ocsp.r2m02.amazontrust.com/
143.204.48.16 471 B URL ocsp.r2m02.amazontrust.com/
IP 143.204.48.16:0
Hash fc0a93aa9d57ba12fd4ebffb770a3858
9ac4ee1c645db8de836d90f44dcae8cd0dd75e41
9209d6a26edb5a77669fbf1f830b1dde0d13ae56d4ee7a7b90131bd12c6a13f6
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Wed, 16 Aug 2023 05:35:35 GMT
Server: ECAcc (amb/6B53)
X-Cache: Miss from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fE9DmAd_DsI7RyFzfjQrsgX35eSbEeDejudamTjrYfFWJZIQiTudVg==
go.scoutrfp.com/invitations/88hvtwfBNnQ00or8dZVYaH8NLoWiLPdxHK1oTgwF?redirect_to=//t.inovateus.pk/posh/86272616e646f6e2e73754063736167726f75702e6f7267------/90585/VqWp/YnJhbmRvbi5zdUBjc2Fncm91cC5vcmc=
18.235.8.227302 Found 185 B URL User Request GET HTTP/2 go.scoutrfp.com/invitations/88hvtwfBNnQ00or8dZVYaH8NLoWiLPdxHK1oTgwF?redirect_to=//t.inovateus.pk/posh/86272616e646f6e2e73754063736167726f75702e6f7267------/90585/VqWp/YnJhbmRvbi5zdUBjc2Fncm91cC5vcmc=
IP 18.235.8.227:443
Certificate IssuerAmazon
Subject*.scoutrfp.com
FingerprintCF:21:A3:EA:DC:81:B0:3F:37:86:3F:9A:EE:F4:D5:F6:55:C3:73:51
ValidityMon, 17 Jul 2023 00:00:00 GMT - Tue, 13 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 584e2b90df69faa3a8e61e699c7f2644
32dcf7bc1c1eb8123628431e3a4cfa2d2f28f9e9
926e7edc901afac7bc09758cfbf3d95722fe8ce450f168ade5b2cad817a5bdd9
GET /invitations/88hvtwfBNnQ00or8dZVYaH8NLoWiLPdxHK1oTgwF?redirect_to=//t.inovateus.pk/posh/86272616e646f6e2e73754063736167726f75702e6f7267------/90585/VqWp/YnJhbmRvbi5zdUBjc2Fncm91cC5vcmc= HTTP/1.1
Host: go.scoutrfp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 16 Aug 2023 05:35:35 GMT
content-type: text/html; charset=utf-8
content-length: 185
server: nginx
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
location: //t.inovateus.pk/posh/86272616e646f6e2e73754063736167726f75702e6f7267------/90585/VqWp/YnJhbmRvbi5zdUBjc2Fncm91cC5vcmc=
cache-control: no-cache
set-cookie: _ScoutRFP_session=9da52dc5c7e1b4472e1fc67304de20b9; path=/; secure; HttpOnly
x-request-id: 7df7dd31-dc96-468c-b6b6-3531dc2f247e
x-runtime: 0.600432
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
t.inovateus.pk/posh/86272616e646f6e2e73754063736167726f75702e6f7267------/90585/VqWp/YnJhbmRvbi5zdUBjc2Fncm91cC5vcmc=
192.185.185.216200 OK 0 B URL User Request GET HTTP/2 t.inovateus.pk/posh/86272616e646f6e2e73754063736167726f75702e6f7267------/90585/VqWp/YnJhbmRvbi5zdUBjc2Fncm91cC5vcmc=
IP 192.185.185.216:443
ASN #46606 UNIFIEDLAYER-AS-1
Certificate IssuerLet's Encrypt
Subject*.inovateus.pk
FingerprintD3:9F:EB:D5:42:00:DE:A9:A2:C7:AF:F8:A1:DD:32:03:85:EC:61:DB
ValidityFri, 14 Jul 2023 11:55:36 GMT - Thu, 12 Oct 2023 11:55:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /posh/86272616e646f6e2e73754063736167726f75702e6f7267------/90585/VqWp/YnJhbmRvbi5zdUBjc2Fncm91cC5vcmc= HTTP/1.1
Host: t.inovateus.pk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
refresh: 0;url=https://talentpartner.be/Mbrandon.su@csagroup.org
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 16 Aug 2023 05:35:36 GMT
server: Apache
X-Firefox-Spdy: h2
talentpartner.be/o/fcb6cfe12344754ed262c9a1c8203f1d64dc602eeaa93
104.21.29.18200 OK 11 kB URL GET HTTP/3 talentpartner.be/o/fcb6cfe12344754ed262c9a1c8203f1d64dc602eeaa93
IP 104.21.29.18:443
Requested by https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Certificate IssuerGoogle Trust Services LLC
Subjecttalentpartner.be
FingerprintE4:4D:AA:C7:1E:58:C0:97:18:4D:03:53:62:C3:10:08:FF:8C:00:06
ValidityTue, 15 Aug 2023 09:43:19 GMT - Mon, 13 Nov 2023 09:43:18 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3651), with no line terminators
Hash ee5c8d9fb6248c938fd0dc19370e90bd
d01a22720918b781338b5bbf9202b241a5f99ee4
04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a
GET /o/fcb6cfe12344754ed262c9a1c8203f1d64dc602eeaa93 HTTP/1.1
Host: talentpartner.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Cookie: cf_clearance=hHrEYToD64hXwzZXQ1uNbFrOEcunuiluaPFW8XbTbmA-1692164136-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=070c86aca014ef7cea9340233b68c60a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 16 Aug 2023 05:35:43 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800
expires: Wed, 23 Aug 2023 05:35:43 GMT
last-modified: Wed, 16 Aug 2023 04:06:17 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dDZrpZffF1V%2Bx%2BqiykEeEQIBGPbMta0ztVIiyopMOjH969Pu4eodJn7jyqrOmAW5Jm%2B1vk5XBfYbbTvQN0EwQgCFRRZITn76ZR1unEMljH9IOaDMk0bbvd2OQyiQt0ZER1MQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f7750c5ecbbb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aadcdn.msauthimages.net/dbd5a2dd-pqfa3-qmu2cs8pnyptgmhx70u-nwdndlrrus3nwisiu/logintenantbranding/0/illustration?ts=636781200254658442
152.199.23.72200 OK 300 kB URL GET HTTP/2 aadcdn.msauthimages.net/dbd5a2dd-pqfa3-qmu2cs8pnyptgmhx70u-nwdndlrrus3nwisiu/logintenantbranding/0/illustration?ts=636781200254658442
IP 152.199.23.72:443
Requested by https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Certificate IssuerMicrosoft Corporation
Subjectaadcdn.msauthimages.net
Fingerprint6B:EB:AC:06:FC:06:82:11:17:1C:6B:72:7D:B5:95:2D:CF:E7:A3:5D
ValidityWed, 08 Mar 2023 11:16:34 GMT - Sat, 02 Mar 2024 11:16:34 GMT
File type JPEG image data, JFIF standard 1.00, resolution (DPI), density 38x38, segment length 16, comment: "LEAD Technologies Inc. V1.01", baseline, precision 8, 1520x1013, components 3\012- data
Size 300 kB (299742 bytes)
Hash 6fa439773e888df350f8381cf7b52d57
16faba2a97229549c28687ec3836dbb25ea25171
6edb4f67616b4becb460d01f76c8f3b68aa3936893afb39bc86bf39d668e47a6
GET /dbd5a2dd-pqfa3-qmu2cs8pnyptgmhx70u-nwdndlrrus3nwisiu/logintenantbranding/0/illustration?ts=636781200254658442 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://talentpartner.be/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-origin: https://login.microsoftonline.com
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
cache-control: public, max-age=86400
content-md5: b6Q5dz6IjfNQ+Dgc97UtVw==
content-type: image/*
date: Wed, 16 Aug 2023 05:35:47 GMT
etag: 0x8D64D20B9285C1F
last-modified: Sun, 18 Nov 2018 06:40:26 GMT
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
vary: Origin
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 96ec8ce7-401e-0032-6003-d04395000000
x-ms-version: 2009-09-19
content-length: 299742
X-Firefox-Spdy: h2
talentpartner.be/api-as1f?email=brandon.su@csagroup.org&data=background
104.21.29.18200 OK 176 B URL GET HTTP/3 talentpartner.be/api-as1f?email=brandon.su@csagroup.org&data=background
IP 104.21.29.18:443
Requested by https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Certificate IssuerGoogle Trust Services LLC
Subjecttalentpartner.be
FingerprintE4:4D:AA:C7:1E:58:C0:97:18:4D:03:53:62:C3:10:08:FF:8C:00:06
ValidityTue, 15 Aug 2023 09:43:19 GMT - Mon, 13 Nov 2023 09:43:18 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 97385aafd26b46a6fb5804246220f58c
cd4c3b3acc0985bd4d9e638cea55f55c91eb79b8
1e0de3ed7337860e1d07805e60c1fbbda118cc31f3e9aea6946b28543bce9e6e
GET /api-as1f?email=brandon.su@csagroup.org&data=background HTTP/1.1
Host: talentpartner.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Cookie: cf_clearance=hHrEYToD64hXwzZXQ1uNbFrOEcunuiluaPFW8XbTbmA-1692164136-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=070c86aca014ef7cea9340233b68c60a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 05:35:47 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rJparN7ZCoSdCCc6BDWUVCmcSFNyy%2FiwqENVDsz5pO7DrCVJM37CuduT6jRrQ1Z5EMj95cyvWAyv7AlcHWJ2ZMYcTzfpcNc4iMvoGwb1oLkCutN3577n5L8vOs2bXCkx80%2Fp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f7750c5fcd3b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
104.21.29.18200 OK 23 kB URL User Request GET HTTP/3 talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
IP 104.21.29.18:443
Certificate IssuerGoogle Trust Services LLC
Subjecttalentpartner.be
FingerprintE4:4D:AA:C7:1E:58:C0:97:18:4D:03:53:62:C3:10:08:FF:8C:00:06
ValidityTue, 15 Aug 2023 09:43:19 GMT - Mon, 13 Nov 2023 09:43:18 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (22448)
Hash 953b94fd36ec0d7d97ca77de797f1397
004bdb823f7ad33adc72f31780f72aaacadafa19
1fa2e9b5ecf1a251e9a98acb4fe97345f2de6ee72eae6da5a2e75797c232c3f0
GET /beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2 HTTP/1.1
Host: talentpartner.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://talentpartner.be/Mbrandon.su@csagroup.org?__cf_chl_tk=KP.QNL6aTOlWcxnFIr1SpxN1rFDyeliOKSa6pw5Q97k-1692164136-0-gaNycGzNC_s
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=hHrEYToD64hXwzZXQ1uNbFrOEcunuiluaPFW8XbTbmA-1692164136-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=070c86aca014ef7cea9340233b68c60a
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 05:35:41 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dqGto%2B7weC%2BIGTrbI2pVgpLeqQya77KO8CNe48UtXO7nA5XuUFdW19VmB2byZmd9T7UjXAa5PUOK3psfd7NQKbN2esjhoU4%2BFM%2BW1aFE7uLJz2wtWu5sOPXwiL3Y4pwrueDW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f7750bcab18b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
talentpartner.be/boot/fcb6cfe12344754ed262c9a1c8203f1d64dc602d89aaf
104.21.29.18200 OK 51 kB URL GET HTTP/3 talentpartner.be/boot/fcb6cfe12344754ed262c9a1c8203f1d64dc602d89aaf
IP 104.21.29.18:443
Requested by https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Certificate IssuerGoogle Trust Services LLC
Subjecttalentpartner.be
FingerprintE4:4D:AA:C7:1E:58:C0:97:18:4D:03:53:62:C3:10:08:FF:8C:00:06
ValidityTue, 15 Aug 2023 09:43:19 GMT - Mon, 13 Nov 2023 09:43:18 GMT
File type ASCII text, with very long lines (50758)
Hash 67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /boot/fcb6cfe12344754ed262c9a1c8203f1d64dc602d89aaf HTTP/1.1
Host: talentpartner.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Cookie: cf_clearance=hHrEYToD64hXwzZXQ1uNbFrOEcunuiluaPFW8XbTbmA-1692164136-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=070c86aca014ef7cea9340233b68c60a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 05:35:42 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Wed, 23 Aug 2023 05:35:42 GMT
last-modified: Wed, 16 Aug 2023 04:06:17 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LVmMkHp%2BtjKrUT6xgtl6V6%2FTysV3lbtPN9diHdwK71sp1mtgptmtaHpzOsBt5iIvPs8mBVmjlXkKw9Bn%2BEj1G%2B2%2BLXlUK4dy4EA6M6sVy6LbCqEG3Q3852eXMqj416tIyDJ%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f7750bdcc34b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
talentpartner.be/2
104.21.29.18200 OK 37 kB IP 104.21.29.18:443
Requested by https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Certificate IssuerGoogle Trust Services LLC
Subjecttalentpartner.be
FingerprintE4:4D:AA:C7:1E:58:C0:97:18:4D:03:53:62:C3:10:08:FF:8C:00:06
ValidityTue, 15 Aug 2023 09:43:19 GMT - Mon, 13 Nov 2023 09:43:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2 HTTP/1.1
Host: talentpartner.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Cookie: cf_clearance=hHrEYToD64hXwzZXQ1uNbFrOEcunuiluaPFW8XbTbmA-1692164136-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=070c86aca014ef7cea9340233b68c60a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 05:35:42 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pgQO21nxU1LYdw%2BP062qFWQNg%2FX%2B0Qhux1GZNRJtbz02TI9boRk%2B2uH1q0%2B5Ei%2FcccZ7ahaOGdWhAWPBLxxM2WQhGcjuIUj2Y1Yblh7D2dzD%2BtILQIulN7jV0GpHTLjZsjAv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f7750c55c29b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
talentpartner.be/api-as1f?email=brandon.su@csagroup.org&data=logo
104.21.29.18200 OK 168 B URL GET HTTP/3 talentpartner.be/api-as1f?email=brandon.su@csagroup.org&data=logo
IP 104.21.29.18:443
Requested by https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Certificate IssuerGoogle Trust Services LLC
Subjecttalentpartner.be
FingerprintE4:4D:AA:C7:1E:58:C0:97:18:4D:03:53:62:C3:10:08:FF:8C:00:06
ValidityTue, 15 Aug 2023 09:43:19 GMT - Mon, 13 Nov 2023 09:43:18 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 9c5f9c015c7f7a6cc70b047a7e1fffa3
c4537fbbea31f3e5e6ac0c79b9ad6cec643f23e1
3c4d702cf3987be78547f3758de9ed70daf061df2094cdd76821f93dce75a697
GET /api-as1f?email=brandon.su@csagroup.org&data=logo HTTP/1.1
Host: talentpartner.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Cookie: cf_clearance=hHrEYToD64hXwzZXQ1uNbFrOEcunuiluaPFW8XbTbmA-1692164136-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=070c86aca014ef7cea9340233b68c60a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 05:35:46 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c4bGDORPrSrxVqTyIKM4LXNsMRrXiCwhPfKFrvir6isEvnFyABT%2FIvk9PZ7VFVohCGgMVPyqSHP%2BTrpxxDZAYOumx5l%2FcRIbaciaTI4G8wEGS6ANVaATACjCqL7O7xVFTF55"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f7750c5fcd0b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
talentpartner.be/jm/fcb6cfe12344754ed262c9a1c8203f1d64dc602d89ab0
104.21.29.18200 OK 6.1 kB URL GET HTTP/3 talentpartner.be/jm/fcb6cfe12344754ed262c9a1c8203f1d64dc602d89ab0
IP 104.21.29.18:443
Requested by https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Certificate IssuerGoogle Trust Services LLC
Subjecttalentpartner.be
FingerprintE4:4D:AA:C7:1E:58:C0:97:18:4D:03:53:62:C3:10:08:FF:8C:00:06
ValidityTue, 15 Aug 2023 09:43:19 GMT - Mon, 13 Nov 2023 09:43:18 GMT
File type ASCII text, with very long lines (6175), with no line terminators
Hash 0b3cd9bfcbe6444742df90b00f63efc3
0c978b0541c9659215908034b6299f78135c935c
2065edfabc7924bff8e65b4b4ade30bb341d70ab350518bfbad98e1d4f35266f
GET /jm/fcb6cfe12344754ed262c9a1c8203f1d64dc602d89ab0 HTTP/1.1
Host: talentpartner.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Cookie: cf_clearance=hHrEYToD64hXwzZXQ1uNbFrOEcunuiluaPFW8XbTbmA-1692164136-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=070c86aca014ef7cea9340233b68c60a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 05:35:42 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Wed, 23 Aug 2023 05:35:42 GMT
last-modified: Wed, 16 Aug 2023 04:06:17 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=89IM%2F5AoWIHHN7L00rLZvThcvf0I%2BGOo1S2Bt3O2EMVo%2FSuLByOR43eiQYUr6kKl9Kr99BqjBe28%2FtvDGGRKhiJ9WQj80o6vOyoe4Zj%2FehtZ%2B1S4Upb4YZBhlpN4WTDBXILi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f7750bdcc35b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
unpkg.com/axios@1.4.0/dist/axios.min.js
104.16.126.175200 OK 32 kB URL GET HTTP/2 unpkg.com/axios@1.4.0/dist/axios.min.js
IP 104.16.126.175:443
Requested by https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (31803)
Hash 6470a918ba1fd4b8d0882df0269ddb82
97814fdab64aa7d1b30f082f9eb272d4b1ce18a2
fd4ce12a87594281afcee9c73a40fe7acc282bcc9e764fbb3afa1481a96a091e
GET /axios@1.4.0/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://talentpartner.be/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 16 Aug 2023 05:35:41 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"7c62-l4FP2rZKp9GzDwgvnrJy1LHOGKI"
via: 1.1 fly.io
fly-request-id: 01GZP8TZEXW4PFCT61FHX2WRTS-fra
cf-cache-status: HIT
age: 8863233
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7f7750be1df1b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
talentpartner.be/favicon.ico
0.0.0.0 0 B URL GET talentpartner.be/favicon.ico
IP 0.0.0.0:0
Requested by https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Certificate IssuerGoogle Trust Services LLC
Subjecttalentpartner.be
FingerprintE4:4D:AA:C7:1E:58:C0:97:18:4D:03:53:62:C3:10:08:FF:8C:00:06
ValidityTue, 15 Aug 2023 09:43:19 GMT - Mon, 13 Nov 2023 09:43:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: talentpartner.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Cookie: cf_clearance=hHrEYToD64hXwzZXQ1uNbFrOEcunuiluaPFW8XbTbmA-1692164136-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=070c86aca014ef7cea9340233b68c60a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
talentpartner.be/e/fcb6cfe12344754ed262c9a1c8203f1d64dc602eeaa9f
104.21.29.18200 OK 513 B URL GET HTTP/3 talentpartner.be/e/fcb6cfe12344754ed262c9a1c8203f1d64dc602eeaa9f
IP 104.21.29.18:443
Requested by https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Certificate IssuerGoogle Trust Services LLC
Subjecttalentpartner.be
FingerprintE4:4D:AA:C7:1E:58:C0:97:18:4D:03:53:62:C3:10:08:FF:8C:00:06
ValidityTue, 15 Aug 2023 09:43:19 GMT - Mon, 13 Nov 2023 09:43:18 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (529), with no line terminators
Hash adc405f5fd089662209870ca5d2106f7
3a8b776df84bf251afc6ddd802cc5bbeddfb0e36
e7bacc97751689afaae192e103fe9851664365c57c7d783560860ad456db7e49
GET /e/fcb6cfe12344754ed262c9a1c8203f1d64dc602eeaa9f HTTP/1.1
Host: talentpartner.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Cookie: cf_clearance=hHrEYToD64hXwzZXQ1uNbFrOEcunuiluaPFW8XbTbmA-1692164136-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=070c86aca014ef7cea9340233b68c60a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 05:35:43 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800
expires: Wed, 23 Aug 2023 05:35:43 GMT
last-modified: Wed, 16 Aug 2023 04:06:17 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FY901phv5gEB4OPfLACxb9AnWNoLVn%2Fd9274lWDF4gWqWJ4ddBh2A5rYsTazu85sk4L%2F%2BWsIv8mQQhrAWY6I0gM1Zz3elW9vGnvhVTPnkxBAsnqbEmQreAs64RW2tZBJ%2FSff"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f7750c5ecbdb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
talentpartner.be/APP-YR4TLI/fcb6cfe12344754ed262c9a1c8203f1d64dc602eeaa58
104.21.29.18200 OK 105 kB URL GET HTTP/3 talentpartner.be/APP-YR4TLI/fcb6cfe12344754ed262c9a1c8203f1d64dc602eeaa58
IP 104.21.29.18:443
Requested by https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Certificate IssuerGoogle Trust Services LLC
Subjecttalentpartner.be
FingerprintE4:4D:AA:C7:1E:58:C0:97:18:4D:03:53:62:C3:10:08:FF:8C:00:06
ValidityTue, 15 Aug 2023 09:43:19 GMT - Mon, 13 Nov 2023 09:43:18 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 105 kB (105369 bytes)
Hash 8e6b0f88563f9c33f78bce65cf287df7
ef7765cd2a7d64ed27dd7344702597aff6f8c397
a7057bebfff43e7281ca31da00d40bd88c8d02d1576b9c45891dd56a3853269a
GET /APP-YR4TLI/fcb6cfe12344754ed262c9a1c8203f1d64dc602eeaa58 HTTP/1.1
Host: talentpartner.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Cookie: cf_clearance=hHrEYToD64hXwzZXQ1uNbFrOEcunuiluaPFW8XbTbmA-1692164136-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=070c86aca014ef7cea9340233b68c60a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 05:35:43 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 23 Aug 2023 05:35:42 GMT
last-modified: Wed, 16 Aug 2023 04:06:17 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o2Hqim3W8paYdGrrLrG8Ryb7sog4pejBsNg6iEhmdwS%2FUGC4UN9crbbu7waJeppjTtsr1AHpm9ZyalNicaLoJilmoJYD5PGM6xdf5wHXiQXeT%2FHLxZHlyeppJK5zwKgL5TW3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f7750c5fcd5b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
talentpartner.be/Mbrandon.su@csagroup.org
104.21.29.18302 Found 23 kB URL User Request POST HTTP/3 talentpartner.be/Mbrandon.su@csagroup.org
IP 104.21.29.18:443
Certificate IssuerGoogle Trust Services LLC
Subjecttalentpartner.be
FingerprintE4:4D:AA:C7:1E:58:C0:97:18:4D:03:53:62:C3:10:08:FF:8C:00:06
ValidityTue, 15 Aug 2023 09:43:19 GMT - Mon, 13 Nov 2023 09:43:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
POST /Mbrandon.su@csagroup.org HTTP/1.1
Host: talentpartner.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://talentpartner.be/Mbrandon.su@csagroup.org?__cf_chl_tk=KP.QNL6aTOlWcxnFIr1SpxN1rFDyeliOKSa6pw5Q97k-1692164136-0-gaNycGzNC_s
Content-Type: application/x-www-form-urlencoded
Content-Length: 3233
Origin: https://talentpartner.be
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Wed, 16 Aug 2023 05:35:41 GMT
content-type: text/html; charset=UTF-8
location: ./beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
set-cookie: cf_clearance=hHrEYToD64hXwzZXQ1uNbFrOEcunuiluaPFW8XbTbmA-1692164136-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; path=/; expires=Thu, 15-Aug-24 05:35:40 GMT; domain=.talentpartner.be; HttpOnly; Secure; SameSite=None
PHPSESSID=070c86aca014ef7cea9340233b68c60a; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XdmLrj0mqE7hiGKo7HRC362FgUdZFruv%2BGvqTjOgJT1Q49kaRcSmAgJSbkATz920fLJae6JwGXhdwPjEuAY7tlmA95o03%2F0Ni8ILne98FVpiwmjpe3sc18ZiAGeGy6bVvjgz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f7750b35e66b515-OSL
alt-svc: h3=":443"; ma=86400
unpkg.com/axios/dist/axios.min.js
104.16.126.175302 Found 32 kB URL GET HTTP/2 unpkg.com/axios/dist/axios.min.js
IP 104.16.126.175:443
Requested by https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /axios/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://talentpartner.be/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 16 Aug 2023 05:35:41 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.4.0/dist/axios.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01H7YDAFW6XGFNHRRNZQ59FSCV-fra
cf-cache-status: HIT
age: 160
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7f7750bdedb5b50c-OSL
X-Firefox-Spdy: h2
aadcdn.msauthimages.net/dbd5a2dd-pqfa3-qmu2cs8pnyptgmhx70u-nwdndlrrus3nwisiu/logintenantbranding/0/bannerlogo?ts=636781185127600980
152.199.23.72200 OK 9.6 kB URL GET HTTP/2 aadcdn.msauthimages.net/dbd5a2dd-pqfa3-qmu2cs8pnyptgmhx70u-nwdndlrrus3nwisiu/logintenantbranding/0/bannerlogo?ts=636781185127600980
IP 152.199.23.72:443
Requested by https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Certificate IssuerMicrosoft Corporation
Subjectaadcdn.msauthimages.net
Fingerprint6B:EB:AC:06:FC:06:82:11:17:1C:6B:72:7D:B5:95:2D:CF:E7:A3:5D
ValidityWed, 08 Mar 2023 11:16:34 GMT - Sat, 02 Mar 2024 11:16:34 GMT
File type PNG image data, 280 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 8178cbd0404e10c383436fe461dc7cd7
952682288f98b9efb2db3afccfb966b90043ca19
75e4c2203d108239c8cc66df85b92e7bc0a10d31f4b8f275e8383816a143f82c
GET /dbd5a2dd-pqfa3-qmu2cs8pnyptgmhx70u-nwdndlrrus3nwisiu/logintenantbranding/0/bannerlogo?ts=636781185127600980 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://talentpartner.be/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
age: 82906
cache-control: public, max-age=86400
content-md5: gXjL0EBOEMODQ2/kYdx81w==
content-type: image/*
date: Wed, 16 Aug 2023 05:35:47 GMT
etag: 0x8D64D1D3384C06B
last-modified: Sun, 18 Nov 2018 06:15:13 GMT
server: ECAcc (ska/F7A0)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 26e9d9f9-001e-001c-6142-cf1182000000
x-ms-version: 2009-09-19
content-length: 9565
X-Firefox-Spdy: h2
talentpartner.be/jq/fcb6cfe12344754ed262c9a1c8203f1d64dc602d89aad
104.21.29.18200 OK 86 kB URL GET HTTP/3 talentpartner.be/jq/fcb6cfe12344754ed262c9a1c8203f1d64dc602d89aad
IP 104.21.29.18:443
Requested by https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Certificate IssuerGoogle Trust Services LLC
Subjecttalentpartner.be
FingerprintE4:4D:AA:C7:1E:58:C0:97:18:4D:03:53:62:C3:10:08:FF:8C:00:06
ValidityTue, 15 Aug 2023 09:43:19 GMT - Mon, 13 Nov 2023 09:43:18 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /jq/fcb6cfe12344754ed262c9a1c8203f1d64dc602d89aad HTTP/1.1
Host: talentpartner.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Cookie: cf_clearance=hHrEYToD64hXwzZXQ1uNbFrOEcunuiluaPFW8XbTbmA-1692164136-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=070c86aca014ef7cea9340233b68c60a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 05:35:41 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Wed, 23 Aug 2023 05:35:41 GMT
last-modified: Wed, 16 Aug 2023 04:06:17 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9IvKWB9iqtrgypoy3U0UKiVtLQsb2mRYxkTz9PBXeei8u1pX9nGxWF3r9Xj4yF1MZE5VpS03I3zW1F1gE93Uw7XyKj8sX0YfvcVM7mbf2uhCNigMutRl6uihc3AKlY8OGmh%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f7750bdac1cb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
talentpartner.be/ic/fcb6cfe12344754ed262c9a1c8203f1d64dc602eeaa53
104.21.29.18200 OK 17 kB URL GET HTTP/3 talentpartner.be/ic/fcb6cfe12344754ed262c9a1c8203f1d64dc602eeaa53
IP 104.21.29.18:443
Requested by https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Certificate IssuerGoogle Trust Services LLC
Subjecttalentpartner.be
FingerprintE4:4D:AA:C7:1E:58:C0:97:18:4D:03:53:62:C3:10:08:FF:8C:00:06
ValidityTue, 15 Aug 2023 09:43:19 GMT - Mon, 13 Nov 2023 09:43:18 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /ic/fcb6cfe12344754ed262c9a1c8203f1d64dc602eeaa53 HTTP/1.1
Host: talentpartner.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://talentpartner.be/beebb091955c06fa68b3eb8afc0bae5164dc602d799b1PASbeebb091955c06fa68b3eb8afc0bae5164dc602d799b2
Cookie: cf_clearance=hHrEYToD64hXwzZXQ1uNbFrOEcunuiluaPFW8XbTbmA-1692164136-0-1-69b0ef05.7e78ddc4.3eb1b0e5-160.0.0; PHPSESSID=070c86aca014ef7cea9340233b68c60a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 05:35:43 GMT
content-type: image/x-icon
cache-control: public, max-age=604800
expires: Wed, 23 Aug 2023 05:35:43 GMT
last-modified: Wed, 16 Aug 2023 04:06:17 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UysriYFQTj55i9Jnd%2FaC73zP9yeJ4rF%2F5Aj6nthYNvTLst%2FjkG4vdOksbgGBG26Hxpz0X43S4%2FOqJaZTPoKFHIXeHrPCUd26Aau%2F5cDXecY%2FOxxUBSxiUjCmI2igCa5FOoy8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f7750c83843b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
talentpartner.be/Mbrandon.su@csagroup.org
104.21.29.18403 Forbidden 6.2 kB URL User Request GET HTTP/2 talentpartner.be/Mbrandon.su@csagroup.org
IP 104.21.29.18:443
Certificate IssuerGoogle Trust Services LLC
Subjecttalentpartner.be
FingerprintE4:4D:AA:C7:1E:58:C0:97:18:4D:03:53:62:C3:10:08:FF:8C:00:06
ValidityTue, 15 Aug 2023 09:43:19 GMT - Mon, 13 Nov 2023 09:43:18 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6283), with no line terminators
Hash 09f67104f9b14ba7c4ecb7240820e2a9
c4a568eae0cb00a02edab492e19189dc1aa7e597
3938845fbfd1ff2e5a750c8633e8566c2be1cbf2b6a146b1dbe91512be6c045c
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /Mbrandon.su@csagroup.org HTTP/1.1
Host: talentpartner.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Wed, 16 Aug 2023 05:35:36 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IYs6ERVRdjGcaF7e7rOT%2FBa4cjTpqas9tEOnOqp3Fru5LcedrpnkJqOae1oD6RK9%2BYoDvF7tJ%2FKZhLB6HbxKeihuwE2muxf3cVMkfVpGMCo8zI2oAXaOldIP%2F2v7X1pTXgLv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f77509e6c8c0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2