| www5.dmpcalibermail.com/caliberamp/main/index.php?action=t&tag=www.newrezcorrespondent.com/?utm_source=amp&utm_medium=email&utm_campaign=header_logo&utm_content=[email:campaign_name]&id=2970982&contact_uuid=607faabe-0fa9-4b6c-aa85-af116b0a0d16&dest=https://policyinfluencerdatafile.online/new/U0EPfJszPceH7K0wGnBks85ZqswhYt/YWNjb3VudGluZ0BsaW9uc2JheS5jYQ== |  216.205.154.87 | | 589 B |
URL www5.dmpcalibermail.com/caliberamp/main/index.php?action=t&tag=www.newrezcorrespondent.com/?utm_source=amp&utm_medium=email&utm_campaign=header_logo&utm_content=[email:campaign_name]&id=2970982&contact_uuid=607faabe-0fa9-4b6c-aa85-af116b0a0d16&dest=https://policyinfluencerdatafile.online/new/U0EPfJszPceH7K0wGnBks85ZqswhYt/YWNjb3VudGluZ0BsaW9uc2JheS5jYQ== IP216.205.154.87:0
File typeHTML document, ASCII text, with very long lines (431) Hashb8d271772bbf87dec3d260aa05e183e2 f8f13dee5a3082d0d9b6ae0e01915a90c0478e81 4ae679c9dc744a63a7f0d52dddbff1304a60554859c6300b2b65ebd99da6db33
GET /caliberamp/main/index.php?action=t&tag=www.newrezcorrespondent.com/?utm_source=amp&utm_medium=email&utm_campaign=header_logo&utm_content=[email:campaign_name]&id=2970982&contact_uuid=607faabe-0fa9-4b6c-aa85-af116b0a0d16&dest=https://policyinfluencerdatafile.online/new/U0EPfJszPceH7K0wGnBks85ZqswhYt/YWNjb3VudGluZ0BsaW9uc2JheS5jYQ== HTTP/1.1
Host: www5.dmpcalibermail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Thu, 18 Apr 2024 21:50:52 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Location: https://caliberamp.dmplocal.com/main/index.php?action=t&tag=www.newrezcorrespondent.com/?utm_source=amp&utm_medium=email&utm_campaign=header_logo&utm_content=[email:campaign_name]&id=2970982&contact_uuid=607faabe-0fa9-4b6c-aa85-af116b0a0d16&dest=https://policyinfluencerdatafile.online/new/U0EPfJszPceH7K0wGnBks85ZqswhYt/YWNjb3VudGluZ0BsaW9uc2JheS5jYQ==
Content-Length: 589
Keep-Alive: timeout=2, max=1000
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| caliberamp.dmplocal.com/main/index.php?action=t&tag=www.newrezcorrespondent.com/?utm_source=amp&utm_medium=email&utm_campaign=header_logo&utm_content=[email:campaign_name]&id=2970982&contact_uuid=607faabe-0fa9-4b6c-aa85-af116b0a0d16&dest=https://policyinfluencerdatafile.online/new/U0EPfJszPceH7K0wGnBks85ZqswhYt/YWNjb3VudGluZ0BsaW9uc2JheS5jYQ== | 216.205.154.87 | | 0 B |
URL caliberamp.dmplocal.com/main/index.php?action=t&tag=www.newrezcorrespondent.com/?utm_source=amp&utm_medium=email&utm_campaign=header_logo&utm_content=[email:campaign_name]&id=2970982&contact_uuid=607faabe-0fa9-4b6c-aa85-af116b0a0d16&dest=https://policyinfluencerdatafile.online/new/U0EPfJszPceH7K0wGnBks85ZqswhYt/YWNjb3VudGluZ0BsaW9uc2JheS5jYQ== IP216.205.154.87:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /main/index.php?action=t&tag=www.newrezcorrespondent.com/?utm_source=amp&utm_medium=email&utm_campaign=header_logo&utm_content=[email:campaign_name]&id=2970982&contact_uuid=607faabe-0fa9-4b6c-aa85-af116b0a0d16&dest=https://policyinfluencerdatafile.online/new/U0EPfJszPceH7K0wGnBks85ZqswhYt/YWNjb3VudGluZ0BsaW9uc2JheS5jYQ== HTTP/1.1
Host: caliberamp.dmplocal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 18 Apr 2024 21:50:52 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
X-UA-Compatible: chrome=1
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
X-XSS-Protection: 0
Set-Cookie: SESSION_NAME=CALIBERAMP_SESSION_SECURE; expires=Fri, 19-Apr-2024 07:50:52 GMT; Max-Age=36000; path=/; domain=caliberamp.dmplocal.com; secure; httponly
CALIBERAMP_SESSION_SECURE=sr36p1uvkqo3ios3kir1q2i347; expires=Fri, 19-Apr-2024 07:50:52 GMT; Max-Age=36000; path=/; domain=caliberamp.dmplocal.com; secure; HttpOnly
_sst=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: https://policyinfluencerdatafile.online/new/U0EPfJszPceH7K0wGnBks85ZqswhYt/YWNjb3VudGluZ0BsaW9uc2JheS5jYQ==
Content-Length: 0
Keep-Alive: timeout=2, max=1000
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
|
|
| cloudflare-ipfs.com/cdn-cgi/images/icon-exclamation.png?1376755637 |  104.17.96.13 | 200 OK | 452 B |
URL GET HTTP/3cloudflare-ipfs.com/cdn-cgi/images/icon-exclamation.png?1376755637 IP104.17.96.13:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreiaoz6wg7qdmum2tofpd7bquy3vnqe5yyobgavbxvfnfxu2tb4lhua#accounting@lionsbay.ca CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com Fingerprint18:E5:C9:71:96:8A:A9:48:E2:79:2A:29:91:D2:4E:46:90:B7:5D:9F ValiditySun, 25 Feb 2024 02:55:05 GMT - Sat, 25 May 2024 02:55:04 GMT
File typePNG image data, 54 x 54, 8-bit colormap, non-interlaced Hashc33de66281e933259772399d10a6afe8 b9f9d500f8814381451011d4dcf59cd2d90ad94f f1591a5221136c49438642155691ae6c68e25b7241f3d7ebe975b09a77662016
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/cdn-cgi/styles/cf.errors.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 21:51:25 GMT
content-type: image/png
content-length: 452
last-modified: Tue, 16 Apr 2024 15:45:04 GMT
etag: "661e9d00-1c4"
server: cloudflare
cf-ray: 8767e04a5950569a-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Thu, 18 Apr 2024 23:51:25 GMT
cache-control: max-age=7200, public
accept-ranges: bytes
|
|
| cloudflare-ipfs.com/favicon.ico | 104.17.96.13 | 404 Not Found | 14 B |
URL GET HTTP/3cloudflare-ipfs.com/favicon.ico IP104.17.96.13:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreiaoz6wg7qdmum2tofpd7bquy3vnqe5yyobgavbxvfnfxu2tb4lhua#accounting@lionsbay.ca CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com Fingerprint18:E5:C9:71:96:8A:A9:48:E2:79:2A:29:91:D2:4E:46:90:B7:5D:9F ValiditySun, 25 Feb 2024 02:55:05 GMT - Sat, 25 May 2024 02:55:04 GMT
File typeASCII text, with no line terminators Hashd0fbda9855d118740f1105334305c126 bc3023b36063a7681db24681472b54fa11f0d4ec a469ab4ca4e55bf547566e9ebfa1b809c933207e9d558156bc0c4252b17533fe
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /favicon.ico HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/ipfs/bafkreiaoz6wg7qdmum2tofpd7bquy3vnqe5yyobgavbxvfnfxu2tb4lhua
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 21:51:25 GMT
content-type: text/plain;charset=UTF-8
content-length: 14
set-cookie: __cf_bm=37aiKg1tZ_ZC87JYjppon3Gwt172.mHNOcHt6Bifzno-1713477085-1.0.1.1-vmpg31FuAN5JgfYK4h.It0EwL3gKivRT.evr8B6cfALBedVjMVD578JYRtoq1So6J8t861I7_MmMtmI0G.K8ag; path=/; expires=Thu, 18-Apr-24 22:21:25 GMT; domain=.cloudflare-ipfs.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 8767e04a796d569a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| policyinfluencerdatafile.online/new/U0EPfJszPceH7K0wGnBks85ZqswhYt/YWNjb3VudGluZ0BsaW9uc2JheS5jYQ== | 172.93.121.124 | | 4.6 kB |
URL policyinfluencerdatafile.online/new/U0EPfJszPceH7K0wGnBks85ZqswhYt/YWNjb3VudGluZ0BsaW9uc2JheS5jYQ== IP172.93.121.124:0 ASN#393960 HOST4GEEKS-LLC
Hash82efe455fd53a133d9a21239828377a3 3268502ae21a4c296030dae667d80bb67597ae83 284cae6868ead1d09a303d63aa466ca3a72c0975a33e8d48e4ff0d3bce6f86cc
GET /new/U0EPfJszPceH7K0wGnBks85ZqswhYt/YWNjb3VudGluZ0BsaW9uc2JheS5jYQ== HTTP/1.1
Host: policyinfluencerdatafile.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 21:51:21 GMT
content-type: text/html; charset=UTF-8
refresh: 0;url=https://cloudflare-ipfs.com/ipfs/bafkreiaoz6wg7qdmum2tofpd7bquy3vnqe5yyobgavbxvfnfxu2tb4lhua#accounting@lionsbay.ca
vary: Accept-Encoding, Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cloudflare-ipfs.com/ipfs/bafkreiaoz6wg7qdmum2tofpd7bquy3vnqe5yyobgavbxvfnfxu2tb4lhua | 104.17.96.13 | 200 OK | 4.5 kB |
URL User Request GET HTTP/2cloudflare-ipfs.com/ipfs/bafkreiaoz6wg7qdmum2tofpd7bquy3vnqe5yyobgavbxvfnfxu2tb4lhua IP104.17.96.13:443
CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com Fingerprint18:E5:C9:71:96:8A:A9:48:E2:79:2A:29:91:D2:4E:46:90:B7:5D:9F ValiditySun, 25 Feb 2024 02:55:05 GMT - Sat, 25 May 2024 02:55:04 GMT
File typeHTML document, ASCII text, with very long lines (4703), with no line terminators Hash8e02a79e952279f2fcd2b2cc070eb60b 003fcef58eb3f54acb828d46f3018d5c6fa0dad6 f27419b22ddffeae34a59b2f60246f858c98fc016ae10e16ff4d04062570f3de
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Office365 | | PhishTank | phishing | Other |
GET /ipfs/bafkreiaoz6wg7qdmum2tofpd7bquy3vnqe5yyobgavbxvfnfxu2tb4lhua HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 21:51:25 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
server: cloudflare
cf-ray: 8767e0499bc0b4eb-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cloudflare-ipfs.com/cdn-cgi/styles/cf.errors.css | 104.17.96.13 | 200 OK | 24 kB |
URL GET HTTP/3cloudflare-ipfs.com/cdn-cgi/styles/cf.errors.css IP104.17.96.13:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreiaoz6wg7qdmum2tofpd7bquy3vnqe5yyobgavbxvfnfxu2tb4lhua#accounting@lionsbay.ca CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com Fingerprint18:E5:C9:71:96:8A:A9:48:E2:79:2A:29:91:D2:4E:46:90:B7:5D:9F ValiditySun, 25 Feb 2024 02:55:05 GMT - Sat, 25 May 2024 02:55:04 GMT
File typeASCII text, with very long lines (24050) Hash5e8c69a459a691b5d1b9be442332c87d f24dd1ad7c9080575d92a9a9a2c42620725ef836 84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/ipfs/bafkreiaoz6wg7qdmum2tofpd7bquy3vnqe5yyobgavbxvfnfxu2tb4lhua
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 21:51:25 GMT
content-type: text/css
last-modified: Tue, 16 Apr 2024 15:45:04 GMT
etag: W/"661e9d00-5df3"
server: cloudflare
cf-ray: 8767e04a3937569a-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Thu, 18 Apr 2024 23:51:25 GMT
cache-control: max-age=7200, public
content-encoding: gzip
|
|
0.0.0.0