Report - mail.littlecozyfox.com/gncu/card.php

Report Overview

Submitted URL
mail.littlecozyfox.com/gncu/card.php
IP
192.185.17.111
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2023-01-16 21:05:58
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
36

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
cdn1.onlineaccess1.com	19210	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.1 kB	170 kB	192.0.54.4
mail.littlecozyfox.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	9.7 kB	451 kB	192.185.17.111
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	7.1 kB	23.36.76.226
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	341 B	737 B	93.184.220.29
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	100.20.114.179
content-cdn.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	367 B	231 B	54.205.54.115
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	57 kB	34.120.237.76
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	714 B	1.4 kB	142.250.74.131
app.pendo.io	1783	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	761 B	2.3 kB	34.107.204.85

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-01-16	medium	mail.littlecozyfox.com/gncu/card.php	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/q2-pendo.js.download	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/q2-tecton-elements.esm.js.download	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/phishlabs.js.download	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/p-c89cafe1.js	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.woff	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.woff	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.ttf	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.ttf	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.woff	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.woff	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.woff	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.ttf	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.ttf	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.ttf	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.woff	Phishing
2023-01-16	medium	mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.ttf	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	cdn1.onlineaccess1.com/cdn/static/q2-pendo/pendo-2.134.1.js	469 kB	2023-03-08	2023-08-13
Pretty URL cdn1.onlineaccess1.com/cdn/static/q2-pendo/pendo-2.134.1.js IP 192.0.54.4 ASN #62659 Q2HOLDINGS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 09:46:27 Last Seen2023-08-13 21:54:12 Times Seen31 Hash 76b89e2a310f4e126e76f82039987a0f f49da6c53a3b9dc4dda366a3dffbcdb1d6ff09c6 4d62203e6a77437d57940e7a5755c1e13f9af1fc059a03b6d5b838d912317d91 Loading...

	mail.littlecozyfox.com/gncu/static/css/gncu_files/q2-pendo.js.download	7.8 kB	2023-03-08	2023-03-13
Pretty URL mail.littlecozyfox.com/gncu/static/css/gncu_files/q2-pendo.js.download IP 192.185.17.111 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 09:46:27 Last Seen2023-03-13 01:03:19 Times Seen1 Hash 59385ff1c93501d549451cf1df7b12d0 c0b6c84e3fb16069b47d0b8dc0ad3e36df63ef11 0db6d8f67a5ee144634429adf6eafe41c2ccc47bc4a5bebb33de3b9e811db81a Loading...

	mail.littlecozyfox.com/gncu/static/css/gncu_files/q2-tecton-elements.esm.js.download	5.5 kB	2023-03-08	2023-03-13
Pretty URL mail.littlecozyfox.com/gncu/static/css/gncu_files/q2-tecton-elements.esm.js.download IP 192.185.17.111 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 09:46:27 Last Seen2023-03-13 01:03:19 Times Seen1 Hash 4ce4536bd5d2688c6e9fd5a0e305a5b4 682378f1b37e2f49725db2981e999abb95bb04c9 027fb2e9297fff2f166fe62ff5fc9de51d3db9faa1265a4ded882cc4e5206009 Loading...

	mail.littlecozyfox.com/gncu/card.php	157 B	2023-03-08	2023-03-13
Pretty URL mail.littlecozyfox.com/gncu/card.php IP 192.185.17.111 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 09:46:27 Last Seen2023-03-13 01:03:20 Times Seen1 Hash 12075065f9c901525d1a039890939fd3 e4e825042ddd1ffd6c9e45ef94d5dd7abf50ea75 d34286b761869664e4ac5835ce208fafcf4c1eb78576221c35a36b3dad12719b Loading...

	mail.littlecozyfox.com/gncu/card.php	32 B	2023-03-08	2024-04-06
Pretty URL mail.littlecozyfox.com/gncu/card.php IP 192.185.17.111 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 09:46:27 Last Seen2024-04-06 02:05:39 Times Seen46 Hash 6129eb80d9d816a6f0e6e0fa985573cf a935a325ebdfb351dae4a154fda63cf2c714402d b8ca0c973bd1d0b007ecdcfee48597ae42c78affa3853831c8ac9f6948f56cd5 Loading...

	mail.littlecozyfox.com/gncu/static/css/gncu_files/phishlabs.js.download	993 B	2023-03-08	2023-03-13
Pretty URL mail.littlecozyfox.com/gncu/static/css/gncu_files/phishlabs.js.download IP 192.185.17.111 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 09:46:27 Last Seen2023-03-13 01:03:20 Times Seen1 Hash 92958335d82061f4db4301685429bc24 31de4c7b0280f76cb34822a534b5a8afc8ba6ba4 0d1dc09c3287a3326bff3f7d8e68b1ec16079099385b2c06a73dceea800736f5 Loading...

	mail.littlecozyfox.com/gncu/card.php	173 B	2023-03-13	2023-03-13
Pretty URL mail.littlecozyfox.com/gncu/card.php IP 192.185.17.111 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 01:03:20 Last Seen2023-03-13 01:03:20 Times Seen1 Hash 5a7749b4cf088ce8ccdd7b47b35e6bf9 dbd12a3c24b18e44bc29c3dd3ff4f85f5cccc2ba aaa8776f3b101270154429acb63a7bea75def54f0a1fc2d2b7d2e857162e1511 Loading...

HTTP Transactions (51)

URL IP Response Size

mail.littlecozyfox.com/gncu/card.php

192.185.17.111

200 OK

25 kB

URL HTTP/1.1
mail.littlecozyfox.com/gncu/card.php
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1596), with CRLF line terminators
Size
25 kB (25024 bytes)
Hash
5a9b04b944dd68cdc3343bff730b3daa
f3c3862503f59ebf319313a1f7d521136f611bbd
7b52f4a14b7a1199bcd05e09fe06d096311bc6470818ea6d587b293428c83172

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/card.php HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Mon, 16 Jan 2023 21:05:47 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
2258cd6b877a3aca8f4c84074e65ac4b
4e46c70941f8e497e8afc8d078644e7f81761a1c
faac4e0d123f2112b58953c104ea746cd53047fc1ada0ef5d669feecf78ddfff

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAAC4E0D123F2112B58953C104EA746CD53047FC1ADA0EF5D669FEECF78DDFFF"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8684
Expires: Mon, 16 Jan 2023 23:30:31 GMT
Date: Mon, 16 Jan 2023 21:05:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
0643dc6b6fed33b3537160b6bb77bcbf
aa43bd1fbb30d2219f3285c1ee4991ffb33562c5
f137438e30e0d69cba77ca2eb736687873e4a9c06cf88d23c6d55ea930fde09f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F137438E30E0D69CBA77CA2EB736687873E4A9C06CF88D23C6D55EA930FDE09F"
Last-Modified: Sat, 14 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3099
Expires: Mon, 16 Jan 2023 21:57:26 GMT
Date: Mon, 16 Jan 2023 21:05:47 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 16 Jan 2023 20:49:11 GMT
content-type: application/json
age: 996
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f7bd85a261739c122eefb74ffddaec99
e2e059b0740592e8591d432249aafe5fcb8af23c
71bdd130b8d143f228542f678e91c98ab4e5844fb9f47b036e15372660be25fd

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "71BDD130B8D143F228542F678E91C98AB4E5844FB9F47B036E15372660BE25FD"
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4514
Expires: Mon, 16 Jan 2023 22:21:01 GMT
Date: Mon, 16 Jan 2023 21:05:47 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 2WJta41UrWK8YR2YFiW1bcDp9L1JQ5fbjcroJZEhb4iG6DenPlrbru0DSPaxG3ex+LJiAz64c3c=
x-amz-request-id: MAE54ZW26THR6NQR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 16 Jan 2023 20:55:58 GMT
age: 589
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 16 Jan 2023 21:05:47 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

mail.littlecozyfox.com/gncu/static/css/gncu_files/app.css

192.185.17.111

200 OK

25 kB

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/app.css
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
Unicode text, UTF-8 text, with very long lines (55862)
Size
25 kB (25149 bytes)
Hash
edce0f1f52efca67ec38b3e5fc1a39f6
9423d48130f21b7b8d146388750a6aebca20574c
ad5aa963175f66ca8aceeb6673137b48ac8626aa49c587d5395ea0dbe786e12e

HTTP Headers

GET /gncu/static/css/gncu_files/app.css HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/card.php

HTTP/1.1 200 OK
Date: Mon, 16 Jan 2023 21:05:47 GMT
Server: Apache
Last-Modified: Tue, 04 Oct 2022 00:58:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css

mail.littlecozyfox.com/gncu/static/css/gncu_files/

192.185.17.111

403 Forbidden

450 B

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
450 B (450 bytes)
Hash
f25a2b4d9a8f350cc6336f9133bd9c81
fb36429e26a4f712fbaffc4daea205951c4066b3
dfbaca5632475d18f82d24c43c3809e6697069f176e1013e4f96ca28c07aa260

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/ HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/card.php

HTTP/1.1 403 Forbidden
Date: Mon, 16 Jan 2023 21:05:47 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 19 Jun 2022 19:43:36 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 450
Keep-Alive: timeout=5, max=75
Content-Type: text/html

mail.littlecozyfox.com/gncu/static/css/gncu_files/q2-pendo.js.download

192.185.17.111

200 OK

2.7 kB

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/q2-pendo.js.download
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text
Size
2.7 kB (2666 bytes)
Hash
c739c2a725a275a95967bda96479b657
885674c6e64a331393cd0412d5ef4b70c9317feb
b8dd78cb8530241ab872eb4ad3e97d8d66e5a344e775a9e6eb42058dab6dcb95

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/q2-pendo.js.download HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mail.littlecozyfox.com/
Connection: keep-alive

HTTP/1.1 200 OK
Date: Mon, 16 Jan 2023 21:05:47 GMT
Server: Apache
Last-Modified: Tue, 04 Oct 2022 00:58:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2666
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript

mail.littlecozyfox.com/gncu/static/css/gncu_files/tecton-590048df214033d1c1591d552a32c9af.css

192.185.17.111

200 OK

1.8 kB

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/tecton-590048df214033d1c1591d552a32c9af.css
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
Unicode text, UTF-8 text, with very long lines (8014), with no line terminators
Size
1.8 kB (1792 bytes)
Hash
48542d88f7f70fce1b62c529ea0888a5
0566a39df8f72ecc3a098b4da25db2a0f1db57c2
cf83452939081f8bfb9a22b0f07ab6fdf44744399e37ae30ca59311ce8ae152a

HTTP Headers

GET /gncu/static/css/gncu_files/tecton-590048df214033d1c1591d552a32c9af.css HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mail.littlecozyfox.com/
Connection: keep-alive

HTTP/1.1 200 OK
Date: Mon, 16 Jan 2023 21:05:47 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 04 Oct 2022 00:58:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1792
Keep-Alive: timeout=5, max=75
Content-Type: text/css

mail.littlecozyfox.com/gncu/static/css/gncu_files/q2-tecton-elements.esm.js.download

192.185.17.111

200 OK

2.1 kB

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/q2-tecton-elements.esm.js.download
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (5494), with no line terminators
Size
2.1 kB (2125 bytes)
Hash
3553e4dc071e6690314405b50eb84036
85c7e7d9f60bdd38ea804300402de6248843e773
d923178a7a9c1842dfcd92a94b8a1f938a01990eb136026da728ec6a3c9b9f43

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/q2-tecton-elements.esm.js.download HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mail.littlecozyfox.com/
Connection: keep-alive

HTTP/1.1 200 OK
Date: Mon, 16 Jan 2023 21:05:47 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 04 Oct 2022 00:58:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2125
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript

mail.littlecozyfox.com/gncu/static/css/gncu_files/phishlabs.js.download

192.185.17.111

200 OK

455 B

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/phishlabs.js.download
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text
Size
455 B (455 bytes)
Hash
812f08d67f8627f259d6b679ce5ec50e
9b34527b10d28bcc1b064469819bfe4df69990ce
be5450d2d19ae2fb20454057899bbaa77eb0b7ee9a1a6619f29c07632f707de5

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/phishlabs.js.download HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mail.littlecozyfox.com/
Connection: keep-alive

HTTP/1.1 200 OK
Date: Mon, 16 Jan 2023 21:05:48 GMT
Server: Apache
Last-Modified: Tue, 04 Oct 2022 00:58:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 455
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 16 Jan 2023 20:17:25 GMT
age: 2903
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

mail.littlecozyfox.com/gncu/static/css/gncu_files/theme-q2-672a467fd0e274363dd92c86a83ab3d5.css

192.185.17.111

200 OK

192 kB

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/theme-q2-672a467fd0e274363dd92c86a83ab3d5.css
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (65536), with no line terminators
Size
192 kB (192263 bytes)
Hash
726bd2e641c0f1dc9aeb0a98f6a9a4b4
1d59d3cbecd97228e55ddcf11e560c8d830746f5
9ff182463ad336f06950c2965f9a1979c506aae588652c2f0c5345b0e5d6c6a2

HTTP Headers

GET /gncu/static/css/gncu_files/theme-q2-672a467fd0e274363dd92c86a83ab3d5.css HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/card.php

HTTP/1.1 200 OK
Date: Mon, 16 Jan 2023 21:05:47 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 04 Oct 2022 00:58:20 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/css

mail.littlecozyfox.com/gncu/static/css/gncu_files/p-c89cafe1.js

192.185.17.111

500 Internal Server Error

0 B

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/p-c89cafe1.js
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/p-c89cafe1.js HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mail.littlecozyfox.com/
Connection: keep-alive

HTTP/1.1 500 Internal Server Error
Date: Mon, 16 Jan 2023 21:05:48 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
d03545e1fc5a8876441094039811aac5
99fcc840f3516298625c528e9b408132f7fcbb9c
166fa7c7bb716b2cd02a47884ee00df31030dfb4b2a6fdae7b59b19f87739123

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2466
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:05:48 GMT
Last-Modified: Mon, 16 Jan 2023 20:24:42 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

mail.littlecozyfox.com/gncu/static/css/gncu_files/highcontrast-187bc6d9db7409a39a77a6fc6d8ec2dc.css

192.185.17.111

200 OK

192 kB

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/highcontrast-187bc6d9db7409a39a77a6fc6d8ec2dc.css
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (65536), with no line terminators
Size
192 kB (192074 bytes)
Hash
551549080848e2f90009f1217eb0135c
f4365f730c32f8f2efd1f1c550e4fa51239859a8
224ddd6edfe727a26a2a5412f46090100f2e5d368179ab9489973dffc976eca0

HTTP Headers

GET /gncu/static/css/gncu_files/highcontrast-187bc6d9db7409a39a77a6fc6d8ec2dc.css HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/card.php

HTTP/1.1 200 OK
Date: Mon, 16 Jan 2023 21:05:47 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 04 Oct 2022 00:58:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/css

mail.littlecozyfox.com/gncu/static/css/gncu_files/ncua_logo_small-b690f247c19ea4970c9d08b2b479f16a.png

192.185.17.111

200 OK

3.9 kB

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/ncua_logo_small-b690f247c19ea4970c9d08b2b479f16a.png
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 128 x 60, 8-bit colormap, non-interlaced\012- data
Size
3.9 kB (3924 bytes)
Hash
b690f247c19ea4970c9d08b2b479f16a
9bc7e6d23666778c15e4e1bc4f6275947ecc91bc
e0553d5e1f49291bd1730745a95e155e6951aebb077378914eb2816b059a6448

HTTP Headers

GET /gncu/static/css/gncu_files/ncua_logo_small-b690f247c19ea4970c9d08b2b479f16a.png HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mail.littlecozyfox.com/
Connection: keep-alive

HTTP/1.1 200 OK
Date: Mon, 16 Jan 2023 21:05:48 GMT
Server: Apache
Last-Modified: Tue, 04 Oct 2022 00:58:30 GMT
Accept-Ranges: bytes
Content-Length: 3924
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/png

push.services.mozilla.com/

100.20.114.179

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
100.20.114.179:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BsZUu6j0TMvK9fZnl5n/YA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: OmqekQtvCaYv3201UtaFFQTp43Y=

content-cdn.com/1008/dWdnYzovL3pudnkueXZnZ3lycGJtbHNiay5wYnovdGFwaC9wbmVxLmN1Yw==.gif

54.205.54.115

301 Moved Permanently

0 B

URL HTTP/1.1
content-cdn.com/1008/dWdnYzovL3pudnkueXZnZ3lycGJtbHNiay5wYnovdGFwaC9wbmVxLmN1Yw==.gif
IP
54.205.54.115:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /1008/dWdnYzovL3pudnkueXZnZ3lycGJtbHNiay5wYnovdGFwaC9wbmVxLmN1Yw==.gif HTTP/1.1
Host: content-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mail.littlecozyfox.com/
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
location: https://content-cdn.com/1008/dWdnYzovL3pudnkueXZnZ3lycGJtbHNiay5wYnovdGFwaC9wbmVxLmN1Yw==.gif
vary: Accept-Encoding
date: Mon, 16 Jan 2023 21:05:48 GMT
server: envoy
content-length: 0

mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.woff

192.185.17.111

500 Internal Server Error

0 B

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.woff
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.woff HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/static/css/gncu_files/tecton-590048df214033d1c1591d552a32c9af.css

HTTP/1.1 500 Internal Server Error
Date: Mon, 16 Jan 2023 21:05:48 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.woff

192.185.17.111

500 Internal Server Error

0 B

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.woff
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.woff HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/static/css/gncu_files/tecton-590048df214033d1c1591d552a32c9af.css

HTTP/1.1 500 Internal Server Error
Date: Mon, 16 Jan 2023 21:05:48 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
002cbac7e819d3e2465b102b690d45c7
cf043e2342df16ad7196b9b6bbb83c8b9a2ae891
72aac70afc4badb84f40ca0e878858d70d2b779ee9a51af5c79d027085d30f91

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72AAC70AFC4BADB84F40CA0E878858D70D2B779EE9A51AF5C79D027085D30F91"
Last-Modified: Mon, 16 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21592
Expires: Tue, 17 Jan 2023 03:05:41 GMT
Date: Mon, 16 Jan 2023 21:05:49 GMT
Connection: keep-alive

mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.ttf

192.185.17.111

500 Internal Server Error

0 B

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.ttf
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.ttf HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/static/css/gncu_files/tecton-590048df214033d1c1591d552a32c9af.css

HTTP/1.1 500 Internal Server Error
Date: Mon, 16 Jan 2023 21:05:48 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.ttf

192.185.17.111

500 Internal Server Error

0 B

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.ttf
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.ttf HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/static/css/gncu_files/tecton-590048df214033d1c1591d552a32c9af.css

HTTP/1.1 500 Internal Server Error
Date: Mon, 16 Jan 2023 21:05:49 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

cdn1.onlineaccess1.com/cdn/depot/4102_01/1776/82586256c6fee52a84f789e773a20aa6/assets/images/logos/logo_large-f97b4c722f38e8bccdf614f5298ea1a7.png

192.0.54.4

200 OK

12 kB

URL HTTP/2
cdn1.onlineaccess1.com/cdn/depot/4102_01/1776/82586256c6fee52a84f789e773a20aa6/assets/images/logos/logo_large-f97b4c722f38e8bccdf614f5298ea1a7.png
IP
192.0.54.4:0
ASN
#62659 Q2HOLDINGS

File type
data
Size
12 kB (11481 bytes)
Hash
ced4f186ef335f15f38906ba8145a074
36fa30a31741d4a662dab94d675d6333773635e8
4187ff4f750f64765256fd74ef5d3ce1e43c01af2a50abdfc74724a8bef359f6

HTTP Headers

GET /cdn/depot/4102_01/1776/82586256c6fee52a84f789e773a20aa6/assets/images/logos/logo_large-f97b4c722f38e8bccdf614f5298ea1a7.png HTTP/1.1
Host: cdn1.onlineaccess1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 16 Jan 2023 21:05:48 GMT
content-type: image/png
last-modified: Fri, 13 Jan 2023 18:18:17 GMT
vary: Accept-Encoding
etag: W/"63c1a069-31d0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
timing-allow-origin: *
access-control-allow-headers: *
cf-cache-status: HIT
strict-transport-security: max-age=15552000; includeSubDomains; preload
set-cookie: __cflb=02DiuDJZwTATiSnybBeVDKjTCUZYfphxG4ahwFEqPcMEg; SameSite=None; Secure; path=/; expires=Tue, 17-Jan-23 05:05:48 GMT; HttpOnly
__cfruid=a81270ff677f985439ffa1ba6b8a0312bd78dc11-1673903148; path=/; domain=.onlineaccess1.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78a9cfb6defb1c06-OSL
X-Firefox-Spdy: h2

cdn1.onlineaccess1.com/cdn/depot/4102_01/1776/82586256c6fee52a84f789e773a20aa6/assets/images/desktop-background-845d58016ae32cd9a48be56e7e3b8d51.jpg

192.0.54.4

200 OK

154 kB

URL HTTP/2
cdn1.onlineaccess1.com/cdn/depot/4102_01/1776/82586256c6fee52a84f789e773a20aa6/assets/images/desktop-background-845d58016ae32cd9a48be56e7e3b8d51.jpg
IP
192.0.54.4:0
ASN
#62659 Q2HOLDINGS

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 1936x1315, components 3\012- data
Size
154 kB (154025 bytes)
Hash
845d58016ae32cd9a48be56e7e3b8d51
da403b017c9e54cb56d1a4d78972a5816993ba20
ead11efc18df94ffb452c4bd4f2ea66f6aaf391d0c0e3596c10292f8a68d13d3

HTTP Headers

GET /cdn/depot/4102_01/1776/82586256c6fee52a84f789e773a20aa6/assets/images/desktop-background-845d58016ae32cd9a48be56e7e3b8d51.jpg HTTP/1.1
Host: cdn1.onlineaccess1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 16 Jan 2023 21:05:49 GMT
content-type: image/jpeg
content-length: 154025
last-modified: Fri, 14 Oct 2022 18:50:59 GMT
etag: "6349af93-259a9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
timing-allow-origin: *
access-control-allow-headers: *
access-control-allow-origin: *
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
set-cookie: __cflb=02DiuDJZwTATiSnybBeVDKjTCUZYfphxG4ahwFEqPcMEg; SameSite=None; Secure; path=/; expires=Tue, 17-Jan-23 05:05:49 GMT; HttpOnly
__cfruid=e9ac47e2f11b34ce5151f9deb0c80803ee9057c5-1673903149; path=/; domain=.onlineaccess1.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78a9cfb6defe1c06-OSL
X-Firefox-Spdy: h2

mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.woff

192.185.17.111

500 Internal Server Error

0 B

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.woff
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.woff HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/static/css/gncu_files/theme-q2-672a467fd0e274363dd92c86a83ab3d5.css

HTTP/1.1 500 Internal Server Error
Date: Mon, 16 Jan 2023 21:05:49 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.woff

192.185.17.111

500 Internal Server Error

0 B

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.woff
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.woff HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/static/css/gncu_files/theme-q2-672a467fd0e274363dd92c86a83ab3d5.css

HTTP/1.1 500 Internal Server Error
Date: Mon, 16 Jan 2023 21:05:49 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, close
Content-Length: 0
Content-Type: text/html; charset=UTF-8

mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.woff

192.185.17.111

500 Internal Server Error

0 B

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.woff
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.woff HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/static/css/gncu_files/highcontrast-187bc6d9db7409a39a77a6fc6d8ec2dc.css

HTTP/1.1 500 Internal Server Error
Date: Mon, 16 Jan 2023 21:05:49 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, close
Content-Length: 0
Content-Type: text/html; charset=UTF-8

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15775
Expires: Tue, 17 Jan 2023 01:28:44 GMT
Date: Mon, 16 Jan 2023 21:05:49 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15775
Expires: Tue, 17 Jan 2023 01:28:44 GMT
Date: Mon, 16 Jan 2023 21:05:49 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15775
Expires: Tue, 17 Jan 2023 01:28:44 GMT
Date: Mon, 16 Jan 2023 21:05:49 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15775
Expires: Tue, 17 Jan 2023 01:28:44 GMT
Date: Mon, 16 Jan 2023 21:05:49 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd986c41-5e27-40cc-8622-aeddbd283d0c.jpeg

34.120.237.76

200 OK

6.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd986c41-5e27-40cc-8622-aeddbd283d0c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.3 kB (6273 bytes)
Hash
a7917592de9f2ddbe7d3a7fa7f3d4d62
866b04ce93a30369d7cb0a6d2155a8b10292507f
da58e1798bf0fcbfe771420a66bbf671cc84e0ca429e076fdc70bb8d73cddb18

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd986c41-5e27-40cc-8622-aeddbd283d0c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6273
x-amzn-requestid: f5d21802-91ea-44cc-aeb2-8ec9af07e1a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ezbOyFwNIAMFZsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4725e-3028350e72b2ee7b6ae44f2c;Sampled=0
x-amzn-remapped-date: Sun, 15 Jan 2023 21:38:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8ggqVFvybykQ-MJzU9H_L6JS9YqmLGsuaMJ34Qy7o6yoMOJOmvYsMA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 15 Jan 2023 21:53:09 GMT
age: 83560
etag: "866b04ce93a30369d7cb0a6d2155a8b10292507f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d821e79-af3a-4b67-a79e-90cdf9701001.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11285 bytes)
Hash
91a664271b9042ab5a34c1259df6ab93
7ce177939ceed31dbe137996cace3f71eaab3cf4
08b872b4c8dc8d4b5e26d7c5e7985c144dcf45623737e6daf7813b2add8ab013

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d821e79-af3a-4b67-a79e-90cdf9701001.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11285
x-amzn-requestid: 46c0b124-5916-4067-99af-2fa9812dfb2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ev-1zHc4oAMFV6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c311be-3ffbee9348f4351459ed0099;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 20:34:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8FcfGYx-mcEZzF4IoADT5iGnf0vTk2cACE4nseVdonXHBXOSno9vQw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 04:42:49 GMT
age: 58980
etag: "7ce177939ceed31dbe137996cace3f71eaab3cf4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa81e129b-3fb3-4b30-a6fc-04ac1926b5c8.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.0 kB (7986 bytes)
Hash
0c1d929710bbf5d3a500cff064fa28e5
f76fade4eba5e5740d1261a2bce7776719ee477f
bb0b45ede28406534c236881abe011a1b8162a1bcb4cbe61320c613fec5d0010

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa81e129b-3fb3-4b30-a6fc-04ac1926b5c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7986
x-amzn-requestid: 366be46e-97f4-4bdc-8341-5bf87438ad86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ezbPvEezoAMF6ng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c47264-7eef208b3ec703b82d792537;Sampled=0
x-amzn-remapped-date: Sun, 15 Jan 2023 21:38:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _cMoPRYYqsc6B6TWFkmrfDMCleAW2jWn5FXGmjay279Bf3tppH60hQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 15 Jan 2023 22:04:21 GMT
age: 82888
etag: "f76fade4eba5e5740d1261a2bce7776719ee477f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdba5086-6c46-4cc7-9087-e85f89cbe947.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.2 kB (9176 bytes)
Hash
ad1a79b09348c4959a8ac05513efcb78
10c0a66add63c868ff332022f588e65f4ac1ec15
8a123746389e6b480669b8d6882f7edce290f1c226cd6744e23bac94b8de6d32

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdba5086-6c46-4cc7-9087-e85f89cbe947.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9176
x-amzn-requestid: 1d5746ff-7de6-4a54-87d2-d15330d1bb58
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: etlL8HiPoAMFrIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c21be5-044d012445cf23c01cb07a89;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 03:05:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pfjURj_jUMCbuxIL46hNNw6BeY4YX4TDo-9Ch6R5y3CuWTyt1r3ttw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 03:52:01 GMT
age: 62028
etag: "10c0a66add63c868ff332022f588e65f4ac1ec15"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2fb3ba8-a85e-42ba-b607-87ced36844b2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.8 kB (5766 bytes)
Hash
542f87ebb35e170451b610e4b700bcb1
2259cdebacc4c9f07aad838eec494863d4273ad1
85001f2cf33f3fc98d4cdcc7aef38611e34aea3a791d8acb0a5946c4619398eb

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2fb3ba8-a85e-42ba-b607-87ced36844b2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5766
x-amzn-requestid: b6a8d7ee-ff35-4720-8d2e-ba2b8db6edfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ezbP4GDQIAMFTSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c47265-6022a62f69d8f938458d18a0;Sampled=0
x-amzn-remapped-date: Sun, 15 Jan 2023 21:38:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YcIDYSEtEIIfGauNxD9V1tuSCAPDq9OaaAATRTOC3Sjlb-72IA0ScQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 15 Jan 2023 22:06:50 GMT
age: 82739
etag: "2259cdebacc4c9f07aad838eec494863d4273ad1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3456fd70-5207-41e6-abed-adbc381fd7a4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.8 kB (9801 bytes)
Hash
74ac30be02dee9dcfeee79a7dc54edff
1368d81de22ea2e4054a3e1a8f01ef337c63e35b
8abc2f276906dfb9ce75c2526d2c2cfa6aea6dbe13f4046de1040cd611cbbc1f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3456fd70-5207-41e6-abed-adbc381fd7a4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9801
x-amzn-requestid: 39d84a20-55f7-4b7c-abc4-9ac1ff100da9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eqSkoGCZoAMF1zA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0caea-4f7a1cf676335cc83018dc51;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 03:07:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: n-uzZFYeVcR7YP4lVhGVKFmINHUwd3kNcJIAJiRJW5maf_MqufqU8g==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 05:42:23 GMT
age: 55406
etag: "1368d81de22ea2e4054a3e1a8f01ef337c63e35b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.ttf

192.185.17.111

500 Internal Server Error

0 B

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.ttf
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.ttf HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/static/css/gncu_files/theme-q2-672a467fd0e274363dd92c86a83ab3d5.css

HTTP/1.1 500 Internal Server Error
Date: Mon, 16 Jan 2023 21:05:49 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, close
Content-Length: 0
Content-Type: text/html; charset=UTF-8

mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.ttf

192.185.17.111

500 Internal Server Error

0 B

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.ttf
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.ttf HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/static/css/gncu_files/theme-q2-672a467fd0e274363dd92c86a83ab3d5.css

HTTP/1.1 500 Internal Server Error
Date: Mon, 16 Jan 2023 21:05:49 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, close
Content-Length: 0
Content-Type: text/html; charset=UTF-8

mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.ttf

192.185.17.111

500 Internal Server Error

0 B

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.ttf
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Regular.ttf HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/static/css/gncu_files/highcontrast-187bc6d9db7409a39a77a6fc6d8ec2dc.css

HTTP/1.1 500 Internal Server Error
Date: Mon, 16 Jan 2023 21:05:49 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, close
Content-Length: 0
Content-Type: text/html; charset=UTF-8

mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.woff

192.185.17.111

500 Internal Server Error

0 B

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.woff
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.woff HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/static/css/gncu_files/highcontrast-187bc6d9db7409a39a77a6fc6d8ec2dc.css

HTTP/1.1 500 Internal Server Error
Date: Mon, 16 Jan 2023 21:05:50 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, close
Content-Length: 0
Content-Type: text/html; charset=UTF-8

mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.ttf

192.185.17.111

500 Internal Server Error

0 B

URL HTTP/1.1
mail.littlecozyfox.com/gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.ttf
IP
192.185.17.111:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /gncu/static/css/gncu_files/fonts/OpenSans/OpenSans-Semibold.ttf HTTP/1.1
Host: mail.littlecozyfox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.littlecozyfox.com/gncu/static/css/gncu_files/highcontrast-187bc6d9db7409a39a77a6fc6d8ec2dc.css

HTTP/1.1 500 Internal Server Error
Date: Mon, 16 Jan 2023 21:05:50 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, close
Content-Length: 0
Content-Type: text/html; charset=UTF-8

ocsp.pki.goog/s/gts1d4/qNaXkhQj53U

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1d4/qNaXkhQj53U
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
82d3dfaca391ae22f0a44eb61c548d86
87b2ecb37c62eaff1c65980a4be5e37eda6ee29e
cfe637b939bdefa94d0dd023aeb49b66ea7d5f4a8e24331efe1abfa0644aeab1

HTTP Headers

POST /s/gts1d4/qNaXkhQj53U HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:05:51 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/s/gts1d4/qNaXkhQj53U

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1d4/qNaXkhQj53U
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
82d3dfaca391ae22f0a44eb61c548d86
87b2ecb37c62eaff1c65980a4be5e37eda6ee29e
cfe637b939bdefa94d0dd023aeb49b66ea7d5f4a8e24331efe1abfa0644aeab1

HTTP Headers

POST /s/gts1d4/qNaXkhQj53U HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:05:51 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

app.pendo.io/data/guide.json/4cfc5253-789b-470f-45eb-e4d59dd0bf11?jzb=eJyVjs1q8zAQRd9F6yDZTtuFd4WkNBTSQL-uxSBNHMFYEvIo9Ae_e8ZdGLopfGijGR3dc7_VNUyBUzl41St72h93r_afHY8vh3t_ov3uSW0UOJdq5AWJlWijaiGhL8y5N2aEQJoCM6FLX5_n9KFdGs0QXTUOitf5kiVkRAYPDKpfncs1_OEliEOFAYXAaN_f1Lx2Wb8KdsUyhRRlaPTPkd3_N5TsDAUjP64GWUnjRd8-mKY1XdNtf_k63W7vdGtzSV4eJqTzc5oYpRiXivN8AwPgcvs&v=2.134.1_prod&ct=1673903151168

34.107.204.85

200 OK

1.8 kB

URL HTTP/2
app.pendo.io/data/guide.json/4cfc5253-789b-470f-45eb-e4d59dd0bf11?jzb=eJyVjs1q8zAQRd9F6yDZTtuFd4WkNBTSQL-uxSBNHMFYEvIo9Ae_e8ZdGLopfGijGR3dc7_VNUyBUzl41St72h93r_afHY8vh3t_ov3uSW0UOJdq5AWJlWijaiGhL8y5N2aEQJoCM6FLX5_n9KFdGs0QXTUOitf5kiVkRAYPDKpfncs1_OEliEOFAYXAaN_f1Lx2Wb8KdsUyhRRlaPTPkd3_N5TsDAUjP64GWUnjRd8-mKY1XdNtf_k63W7vdGtzSV4eJqTzc5oYpRiXivN8AwPgcvs&v=2.134.1_prod&ct=1673903151168
IP
34.107.204.85:0
ASN
#15169 GOOGLE

File type
data
Size
1.8 kB (1781 bytes)
Hash
86de70f7c84f2bbdade3fdf6f6e99feb
42843f6d8d1ddaef24f96d25e4426c30400ddc9e
83a50dbfd913851930e35e4aae6af402fa2e616a774927240d0af8e5a3e80286

HTTP Headers

GET /data/guide.json/4cfc5253-789b-470f-45eb-e4d59dd0bf11?jzb=eJyVjs1q8zAQRd9F6yDZTtuFd4WkNBTSQL-uxSBNHMFYEvIo9Ae_e8ZdGLopfGijGR3dc7_VNUyBUzl41St72h93r_afHY8vh3t_ov3uSW0UOJdq5AWJlWijaiGhL8y5N2aEQJoCM6FLX5_n9KFdGs0QXTUOitf5kiVkRAYPDKpfncs1_OEliEOFAYXAaN_f1Lx2Wb8KdsUyhRRlaPTPkd3_N5TsDAUjP64GWUnjRd8-mKY1XdNtf_k63W7vdGtzSV4eJqTzc5oYpRiXivN8AwPgcvs&v=2.134.1_prod&ct=1673903151168 HTTP/1.1
Host: app.pendo.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mail.littlecozyfox.com/
Origin: http://mail.littlecozyfox.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 16 Jan 2023 21:05:51 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-credentials: false
access-control-allow-headers: Origin,Accept,Content-Type,Authorization
access-control-allow-methods: GET,POST
access-control-allow-origin: *
access-control-max-age: 600
x-content-type-options: nosniff
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn1.onlineaccess1.com/cdn/depot/4102_01/1776/82586256c6fee52a84f789e773a20aa6/assets/images/logos/favicon-60ece86de211be04d011746e7e7f9a4f.ico

192.0.54.4

200 OK

1.4 kB

URL HTTP/2
cdn1.onlineaccess1.com/cdn/depot/4102_01/1776/82586256c6fee52a84f789e773a20aa6/assets/images/logos/favicon-60ece86de211be04d011746e7e7f9a4f.ico
IP
192.0.54.4:0
ASN
#62659 Q2HOLDINGS

File type
data
Size
1.4 kB (1414 bytes)
Hash
9af2beeeb24ce2983ae79bb6b2f38a01
9a1db2bbc567174643aa3a11e2dce7d122c282ab
87e151f56ed3dd002cdd427b3f4b4f9eee87424d17065a5ce9a86b451721cee0

HTTP Headers

GET /cdn/depot/4102_01/1776/82586256c6fee52a84f789e773a20aa6/assets/images/logos/favicon-60ece86de211be04d011746e7e7f9a4f.ico HTTP/1.1
Host: cdn1.onlineaccess1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mail.littlecozyfox.com/
Connection: keep-alive
Cookie: __cfruid=e9ac47e2f11b34ce5151f9deb0c80803ee9057c5-1673903149; __cflb=02DiuDJZwTATiSnybBeVDKjTCUZYfphxG4ahwFEqPcMEg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 16 Jan 2023 21:05:50 GMT
content-type: image/x-icon
last-modified: Fri, 13 Jan 2023 18:18:17 GMT
etag: W/"63c1a069-1536"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
timing-allow-origin: *
access-control-allow-headers: *
access-control-allow-origin: *
cf-cache-status: HIT
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 78a9cfbfdb131c06-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

cdn1.onlineaccess1.com/cdn/static/q2-pendo/pendo-2.134.1.js

192.0.54.4

200 OK

0 B

URL HTTP/2
cdn1.onlineaccess1.com/cdn/static/q2-pendo/pendo-2.134.1.js
IP
192.0.54.4:0
ASN
#62659 Q2HOLDINGS

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /cdn/static/q2-pendo/pendo-2.134.1.js HTTP/1.1
Host: cdn1.onlineaccess1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mail.littlecozyfox.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 16 Jan 2023 21:05:48 GMT
content-type: application/javascript
last-modified: Tue, 23 Aug 2022 17:30:19 GMT
vary: Accept-Encoding
etag: W/"63050eab-7288e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
timing-allow-origin: *
access-control-allow-headers: *
access-control-allow-origin: *
cf-cache-status: HIT
age: 2202582
strict-transport-security: max-age=15552000; includeSubDomains; preload
set-cookie: __cfruid=a81270ff677f985439ffa1ba6b8a0312bd78dc11-1673903148; path=/; domain=.onlineaccess1.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 78a9cfb6def91c06-OSL
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (51)

URL HTTP/1.1

IP

ASN

File type