| app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode |  13.107.238.53 | 301 Moved Permanently | 0 B |
URL HTTP/1.1app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode IP13.107.238.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
X-Azure-Ref: 0nNrfYwAAAABRrmGHrfaIRb7ivEpyqCI5Q1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
Date: Sun, 05 Feb 2023 16:34:35 GMT
Content-Length: 0
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1cdc095521e9ee2606059be447d1fdd5 02b5d0a5b5823e2338daf7e144700babe2a213af 8bda3aabcf331c2bfcc4c7023cd797c760fd301dc353641bb95048e072f66c66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BDA3AABCF331C2BFCC4C7023CD797C760FD301DC353641BB95048E072F66C66"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5121
Expires: Sun, 05 Feb 2023 17:59:57 GMT
Date: Sun, 05 Feb 2023 16:34:36 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc21ba65e44ac95470c314e068e49a9eb 17a13b13738993d889d4afa3d848dc63bf6eba64 9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13693
Expires: Sun, 05 Feb 2023 20:22:49 GMT
Date: Sun, 05 Feb 2023 16:34:36 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash30db107dcf4380cef05efea409c2e6a3 96e6a306fbc07299aba64e5c14e2bfca35872fa9 b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 05 Feb 2023 15:36:20 GMT
content-type: application/json
age: 3496
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashfb7b6b46e708ad73eaaa3c21e74569ae 950663c025acad81556af5aa3022ecc9d55097fe 763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20070
Expires: Sun, 05 Feb 2023 22:09:06 GMT
Date: Sun, 05 Feb 2023 16:34:36 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: vFwffrahan1qQglx26RWVOR3quozkU8uJGD1p0I4VitGwFF29VZ4AEYv7Bx34rR3bVDCofm/TADXtKyrwYTi5Q==
x-amz-request-id: EA2C5RNHCTXJNCER
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 05 Feb 2023 15:53:20 GMT
age: 2476
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfb9bd4ab58c03c385e92af944ae71d51 18d31095c351dab2502fc79c207d0bb066f8b170 095aa7f24470fd744216d1839b772cadbe7f6bbcd9d9c9d02df1b17aa247765b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 16:34:36 GMT
Server: ECS (amb/6BB3)
Content-Length: 471
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 16:34:36 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 05 Feb 2023 16:07:20 GMT
age: 1636
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashdedf9c519ac38c4bece9c5bc895787d7 4911175c3f8a435978c5301c33c7a99a5e00a1d5 bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6732
Expires: Sun, 05 Feb 2023 18:26:49 GMT
Date: Sun, 05 Feb 2023 16:34:37 GMT
Connection: keep-alive
|
|
| push.services.mozilla.com/ | 52.35.3.113 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.35.3.113:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dTNQXVQFkzYjAX/9CXGLDA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ltO+VfHIv4GJbsIKeZWRipGgOPI=
|
|
| app.spadesapp.io/_next/static/css/0bf8cd2bf753fef9.css | 13.107.237.53 | 200 OK | 169 B |
URL HTTP/2app.spadesapp.io/_next/static/css/0bf8cd2bf753fef9.css IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hashd891b5e400c5dde1aab229abf82fb646 e911218d4a23344fdb5240d7f4b53c5edca3967a a2a7d4c93cbe5d270af0325a1ee85be4d1604256fd7f0a08ed354f1024167a58
GET /_next/static/css/0bf8cd2bf753fef9.css HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-length: 169
content-type: text/css; charset=UTF-8
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"a9-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0mw3eYwAAAABMFPYE3u8RRZXti+0491LcRlJBMjMxMDUwNDE4MDExADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAABn9ZYtgWjcSKsITDNix2S7Q1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash98be7fe21d059e46146a43d20c4eea92 1ec58129fea75085588be7b8baec05b0874b5274 7bb2eb5ffcd88a3b6ba7b210bdbcd4469134c9708f06befb6c616beebf8dae46
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 16:34:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| app.spadesapp.io/_next/static/Ye1VJ_2Q9PcIpCeaO9ZXg/_ssgManifest.js | 13.107.237.53 | 200 OK | 167 B |
URL HTTP/2app.spadesapp.io/_next/static/Ye1VJ_2Q9PcIpCeaO9ZXg/_ssgManifest.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
File typeASCII text, with no line terminators Hashb305f883667e88b26d5a02ed3d606177 ff74dc71f7daa92c357a8215682b08b3c887f729 29dea74d6c2e0796257966d9afd5e894c4c78d0eea9694eb795258faea15bc1b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/Ye1VJ_2Q9PcIpCeaO9ZXg/_ssgManifest.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-length: 167
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 31 Jan 2023 00:17:47 GMT
accept-ranges: bytes
etag: W/"a7-186052fd7f8"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0xwfcYwAAAADm7KtPG1SYSaoU2yDwGEVeRlJBMjMxMDUwNDE4MDQ1ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAABKwSEcH8fyQKUC2LvkZJDnQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/chunks/main-f9f75d7e1bbf9023.js | 13.107.237.53 | 200 OK | 32 kB |
URL HTTP/2app.spadesapp.io/_next/static/chunks/main-f9f75d7e1bbf9023.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hashb26e8f58dcc6d6530cd8b8b3c0aa767e 8c99ab67b548d4c87542587c6aa7cbda44759ab2 ef345f4d45c89c406d04ea1902038978c9f88d31d9ea7ac4420ed4562b274d5d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/main-f9f75d7e1bbf9023.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"1a9ba-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 03HLbYwAAAADqOV0tpfXzR67BreoAnCJJRlJBMjMxMDUwNDE3MDM3ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAACEG7A90y5DQrv9CJ5eGKT4Q1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/chunks/4113-cb3714d103d5a21a.js | 13.107.237.53 | 200 OK | 2.8 kB |
URL HTTP/2app.spadesapp.io/_next/static/chunks/4113-cb3714d103d5a21a.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hashaa86de16d0d3bcc1e4745aa36acc762d 065e742eb314d2dd1bf171f55df31488b4a46e4e 96cc61f0d8188c3294d5970c49ce4e916d52fdffb37dda50aff7ce7039bdbaeb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/4113-cb3714d103d5a21a.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"2f6e-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0xwfcYwAAAADcWrxyPd74Q4SDz2O/H0HpRlJBMjMxMDUwNDE3MDMxADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAABSZsqdgMqGQ5k+EKVPsbccQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/Ye1VJ_2Q9PcIpCeaO9ZXg/_buildManifest.js | 13.107.237.53 | 200 OK | 1.5 kB |
URL HTTP/2app.spadesapp.io/_next/static/Ye1VJ_2Q9PcIpCeaO9ZXg/_buildManifest.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash029d662dc8b134ebc407190b05fe1934 e73cbe25cc6dd4af2db5af969a2b74934cef3101 47db51519f94149e8035d3d08a19140a9788365cfec668a80b9ca08c4d8b570d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/Ye1VJ_2Q9PcIpCeaO9ZXg/_buildManifest.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"afb-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0St3bYwAAAADnEDFuCZgwRYZ/dimEQgbkRlJBMjMxMDUwNDE4MDQ5ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAAAD6Zb7b9soSKZn5LiZsuctQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 216.58.207.227 | 200 OK | 31 kB |
URL HTTP/2fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data Hashac0d2859ea5f8fd6bcb3c305c08ec184 7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7 ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.spadesapp.io
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Feb 2023 07:08:09 GMT
expires: Sat, 03 Feb 2024 07:08:09 GMT
cache-control: public, max-age=31536000
age: 206788
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/chunks/4656-3f60eada10976cc6.js | 13.107.237.53 | 200 OK | 6.8 kB |
URL HTTP/2app.spadesapp.io/_next/static/chunks/4656-3f60eada10976cc6.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hashae00a5dc2706cb0c5e2637d61aa10069 12b54bca4c9c97ae79f8e1146c515cbf7699a7e8 3bab321ba47e1238ee74d7367607f4469eabfb163b5e8dbe0b5f8ea8bf039cb9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/4656-3f60eada10976cc6.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"4516-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0hrPcYwAAAAD5VHWOfISkRI9RPXFdhQQZRlJBMjMxMDUwNDE3MDI5ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAADCUm5fI+phToXHsF5kE5imQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash153d0de36959c722c00df71ba86daca2 305f56a3134879ebf0828e169e903e560540c070 0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 16:34:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtm.js?id=GTM-5DWZWL5>m_auth=>m_preview=>m_cookies_win=x | 142.250.74.168 | 200 OK | 54 kB |
URL HTTP/2www.googletagmanager.com/gtm.js?id=GTM-5DWZWL5>m_auth=>m_preview=>m_cookies_win=x IP142.250.74.168:0
File typeASCII text, with very long lines (2916) Hash962d3acdf14bce1c337a9734f08cad05 ba7168ac9ba6a8adacd5060a54e92450a273a9f8 00f9b79cd164452737d04c193b5247c72ac42fac455774c2c5546aea41bb8b80
GET /gtm.js?id=GTM-5DWZWL5>m_auth=>m_preview=>m_cookies_win=x HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 Feb 2023 16:34:37 GMT
expires: Sun, 05 Feb 2023 16:34:37 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 Feb 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 53571
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash153d0de36959c722c00df71ba86daca2 305f56a3134879ebf0828e169e903e560540c070 0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 16:34:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| app.spadesapp.io/api/geolocation | 13.107.237.53 | 200 OK | 155 B |
URL HTTP/2app.spadesapp.io/api/geolocation IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
File typeJSON data\012- , ASCII text, with no line terminators Hash15bc769fbaf6314a0847debe45ba640e e078114004fb37cee327c912e5370dc6f4f809b3 98cac3f79ea889d17e627d64d5d403be1b06ab5b28a2c6432ac7091251f4baf7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /api/geolocation HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Cookie: _dd_s=rum=1&id=547316b3-4931-4350-9be9-1f3e1fca2b9c&created=1675614918908&expire=1675615818908
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 155
content-type: application/json; charset=utf-8
etag: "agoi7ci6lx4b"
vary: Accept-Encoding
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: CONFIG_NOCACHE
x-azure-ref: 0ndrfYwAAAADe+rH5FOQSSo7r1zm5e5utQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:37 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/assets/vector-arts/landing-art.svg | 13.107.237.53 | 200 OK | 827 B |
URL HTTP/2app.spadesapp.io/assets/vector-arts/landing-art.svg IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
File typeSVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text Hash795e3523651b5256fee220b1a50f956a e3025bae0283c03f5ef33b1442609c4d8706fc75 63b81057f4b761af2efd26bb2a5722186dec55e44169bd34eb433d0657022f6d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /assets/vector-arts/landing-art.svg HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Cookie: _dd_s=rum=1&id=547316b3-4931-4350-9be9-1f3e1fca2b9c&created=1675614918908&expire=1675615818908
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=0
content-length: 827
content-type: image/svg+xml
last-modified: Mon, 30 Jan 2023 23:58:44 GMT
accept-ranges: bytes
etag: W/"33b-186051e6720"
vary: Accept-Encoding
x-cache: TCP_MISS
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0ntrfYwAAAABmQKEa60QaTJl01mH6KwIoRlJBMjMxMDUwNDE3MDI1ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ntrfYwAAAADr8/5GXcAVS6AT/q+imZavQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:37 GMT
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash3faf3e688bac0689f159dfed7460d84b 05f020aea691e12321db6e56b209e99afa58ba90 a4c8f64177d854ee7c30b86af38816ab26c201677ac44f210aeb81667cf21b0f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=148067
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 16:34:38 GMT
Etag: "63df7a01-1d7"
Expires: Tue, 07 Feb 2023 09:42:25 GMT
Last-Modified: Sun, 05 Feb 2023 09:42:25 GMT
Server: nginx
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1b25bf82638deaab60981e1315ee0849 e3bd912fd1a890e64ee6746a78a674db7ff77039 a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8263
Expires: Sun, 05 Feb 2023 18:52:21 GMT
Date: Sun, 05 Feb 2023 16:34:38 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1b25bf82638deaab60981e1315ee0849 e3bd912fd1a890e64ee6746a78a674db7ff77039 a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8263
Expires: Sun, 05 Feb 2023 18:52:21 GMT
Date: Sun, 05 Feb 2023 16:34:38 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1b25bf82638deaab60981e1315ee0849 e3bd912fd1a890e64ee6746a78a674db7ff77039 a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8263
Expires: Sun, 05 Feb 2023 18:52:21 GMT
Date: Sun, 05 Feb 2023 16:34:38 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1b25bf82638deaab60981e1315ee0849 e3bd912fd1a890e64ee6746a78a674db7ff77039 a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8263
Expires: Sun, 05 Feb 2023 18:52:21 GMT
Date: Sun, 05 Feb 2023 16:34:38 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8e0be7db14d930d6227443314bcd1747 4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d baedfbdb08a67f9ff4c698f7e65b08d7e4c5078d0a4233e6bff529b44812735a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12967
x-amzn-requestid: 013fa296-a431-410b-b3fb-7417b3e877eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpIQAFCMIAMF0Sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9ed99-2e1daa8b75977de07c48b8fc;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 04:42:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UzQGDCYe_8AuYYLaLSAWzHQhwJMpzpXWbjE5AwukevW6G6SLDxDjmA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 03:42:59 GMT
age: 46299
etag: "4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg | 34.120.237.76 | 200 OK | 5.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5b6c30ad03669b66bf2f63b3edd69882 e630bd132b52b965a5ade646ea8a165d1abf6d7b f8233d879ec17fd91909655ff8881f2ebfad84272fde3ed5e5be37580378a989
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5014
x-amzn-requestid: a434aae4-fe4b-4fc7-9b7e-eeb552484e8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bIE0aoAMF6YQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c47-5556d14757190c842bbc6b06;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k6YqagXr3Wr-u1uDKojEnIGW0CxU5yvWPtlzNpzoIvmg9F-rJb9uFQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 11:24:01 GMT
age: 18637
etag: "e630bd132b52b965a5ade646ea8a165d1abf6d7b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg | 34.120.237.76 | 200 OK | 3.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd7a466d89c75ff3459b7328591db52cf c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb e73243be3d01d12a224c4e9826c4f52610cf7722eee69f62755278d7550705f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3474
x-amzn-requestid: 5846c080-9f25-4590-863c-8af2126cdbe1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f1WXEEbnoAMFRdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ded0f9-1bd490125feadc14366e7ca0;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 21:41:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: d8aQmkW-aqLFpb79RynlJG2vY1GTDbjLNY0Qukgg_WIjdI6cmbVKFw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:51:26 GMT
age: 67392
etag: "c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg | 34.120.237.76 | 200 OK | 8.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6661b7263315f5eb3cd2465f671e1fcd b7b5831c6b3ccc41d7a980b6088adc10ff8785f1 eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8527
x-amzn-requestid: 6a8c6487-6069-47d1-afa1-648626f85439
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyDqqGg5oAMFV-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd7fdd-0a772cde1e6fba6d7da97435;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:42:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CHWhIpyzhoPtMUplzh1430Q9FfCM1wkTc_hQsgQk6InM9tYBPGYnNg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:05:45 GMT
age: 66533
etag: "b7b5831c6b3ccc41d7a980b6088adc10ff8785f1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3825d7eb-9bf8-4ff1-ac96-196cbf5c1873.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3825d7eb-9bf8-4ff1-ac96-196cbf5c1873.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash93ef9da6520124f03883a2b5241e0623 41b557bb05e1769c124aa0195c398e2dbd1fc0e9 dd6a1589ae40fb69c60f1675ea49a6a1a00d43e29d1a18f0d30b7c4e9bceee5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3825d7eb-9bf8-4ff1-ac96-196cbf5c1873.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11198
x-amzn-requestid: f21313a6-3ca8-4c58-981c-a1700769719c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdKUGu6IAMFsww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadbdb-1d60cc337f91692e436f2990;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:38:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DDUhCZQq-ZcClUUIfE1SlG5JisHCxScF2b3LjJd0KjvcB6E-RBhL9A==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 15:02:59 GMT
age: 5499
etag: "41b557bb05e1769c124aa0195c398e2dbd1fc0e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/assets/images/visa.svg | 13.107.237.53 | 200 OK | 12 kB |
URL HTTP/2app.spadesapp.io/assets/images/visa.svg IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash580facf556f82725f118a7c65b5bab7d 03574a0fdd7075dc7f3ba6eb2d1705730a298125 8d667787500a3694af8a819a0a3a47c76e56c71c9316873ad5b7e6c3f974d4d2
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /assets/images/visa.svg HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Cookie: _dd_s=rum=1&id=547316b3-4931-4350-9be9-1f3e1fca2b9c&created=1675614918908&expire=1675615818908
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=0
content-type: image/svg+xml
content-encoding: gzip
last-modified: Mon, 30 Jan 2023 23:58:44 GMT
accept-ranges: bytes
etag: W/"790-186051e6720"
vary: Accept-Encoding
x-cache: TCP_MISS
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0ntrfYwAAAABiMTOPp3l1QKGAehzikbA0RlJBMjMxMDUwNDE4MDExADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ntrfYwAAAACsW/OAZveJQolxbiWggrctQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:37 GMT
X-Firefox-Spdy: h2
|
|
| region1.google-analytics.com/g/collect?v=2&tid=G-LK3QJ7N1FC>m=45je3210&_p=1310815769&cid=725848801.1675614919&ul=en-us&sr=1280x1024&ir=1&uaW=1&_eu=EA&_s=1&dt=Spades%20-%20Landing&sid=1675614919&sct=1&seg=0&dl=https%3A%2F%2Fapp.spadesapp.io%2Flanding%2FBE3D0YALTL65%2F631c5ec659ec63001b9a8517%3Futm_source%3Dqrcode&en=page_view_ga4&_fv=1&_nsi=1&_ss=1&_ee=1&ep.user_type=Unknown&ep.document_title=Spades%20-%20Landing&ep.brand_name=Twina%20-%20Riyadh&ep.outlet_location_name=Prince%20Turki%20Ibn%20Abdulaziz%20Al%20Awwal%20Rd%2C%20King%20Saud%20University%2C%20Riyadh%2012371&ep.table_number=&ep.outlet_country=SA | 216.239.34.36 | 204 No Content | 0 B |
URL HTTP/2region1.google-analytics.com/g/collect?v=2&tid=G-LK3QJ7N1FC>m=45je3210&_p=1310815769&cid=725848801.1675614919&ul=en-us&sr=1280x1024&ir=1&uaW=1&_eu=EA&_s=1&dt=Spades%20-%20Landing&sid=1675614919&sct=1&seg=0&dl=https%3A%2F%2Fapp.spadesapp.io%2Flanding%2FBE3D0YALTL65%2F631c5ec659ec63001b9a8517%3Futm_source%3Dqrcode&en=page_view_ga4&_fv=1&_nsi=1&_ss=1&_ee=1&ep.user_type=Unknown&ep.document_title=Spades%20-%20Landing&ep.brand_name=Twina%20-%20Riyadh&ep.outlet_location_name=Prince%20Turki%20Ibn%20Abdulaziz%20Al%20Awwal%20Rd%2C%20King%20Saud%20University%2C%20Riyadh%2012371&ep.table_number=&ep.outlet_country=SA IP216.239.34.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-LK3QJ7N1FC>m=45je3210&_p=1310815769&cid=725848801.1675614919&ul=en-us&sr=1280x1024&ir=1&uaW=1&_eu=EA&_s=1&dt=Spades%20-%20Landing&sid=1675614919&sct=1&seg=0&dl=https%3A%2F%2Fapp.spadesapp.io%2Flanding%2FBE3D0YALTL65%2F631c5ec659ec63001b9a8517%3Futm_source%3Dqrcode&en=page_view_ga4&_fv=1&_nsi=1&_ss=1&_ee=1&ep.user_type=Unknown&ep.document_title=Spades%20-%20Landing&ep.brand_name=Twina%20-%20Riyadh&ep.outlet_location_name=Prince%20Turki%20Ibn%20Abdulaziz%20Al%20Awwal%20Rd%2C%20King%20Saud%20University%2C%20Riyadh%2012371&ep.table_number=&ep.outlet_country=SA HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.spadesapp.io
Connection: keep-alive
Referer: https://app.spadesapp.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://app.spadesapp.io
date: Sun, 05 Feb 2023 16:34:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| rum.browser-intake-us3-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.2%2Cenv%3Aprod%2Cservice%3Aspades-webapp%2Cversion%3A1.0.0&dd-api-key=pub16097ed943ead9faf9f64e57f7daea25&dd-evp-origin-version=4.23.2&dd-evp-origin=browser&dd-request-id=bd60413b-319f-4744-b4b6-e77ef7c213c0&batch_time=1675614919012 | 20.69.148.154 | 202 Accepted | 53 B |
URL HTTP/2rum.browser-intake-us3-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.2%2Cenv%3Aprod%2Cservice%3Aspades-webapp%2Cversion%3A1.0.0&dd-api-key=pub16097ed943ead9faf9f64e57f7daea25&dd-evp-origin-version=4.23.2&dd-evp-origin=browser&dd-request-id=bd60413b-319f-4744-b4b6-e77ef7c213c0&batch_time=1675614919012 IP20.69.148.154:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
File typeJSON data\012- , ASCII text, with no line terminators Hash12ee055eeeedd601b785e4da6ab4e851 3580f00440b5fafd8d8503e1d0b31b88a768ce63 b6dff91b8749aba6781503781ab284fc9d16974390706042d63e9f4f6eddecba
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.2%2Cenv%3Aprod%2Cservice%3Aspades-webapp%2Cversion%3A1.0.0&dd-api-key=pub16097ed943ead9faf9f64e57f7daea25&dd-evp-origin-version=4.23.2&dd-evp-origin=browser&dd-request-id=bd60413b-319f-4744-b4b6-e77ef7c213c0&batch_time=1675614919012 HTTP/1.1
Host: rum.browser-intake-us3-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16209
Origin: https://app.spadesapp.io
Connection: keep-alive
Referer: https://app.spadesapp.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Sun, 05 Feb 2023 16:34:38 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/css/4259233e49a295d4.css | 13.107.237.53 | 200 OK | 2.0 kB |
URL HTTP/2app.spadesapp.io/_next/static/css/4259233e49a295d4.css IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash34d5c73a468b600d384e64cb1591c498 e86f3437e8c24a8689100273d77341eeb8d1b84f f5bef138f33a6f2ddcca518e717433819ab6c136851e3364dd94726b59931cc0
GET /_next/static/css/4259233e49a295d4.css HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app.spadesapp.io/ar-SA/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Connection: keep-alive
Cookie: _dd_s=rum=1&id=547316b3-4931-4350-9be9-1f3e1fca2b9c&created=1675614918908&expire=1675615818908; _ga_LK3QJ7N1FC=GS1.1.1675614919.1.0.1675614919.0.0.0; _ga=GA1.1.725848801.1675614919
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: text/css; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"957-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0A97bYwAAAABSkzm+bK+gR4Cbei/nfv7yRlJBMjMxMDUwNDE3MDUxADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ntrfYwAAAAA+w0mCs92SSbnbEnPBQKMDQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:37 GMT
X-Firefox-Spdy: h2
|
|
| script.hotjar.com/modules.bca0d1c28285412bb689.js | 143.204.55.46 | 200 OK | 68 kB |
URL HTTP/2script.hotjar.com/modules.bca0d1c28285412bb689.js IP143.204.55.46:0
File typeUnicode text, UTF-8 text, with very long lines (49086) Hashe923aa360dc485b9df86355bd040c998 03c46dbd41e9d4bdf8a9e4bfbaba3f7f2e9280ec 9c7575553c5b81f9b905dbb27c8116b175b69e7472aa6597f8cace1c6434d676
GET /modules.bca0d1c28285412bb689.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 67924
date: Fri, 03 Feb 2023 13:10:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "e923aa360dc485b9df86355bd040c998"
last-modified: Fri, 03 Feb 2023 13:09:45 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AYbsXInaS6nryHwoDLEDzhfcpUR390vUiV-zUqEnxA9_sRgRdAI3pA==
age: 185073
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/chunks/pages/information/%5B...restaurantCodeTableCode%5D-c13e8f83450dff34.js | 13.107.237.53 | 200 OK | 3.2 kB |
URL HTTP/2app.spadesapp.io/_next/static/chunks/pages/information/%5B...restaurantCodeTableCode%5D-c13e8f83450dff34.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hashb116f0a27be6e12b37203f21a51780a4 04734396a2004cc1c54d53821c1d2197ad2dbf31 465008883294a5a0aa7dde22a6d8220b4cd0f7bd5516992c7893ebcecb0ffc51
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/pages/information/%5B...restaurantCodeTableCode%5D-c13e8f83450dff34.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/ar-SA/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Cookie: _dd_s=rum=1&id=547316b3-4931-4350-9be9-1f3e1fca2b9c&created=1675614918908&expire=1675615818908; _ga_LK3QJ7N1FC=GS1.1.1675614919.1.0.1675614919.0.0.0; _ga=GA1.1.725848801.1675614919
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"2716-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0A97bYwAAAAAaf0WJZRfxSZD0sNnhghCLRlJBMjMxMDUwNDE4MDIzADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ntrfYwAAAABbRXck+K9wQL63xcth8SzwQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:37 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/api/customer-bff/v2/outlets/BE3D0YALTL65/tables/631c5ec659ec63001b9a8517? | 13.107.237.53 | 200 OK | 176 B |
URL HTTP/2app.spadesapp.io/api/customer-bff/v2/outlets/BE3D0YALTL65/tables/631c5ec659ec63001b9a8517? IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
File typeJSON data\012- , ASCII text, with no line terminators Hash0c8198f9d22c2dcb39e07ffc556f5a78 13c00dad334a0e3a0a2477348a86f1b7822bc6fc 70f898a7f7ee0ec7e073fe47153dbcfcd519e5a71c69ad46b49ef1510489027c
GET /api/customer-bff/v2/outlets/BE3D0YALTL65/tables/631c5ec659ec63001b9a8517? HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Authorization:
isGuest: true
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Cookie: _dd_s=rum=1&id=547316b3-4931-4350-9be9-1f3e1fca2b9c&created=1675614918908&expire=1675615818908
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 176
content-type: application/json; charset=utf-8
etag: W/"b0-E8ANrTNKDjoKJHc0iobxt4Irxvw"
vary: Accept-Encoding
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
correlationid: cldrlu2iv5lmu01vj4pn61wp4
x-cache: CONFIG_NOCACHE
x-azure-ref: 0ndrfYwAAAABaXnUldSlwT7yJ3ZIIO5gFQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:41 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/chunks/788.4be13272f98eadb4.js | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/_next/static/chunks/788.4be13272f98eadb4.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/788.4be13272f98eadb4.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"85c-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0St3bYwAAAADr2e6gifoYQrEO6cBHML5URlJBMjMxMDUwNDE3MDUzADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAABLf5cNIoWcTL+rLW3s+f2YQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/assets/images/mada.svg | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/assets/images/mada.svg IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /assets/images/mada.svg HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Cookie: _dd_s=rum=1&id=547316b3-4931-4350-9be9-1f3e1fca2b9c&created=1675614918908&expire=1675615818908
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=0
content-type: image/svg+xml
content-encoding: gzip
last-modified: Mon, 30 Jan 2023 23:58:44 GMT
accept-ranges: bytes
etag: W/"14d5-186051e6720"
vary: Accept-Encoding
x-cache: TCP_MISS
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0ntrfYwAAAADzBno7DgMQRYbfb8CtHbptRlJBMjMxMDUwNDE4MDA5ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ntrfYwAAAAAjmG13upyVR4Qb47fDtTvEQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:37 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/chunks/framework-e6d6ff3a3eb64242.js | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/_next/static/chunks/framework-e6d6ff3a3eb64242.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/framework-e6d6ff3a3eb64242.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"226d0-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0St3bYwAAAAARluPQ/PpGTpyDEjL2Uh+PRlJBMjMxMDUwNDE3MDE5ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAAAakdIxrW4rRrYABJzoAU0SQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/chunks/419-6a3846c96a98d4ce.js | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/_next/static/chunks/419-6a3846c96a98d4ce.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/419-6a3846c96a98d4ce.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"23ea-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0zcXbYwAAAADVFNIyJstkRK8k5eDasTyhRlJBMjMxMDUwNDE4MDIzADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAAAFQoHZBvE3QKYwEw6MGly9Q1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700&display=swap | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700&display=swap IP142.250.74.106:0
GET /css2?family=Montserrat:wght@400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 Feb 2023 16:34:37 GMT
date: Sun, 05 Feb 2023 16:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/data/Ye1VJ_2Q9PcIpCeaO9ZXg/ar-SA/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517.json?utm_source=qrcode&restaurantCode=BE3D0YALTL65&tableId=631c5ec659ec63001b9a8517 | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/_next/data/Ye1VJ_2Q9PcIpCeaO9ZXg/ar-SA/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517.json?utm_source=qrcode&restaurantCode=BE3D0YALTL65&tableId=631c5ec659ec63001b9a8517 IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /_next/data/Ye1VJ_2Q9PcIpCeaO9ZXg/ar-SA/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517.json?utm_source=qrcode&restaurantCode=BE3D0YALTL65&tableId=631c5ec659ec63001b9a8517 HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
x-nextjs-data: 1
Connection: keep-alive
Cookie: _dd_s=rum=1&id=547316b3-4931-4350-9be9-1f3e1fca2b9c&created=1675614918908&expire=1675615818908
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
content-type: application/json
content-encoding: gzip
etag: "2l02k9dwl96p5"
vary: Accept-Encoding
x-cache: PRIVATE_NOSTORE
content-security-policy: frame-ancestors
x-nextjs-matched-path: /ar-SA/landing/[restaurantCode]/[tableId]
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0ntrfYwAAAAAXS7g1dGXWR4TBhtREbZdHRlJBMjMxMDUwNDE4MDIzADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ntrfYwAAAAC8BVyRn3rJQpcaSzUf1eBLQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:37 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/chunks/pages/_app-761d0893fb820c7d.js | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/_next/static/chunks/pages/_app-761d0893fb820c7d.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/pages/_app-761d0893fb820c7d.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"ee716-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0gq7bYwAAAAApZNe/K+SbQIMlgPyzIfcsRlJBMjMxMDUwNDE3MDQ5ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAADn8mO6hjisSbESyWbIkTcuQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/assets/images/spades-logo-horizontal-white.svg | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/assets/images/spades-logo-horizontal-white.svg IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /assets/images/spades-logo-horizontal-white.svg HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=0
content-type: image/svg+xml
content-encoding: gzip
last-modified: Mon, 30 Jan 2023 23:58:44 GMT
accept-ranges: bytes
etag: W/"23f8-186051e6720"
vary: Accept-Encoding
x-cache: TCP_MISS
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0ndrfYwAAAACn2/L0teHJSZJx31eenA2fRlJBMjMxMDUwNDE3MDI3ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAADmokomv0sCS750+ybZRdo1Q1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| static.hotjar.com/c/hotjar-2918199.js?sv=7 | 143.204.55.54 | 200 OK | 0 B |
URL HTTP/2static.hotjar.com/c/hotjar-2918199.js?sv=7 IP143.204.55.54:0
GET /c/hotjar-2918199.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Sun, 05 Feb 2023 16:34:39 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/41ebbbb31354ceaf386a9ecbd7a28359
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yWNjHMit7EG3vV2Atbivcl6HyVE662gDM97IONi8DsGoeOa4a11Hdw==
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/assets/images/master_card.svg | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/assets/images/master_card.svg IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /assets/images/master_card.svg HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Cookie: _dd_s=rum=1&id=547316b3-4931-4350-9be9-1f3e1fca2b9c&created=1675614918908&expire=1675615818908
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=0
content-type: image/svg+xml
content-encoding: gzip
last-modified: Mon, 30 Jan 2023 23:58:44 GMT
accept-ranges: bytes
etag: W/"1498-186051e6720"
vary: Accept-Encoding
x-cache: TCP_MISS
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0ntrfYwAAAABr9/Gq5PqQSZt3S613VdKpRlJBMjMxMDUwNDE4MDI3ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ntrfYwAAAAD3ylTFh7WBRJ4STjdVKM9tQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:37 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/api/customer-bff/v1/outlets/BE3D0YALTL65/tables/631c5ec659ec63001b9a8517? | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/api/customer-bff/v1/outlets/BE3D0YALTL65/tables/631c5ec659ec63001b9a8517? IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /api/customer-bff/v1/outlets/BE3D0YALTL65/tables/631c5ec659ec63001b9a8517? HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: ar-SA
Accept-Encoding: gzip, deflate, br
Authorization:
isGuest: true
Connection: keep-alive
Referer: https://app.spadesapp.io/ar-SA/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Cookie: _dd_s=rum=1&id=547316b3-4931-4350-9be9-1f3e1fca2b9c&created=1675614918908&expire=1675615818908; _ga_LK3QJ7N1FC=GS1.1.1675614919.1.0.1675614919.0.0.0; _ga=GA1.1.725848801.1675614919
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
etag: W/"75b-f4zurpAtg7lYigrdL2xKFwQXbn4"
vary: Accept-Encoding
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
correlationid: cldrlu2yg5lnl01t5b8qk1evx
x-cache: CONFIG_NOCACHE
x-azure-ref: 0ntrfYwAAAADJc61VMl2NQqlmK6XM0pR3Q1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:39 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/favicon.ico | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/favicon.ico IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /favicon.ico HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Cookie: _dd_s=rum=1&id=547316b3-4931-4350-9be9-1f3e1fca2b9c&created=1675614918908&expire=1675615818908; _ga_LK3QJ7N1FC=GS1.1.1675614919.1.0.1675614919.0.0.0; _ga=GA1.1.725848801.1675614919
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=0
content-type: image/x-icon
content-encoding: gzip
last-modified: Mon, 30 Jan 2023 23:58:44 GMT
accept-ranges: bytes
etag: W/"3c2e-186051e6720"
vary: Accept-Encoding
x-cache: TCP_MISS
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0n9rfYwAAAAAnqENvk1YxSp7OkL1QsQKXRlJBMjMxMDUwNDE4MDI3ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0n9rfYwAAAAA2W3gdvpKgTqTAEIrCXlKEQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:38 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
x-cache: PRIVATE_NOSTORE
content-security-policy: frame-ancestors
x-powered-by: Next.js
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0nNrfYwAAAAASuXxlQmbBTa7+MxkxulkeRlJBMjMxMDUwNDE3MDUxADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0nNrfYwAAAAA8j+7wwXApSpNm6qCzpsu3Q1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/chunks/webpack-73ceb33628a847ca.js | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/_next/static/chunks/webpack-73ceb33628a847ca.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/webpack-73ceb33628a847ca.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"1a24-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0St3bYwAAAABqAJiO2o7gQbAKrOHUfp5IRlJBMjMxMDUwNDE3MDI5ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAACXPFK4PZa8RpLVKiz503+pQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/assets/images/apply_pay.svg | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/assets/images/apply_pay.svg IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /assets/images/apply_pay.svg HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Cookie: _dd_s=rum=1&id=547316b3-4931-4350-9be9-1f3e1fca2b9c&created=1675614918908&expire=1675615818908
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=0
content-type: image/svg+xml
content-encoding: gzip
last-modified: Mon, 30 Jan 2023 23:58:44 GMT
accept-ranges: bytes
etag: W/"1915-186051e6720"
vary: Accept-Encoding
x-cache: TCP_MISS
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0ntrfYwAAAACLsL2XAw8jSqWjpmRoSU1hRlJBMjMxMDUwNDE3MDI1ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ntrfYwAAAACSofMDugN7SJIMueqSC9WfQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:37 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/chunks/4263-9be9ae461bc4fe3a.js | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/_next/static/chunks/4263-9be9ae461bc4fe3a.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/4263-9be9ae461bc4fe3a.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"2eee-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0gq7bYwAAAAAr8cxllMJbS7qr9QoVq+vMRlJBMjMxMDUwNDE3MDUxADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAACWq3sOcEsgTYxQMXEipaCiQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/chunks/6909.55f1f5cbf4f4d342.js | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/_next/static/chunks/6909.55f1f5cbf4f4d342.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/6909.55f1f5cbf4f4d342.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"1bf4-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0gq7bYwAAAAD0G2ZmdzBiRb06EXytfyB/RlJBMjMxMDUwNDE4MDMxADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAACXkK+wIjUmRYK5812nebbVQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/css/58533016ef0ea0e1.css | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/_next/static/css/58533016ef0ea0e1.css IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /_next/static/css/58533016ef0ea0e1.css HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: text/css; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"edb-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 0mw3eYwAAAABxyRcCehncQraTFDYXlLEfRlJBMjMxMDUwNDE3MDI3ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAADdXZTglf+BT5euLShQq7xTQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/chunks/7439.0e8a40ba68ef8822.js | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/_next/static/chunks/7439.0e8a40ba68ef8822.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/7439.0e8a40ba68ef8822.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"496-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 03HLbYwAAAAD27uBVI1lpQYSav4p69RxrRlJBMjMxMDUwNDE3MDE5ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAAB0eXrP17SWS4E/o2qOvg2XQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/chunks/pages/landing/%5BrestaurantCode%5D/%5BtableId%5D-a59ea1271af12384.js | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/_next/static/chunks/pages/landing/%5BrestaurantCode%5D/%5BtableId%5D-a59ea1271af12384.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/pages/landing/%5BrestaurantCode%5D/%5BtableId%5D-a59ea1271af12384.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"e0c5-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 03HLbYwAAAABC15iPPIFvRruABODnYtBkRlJBMjMxMDUwNDE3MDUxADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ndrfYwAAAACldY+cvfYMT7Sx0SYliImSQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:36 GMT
X-Firefox-Spdy: h2
|
|
| assets.spadesapp.io/file-storage/restaurant/1663610852246-Group%203239.svg | 13.107.238.53 | 200 OK | 0 B |
URL HTTP/2assets.spadesapp.io/file-storage/restaurant/1663610852246-Group%203239.svg IP13.107.238.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /file-storage/restaurant/1663610852246-Group%203239.svg HTTP/1.1
Host: assets.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/svg+xml
content-encoding: br
content-md5: d7RWbCde8M2jh49XrVEN5Q==
last-modified: Mon, 19 Sep 2022 18:07:32 GMT
etag: 0x8DA9A69D2DAD85D
vary: Origin
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-cache: TCP_REMOTE_HIT
x-ms-request-id: 2a6a1065-501e-0046-4a7c-39ce6b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
x-azure-ref-originshield: 0ntrfYwAAAAD6xEzWq2COT6y0yzSTpXoCRlJBMjMxMDUwNDE4MDUzAGFkZDIwMmFjLWEzZmYtNGYyMi1hMTI2LTM5ZmExYjk1N2FlZQ==
x-azure-ref: 0ntrfYwAAAAB8KzUm7RphQInqSzrFFzLeQ1BIMzBFREdFMDQxOQBhZGQyMDJhYy1hM2ZmLTRmMjItYTEyNi0zOWZhMWI5NTdhZWU=
date: Sun, 05 Feb 2023 16:34:38 GMT
X-Firefox-Spdy: h2
|
|
| app.spadesapp.io/_next/static/chunks/5202-659534661ba7a72a.js | 13.107.237.53 | 200 OK | 0 B |
URL HTTP/2app.spadesapp.io/_next/static/chunks/5202-659534661ba7a72a.js IP13.107.237.53:0 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/5202-659534661ba7a72a.js HTTP/1.1
Host: app.spadesapp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.spadesapp.io/ar-SA/landing/BE3D0YALTL65/631c5ec659ec63001b9a8517?utm_source=qrcode
Cookie: _dd_s=rum=1&id=547316b3-4931-4350-9be9-1f3e1fca2b9c&created=1675614918908&expire=1675615818908; _ga_LK3QJ7N1FC=GS1.1.1675614919.1.0.1675614919.0.0.0; _ga=GA1.1.725848801.1675614919
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
last-modified: Tue, 31 Jan 2023 00:17:34 GMT
accept-ranges: bytes
etag: W/"4b01-186052fa530"
vary: Accept-Encoding
x-cache: TCP_HIT
content-security-policy: frame-ancestors
strict-transport-security: max-age=15724800; includeSubDomains
x-azure-ref-originshield: 018XbYwAAAABMzIw0RJw7RKv8GqrcwnUpRlJBMjMxMDUwNDE3MDM5ADVkODE0ZmE4LWNjMGMtNDUxMy04M2NlLThkYjBkYTg5NjJiMQ==
x-azure-ref: 0ntrfYwAAAABEvEUdy4y9R70EM9TLcu7zQ1BIMzBFREdFMDQxOAA1ZDgxNGZhOC1jYzBjLTQ1MTMtODNjZS04ZGIwZGE4OTYyYjE=
date: Sun, 05 Feb 2023 16:34:37 GMT
X-Firefox-Spdy: h2
|
|
0.0.0.0