r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c35c3ec659d3a26ea97e68d787bb043
d97e3672244efec5b7814f2d8a734cd1a9387854
4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5602
Expires: Tue, 31 Jan 2023 18:13:00 GMT
Date: Tue, 31 Jan 2023 16:39:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2e72d45afe3d391c204b5391599607c
149d68b9d00a720b6f380fa2324779dca9dbe26d
f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13896
Expires: Tue, 31 Jan 2023 20:31:14 GMT
Date: Tue, 31 Jan 2023 16:39:38 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 16:35:54 GMT
content-type: application/json
age: 224
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 09ee4b0fe6cf4ca5ed31b24452338d00
7e62b6e20f0d4737f4a8d94f9818a0883027839e
56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5621
Expires: Tue, 31 Jan 2023 18:13:19 GMT
Date: Tue, 31 Jan 2023 16:39:38 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nKdvxGpfeF/qZIZol0AbrgnmDL1BWg+O6nrLCuhx9Rf9qZvTzi22HBCVTR0VeSwm/D90P2qGWdK1riw8VILf4Q==
x-amz-request-id: 90D7WQZJ7E0RDRSW
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 15:51:13 GMT
age: 2905
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
200 OK 14 kB URL HTTP/1.1 appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 08a556874ebc1eea075fa12187816d6b
99545a558f95905fd4037dc92686e943237d3d43
b2440633a07d8ee70bde35ad76dfc343e89e043ee09cc07619d26511f2b39f15
Analyzer Verdict Alert fortinet Malware
GET /login.php?err=Please%20login%20to%20continue! HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:38 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 16:39:38 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,300,600,700&subset=all
200 OK 726 B URL HTTP/1.1 fonts.googleapis.com/css?family=Open+Sans:400,300,600,700&subset=all
IP
Hash f695a50aad9a7f635d32fb725051cdf9
0528fac2131b6367b6ffde48dd421a0ea945c504
8deb5e5efaca71e5ef829c4fa214913332aba71be8d68fa2c291789f92c9ea18
GET /css?family=Open+Sans:400,300,600,700&subset=all HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Tue, 31 Jan 2023 16:39:39 GMT
Date: Tue, 31 Jan 2023 16:39:39 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
appraisals.alphamead.com/assets/global/plugins/simple-line-icons/simple-line-icons.min.css
200 OK 9.6 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/plugins/simple-line-icons/simple-line-icons.min.css
IP
File type ASCII text, with very long lines (9503)
Hash a53228da5bc8d11855e526f9230514ee
f7d91e012ef91f5ec9e2bd3577527019bcc55ee8
4b681a7b7a54a5f692028e2556dfc29a0e43c6e08f3e773f3daf7e3f02742bc3
GET /assets/global/plugins/simple-line-icons/simple-line-icons.min.css HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:59 GMT
Accept-Ranges: bytes
Content-Length: 9561
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
appraisals.alphamead.com/assets/global/plugins/font-awesome/css/font-awesome.min.css
200 OK 24 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/plugins/font-awesome/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (23577)
Hash 04425bbdc6243fc6e54bf8984fe50330
8c15c6bd82c71e9ef1bb11cf24e502fe07518ac5
541ac58217a8ade1a5e292a65a0661dc9db7a49ae13654943817a4fbc6761afd
GET /assets/global/plugins/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:59 GMT
Accept-Ranges: bytes
Content-Length: 23739
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
appraisals.alphamead.com/assets/global/plugins/uniform/css/uniform.default.css
200 OK 11 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/plugins/uniform/css/uniform.default.css
IP
Hash c526c6ad1d502a949bb8c2eaa513ad0e
485783614d1dd48dbce31a5bbed9a20e8e066b21
4dff4ca53241810c31e9f71ab3fe58a802fd04d4220b953bd366429bb326849c
GET /assets/global/plugins/uniform/css/uniform.default.css HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:59 GMT
Accept-Ranges: bytes
Content-Length: 10851
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
appraisals.alphamead.com/assets/admin/pages/css/login2.css
200 OK 4.2 kB URL HTTP/1.1 appraisals.alphamead.com/assets/admin/pages/css/login2.css
IP
Hash 468a77b7f2d06357949caa79cf1963c4
3dd49c91a1a29d3fa2acb042a7e269d4f8965f69
80d49dec4c664064b7c84e0faafc0cc11ca708ee737e829555aa067dc39926fe
GET /assets/admin/pages/css/login2.css HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:58 GMT
Accept-Ranges: bytes
Content-Length: 4151
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
appraisals.alphamead.com/assets/global/plugins/bootstrap-datepicker/css/datepicker3.css
200 OK 34 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/plugins/bootstrap-datepicker/css/datepicker3.css
IP
Hash 6423f5d46d07426001de8ef09929910f
907def900e077adbdcff0e9da4d5397989021520
c8619f104a827702edfa43b8a9d98475cf7c9da25cb49d747b7805207916a54d
GET /assets/global/plugins/bootstrap-datepicker/css/datepicker3.css HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:59 GMT
Accept-Ranges: bytes
Content-Length: 33704
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
appraisals.alphamead.com/assets/admin/layout/css/layout.css
404 Not Found 315 B URL HTTP/1.1 appraisals.alphamead.com/assets/admin/layout/css/layout.css
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /assets/admin/layout/css/layout.css HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
appraisals.alphamead.com/assets/admin/layout/css/themes/default.css
404 Not Found 315 B URL HTTP/1.1 appraisals.alphamead.com/assets/admin/layout/css/themes/default.css
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /assets/admin/layout/css/themes/default.css HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
appraisals.alphamead.com/assets/admin/layout/css/custom%20.css
404 Not Found 315 B URL HTTP/1.1 appraisals.alphamead.com/assets/admin/layout/css/custom%20.css
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /assets/admin/layout/css/custom%20.css HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
appraisals.alphamead.com/assets/global/css/plugins.css
200 OK 46 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/css/plugins.css
IP
File type assembler source, ASCII text
Hash ec38eb5ea01e0cccdf80271728dc61a6
31ab7593c0bfda34aab58202d3861515b2fab716
d22b50942f61a08708648dcfb10c68c5885c20c24e34b8c524b8d52d0bdf0f0b
GET /assets/global/css/plugins.css HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:58 GMT
Accept-Ranges: bytes
Content-Length: 46052
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
appraisals.alphamead.com/SpryAssets/SpryValidationTextField.css
200 OK 3.1 kB URL HTTP/1.1 appraisals.alphamead.com/SpryAssets/SpryValidationTextField.css
IP
File type assembler source, ASCII text
Hash 5070db91fb17ee2a5da3403a4f4d24b2
ee19390fd09656b9ae4ead87e71bd972eacbb5f7
b353b4e1e2b751c58514001d2eac7f56ebe06f71a43844fa869aa3e543d50462
GET /SpryAssets/SpryValidationTextField.css HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:58 GMT
Accept-Ranges: bytes
Content-Length: 3089
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
appraisals.alphamead.com/SpryAssets/SpryValidationPassword.css
200 OK 2.4 kB URL HTTP/1.1 appraisals.alphamead.com/SpryAssets/SpryValidationPassword.css
IP
Hash 747e442a5764d725f1f0e05cce555ed2
97049a432de6a075a9fdb27cb3729a26de654a9c
8d78972beb0bc74e75fe083935afe3b065b3b0abfcfa03bc9cf7c5801f3629fd
GET /SpryAssets/SpryValidationPassword.css HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:58 GMT
Accept-Ranges: bytes
Content-Length: 2394
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 15:41:42 GMT
age: 3477
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
appraisals.alphamead.com/assets/global/plugins/bootstrap/css/bootstrap.min.css
200 OK 117 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/plugins/bootstrap/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65371)
Size 117 kB (117150 bytes)
Hash 58a49b3689d699cb72ffda7252d99fcb
973e37a8502921d56bc02bb55321f45b072b6f71
d31bef450ee67b64f9b70bfdf41fe4e00c65438705cc1fbb48ea6026d3a5d697
GET /assets/global/plugins/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:59 GMT
Accept-Ranges: bytes
Content-Length: 117150
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
appraisals.alphamead.com/SpryAssets/SpryValidationConfirm.css
200 OK 1.9 kB URL HTTP/1.1 appraisals.alphamead.com/SpryAssets/SpryValidationConfirm.css
IP
Hash c7a57404be219efed5ad23309158eb07
aeb94cb7c3ef4068bf27e4841ad98e458eae9a9f
d1e592b5d82ef49b441376a6f20fcfd36f9a6458a42690ff6fd1c1043bf182a1
GET /SpryAssets/SpryValidationConfirm.css HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:58 GMT
Accept-Ranges: bytes
Content-Length: 1918
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
appraisals.alphamead.com/SpryAssets/SpryValidationSelect.css
200 OK 2.0 kB URL HTTP/1.1 appraisals.alphamead.com/SpryAssets/SpryValidationSelect.css
IP
Hash 59a0118c6d703aab2f39a2e8ce4f6477
b08e8ab3e17c5e42dc738fe70dd012f907c56433
0182094898f67cab23decee7609d7a08e5d87efd41b2656ffe97322ae6d598b4
GET /SpryAssets/SpryValidationSelect.css HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:58 GMT
Accept-Ranges: bytes
Content-Length: 1977
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
appraisals.alphamead.com/SpryAssets/SpryValidationConfirm.js
200 OK 17 kB URL HTTP/1.1 appraisals.alphamead.com/SpryAssets/SpryValidationConfirm.js
IP
Hash 36f193e4603fa115a16d141d8d252fdb
36508700fb69ce66301a1eda7f2a574482882d51
2b32130e0662bc06cacb9b8ea7a72a06732aa5d9849da2e551d6c82219abeac9
Analyzer Verdict Alert fortinet Malware
GET /SpryAssets/SpryValidationConfirm.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:58 GMT
Accept-Ranges: bytes
Content-Length: 16642
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
appraisals.alphamead.com/SpryAssets/SpryValidationSelect.js
200 OK 16 kB URL HTTP/1.1 appraisals.alphamead.com/SpryAssets/SpryValidationSelect.js
IP
Hash 0a0d69d4afcd5fce66d0d23d4189bf4a
9fd938571498d463ee547aa8141d55c769b71f89
cb37a062cfef9106e34d724d962ee6caaf329f2b718bc32af2481ed2313bbe80
Analyzer Verdict Alert fortinet Malware
GET /SpryAssets/SpryValidationSelect.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:58 GMT
Accept-Ranges: bytes
Content-Length: 16228
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
appraisals.alphamead.com/SpryAssets/SpryValidationPassword.js
200 OK 20 kB URL HTTP/1.1 appraisals.alphamead.com/SpryAssets/SpryValidationPassword.js
IP
Hash c7b8bfebdc033771013e7d04cc3811f7
95c99841d9ebc4f5c1ebc3a0d7421b2a3831dccf
671b7c10b52613c6c562eac06beef059c026dbd182e50743579a5df0774ccce4
Analyzer Verdict Alert fortinet Malware
GET /SpryAssets/SpryValidationPassword.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:58 GMT
Accept-Ranges: bytes
Content-Length: 20230
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9425
Expires: Tue, 31 Jan 2023 19:16:44 GMT
Date: Tue, 31 Jan 2023 16:39:39 GMT
Connection: keep-alive
appraisals.alphamead.com/assets/global/css/components-rounded.css
200 OK 359 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/css/components-rounded.css
IP
File type ASCII text, with very long lines (511)
Size 359 kB (359373 bytes)
Hash 9a9597a8518b298a196cc99c828c0316
85d35ebafba4908aeca2b7bd97165f6c2e7f5515
6d6478840f9aacbb8ca019a1a5bdb68fad9637d7b15450f8eb0e3237cf7ef17d
GET /assets/global/css/components-rounded.css HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:58 GMT
Accept-Ranges: bytes
Content-Length: 359373
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
appraisals.alphamead.com/assets/global/plugins/jquery-migrate.min.js
200 OK 7.2 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/plugins/jquery-migrate.min.js
IP
File type ASCII text, with very long lines (7085)
Hash eb05d8d73b5b13d8d84308a4751ece96
743052320809514fb788fe1d3df37fc87ce90452
1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d
Analyzer Verdict Alert fortinet Malware
GET /assets/global/plugins/jquery-migrate.min.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:59 GMT
Accept-Ranges: bytes
Content-Length: 7199
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
appraisals.alphamead.com/assets/global/plugins/bootstrap/js/bootstrap.min.js
200 OK 36 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/plugins/bootstrap/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (32405)
Hash 046ba2b5f4cff7d2eaaa1af55caa9fd8
b3f2ef9f985e7906c9360756b73cd64bf7733647
c8eeec83fe8bf655eeeda291466d268770436dde4e3e40416a85d05d3893e892
Analyzer Verdict Alert fortinet Malware
GET /assets/global/plugins/bootstrap/js/bootstrap.min.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:59 GMT
Accept-Ranges: bytes
Content-Length: 35452
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
appraisals.alphamead.com/SpryAssets/SpryValidationTextField.js
200 OK 75 kB URL HTTP/1.1 appraisals.alphamead.com/SpryAssets/SpryValidationTextField.js
IP
File type ASCII text, with very long lines (430)
Hash cb5d591ab3ae137715aeeda1fba09ab6
546721b9fd09155dce7575afdf0b9d1769d62eed
c68f7f490ee04a990e47c93086b6eb344516546e94bccb0ed1f07e8b6424a8bf
Analyzer Verdict Alert fortinet Malware
GET /SpryAssets/SpryValidationTextField.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:58 GMT
Accept-Ranges: bytes
Content-Length: 75266
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
appraisals.alphamead.com/assets/global/plugins/jquery.min.js
200 OK 96 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/plugins/jquery.min.js
IP
File type ASCII text, with very long lines (32047)
Hash 019c5fb7c4771808dc65e1096c771348
44a33096a0498722bc286c5f190d37b070db2d23
c8963b6bd2ca8497603794bf9adcbff7a3ea55c9c3edef3d5a992405ee256a90
Analyzer Verdict Alert fortinet Malware
GET /assets/global/plugins/jquery.min.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:59 GMT
Accept-Ranges: bytes
Content-Length: 95930
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
appraisals.alphamead.com/assets/global/plugins/jquery.blockui.min.js
200 OK 9.5 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/plugins/jquery.blockui.min.js
IP
File type ASCII text, with very long lines (9135)
Hash 9c0634f65cf015dedbbf59d92917d993
0a6fe774c92c3864cd23fd3153cb084bc21ba954
9a5429323bee6b845f003cf2d5e694cd4520873a45c11f1281ddf8b0ff928a34
Analyzer Verdict Alert fortinet Malware
GET /assets/global/plugins/jquery.blockui.min.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:59 GMT
Accept-Ranges: bytes
Content-Length: 9530
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
appraisals.alphamead.com/assets/global/plugins/uniform/jquery.uniform.min.js
200 OK 8.3 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/plugins/uniform/jquery.uniform.min.js
IP
File type ASCII text, with very long lines (8308), with no line terminators
Hash 2842654782a75cbbc8cd66c60b72631d
ef3a49fe1bcf31cca95cdee5563928a850a1b154
8a41d60f7762f2db0792fd909c3c09725f93d8fe1e94efcb2ca04293921e277a
Analyzer Verdict Alert fortinet Malware
GET /assets/global/plugins/uniform/jquery.uniform.min.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:59 GMT
Accept-Ranges: bytes
Content-Length: 8308
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
appraisals.alphamead.com/assets/global/plugins/jquery.cokie.min.js
200 OK 1.4 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/plugins/jquery.cokie.min.js
IP
File type ASCII text, with very long lines (1143)
Hash 0214cdd7b2e1777c1bd5d4b8b37f8e6e
14807705dc712e971a6b062334af428a6f509890
cc41582b9e19e394e7799c5409d517a80b2e723c9725ce03125c29dc1dd6251a
Analyzer Verdict Alert fortinet Malware
GET /assets/global/plugins/jquery.cokie.min.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:59 GMT
Accept-Ranges: bytes
Content-Length: 1384
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
appraisals.alphamead.com/assets/global/plugins/jquery-validation/js/jquery.validate.min.js
200 OK 22 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/plugins/jquery-validation/js/jquery.validate.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (21388)
Hash 592cfb0f0ee44203388e32ea92da4c31
353cfe17386319e8d0d575ab479021d16f49e452
5fe55811cab9115f1733276abdc3e822047bd84f6ab9611fe64fcca43261e49f
Analyzer Verdict Alert fortinet Malware
GET /assets/global/plugins/jquery-validation/js/jquery.validate.min.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:59 GMT
Accept-Ranges: bytes
Content-Length: 21525
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/1.1 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://appraisals.alphamead.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 44856
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 29 Jan 2023 10:00:31 GMT
Expires: Mon, 29 Jan 2024 10:00:31 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 15 Aug 2022 18:20:18 GMT
Content-Type: font/woff2
Age: 196748
appraisals.alphamead.com/assets/global/plugins/bootstrap-datepicker/js/bootstrap-datepicker.js
200 OK 47 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/plugins/bootstrap-datepicker/js/bootstrap-datepicker.js
IP
Hash e3e9b8ef5c8e0d866c653062160e2113
56eb2e4bb82d3c6e9e7e7f3489f9b402699c5a6f
3055ca668bac918e4b41a3a16da3126e352c6108a5117d9d09d686b48bc9d63b
Analyzer Verdict Alert fortinet Malware
GET /assets/global/plugins/bootstrap-datepicker/js/bootstrap-datepicker.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:59 GMT
Accept-Ranges: bytes
Content-Length: 46964
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
appraisals.alphamead.com/assets/global/scripts/metronic.js
200 OK 36 kB URL HTTP/1.1 appraisals.alphamead.com/assets/global/scripts/metronic.js
IP
File type ASCII text, with very long lines (338)
Hash 0423b6e5787f88bae967dafbc54020ce
8f61437ee4721a11fed99b621b25c24188cf3748
6cb08a0b3e65eb96a45ab92353da7a8768c054884cb0f4822b7c5c2e17cfd315
Analyzer Verdict Alert fortinet Malware
GET /assets/global/scripts/metronic.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:59 GMT
Accept-Ranges: bytes
Content-Length: 35652
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
appraisals.alphamead.com/assets/admin/layout/scripts/layout.js
404 Not Found 315 B URL HTTP/1.1 appraisals.alphamead.com/assets/admin/layout/scripts/layout.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Malware
GET /assets/admin/layout/scripts/layout.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
appraisals.alphamead.com/assets/admin/layout/scripts/demo.js
404 Not Found 315 B URL HTTP/1.1 appraisals.alphamead.com/assets/admin/layout/scripts/demo.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Malware
GET /assets/admin/layout/scripts/demo.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
appraisals.alphamead.com/assets/admin/pages/scripts/login.js
200 OK 8.2 kB URL HTTP/1.1 appraisals.alphamead.com/assets/admin/pages/scripts/login.js
IP
Hash 582c6c8180ca3b039a2c48bbe107848f
25c6c66931935badd7f5d9f437afb7e18198ff52
427c42d4739a15eb0c22a987ab2e01a2a388d2aea86958f7ded98132f9fa2ae8
Analyzer Verdict Alert fortinet Malware
GET /assets/admin/pages/scripts/login.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:58 GMT
Accept-Ranges: bytes
Content-Length: 8195
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
appraisals.alphamead.com/assets/admin/pages/scripts/components-pickers.js
200 OK 7.9 kB URL HTTP/1.1 appraisals.alphamead.com/assets/admin/pages/scripts/components-pickers.js
IP
Hash 0d40a24cc490c135d466ddfad70060c5
7413cd8a40ad72b86c61dd428d159d39b2e7746b
197e14964c5eb816794c27eb56cae16b5a25bcf9188bb13e904e6f374e09e802
Analyzer Verdict Alert fortinet Malware
GET /assets/admin/pages/scripts/components-pickers.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:58 GMT
Accept-Ranges: bytes
Content-Length: 7857
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
appraisals.alphamead.com/assets/global/img/remove-icon-small.png
200 OK 193 B URL HTTP/1.1 appraisals.alphamead.com/assets/global/img/remove-icon-small.png
IP
File type PNG image data, 9 x 9, 8-bit/color RGBA, non-interlaced\012- data
Hash 484cbf3b06841ed260cc960fcd8e79e4
266c978f79733d390e7fb86572e8d8ed10c4ffd2
1dfb3fabea1fd9877a18fa9b695a4a37042d35d0279e67ebebe8fc6f1d5761db
GET /assets/global/img/remove-icon-small.png HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/assets/global/css/components-rounded.css
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:58 GMT
Accept-Ranges: bytes
Content-Length: 193
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
appraisals.alphamead.com/assets/my-assets/images/amf-app-logo.png
200 OK 64 kB URL HTTP/1.1 appraisals.alphamead.com/assets/my-assets/images/amf-app-logo.png
IP
File type PNG image data, 175 x 119, 8-bit/color RGBA, non-interlaced\012- data
Hash 806acc0d2ec88e009340aaa745f81a47
7d8775149498b7487a383d18c16f01aad4276d12
7ff7c4bfb50159bbf8c12895a2909ff27d5c8afe4c060dcfafc652c339f94362
GET /assets/my-assets/images/amf-app-logo.png HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Last-Modified: Mon, 18 Apr 2022 23:19:59 GMT
Accept-Ranges: bytes
Content-Length: 63456
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KNzZGJD1btLmV6n45Xs6Xw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: WUwrzGM6BET7i7KgWI+1LcAaSEE=
appraisals.alphamead.com/assets/admin/layout/scripts/layout.js
404 Not Found 315 B URL HTTP/1.1 appraisals.alphamead.com/assets/admin/layout/scripts/layout.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Malware
GET /assets/admin/layout/scripts/layout.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 16:39:39 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
appraisals.alphamead.com/assets/admin/layout/scripts/demo.js
404 Not Found 315 B URL HTTP/1.1 appraisals.alphamead.com/assets/admin/layout/scripts/demo.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert fortinet Malware
GET /assets/admin/layout/scripts/demo.js HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 16:39:40 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
appraisals.alphamead.com/favicon.ico
404 Not Found 315 B URL HTTP/1.1 appraisals.alphamead.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /favicon.ico HTTP/1.1
Host: appraisals.alphamead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appraisals.alphamead.com/login.php?err=Please%20login%20to%20continue!
Cookie: PHPSESSID=bj4vlejhlu3epvfatutq4ga0h3
HTTP/1.1 404 Not Found
Date: Tue, 31 Jan 2023 16:39:40 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7165
Expires: Tue, 31 Jan 2023 18:39:06 GMT
Date: Tue, 31 Jan 2023 16:39:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7165
Expires: Tue, 31 Jan 2023 18:39:06 GMT
Date: Tue, 31 Jan 2023 16:39:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7165
Expires: Tue, 31 Jan 2023 18:39:06 GMT
Date: Tue, 31 Jan 2023 16:39:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7165
Expires: Tue, 31 Jan 2023 18:39:06 GMT
Date: Tue, 31 Jan 2023 16:39:41 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9169e1aa-278a-45ac-a3cb-92421681099d.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9169e1aa-278a-45ac-a3cb-92421681099d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 01f406ed5d9b17a7aa00015301bddf94
d78e18830fc6cf231f66f95cc0e01520cfeebddf
33245ea764fb634a01ee9657e529a30567588ecbb10fc0e6499aac14cd21fe81
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9169e1aa-278a-45ac-a3cb-92421681099d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7333
x-amzn-requestid: 7563c72f-e40d-4e96-a73f-8aa404ae0b25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhklyFK8IAMFzMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7be-7eb009311701187873f05b20;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -npeyE-5ETAaI6cs7oewWxVe4ZUrtmhvCNC4tMWT_3ab3hZ3tw060w==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 18:56:07 GMT
age: 78214
etag: "d78e18830fc6cf231f66f95cc0e01520cfeebddf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d957012d3e2b8c3bc0eefe11d66e8554
1959fdd94846fa3791c4890578dd15336b909dcc
a97e81ec5eb2eda6a603bf4bfd4fa4ef4fab762747479489e99e6c713258a736
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13853
x-amzn-requestid: ca6ea6e7-3e13-4194-87f5-20a07b813e21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk3zzF4hIAMFwWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839b1-772487cb1b7495c52c552d36;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T5CaUojMEG8x8vki59UdIhI8IbbBRY_7w3xgiW3RCZlHTyeHPLIy2Q==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:47:13 GMT
age: 67948
etag: "1959fdd94846fa3791c4890578dd15336b909dcc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2797bfd35b7ec24888de84be14f7f2ec
8e315ac5856967286eaa8769e081d827fb4ca39e
b99f3bd73eb4395194bc7bb6a1b801750182239e5b70f3207f99e494b60b72ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11129
x-amzn-requestid: 74f2a4dd-7d5d-4839-90a8-d2e74f6d785d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffDBZGRPoAMFedg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e53b-3de444596550bb41188ada5b;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:17:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9Fga247EZZqiGmdMJ72resdBZR2KLgflGDBPESmuw9cFVs4hSzMzTw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 03:40:17 GMT
age: 46764
etag: "8e315ac5856967286eaa8769e081d827fb4ca39e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c4934be94898028e2ab696561b51462
6cf734e2d29938688913daacfb75506d8e004a94
239adcbb538b7a6d1483c65c7694d4a9f9fa9cadf456ab5681c4b764185e3596
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9987
x-amzn-requestid: 67109f87-6073-4991-b540-cdeedc2d7b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flYlPF9uIAMFXMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86e21-60ac2c7b37c72e6e54a5c69d;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:25:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hDjKAMYoVwHdCqS8t08PrWyfQQLiWaosXbi3FOJY8BeV0yAFCGziGw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:58:16 GMT
age: 52885
etag: "6cf734e2d29938688913daacfb75506d8e004a94"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b003bbe-42d9-4014-8fbe-ddff072cc8b4.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b003bbe-42d9-4014-8fbe-ddff072cc8b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 42a648f9d34d8fb703f0b80a52e0deec
7ccefd66211d249ae5266c3b6ae3375a19e5cb6d
a57f8792e8caa2a31045a141d019f53f51b633d5d04baebdae97387740c6639d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b003bbe-42d9-4014-8fbe-ddff072cc8b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5903
x-amzn-requestid: f6fca787-17c1-4edd-9ab0-a00e2fccc7a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboufGeSoAMF-1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d487f6-58be6bdc5e3e767e1ea47b86;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:27:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZKuBcZgC6yolu1QcaXZKAIIDynG3Zywq1d7sWI8Jlq3ULwlr6XlhWQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 13:05:29 GMT
age: 12852
etag: "7ccefd66211d249ae5266c3b6ae3375a19e5cb6d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 976dda397f9292a498ca9db5599c0378
dad9e9c3462907a2475046aee36d57f8309cd44e
7ed9ccf2ff75ca53f5ba56a1d2127e0f09b0ae941cad8b042e8df01ad01e614b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6844
x-amzn-requestid: 0542cf46-5045-459f-a35f-f6c0d3f5f7b7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flZsxH0YIAMF9ew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86feb-692d50f710a131df2ee49aa8;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 6bbFjAsd03GN8zzBnAFBm7xA8igZ_xHJsOHzw7nwNgRxiWUDLPGjpQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:53:29 GMT
age: 53172
etag: "dad9e9c3462907a2475046aee36d57f8309cd44e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
199.223.115.87
23.36.77.32