Report - pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html

Report Overview

Submitted URL
pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
IP
104.18.3.35
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-19 19:14:05
Access
public
Website Title
American Express
Final URL
pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
api.ipify.org	3267	unknown	2014-10-06	2024-04-18	528 B	267 B	104.26.13.205
pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev	unknown	2022-08-23	2024-04-05	2024-04-09	1.4 kB	96 kB	104.18.3.35
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-19	967 B	32 kB	104.17.24.14
www.americanexpress.com	13613	1995-06-04	2013-04-24	2024-04-11	1.0 kB	11 kB	104.110.22.253
www.aexp-static.com	12486	2010-10-07	2012-05-24	2024-04-18	2.2 kB	4.3 kB	104.110.3.84
pub-b9a0aec3160d4257b67ce453ae576eab.r2.dev	unknown	unknown	No data	No data	1.4 kB	131 kB	104.18.3.35
nylcom.com	unknown	2006-05-12	2016-05-03	2024-03-24	425 B	853 B	67.20.76.77
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-04-19	458 B	31 kB	142.250.74.74
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2024-04-19	2.0 kB	119 kB	104.18.10.207

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-19 19:13:40	low	Client IP	104.26.13.205	ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html	American Express

PhishTank

Scan Date	Severity	Indicator	Alert
2024-04-06	medium	pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev	Sinkholed
2024-04-19	medium	pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev	Sinkholed
2024-04-19	medium	pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev	Sinkholed

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js	87 kB	2023-03-07	2024-05-02
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js IP 142.250.74.74 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-02 16:06:59 Times Seen63960 Hash c9f5aeeca3ad37bf2aa006139b935f0a 1055018c28ab41087ef9ccefe411606893dabea2 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de Loading...

	pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html	1.1 kB	2024-04-02	2024-04-28
Pretty URL pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html IP 104.18.3.35 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-02 14:02:38 Last Seen2024-04-28 18:59:08 Times Seen13 Hash 842428a24a226b69c15678f5f42cfc99 2b9e982bc652299fa4759f622cc715addd4315ce 55bfeeda27f6d0fbf5b67d0ed539525bb83db239130e00ade04d5dbbbefaa914 Loading...

	pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html	1.3 kB	2024-04-02	2024-04-28
Pretty URL pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html IP 104.18.3.35 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-02 14:02:38 Last Seen2024-04-28 18:59:08 Times Seen13 Hash 707d3e4e5211d51b47229c520209e8c9 e0761c47ddb5af4595b19fcc24e45a5f162448fc 1f2bef3149c045e526050e39f66bd264bd9b50a1c2f0ed804f000642a356b611 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/3.1.1/jquery.min.js	87 kB	2023-03-07	2024-05-02
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.1.1/jquery.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-05-02 16:05:01 Times Seen266427 Hash e071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf Loading...

	maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js	37 kB	2023-03-07	2024-05-02
Pretty URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js IP 104.18.10.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:54 Last Seen2024-05-02 16:07:00 Times Seen55032 Hash 5869c96cc8f19086aee625d670d741f9 430a443d74830fe9be26efca431f448c1b3740f9 53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef Loading...

	nylcom.com/en/img/6v.js	858 B	2024-03-01	2024-04-28
Pretty URL nylcom.com/en/img/6v.js IP 67.20.76.77 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-01 14:03:22 Last Seen2024-04-28 18:59:08 Times Seen38 Hash 2fdda3c5c64338d9aebb0d25c9d9619d fd4f79ebf3dd9241da188367f0fbb238031798df 0664397900da4597a6a1b94110da46fe0c8befd85db0c06fb001709ae5b9611d Loading...

	pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html	1.4 kB	2024-04-02	2024-04-28
Pretty URL pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html IP 104.18.3.35 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-02 14:02:38 Last Seen2024-04-28 18:59:08 Times Seen13 Hash 8f00048f1573323fc3dcb6a2db0df366 70f494901bba3cbd53dff65fa9d2421d4a5c03b8 597008a04e0eb658b92ea9634efef7114bfea6b3d9a3ad7b27f4735c2ce7009a Loading...

	pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html	934 B	2024-04-02	2024-04-28
Pretty URL pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html IP 104.18.3.35 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-02 14:02:39 Last Seen2024-04-28 18:59:08 Times Seen13 Hash 0c3015f27536ffae57fc1a67ebe84276 e9828e94f1153f6bde25acb197886ab5cba0c21e eafab8eb91a3e14fdd29015dd537d522223d1642c32546e8ece63ec0b99364e0 Loading...

	pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html	275 B	2023-06-27	2024-04-28
Pretty URL pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html IP 104.18.3.35 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-27 01:57:54 Last Seen2024-04-28 18:59:08 Times Seen219 Hash 98a8f2201b5feabeb5caf723f5ae72c2 6c81e00b09dbbc300f474e4627ac925bf6f3061b cffcc7ddbd5d1de29d855ed9b15e3cdde678a3c7c9338524b133c92552d87c88 Loading...

	pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html	173 B	2023-06-27	2024-04-28
Pretty URL pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html IP 104.18.3.35 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-27 01:57:54 Last Seen2024-04-28 18:59:08 Times Seen221 Hash c763778cc0e0a6fab9c64d962e95c499 2afbb8244eccff938c8bd3d40dad328e03cfb9dc 5a67f18c97cc731ae5e969ebf1bb5ed95356765374e48dfbb0c732cbbfef0e41 Loading...

HTTP Transactions (21)

URL IP Response Size

pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html

104.18.3.35

200 OK

40 kB

URL User Request GET HTTP/1.1
pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
IP
104.18.3.35:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0
ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT

File type
HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (11123), with CRLF line terminators
Size
40 kB (40329 bytes)
Hash
e338e7d86a96abcb1fa1a712d58d2828
e0f6ba4520f700b8a41b06a6d702a114e3db79b9
cfe77ca5bd6b36c9384ca88ca4dbaefe4190715fa2e7e219d0b11073afff997e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	American Express
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ax2.html HTTP/1.1
Host: pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 19:13:39 GMT
Content-Type: text/html
Content-Length: 40329
Connection: keep-alive
Accept-Ranges: bytes
ETag: "e338e7d86a96abcb1fa1a712d58d2828"
Last-Modified: Mon, 01 Apr 2024 12:34:19 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 876f368c49fab52d-OSL

cdnjs.cloudflare.com/ajax/libs/bootstrap-social/5.1.1/bootstrap-social.min.css

104.17.24.14

200 OK

2.4 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/bootstrap-social/5.1.1/bootstrap-social.min.css
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (24347), with no line terminators
Size
2.4 kB (2428 bytes)
Hash
42a8a276351ce000b421541710e6dcbc
a74ea93103d520b7be75971e4ef94badba575117
ac530b45ba80cad0fd89cff7ed19f3af661ccbf465a71139407e7687b568219a

HTTP Headers

GET /ajax/libs/bootstrap-social/5.1.1/bootstrap-social.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 19:13:39 GMT
content-type: text/css; charset=utf-8
content-length: 2428
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d8e-5f1b"
last-modified: Mon, 04 May 2020 16:06:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 12499289
expires: Wed, 09 Apr 2025 19:13:39 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MXRryRXL8UIqK7dsLKX%2F56Li0HlL3r5uS0fOqDLTUNV8Hc6WY5AEpLHc%2FLiJ3IcTh8LmbFyRv5zud5nzzpc9zZVK2R8CxvbcWybaAugw1fKu54XGLDlUb8kFCpN7%2Fp2F07B7ZVAa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 876f368f7bb5b4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery/3.1.1/jquery.min.js

104.17.24.14

200 OK

27 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.1.1/jquery.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32030)
Size
27 kB (27192 bytes)
Hash
e071abda8fe61194711cfc2ab99fe104
f647a6d37dc4ca055ced3cf64bbc1f490070acba
85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

HTTP Headers

GET /ajax/libs/jquery/3.1.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 19:13:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 27192
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-152b5"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1455596
expires: Wed, 09 Apr 2025 19:13:39 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ll7hQ25%2Fre8h5LEH22g801GrSRibt14w7Vq892qiVQ3kEocOnqxBAJsIFzIgKaGGWD61jQ1lX9Q5rw3wpyqvx4lQbQAQxE3aumnTM0O5ueIrehXH01CqdrfL6YpLRezLyIIi5DzR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 876f368f7bb6b4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.americanexpress.com/content/dam/amex/us/homepage/images/20-AMX-0046_Covid19Support-AmexBanner_300x250_m01_46.jpg

104.110.22.253

200 OK

8.8 kB

URL GET HTTP/2
www.americanexpress.com/content/dam/amex/us/homepage/images/20-AMX-0046_Covid19Support-AmexBanner_300x250_m01_46.jpg
IP
104.110.22.253:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerDigiCert Inc
Subjectwww.americanexpress.com
Fingerprint64:A2:B0:4D:11:47:D0:C0:37:73:B5:62:91:90:F7:0D:1F:42:FA:10
ValidityThu, 03 Aug 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT

File type
ISO Media, AVIF Image
Size
8.8 kB (8772 bytes)
Hash
17bbce57a337cff7d915884c48370f09
0eb649dc0931b32c9ed5b570460f5b5529fb2dc2
debe96758724f05440faf42c8a06527a7aabe85bbbbbbd8c98f706ec6f008e2c

HTTP Headers

GET /content/dam/amex/us/homepage/images/20-AMX-0046_Covid19Support-AmexBanner_300x250_m01_46.jpg HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-frame-options: SAMEORIGIN
last-modified: Wed, 11 Oct 2023 16:37:38 GMT
server: Akamai Image Manager
content-length: 8772
content-type: image/avif
cache-control: private, no-transform, max-age=12710
expires: Fri, 19 Apr 2024 22:45:29 GMT
date: Fri, 19 Apr 2024 19:13:39 GMT
set-cookie: agent-id=b7ed6acc-6eb2-4845-8add-430ecd2cceb3; expires=Sat, 19-Apr-2025 19:13:39 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-stack.svg

104.110.3.84

200 OK

743 B

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-stack.svg
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
743 B (743 bytes)
Hash
78af472d7f07aacd83d8e224c119950a
b04f7889c9277106b40ef90b7b19c1091884d876
fc69234936c0df004440641a5df9ee1e3c3532df5780984f0f636e85e8788519

HTTP Headers

GET /cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-stack.svg HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 31 Oct 2019 17:37:19 GMT
etag: W/"5dbb1bcf-66e"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 743
date: Fri, 19 Apr 2024 19:13:39 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-bluebox-solid.svg

104.110.3.84

200 OK

989 B

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-bluebox-solid.svg
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
989 B (989 bytes)
Hash
d97d46fe48d19d2c4f236b9a2cfee5f3
a164f3588bb4b601c472461a24a6eec265bcf8c8
028f643755987211bf2f3add6c62ae1870a888cf2f4fe3040a4fac7dce2543ab

HTTP Headers

GET /cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-bluebox-solid.svg HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 31 Oct 2019 17:37:19 GMT
etag: W/"5dbb1bcf-962"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 989
date: Fri, 19 Apr 2024 19:13:39 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/axp-static-assets/2.24.1/package/dist/img/flags/dls-flag-us.svg

104.110.3.84

200 OK

587 B

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/axp-static-assets/2.24.1/package/dist/img/flags/dls-flag-us.svg
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
587 B (587 bytes)
Hash
56addba553083eb384b100cbb7e8632f
f718526f1ef720e5d361536615595d5bfc3c9688
5e60a20da0f769a6260d4ed755d615da930b87c62436f807a6ff32d000017d18

HTTP Headers

GET /cdaas/one/statics/axp-static-assets/2.24.1/package/dist/img/flags/dls-flag-us.svg HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 01 Jul 2021 15:34:07 GMT
etag: W/"60dde06f-15f8"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 587
date: Fri, 19 Apr 2024 19:13:39 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.7.1/package/dist/img/logos/dls-logo-line.svg

104.110.3.84

200 OK

712 B

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.7.1/package/dist/img/logos/dls-logo-line.svg
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
712 B (712 bytes)
Hash
ebbbafae5bdc09d7ded7cef405413ac5
7a635abed6420b798397c62270d2df8b084cd8a8
c39e8554624a4b74e596d2bfa96bdd4d30dbc395532ab32e67591c0e929080e9

HTTP Headers

GET /cdaas/one/statics/axp-static-assets/1.7.1/package/dist/img/logos/dls-logo-line.svg HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Fri, 18 Oct 2019 19:50:49 GMT
etag: W/"5daa1799-693"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 712
date: Fri, 19 Apr 2024 19:13:39 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/js/custom.js

104.18.3.35

404 Not Found

27 kB

URL GET HTTP/1.1
pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/js/custom.js
IP
104.18.3.35:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0
ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT

File type
HTML document, ASCII text, with very long lines (611)
Size
27 kB (27242 bytes)
Hash
df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/custom.js HTTP/1.1
Host: pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Fri, 19 Apr 2024 19:13:39 GMT
Content-Type: text/html
Content-Length: 27242
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 876f368f7cfbb52d-OSL

ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js

142.250.74.74

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
JavaScript source, ASCII text, with very long lines (32058)
Size
30 kB (30306 bytes)
Hash
c9f5aeeca3ad37bf2aa006139b935f0a
1055018c28ab41087ef9ccefe411606893dabea2
87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

HTTP Headers

GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30306
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 09:52:46 GMT
expires: Fri, 18 Apr 2025 09:52:46 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 120054
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

pub-b9a0aec3160d4257b67ce453ae576eab.r2.dev/style.css

104.18.3.35

200 OK

6.4 kB

URL GET HTTP/1.1
pub-b9a0aec3160d4257b67ce453ae576eab.r2.dev/style.css
IP
104.18.3.35:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0
ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT

File type
ASCII text, with very long lines (505), with CRLF line terminators
Size
6.4 kB (6375 bytes)
Hash
9c1630aad362164a728421e23e40f049
8363d2ed5943fa03f69093479cf07547a476c39c
eb4225ad647b28f1619e0b186c7734504ba0ba5d2c3e62d7acc8d4627e4d6e3a

HTTP Headers

GET /style.css HTTP/1.1
Host: pub-b9a0aec3160d4257b67ce453ae576eab.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 19:13:40 GMT
Content-Type: text/css
Content-Length: 6375
Connection: keep-alive
Accept-Ranges: bytes
ETag: "9c1630aad362164a728421e23e40f049"
Last-Modified: Mon, 01 Apr 2024 10:38:12 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 876f368fc8bd56c5-OSL

maxcdn.bootstrapcdn.com/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2

104.18.10.207

200 OK

18 kB

URL GET HTTP/3
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18028, version 1.589
Size
18 kB (18028 bytes)
Hash
448c34a56d699c29117adc64c43affeb
ca35b697d99cae4d1b60f2d60fcd37771987eb07
fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c

HTTP Headers

GET /bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 19:13:40 GMT
content-type: font/woff2
content-length: 18028
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "448c34a56d699c29117adc64c43affeb"
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 01/03/2024 11:54:50
cdn-edgestorageid: 894
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 851b6900e3fc61193c255a7af96966cf
cdn-cache: HIT
cf-cache-status: HIT
age: 36439
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 876f36921a08712e-OSL
alt-svc: h3=":443"; ma=86400

pub-b9a0aec3160d4257b67ce453ae576eab.r2.dev/cid.png

104.18.3.35

200 OK

78 kB

URL GET HTTP/1.1
pub-b9a0aec3160d4257b67ce453ae576eab.r2.dev/cid.png
IP
104.18.3.35:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0
ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT

File type
PNG image data, 300 x 190, 8-bit/color RGB, non-interlaced
Size
78 kB (77643 bytes)
Hash
d23290f143c6dd74326679579b570878
7c8b4cdfb7ef47e36a14c4104f35e26a2d600197
fa12fb8f6ec391542590fd0b159fb06e9cabdd2556950955beffa5a742b7c5ea

HTTP Headers

GET /cid.png HTTP/1.1
Host: pub-b9a0aec3160d4257b67ce453ae576eab.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 19:13:40 GMT
Content-Type: image/png
Content-Length: 77643
Connection: keep-alive
Accept-Ranges: bytes
ETag: "d23290f143c6dd74326679579b570878"
Last-Modified: Mon, 01 Apr 2024 10:38:37 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 876f3691b86f569c-OSL

pub-b9a0aec3160d4257b67ce453ae576eab.r2.dev/csc.png

104.18.3.35

200 OK

46 kB

URL GET HTTP/1.1
pub-b9a0aec3160d4257b67ce453ae576eab.r2.dev/csc.png
IP
104.18.3.35:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0
ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT

File type
PNG image data, 300 x 190, 8-bit/color RGB, non-interlaced
Size
46 kB (45906 bytes)
Hash
1ab8baa1b1b50862c0ef8cba837905ce
f9c4f8125f19f4110c10239646e7f0e347b298a3
acf07d1efd42984fc3b2adfa31cbcef2f2a508f5105fde68bc56b3e80dcfc826

HTTP Headers

GET /csc.png HTTP/1.1
Host: pub-b9a0aec3160d4257b67ce453ae576eab.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 19:13:40 GMT
Content-Type: image/png
Content-Length: 45906
Connection: keep-alive
Accept-Ranges: bytes
ETag: "1ab8baa1b1b50862c0ef8cba837905ce"
Last-Modified: Mon, 01 Apr 2024 10:38:37 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 876f3691bf26568e-OSL

pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/js/custom.js

104.18.3.35

404 Not Found

27 kB

URL GET HTTP/1.1
pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/js/custom.js
IP
104.18.3.35:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0
ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT

File type
HTML document, ASCII text, with very long lines (611)
Size
27 kB (27242 bytes)
Hash
df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/custom.js HTTP/1.1
Host: pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Fri, 19 Apr 2024 19:13:40 GMT
Content-Type: text/html
Content-Length: 27242
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 876f36923f5cb52d-OSL

maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css

104.18.10.207

200 OK

29 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (65371)
Size
29 kB (29312 bytes)
Hash
ec3bb52a00e176a7181d454dffaea219
6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68
f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c

HTTP Headers

GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 19:13:39 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 10/31/2023 18:59:36
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1078
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: a99131ed71793c235969f4741b45dd0f
cdn-cache: HIT
cf-cache-status: HIT
age: 12741000
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 876f368f7a2956c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

nylcom.com/en/img/6v.js

67.20.76.77

200 OK

467 B

URL GET HTTP/2
nylcom.com/en/img/6v.js
IP
67.20.76.77:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerLet's Encrypt
Subjectwww.apcmaterials.com
FingerprintB3:9F:23:93:22:AB:BB:5C:B2:95:2F:CC:9B:B3:E2:69:CC:4C:7F:52
ValiditySat, 16 Mar 2024 14:11:05 GMT - Fri, 14 Jun 2024 14:11:04 GMT

File type
JavaScript source, ASCII text, with very long lines (839)
Size
467 B (467 bytes)
Hash
2fdda3c5c64338d9aebb0d25c9d9619d
fd4f79ebf3dd9241da188367f0fbb238031798df
0664397900da4597a6a1b94110da46fe0c8befd85db0c06fb001709ae5b9611d

HTTP Headers

GET /en/img/6v.js HTTP/1.1
Host: nylcom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Wed, 28 Feb 2024 15:57:24 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 20 Apr 2024 19:13:40 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 467
content-type: application/javascript
date: Fri, 19 Apr 2024 19:13:40 GMT
server: Apache
X-Firefox-Spdy: h2

www.americanexpress.com/favicon.ico

104.110.22.253

1.4 kB

URL GET
www.americanexpress.com/favicon.ico
IP
104.110.22.253:0
ASN
#16625 AKAMAI-AS

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerDigiCert Inc
Subjectwww.americanexpress.com
Fingerprint64:A2:B0:4D:11:47:D0:C0:37:73:B5:62:91:90:F7:0D:1F:42:FA:10
ValidityThu, 03 Aug 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
1.4 kB (1381 bytes)
Hash
974ccc6c4c6e1c7f04606973beb3ba20
0f96f86d488a4b5805744fa067c3cfd57c928406
265d3f591d92fadfe95f4660c382ee64a23538a7353b9880434205a102833de0

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
strict-transport-security: max-age=15552000;
last-modified: Fri, 07 Jun 2019 04:05:21 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1381
x-cnection: close
content-type: image/x-icon
date: Fri, 19 Apr 2024 19:13:40 GMT
set-cookie: agent-id=fd3046ec-1970-4cc7-a478-f3c7020a0ba6; expires=Sat, 19-Apr-2025 19:13:40 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2

api.ipify.org/?format=json

104.26.13.205

200 OK

21 B

URL GET HTTP/2
api.ipify.org/?format=json
IP
104.26.13.205:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectipify.org
FingerprintC8:1A:05:47:C5:73:C6:CE:DF:1D:A6:DE:00:11:A9:9A:8C:DB:EF:A7
ValidityThu, 21 Mar 2024 19:56:02 GMT - Wed, 19 Jun 2024 19:56:01 GMT

File type
JSON text data
Size
21 B (21 bytes)
Hash
7d69c71af0f191e9a72db6153f8018d1
f67c5f2887bc05654b47f76e9621e53a4091aed1
5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65

HTTP Headers

GET /?format=json HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 19:13:41 GMT
content-type: application/json
content-length: 21
access-control-allow-origin: *
vary: Origin
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 876f3695bd91b515-OSL
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css

104.18.10.207

200 OK

31 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (30837)
Size
31 kB (31000 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

HTTP Headers

GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 19:13:39 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 18:48:06
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 9e61a4e37a75208649ae6b63a0cb4f72
cdn-cache: HIT
cf-cache-status: HIT
age: 12494289
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 876f368f7a3156c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js

104.18.10.207

200 OK

37 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/ax2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (32033)
Size
37 kB (37045 bytes)
Hash
5869c96cc8f19086aee625d670d741f9
430a443d74830fe9be26efca431f448c1b3740f9
53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef

HTTP Headers

GET /bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-8e165e901ebe476cb60d7fd4640b4409.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 19:13:39 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 12/13/2021 20:18:53
cdn-edgestorageid: 755
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-proxyver: 1.02
cdn-requestid: 48135f30fbfcba704628453df5764d8f
cdn-cache: HIT
cf-cache-status: HIT
age: 12917037
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 876f368f7a2d56c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML