2025 21:04:45 GMT
date: Fri, 03 May 2024 21:04:45 GMT
content-type: application/javascript; charset=utf-8
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| cdn.livechatinc.com/widget/static/js/1.f836f093.chunk.js | 95.101.10.171 | 200 OK | 98 kB |
URL GET HTTP/2cdn.livechatinc.com/widget/static/js/1.f836f093.chunk.js IP95.101.10.171:443 ASN#20940 Akamai International B.V.
Requested byhttps://secure.livechatinc.com/customer/action/open_chat?license_id=17239629&group=0&embedded=1&widget_version=3&unique_groups=0 CertificateIssuerDigiCert Inc Subjectlivechat.com FingerprintAD:E9:73:3D:F9:98:EE:AF:EA:A1:C6:F0:07:27:92:13:66:F0:44:6E ValidityWed, 31 Jan 2024 00:00:00 GMT - Fri, 31 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65462) Hash66c3edc38f1c8cbc12e65d43a782c4cc 012d2b904ad56a019abf9af1f0e35e18defbbc6c 498df4cf5e5e56cfa4d4105c330f52a99e4513074db7ea235abe946b27c996f2
GET /widget/static/js/1.f836f093.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Apr 2024 13:11:20 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: czAKuA1HhIWcUhuOzQQcLPWMO5Jnitk.
server: AmazonS3
content-encoding: br
etag: W/"66c3edc38f1c8cbc12e65d43a782c4cc"
vary: Accept-Encoding
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: kD6frzip_wyyYKxY06TZc_LBGFofHo33auqMX14JM4gjKzGRC-jDMQ==
content-length: 97988
cache-control: max-age=31536000
expires: Sat, 03 May 2025 21:04:45 GMT
date: Fri, 03 May 2024 21:04:45 GMT
content-type: application/javascript; charset=utf-8
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| cdn.livechatinc.com/widget/static/js/iframe.eec579d6.chunk.js | 95.101.10.171 | 200 OK | 155 kB |
URL GET HTTP/2cdn.livechatinc.com/widget/static/js/iframe.eec579d6.chunk.js IP95.101.10.171:443 ASN#20940 Akamai International B.V.
Requested byhttps://secure.livechatinc.com/customer/action/open_chat?license_id=17239629&group=0&embedded=1&widget_version=3&unique_groups=0 CertificateIssuerDigiCert Inc Subjectlivechat.com FingerprintAD:E9:73:3D:F9:98:EE:AF:EA:A1:C6:F0:07:27:92:13:66:F0:44:6E ValidityWed, 31 Jan 2024 00:00:00 GMT - Fri, 31 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size155 kB (154704 bytes) Hash92b90683510fde8ccd8a2f8a2e2ae541 53248541d7df662b7ea0828afb7877108d1297e4 631d87b3eda5af2af8c654bee12c76dd74ce0df76307b5859cc05d9e8c14fbc7
GET /widget/static/js/iframe.eec579d6.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Apr 2024 13:11:22 GMT
etag: W/"92b90683510fde8ccd8a2f8a2e2ae541"
x-amz-server-side-encryption: AES256
x-amz-version-id: X1Kj0wl9_O87t42Ci3.0Q36pyO.fcwRV
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: g6QQbxoUueNuuWdnr4QU5sfgFD5KeeFo0SbNBfvtah_JmUd-Z0jWlw==
content-length: 154704
cache-control: max-age=31536000
expires: Sat, 03 May 2025 21:04:45 GMT
date: Fri, 03 May 2024 21:04:45 GMT
content-type: application/javascript; charset=utf-8
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/favicon.ico | 34.150.74.44 | 200 OK | 12 kB |
URL GET HTTP/2www.cinode-work.com/favicon.ico IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typePNG image data, 89 x 101, 8-bit/color RGBA, non-interlaced Hashd22689c044f347076d89a6ca4feec5fe 12c64d90cc1efcad4420de27dccae4535eefa8bc f1eff40ca74ef3471e7a148f564bb74d95454885320df9ad51bc441c991ab1bb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /favicon.ico HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:45 GMT
content-type: image/x-icon
content-length: 11849
last-modified: Sun, 05 Jan 2020 13:07:52 GMT
etag: "5e11dfa8-2e49"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| accounts.livechatinc.com/v2/customer/token | 95.101.10.171 | 200 OK | 195 B |
URL POST HTTP/2accounts.livechatinc.com/v2/customer/token IP95.101.10.171:443 ASN#20940 Akamai International B.V.
Requested byhttps://secure.livechatinc.com/customer/action/open_chat?license_id=17239629&group=0&embedded=1&widget_version=3&unique_groups=0 CertificateIssuerDigiCert Inc Subjectlivechat.com FingerprintAD:E9:73:3D:F9:98:EE:AF:EA:A1:C6:F0:07:27:92:13:66:F0:44:6E ValidityWed, 31 Jan 2024 00:00:00 GMT - Fri, 31 Jan 2025 23:59:59 GMT
Hashb3477cfccddb13a23b382809379167f8 9783c4616757c4d8e91570f562b01c835fe56782 3c29930540866dec530844f5776b55d91dc3d3f6140d53996e6c1068a6f5a290
POST /v2/customer/token HTTP/1.1
Host: accounts.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 225
Origin: https://secure.livechatinc.com
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://secure.livechatinc.com
cache-control: no-cache, no-store, max-age=0, must-revalidate
content-type: application/json
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 195
date: Fri, 03 May 2024 21:04:46 GMT
set-cookie: __lc_cid=fa981d4c-dfa9-45ff-9cbf-946abbee6ade; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Sun, 03 May 2026 21:04:46 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned
__lc_cst=e583c7191b355b5e2b5fe63a95747fcdf72271b87d54850d83390d40805a6f7b6b1a84a511f22d522d4b8117941643a18517546aa881b5e8deeed915329c; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Sun, 03 May 2026 21:04:46 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned
__lc_cid=fa981d4c-dfa9-45ff-9cbf-946abbee6ade; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Sun, 03 May 2026 21:04:46 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned
__lc_cst=e583c7191b355b5e2b5fe63a95747fcdf72271b87d54850d83390d40805a6f7b6b1a84a511f22d522d4b8117941643a18517546aa881b5e8deeed915329c; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Sun, 03 May 2026 21:04:46 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned
__oauth_redirect_detector=counter=1&t=1714770316&tag=681406473da2fb060a879fa5f5c55812f3a38148; Path=/; Expires=Fri, 03 May 2024 21:05:16 GMT; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| api.livechatinc.com/v3.5/customer/rtm/ws?organization_id=534f6b3a-f0d8-43b5-8c91-316ef74fe635 | 95.101.10.202 | | 0 B |
URL api.livechatinc.com/v3.5/customer/rtm/ws?organization_id=534f6b3a-f0d8-43b5-8c91-316ef74fe635 IP95.101.10.202:0 ASN#20940 Akamai International B.V.
CertificateIssuerDigiCert Inc Subjectlivechat.com FingerprintAD:E9:73:3D:F9:98:EE:AF:EA:A1:C6:F0:07:27:92:13:66:F0:44:6E ValidityWed, 31 Jan 2024 00:00:00 GMT - Fri, 31 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3.5/customer/rtm/ws?organization_id=534f6b3a-f0d8-43b5-8c91-316ef74fe635 HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://secure.livechatinc.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0My1Va14RLlkyIKiYX0hJg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
sec-websocket-accept: 7nAq0pzkxit+Zgumf3eZ0X7zdq8=
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://secure.livechatinc.com
Date: Fri, 03 May 2024 21:04:46 GMT
Upgrade: websocket
Connection: Upgrade
|
|
| api.text.com/file/accounts/avatars/534f6b3a-f0d8-43b5-8c91-316ef74fe635/30dcef47-e9af-4004-9b77-3354ed01a222/0121a996-4fa0-482e-a458-8e484bed9bcd.png | 23.36.79.16 | 200 OK | 2.1 kB |
URL GET HTTP/2api.text.com/file/accounts/avatars/534f6b3a-f0d8-43b5-8c91-316ef74fe635/30dcef47-e9af-4004-9b77-3354ed01a222/0121a996-4fa0-482e-a458-8e484bed9bcd.png IP23.36.79.16:443 ASN#20940 Akamai International B.V.
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerDigiCert Inc Subjectlivechat.com FingerprintAD:E9:73:3D:F9:98:EE:AF:EA:A1:C6:F0:07:27:92:13:66:F0:44:6E ValidityWed, 31 Jan 2024 00:00:00 GMT - Fri, 31 Jan 2025 23:59:59 GMT
File typePNG image data, 225 x 225, 8-bit colormap, non-interlaced Hashf8bd2fd01a2ead03c1648d0e9c195fa2 d4e3ae62b70556681d3d6cc937077cc11f618321 85cd66e3c37fc897171edcf59025046b970bebbb8a4f4defec136af421723a34
GET /file/accounts/avatars/534f6b3a-f0d8-43b5-8c91-316ef74fe635/30dcef47-e9af-4004-9b77-3354ed01a222/0121a996-4fa0-482e-a458-8e484bed9bcd.png HTTP/1.1
Host: api.text.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 2146
content-type: image/png
x-envoy-upstream-service-time: 28
server: istio-envoy
expires: Fri, 03 May 2024 21:04:55 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 03 May 2024 21:04:55 GMT
X-Firefox-Spdy: h2
|
|
| cdn.livechat-static.com/api/file/lc/img/rich-greetings/handwave.gif | 23.36.79.16 | 200 OK | 373 kB |
URL GET HTTP/2cdn.livechat-static.com/api/file/lc/img/rich-greetings/handwave.gif IP23.36.79.16:443 ASN#20940 Akamai International B.V.
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerDigiCert Inc Subjectlivechat.com FingerprintAD:E9:73:3D:F9:98:EE:AF:EA:A1:C6:F0:07:27:92:13:66:F0:44:6E ValidityWed, 31 Jan 2024 00:00:00 GMT - Fri, 31 Jan 2025 23:59:59 GMT
File typeGIF image data, version 89a, 460 x 300 Size373 kB (372763 bytes) Hashb833044c92652fa9fab0e3210c3a57c4 47e4ab00ff06878f861d731ee9f0891beb7bad88 d368f73655941321fa294f8c0f5d63f0a6caaab3dccac499800b4e2e49358a51
GET /api/file/lc/img/rich-greetings/handwave.gif HTTP/1.1
Host: cdn.livechat-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 372763
content-type: image/gif
cache-control: private, max-age=21213
date: Fri, 03 May 2024 21:04:56 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/css/app.css | 34.150.74.44 | 200 OK | 22 kB |
URL GET HTTP/2www.cinode-work.com/css/app.css IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /css/app.css HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: text/css
last-modified: Wed, 06 Mar 2024 13:56:02 GMT
vary: Accept-Encoding
etag: W/"65e875f2-5627"
expires: Sat, 04 May 2024 09:04:44 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/index.js | 34.150.74.44 | 200 OK | 591 kB |
URL GET HTTP/2www.cinode-work.com/index.js IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
Size591 kB (590640 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /index.js HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: application/javascript
last-modified: Wed, 23 Aug 2023 15:48:04 GMT
vary: Accept-Encoding
etag: W/"64e62a34-90330"
expires: Sat, 04 May 2024 09:04:44 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.cinode-work.com/red/style.css?v=V1.24 | 34.150.74.44 | 200 OK | 126 kB |
URL GET HTTP/2www.cinode-work.com/red/style.css?v=V1.24 IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
Size126 kB (125806 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /red/style.css?v=V1.24 HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: text/css
last-modified: Fri, 08 Apr 2022 10:11:24 GMT
vary: Accept-Encoding
etag: W/"62500a4c-1eb6e"
expires: Sat, 04 May 2024 09:04:44 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| api.livechatinc.com/v3.5/customer/rtm/ws?organization_id=534f6b3a-f0d8-43b5-8c91-316ef74fe635 | 95.101.10.202 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1api.livechatinc.com/v3.5/customer/rtm/ws?organization_id=534f6b3a-f0d8-43b5-8c91-316ef74fe635 IP95.101.10.202:443 ASN#20940 Akamai International B.V.
Requested byhttps://secure.livechatinc.com/customer/action/open_chat?license_id=17239629&group=0&embedded=1&widget_version=3&unique_groups=0 CertificateIssuerDigiCert Inc Subjectlivechat.com FingerprintAD:E9:73:3D:F9:98:EE:AF:EA:A1:C6:F0:07:27:92:13:66:F0:44:6E ValidityWed, 31 Jan 2024 00:00:00 GMT - Fri, 31 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3.5/customer/rtm/ws?organization_id=534f6b3a-f0d8-43b5-8c91-316ef74fe635 HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://secure.livechatinc.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0My1Va14RLlkyIKiYX0hJg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
sec-websocket-accept: 7nAq0pzkxit+Zgumf3eZ0X7zdq8=
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://secure.livechatinc.com
Date: Fri, 03 May 2024 21:04:46 GMT
Upgrade: websocket
Connection: Upgrade
|
|
| www.cinode-work.com/vue.js | 34.150.74.44 | 200 OK | 344 kB |
URL GET HTTP/2www.cinode-work.com/vue.js IP34.150.74.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.cinode-work.com/index/user/kp.html CertificateIssuerLet's Encrypt Subjectwww.cinode-work.com Fingerprint46:9B:65:B5:4D:32:B5:51:58:7C:08:5C:30:6A:58:3F:3C:6F:66:C8 ValidityTue, 30 Apr 2024 16:33:02 GMT - Mon, 29 Jul 2024 16:33:01 GMT
File typeJavaScript source, ASCII text Size344 kB (343988 bytes) Hashf5c020d18d70f21851364d0570d38127 5dba3f5cb7463e356310fc14e26d3358c1b00ed2 58692c4b6420c192dcf7620267b09183cf3c4bd6050b31843698e69a59c26e6c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /vue.js HTTP/1.1
Host: www.cinode-work.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cinode-work.com/index/user/kp.html
Cookie: think_var=en-us; sa5239f29=volv25mnm9otlsjs7tv6e4nlc5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 03 May 2024 21:04:44 GMT
content-type: application/javascript
last-modified: Sun, 28 Aug 2022 23:13:20 GMT
vary: Accept-Encoding
etag: W/"630bf690-53fb4"
expires: Sat, 04 May 2024 09:04:44 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
0.0.0.0