Overview

URL https://tredencestore.blob.core.windows.net/vnm/usps.html?sp=r&st=2019-04-23T14:55:05Z&se=2019-04-25T22:55:05Z&spr=https&sv=2018-03-28&sig=rUAQ%2FLZoqFQHIGcKxeYjlXTsaq63r7cmbQnSbTPQ%2FC0%3D&sr=b#rita.scales@firstcitizens.com
IP52.239.160.170
ASN
Location United States
Report completed2019-04-23 18:41:50 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-04-23 2 www.sitepoint.com/examples/password/MaskedPassword/MaskedPassword.js Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 1 reports on IP: 52.239.160.170

Date UQ / IDS / BL URL IP
2018-05-15 10:35:03 +0200
0 - 0 - 0 opdhsblobprod03.blob.core.windows.net 52.239.160.170

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2019-05-21 05:51:10 +0200
0 - 0 - 1 horo-game.com/wp-content/uploads/2015/10/WRC- (...) 137.74.182.160
2019-05-21 05:50:56 +0200
0 - 0 - 1 ali.files.cdn.112gs.com/2018/08/18/13320293.apk 35.244.129.99
2019-05-21 05:50:46 +0200
0 - 0 - 2 unblocknode.herokuapp.com/proxy/https:/fbnews (...) 34.202.247.40
2019-05-21 05:50:00 +0200
0 - 0 - 0 www.ch3thailand.com 143.204.47.32
2019-05-21 05:49:50 +0200
0 - 0 - 1 alfombrasmexico.com.mx/sN/aromacoffee/qkntq49 (...) 162.241.2.107
2019-05-21 05:49:27 +0200
0 - 0 - 1 alfombrasmexico.com.mx/sN/aromacoffee/o4qdq96 (...) 162.241.2.107
2019-05-21 05:48:17 +0200
0 - 0 - 1 rufiles.brothersoft.com/internet/download_man (...) 128.1.89.101
2019-05-21 05:48:11 +0200
0 - 1 - 1 esfiles.brothersoft.com/games/multiplayer/Con (...) 128.1.89.101
2019-05-21 05:47:46 +0200
0 - 0 - 3 sxhxsb.com/chonghing/ggth/resource/38e9a15564 (...) 154.210.236.78
2019-05-21 05:46:44 +0200
0 - 0 - 1 alfombrasmexico.com.mx/sN/aromacoffee/u3caq11 (...) 162.241.2.107

No other reports on domain: windows.net



JavaScript

Executed Scripts (3)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (19)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.msocsp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         104.18.25.243
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 16:41:17 GMT
Content-Length: 1831
Connection: keep-alive
Set-Cookie: __cfduid=d78968041a386c18cf5b374de3d06da3d1556037677; expires=Wed, 22-Apr-20 16:41:17 GMT; path=/; domain=.msocsp.com; HttpOnly
Expires: Sat, 27 Apr 2019 15:00:42 GMT
X-Powered-By: Undertow/1
Etag: "e8490d2088ee0f0cb97b6efdd4db8c1963fc83bf"
Last-Modified: Tue, 23 Apr 2019 15:00:42 GMT
X-Cache: HIT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4cc148bd4e12428b-OSL


--- Additional Info ---
Magic:  data
Size:   1831
Md5:    72bae92cac960e47b515e9a435c05fb5
Sha1:   e8490d2088ee0f0cb97b6efdd4db8c1963fc83bf
Sha256: 9351b55287555cad376751062e49f04fe351367a169ec9a7903c773ab1a5175f
                                        
                                            GET /vnm/usps.html?sp=r&st=2019-04-23T14:55:05Z&se=2019-04-25T22:55:05Z&spr=https&sv=2018-03-28&sig=rUAQ%2FLZoqFQHIGcKxeYjlXTsaq63r7cmbQnSbTPQ%2FC0%3D&sr=b HTTP/1.1 
Host: tredencestore.blob.core.windows.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         52.239.160.170
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Length: 32358
Last-Modified: Tue, 23 Apr 2019 14:55:01 GMT
Accept-Ranges: bytes
Etag: "0x8D6C7FBA988A968"
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: bcbf91a0-301e-0008-44f3-f9ff7b000000
x-ms-version: 2018-03-28
x-ms-creation-time: Tue, 23 Apr 2019 14:55:01 GMT
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
x-ms-server-encrypted: true
Date: Tue, 23 Apr 2019 16:41:18 GMT


--- Additional Info ---
Magic:  UTF-8 Unicode (with BOM) HTML document text, with very long lines, with CRLF line terminators
Size:   32358
Md5:    c7ce76672eb7b9d70dcc83be002e175f
Sha1:   130a90d5a4c5b9a26cf1400a6a068b16d5e7db54
Sha256: 07d9d957b5adbeead99994f91b1ddd6f1907ed196f294b3986eccd91b4b17563
                                        
                                            POST / HTTP/1.1 
Host: ocsp.ssl.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sun, 21 Apr 2019 22:04:14 GMT
Etag: 7667BA5DBF5683A736399BE51966BF4109BF68AA
X-OCSP-Responder-ID: mcdpcaocsp3
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=450719
Expires: Sun, 28 Apr 2019 21:53:17 GMT
Date: Tue, 23 Apr 2019 16:41:18 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    26d4006946a07f4a80b3aa0b32737637
Sha1:   7667ba5dbf5683a736399be51966bf4109bf68aa
Sha256: df91beeb325196d1ec8001bbf013805ee1501bc63329fa516fa3cbd71fc131a1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.trust-provider.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.199.212.49
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 16:41:18 GMT
Server: Apache
Last-Modified: Sun, 21 Apr 2019 23:19:13 GMT
Expires: Sun, 28 Apr 2019 23:19:13 GMT
Etag: 8A507D7AF5972000B1A81C1D31A8727B5EF9AA04
Cache-Control: max-age=455274,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp6
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    ee5bea775c19fdd69915d74d1d71c113
Sha1:   8a507d7af5972000b1a81c1d31a8727b5ef9aa04
Sha256: 3c042d1d903bd44d3193726095dd8b966255670951a9478bb04c0e74c57b9927
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 18 Apr 2019 11:19:13 GMT
Etag: 90106E4B9FE1576FE62A668709805BE1B29CD01D
X-OCSP-Responder-ID: mcdpcaocsp14
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=152832
Expires: Thu, 25 Apr 2019 11:08:30 GMT
Date: Tue, 23 Apr 2019 16:41:18 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0373312aab14fc592470b4a4dc64cd43
Sha1:   90106e4b9fe1576fe62a668709805be1b29cd01d
Sha256: 5df5a2fbb40d0f231df7f1494f258d66549b3513ed5081e06fc35dc432159481
                                        
                                            GET /examples/password/MaskedPassword/MaskedPassword.js HTTP/1.1 
Host: www.sitepoint.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tredencestore.blob.core.windows.net/vnm/usps.html?sp=r&st=2019-04-23T14:55:05Z&se=2019-04-25T22:55:05Z&spr=https&sv=2018-03-28&sig=rUAQ%2FLZoqFQHIGcKxeYjlXTsaq63r7cmbQnSbTPQ%2FC0%3D&sr=b

                                         
                                         54.148.84.95
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Last-Modified: Fri, 15 Oct 2010 00:03:45 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 5767
Date: Tue, 23 Apr 2019 16:33:48 GMT
Server: Apache/2.2.22 (Debian)
Etag: "680936-4208-4929c8f629a40"
Vary: User-Agent,Accept-Encoding
Age: 451
X-Cache: HIT from ip-172-31-22-12.us-west-2.compute.internal
X-Cache-Lookup: HIT from ip-172-31-22-12.us-west-2.compute.internal:3128


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5767
Md5:    782ad0e79cf7a3078ec04ce75fd7f079
Sha1:   a9c2fd429397a618751bae4ecc623b7e1bfea649
Sha256: 0f51ee987e3d11165d7f466a0c977066d44bcb165571fd622379f2334406392a

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 18 Apr 2019 03:43:12 GMT
Etag: 41F1A492C833355A608687E89C08B2F8CDF47829
X-OCSP-Responder-ID: mcdpcaocsp6
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=125512
Expires: Thu, 25 Apr 2019 03:33:11 GMT
Date: Tue, 23 Apr 2019 16:41:19 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    cc1bde6ebe2c428b5a0b9459212d1fad
Sha1:   41f1a492c833355a608687e89c08b2f8cdf47829
Sha256: 90a605d347b1d0d6e63e49f29f3e4ddf1dc5713f1aa3740794a606361697279a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 18 Apr 2019 11:19:13 GMT
Etag: BEE5E7F66BA1AEE121F194F2BFFB7BE4B7002F46
X-OCSP-Responder-ID: mcdpcaocsp6
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=152883
Expires: Thu, 25 Apr 2019 11:09:22 GMT
Date: Tue, 23 Apr 2019 16:41:19 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    72320bddbbeb7a2f55793244e14c33d2
Sha1:   bee5e7f66ba1aee121f194f2bffb7be4b7002f46
Sha256: 73f20536fdd0a702f774c78e0e4d0eb0142fb34d2388a12f1e15db182fd26550
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 18 Apr 2019 11:19:13 GMT
Etag: 661AA651701677495F84998D9AFA81AC2E1CC9B4
X-OCSP-Responder-ID: mcdpcaocsp14
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=152930
Expires: Thu, 25 Apr 2019 11:10:09 GMT
Date: Tue, 23 Apr 2019 16:41:19 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    95e60e54eba7e7c1258b60cd47be2f45
Sha1:   661aa651701677495f84998d9afa81ac2e1cc9b4
Sha256: ed84bb7df34fbeeb8eb01c18fafe64a3e3ea2c07dd1c97dfc46cf8f0642f33a2
                                        
                                            GET /vnm/images/small.jpg?x=12f4b8b543125cc986c79cd85320812f HTTP/1.1 
Host: tredencestore.blob.core.windows.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tredencestore.blob.core.windows.net/vnm/usps.html?sp=r&st=2019-04-23T14:55:05Z&se=2019-04-25T22:55:05Z&spr=https&sv=2018-03-28&sig=rUAQ%2FLZoqFQHIGcKxeYjlXTsaq63r7cmbQnSbTPQ%2FC0%3D&sr=b

                                         
                                         52.239.160.170
HTTP/1.1 404 The specified resource does not exist.
Content-Type: application/xml
                                        
Content-Length: 223
Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: bcbf938f-301e-0008-75f3-f9ff7b000000
Date: Tue, 23 Apr 2019 16:41:19 GMT


--- Additional Info ---
Magic:  XML document text\012 XML document text
Size:   223
Md5:    55f955d497b8fa03f9dc0f2cbd4fbae3
Sha1:   82b3cd03652175e104878bce90b09b9dd5b1af02
Sha256: 0ceec79136becd248b84bdb7d11948d9c54232453c5ff9aa833e4628f3187e07
                                        
                                            POST / HTTP/1.1 
Host: ocsp.msocsp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request
Cookie: __cfduid=d78968041a386c18cf5b374de3d06da3d1556037677

                                         
                                         104.18.25.243
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 16:41:19 GMT
Content-Length: 1831
Connection: keep-alive
Expires: Sat, 27 Apr 2019 16:41:19 GMT
X-Powered-By: Undertow/1
Etag: "d39a7038957207238cecd49f0f005993c2edd664"
Last-Modified: Tue, 23 Apr 2019 16:41:19 GMT
X-Cache: EXPIRED
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4cc148c9582c428b-OSL


--- Additional Info ---
Magic:  data
Size:   1831
Md5:    0b21b4b8030f73a308b0749c75b58f0c
Sha1:   d39a7038957207238cecd49f0f005993c2edd664
Sha256: 9f10ca08e32907cf2eed47602c21bd019224d1282407ffc8ded22effb59e9ea0
                                        
                                            GET /jquery-1.9.1.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tredencestore.blob.core.windows.net/vnm/usps.html?sp=r&st=2019-04-23T14:55:05Z&se=2019-04-25T22:55:05Z&spr=https&sv=2018-03-28&sig=rUAQ%2FLZoqFQHIGcKxeYjlXTsaq63r7cmbQnSbTPQ%2FC0%3D&sr=b

                                         
                                         205.185.208.52
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 23 Apr 2019 16:41:19 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 32772
Last-Modified: Fri, 24 Oct 2014 00:16:07 GMT
Server: nginx
Etag: W/"54499a47-169d5"
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-HW: 1556037679.dop008.sk1.t,1556037679.cds003.sk1.shn,1556037679.dop008.sk1.t,1556037679.cds046.sk1.c


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   32772
Md5:    9bb388ff23a16464def114012ef85ce9
Sha1:   89304bdd18138416245d91872633ff1549b6208b
Sha256: be7683cb0767cf4959b56432ab634ad500284b0625bc50d6eb6b2827aa9d2e5e
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 16:41:20 GMT
Content-Length: 1574
Connection: keep-alive
Set-Cookie: __cfduid=d7201cebf426080f6b150c9c81034ddc61556037680; expires=Wed, 22-Apr-20 16:41:20 GMT; path=/; domain=.globalsign.com; HttpOnly
Expires: Sat, 27 Apr 2019 13:48:16 GMT
X-Powered-By: Undertow/1
Etag: "90c28017130a308d29046cbaa0a778ddf3828b67"
Last-Modified: Tue, 23 Apr 2019 13:48:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4cc148cc39314273-OSL


--- Additional Info ---
Magic:  data
Size:   1574
Md5:    f9a2ff213993e579192b4409a468d7a5
Sha1:   90c28017130a308d29046cbaa0a778ddf3828b67
Sha256: 1d616fedacb6ccee2e3849b8ff155ba9339d3b2d7c5721e96484f9e32ca9602f
                                        
                                            GET /ests/2.1.6468.8/content/images/favicon_a.ico HTTP/1.1 
Host: secure.aadcdn.microsoftonline-p.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.122.233.122
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Content-Length: 17174
Content-MD5: EuPayFgGHQiAI7K9SOL6lg==
Last-Modified: Fri, 11 Aug 2017 17:56:36 GMT
Access-Control-Expose-Headers: x-ms-request-id,x-ms-version,x-ms-lease-status,x-ms-blob-type
Cache-Control: public, max-age=516818
Date: Tue, 23 Apr 2019 16:41:20 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  MS Windows icon resource - 6 icons, 16-colors
Size:   17174
Md5:    12e3dac858061d088023b2bd48e2fa96
Sha1:   e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
Sha256: 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
                                        
                                            GET /54b6d9334161a54.png HTTP/1.1 
Host: loppa.oss-us-east-1.aliyuncs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tredencestore.blob.core.windows.net/vnm/usps.html?sp=r&st=2019-04-23T14:55:05Z&se=2019-04-25T22:55:05Z&spr=https&sv=2018-03-28&sig=rUAQ%2FLZoqFQHIGcKxeYjlXTsaq63r7cmbQnSbTPQ%2FC0%3D&sr=b

                                         
                                         47.252.95.97
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: AliyunOSS
Date: Tue, 23 Apr 2019 16:41:20 GMT
Content-Length: 753
Connection: keep-alive
x-oss-request-id: 5CBF40301D8024EFEBE706F4
Accept-Ranges: bytes
Etag: "DC8199CF5E6585B5D7A037496DF1692B"
Last-Modified: Wed, 12 Sep 2018 03:08:41 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 14909334537735148911
x-oss-storage-class: Standard
Content-MD5: 3IGZz15lhbXXoDdJbfFpKw==
x-oss-server-time: 0


--- Additional Info ---
Magic:  PNG image, 120 x 16, 8-bit/color RGBA, non-interlaced
Size:   753
Md5:    dc8199cf5e6585b5d7a037496df1692b
Sha1:   53a93cba99509fca837a99742eaf5817beb48529
Sha256: 9dd5e031a96cb31830ef2fb13009f70f2001f7204e8e96faf0999821e7dd67eb
                                        
                                            GET /imgs/ee5c8d9fb6248c938fd0dc19370e90bd.png HTTP/1.1 
Host: trdtableau8.blob.core.windows.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tredencestore.blob.core.windows.net/vnm/usps.html?sp=r&st=2019-04-23T14:55:05Z&se=2019-04-25T22:55:05Z&spr=https&sv=2018-03-28&sig=rUAQ%2FLZoqFQHIGcKxeYjlXTsaq63r7cmbQnSbTPQ%2FC0%3D&sr=b

                                         
                                         52.238.56.180
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 1816
Last-Modified: Tue, 09 Apr 2019 07:20:00 GMT
Etag: 0x8D6BCBBC73A3B1A
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 85f8a89c-601e-0000-59f3-f90332000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Tue, 23 Apr 2019 16:41:20 GMT


--- Additional Info ---
Magic:  PNG image, 110 x 23, 8-bit/color RGB, non-interlaced
Size:   1816
Md5:    acbe896b012b37d96aa4a67e622e9b03
Sha1:   d1b31e20ee8bbe8097dbb5e2a2e48efffb540e11
Sha256: 585a080f22b4f8ed924627839d3f3f848fe7cd4e850b85215cf95bc4f4ce234c
                                        
                                            GET /imgs/c9eea375dd16c77.png HTTP/1.1 
Host: trdtableau8.blob.core.windows.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tredencestore.blob.core.windows.net/vnm/usps.html?sp=r&st=2019-04-23T14:55:05Z&se=2019-04-25T22:55:05Z&spr=https&sv=2018-03-28&sig=rUAQ%2FLZoqFQHIGcKxeYjlXTsaq63r7cmbQnSbTPQ%2FC0%3D&sr=b

                                         
                                         52.238.56.180
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 1301
Last-Modified: Fri, 19 Apr 2019 15:11:34 GMT
Etag: 0x8D6C4D94F830AE9
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 24219acf-001e-0136-68f3-f9e835000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Tue, 23 Apr 2019 16:41:20 GMT


--- Additional Info ---
Magic:  PNG image, 108 x 32, 8-bit/color RGB, non-interlaced
Size:   1301
Md5:    5e7f9b53f8feb863efec3be51b108571
Sha1:   9e1892448420c9c0eaaec82c4833b7b8e5f16d37
Sha256: 61681280b8de46944310d24fa25590cb7bc372843712aadef908f7459deccf74
                                        
                                            GET /imgs/9eb2773f83989d0.png HTTP/1.1 
Host: trdtableau8.blob.core.windows.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tredencestore.blob.core.windows.net/vnm/usps.html?sp=r&st=2019-04-23T14:55:05Z&se=2019-04-25T22:55:05Z&spr=https&sv=2018-03-28&sig=rUAQ%2FLZoqFQHIGcKxeYjlXTsaq63r7cmbQnSbTPQ%2FC0%3D&sr=b

                                         
                                         52.238.56.180
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 1863
Last-Modified: Tue, 09 Apr 2019 07:01:08 GMT
Etag: 0x8D6BCB924895E7E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 6ae2da86-401e-00b6-33f3-f90dca000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Tue, 23 Apr 2019 16:41:20 GMT


--- Additional Info ---
Magic:  PNG image, 438 x 418, 8-bit/color RGBA, non-interlaced
Size:   1863
Md5:    3c359f69e713333591bc517ccf30d9d6
Sha1:   c55428198d3a5c73aeecc225276db845e394e9f8
Sha256: 1e23f1b721d2ebc47d62bc64ae06eb323ee94903d4acaa99639f72e95cfec066
                                        
                                            GET /760fe41056b0b16.jpg HTTP/1.1 
Host: loppa.oss-us-east-1.aliyuncs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://tredencestore.blob.core.windows.net/vnm/usps.html?sp=r&st=2019-04-23T14:55:05Z&se=2019-04-25T22:55:05Z&spr=https&sv=2018-03-28&sig=rUAQ%2FLZoqFQHIGcKxeYjlXTsaq63r7cmbQnSbTPQ%2FC0%3D&sr=b

                                         
                                         47.252.95.97
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: AliyunOSS
Date: Tue, 23 Apr 2019 16:41:20 GMT
Content-Length: 579468
Connection: keep-alive
x-oss-request-id: 5CBF40304C64DCD524ED87EB
Accept-Ranges: bytes
Etag: "AF828C8F0C5DB59E072CAA3DFAFE1FCD"
Last-Modified: Wed, 12 Sep 2018 03:04:14 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 555916454670177095
x-oss-storage-class: Standard
Content-MD5: r4KMjwxdtZ4HLKo9+v4fzQ==
x-oss-server-time: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   579468
Md5:    af828c8f0c5db59e072caa3dfafe1fcd
Sha1:   2b10e29d80e70e18d215a6e2ba9884a81a0ee84d
Sha256: 7764c38d71f5ee52d39f237f08b4e82b4715c73bfa0afbaee30a60b0dfd058ca