Overview

URLcorgetec.org/docs/Retry/index.html
IP 192.185.140.161 (United States)
ASN#46606 UNIFIEDLAYER-AS-1
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-03 21:21:11 UTC
StatusLoading report..
IDS alerts0
Blocklist alert4
urlquery alerts
6
Phishing - Adobe
Tags None

Domain Summary (13)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
code.jquery.com.de (3) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1277 404147 38.34.185.163
r3.o.lencr.org (7) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2366 6208 23.36.76.226
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 54.70.68.230
ocsp.pki.goog (2) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 686 1400 142.250.74.131
ajax.googleapis.com (1) 12905 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 388 30807 142.250.74.106
img-getpocket.cdn.mozilla.net (7) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3801 51287 34.120.237.76
ocsp.digicert.com (2) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 682 1594 93.184.220.29
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2371 34.102.187.140
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
corgetec.org (3) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1321 43030 192.185.140.161
maxcdn.bootstrapcdn.com (1) 724 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 391 14724 104.18.11.207
i.ibb.co (6) 13485 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2266 2798613 162.19.58.158

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-12-03 medium corgetec.org/docs/Retry/index.html Adobe Inc.

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-03 medium corgetec.org/docs/Retry/index.html Phishing
2022-12-03 medium code.jquery.com.de/jquery-3.5.1.min.js Phishing
2022-12-03 medium code.jquery.com.de/ip.php Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 4 reports on IP: 192.185.140.161
Date UQ / IDS / BL URL IP
2022-10-19 10:41:18 UTC 3 - 0 - 0 corgetec.org/docs/Retry/index.html 192.185.140.161
2022-12-20 06:03:00 UTC 3 - 0 - 0 corgetec.org/docs/Retry/index.html 192.185.140.161
2022-12-03 21:21:11 UTC 6 - 0 - 4 corgetec.org/docs/Retry/index.html 192.185.140.161
2022-12-03 17:43:00 UTC 6 - 0 - 4 corgetec.org/docs/Retry/index.html 192.185.140.161


Last 5 reports on ASN: UNIFIEDLAYER-AS-1
Date UQ / IDS / BL URL IP
2023-06-04 10:25:12 UTC 0 - 0 - 3 192.254.234.149/~aipcnet/Calendario2008/dir/c (...) 192.254.234.149
2023-06-04 10:24:58 UTC 0 - 0 - 3 192.254.234.149/~aipcnet/Calendario2008/dir/c (...) 192.254.234.149
2023-06-04 10:22:45 UTC 0 - 0 - 12 108.167.188.124/~hlmco062/hlm.com.br/wp-admin (...) 108.167.188.124
2023-06-04 10:22:39 UTC 0 - 0 - 12 108.167.188.124/~hlmco062/hlm.com.br/wp-admin (...) 108.167.188.124
2023-06-04 09:23:20 UTC 0 - 0 - 4 artejoy.com/gdelawvxwq/dropITboris.zip 162.241.118.35


Last 4 reports on domain: corgetec.org
Date UQ / IDS / BL URL IP
2022-10-19 10:41:18 UTC 3 - 0 - 0 corgetec.org/docs/Retry/index.html 192.185.140.161
2022-12-20 06:03:00 UTC 3 - 0 - 0 corgetec.org/docs/Retry/index.html 192.185.140.161
2022-12-03 21:21:11 UTC 6 - 0 - 4 corgetec.org/docs/Retry/index.html 192.185.140.161
2022-12-03 17:43:00 UTC 6 - 0 - 4 corgetec.org/docs/Retry/index.html 192.185.140.161


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-11-11 14:24:51 UTC 0 - 0 - 4 sapphire-plume-cacao.glitch.me/cx.htm 52.45.13.159
2022-10-19 10:41:18 UTC 3 - 0 - 0 corgetec.org/docs/Retry/index.html 192.185.140.161
2022-12-20 06:03:00 UTC 3 - 0 - 0 corgetec.org/docs/Retry/index.html 192.185.140.161
2022-12-03 17:43:00 UTC 6 - 0 - 4 corgetec.org/docs/Retry/index.html 192.185.140.161
2022-11-29 03:38:13 UTC 1 - 0 - 3 bafybeieuncgymt7ede63exm4nmebzh7ugai4mdsowpyl (...) 209.94.90.1

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (71)
#1 JavaScript::Write (size: 95) - SHA256: 3159a6824bcee25dac7e2d4c080ec7bb002c008bc5ef33adf2ac51c95c9d6a31
	< span > To read the document, please choose your email provider below login to view shared file.
#2 JavaScript::Write (size: 136) - SHA256: 43b6bfe2423ec69cb7e14f8264099d578214c6282684b06a7346dad4168404a1
              < div class = "alert alert-danger"
              id = "msg2"
              style = "display: none;" > Sorry, your sign - in timed out.Please sign in again < /div>
#3 JavaScript::Write (size: 21) - SHA256: 4ac23847b1620b55a5733570b15e60d1ca5aba5a1b8da609ac9d80493fdd5369
            < /center>
#4 JavaScript::Write (size: 20) - SHA256: 59032ef4596201d7c36c6258d7aef0bc8369edf1fd9974a02559cd1151cafcf1
              < /div>
#5 JavaScript::Write (size: 107) - SHA256: eecec04548de9914036d54d1aabc82d14ba53b69f0c8b0f574a37c20bdcc0340
< span style = "font-weight: 900;" > CopyRight & copy;
2022 Adobe system incorporated, All right reserved. < /span>
#6 JavaScript::Write (size: 23) - SHA256: b1a36d4f7090185e2bf4733ca496477d5ef7d48ca86fad96efe55cdc4d795e2e
	< div class = "form-box" >
#7 JavaScript::Write (size: 11) - SHA256: 45affbcc072fece72416bf8d3c7c8fe1c1bc66d3388049074be564b5bdba4995
  < /button>
#8 JavaScript::Write (size: 2) - SHA256: ab2cd774889293a061562883ef36019d203ac809e3562e4571907e991a8e6171
">
#9 JavaScript::Write (size: 20) - SHA256: 019a677161fdfafe79387fa32608f17da2a76a872b8748a19970590a7645d430
            < center >
#10 JavaScript::Write (size: 37) - SHA256: d9704ab3b5fac28eb225aabec129c84587d43b84e737bc689bb886c1147688c0
              < div class = "col-lg-12" >
#11 JavaScript::Write (size: 22) - SHA256: 561dacc469aae477d801730c29a5ff4f376ae9d9c879ba0dad0bf97a749e8f7e
                < /div>
#12 JavaScript::Write (size: 89) - SHA256: d9843669d55723d5c0c270520bb75d222c514787f8fe8c313d5d653f8de71885
  < button class = "learn-more"
  data - toggle = "modal"
  onclick = "outt()"
  data - target = "#myModal" >
#13 JavaScript::Write (size: 22) - SHA256: 7a88aa86e2a55e3272765cc7c35f7a10a91b7391e3e72709f04a17feb45536f5
		< div id = "container" >
#14 JavaScript::Write (size: 89) - SHA256: 98a67c808b593ca22dd7c4f936ea94c4086dca36aa1125f283339a8182ff4df5
  < button class = "learn-more"
  data - toggle = "modal"
  onclick = "inb()"
  data - target = "#myModal" >
#15 JavaScript::Write (size: 87) - SHA256: c010f0a5076edd8c0731bab5c7e94a7f46d38924bf2ff8401162cf057a9c043b
	< img src = "https://i.ibb.co/QrhwkBw/inbox.png"
	style = " width: 32px; margin-top: 8px; " >
#16 JavaScript::Write (size: 25) - SHA256: 9da96cd8d235cb3061d95af71dcc370c3dbd9dab9934e5c5a9839d00db5ba1e0
            < /form></div >
#17 JavaScript::Write (size: 44) - SHA256: bb29c4d8c5e209a880385a649c0c9eccf55f02b8f668b6b4f06a8bbd1864a232
    < span class = "button-text" > Outlook < /span>
#18 JavaScript::Write (size: 47) - SHA256: a5c33c3fe19bd622bbf67782567577bc35e83ad8663d5879d73c440503b72844
    < span class = "button-text" > Other Mail < /span>
#19 JavaScript::Write (size: 17) - SHA256: 1ccdd57171200f2c38b04049f58ffe778a1844bdc8f942bfdcd8ad686428c731
    width: 473 px;
#20 JavaScript::Write (size: 34) - SHA256: 10e3340b728207d0db50c55f2fd88661b4214db1cd6b7d34c3e2290ee7af0ffd
          < div class = "modal-body" >
#21 JavaScript::Write (size: 38) - SHA256: 70a15db29a3f6364c79d06bb07ed3a89f481d7cc903d38803842997ed63d5a26
            < div class = "modal-footer" >
#22 JavaScript::Write (size: 8) - SHA256: 36f22dea8c8fee824ec35eb7a10c44d7792c887f182ebc5745b3bbdd5335693d
< center >
#23 JavaScript::Write (size: 11) - SHA256: 8efbda388ce0e77ece1f4a49b7e510068e3ba40378fe90bf80f0641b789d1026
    < /span>
#24 JavaScript::Write (size: 11) - SHA256: 23fa501b2d61f6740caf0e29417e5f7bf4de1977ccf9d92f80bcc5cf1f40d323
< /div>	<br>
#25 JavaScript::Write (size: 44) - SHA256: 3184b1721f42db078ad1f34b308a1e18611fa29b3f6c092a6b9c2fff44f9cb40
    < span class = "button-text" > Hotmail < /span>
#26 JavaScript::Write (size: 135) - SHA256: caf14682d03055469481ba8e361f992ec322d1ccdb6886d7a733d192e310503a
                  < input type = "email"
                  name = "email"
                  class = "form-control"
                  id = "em"
                  aria - describedby = "emailHelp"
                  placeholder = "Enter email" >
#27 JavaScript::Write (size: 144) - SHA256: 315f1d8dfd5a866f92f9f2960012485ee2ebcc2eb0e44ee1fb3246b85e10389f
                  < input type = "password"
                  name = "password"
                  class = "form-control"
                  id = "ps"
                  aria - describedby = "emailHelp"
                  placeholder = "Enter Password" >
#28 JavaScript::Write (size: 97) - SHA256: 546d753aa528c4e11281054bbfa5f1d861aeb98ecb7307ef609ba8ad2cb7fdb0
              < button type = "button"
              class = "btn btn-secondary"
              data - dismiss = "modal" > Close < /button>
#29 JavaScript::Write (size: 14) - SHA256: 9c370fbe57d1d10503c7d54daa245e263e252b0f99413b957c46bd68ab1850ec
        < /div>
#30 JavaScript::Write (size: 9) - SHA256: 3741835251234f1b821108678298df9ca6e1a7bb223c0434b61b3f1198182b1f
< /center>
#31 JavaScript::Write (size: 89) - SHA256: c727800b1aa00030ba161566c1927d1921483f3b475e96e2b86e23ec0ad99f51
     < img src = "https://i.ibb.co/SKSp1CJ/out.png"
     style = " width: 32px; margin-top: 8px; " >
#32 JavaScript::Write (size: 88) - SHA256: 0d15b5000d9eee75a920b74b530de18dc33af31279b2f22a8dbfbc7482021dd9
            < button type = "button"
            class = "close"
            data - dismiss = "modal"
            aria - label = "Close" >
#33 JavaScript::Write (size: 140) - SHA256: 64f7226f600333fe40c81c950703f7091863550f2e2a2aef241e82c7d5b9e77a
              < div class = "alert alert-danger"
              id = "msg3"
              style = "display: none;" > Your password is incorrect, please verify your password < /div>
#34 JavaScript::Write (size: 60) - SHA256: 190cd967937f89c4e91bab8b39e227cfcba191467584ec7770cd6d626c2156ca
            < form id = "contact"
            class = "form-horizontal well" >
#35 JavaScript::Write (size: 91) - SHA256: 60e6a52d84c5a6aa326e9709d6024cf21379963a4206826cc846a88149b56bd0
                  < label
                  for = "exampleInputEmail1"
                  style = "color:black" > Email address < /label>
#36 JavaScript::Write (size: 7) - SHA256: 55bf9075d224af92f63bdf22b546f3f9971c801c3fee66b00245250ca7a304d1
< /div>
#37 JavaScript::Write (size: 89) - SHA256: 1136a5c0dbb26cec8476fde0b5c56ffe2f3ac27dbe6d226841af335cda46d80b
  < button class = "learn-more"
  data - toggle = "modal"
  onclick = "hot()"
  data - target = "#myModal" >
#38 JavaScript::Write (size: 85) - SHA256: e331c156e214d46f22d9bb99d768ca5f04afb6f6e12c19cc411f5c3e533a4a16
	< img src = "https://i.ibb.co/whQZs5y/hot.png"
	style = " width: 32px; margin-top: 8px; " >
#39 JavaScript::Write (size: 24) - SHA256: c94a808b37d022881058d14bc32437ec1aa3738d0a2e112fac52a9e971494a8e
< div id = "containerr" >
#40 JavaScript::Write (size: 89) - SHA256: 389ce3d523890bba92bd4f01b1eeb2a0f8fc30d6d008d987e39f9b4584d2ce9c
  < button class = "learn-more"
  data - toggle = "modal"
  onclick = "off()"
  data - target = "#myModal" >
#41 JavaScript::Write (size: 34) - SHA256: 4a2350c2fa668b6b5a0e2e2bdfbda3da7d9b78717c83d5a19d75e4030468fdc3
< div class = "modal-content"
style = "
#42 JavaScript::Write (size: 14) - SHA256: dcbc4b79cfb6e86975fcf3ec556641e8c7bb8e40a6406429427c169c25882b9f
    top: 52 px;
#43 JavaScript::Write (size: 0) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
#44 JavaScript::Write (size: 21) - SHA256: bcd4f5d21baf6e4dba65c5c1a6ab4774816683712dba7a3a6ff3ab13e81c5f47
            < /button>
#45 JavaScript::Write (size: 40) - SHA256: 4eadd0abc672b0c9dd36d92169b6f8b138957024c2f1e468e27ac10352449a6d
                < div class = "form-group" >
#46 JavaScript::Write (size: 123) - SHA256: 9d93c5fe23ef8f0e0ba74ed5bf610c8705475460e1d7d2364a8878901180c0f7
                  < small id = "emailHelp"
                  class = "form-text text-muted" > We 'll never share your email with anyone else.</small>
#47 JavaScript::Write (size: 10) - SHA256: e91772ccb5e6ce5f932d6417eacd9a1e031b957101cdb68be76d417defa7fd28
#48 JavaScript::Write (size: 12) - SHA256: d0e339c0d126d133b9e8c101bd0ccbec051933bff73a98087aa45fdb316b7b74
      < /div>
#49 JavaScript::Write (size: 10) - SHA256: 3fa21e4f082a9765d8fa984a7181782ca536a36947e1263165c100e9cec49ce8
	< /center>
#50 JavaScript::Write (size: 4) - SHA256: 65aef1adba8672a5fe7932d9f9f0dc35c2435893f65112acac628d2dc17a0bcf
< br >
#51 JavaScript::Write (size: 114) - SHA256: fa1983cd86730b6261b9ae465f19aa861b1529069c6aa546bc7b7f799cca4a31
              < div class = "alert alert-danger"
              id = "msg"
              style = "display: none;" > Please fill in all the fields. < /div>
#52 JavaScript::Write (size: 18) - SHA256: df1f9fa56d55e21212695794f5beb88017d129f986adaae74bed63e77a78ed17
            < /div>
#53 JavaScript::Write (size: 86) - SHA256: b67954ac64df05b6f28baedb33b28ef37159f766c54b9679b76c9fdc2897fda4
              < img id = "fieldImg"
              src = ""
              class = "img-fluid rounded-circle"
              width = "80px" >
#54 JavaScript::Write (size: 159) - SHA256: 861f9fdac9b3decbc6c7a5a008488d64ce67abb447956099fd49312cc9c51dbf
              < div class = "alert alert-danger"
              id = "msg1"
              style = "display: none;" > Because you 're accessing sensitive info, you need to verify your password.</div>
#55 JavaScript::Write (size: 149) - SHA256: 89f77b28920a2a92437626955466400c50034c8e65575459b392763f4335d8fa
	< center > < img src = "https://i.ibb.co/DbbSn23/adobe.jpg"
	style = " width: 80px; " > < br > < span style = "font-weight: 900;" > Adobe Document Cloud < /span><br><br>
#56 JavaScript::Write (size: 91) - SHA256: 00a59daca4ff622d66867d1c09f71d7dfeaaf321e1c67d3aedfccad228f1bc0a
     < img src = "https://i.ibb.co/Km5sZSV/offic.png"
     style = " width: 32px; margin-top: 8px; " >
#57 JavaScript::Write (size: 49) - SHA256: 311ac4ba2f0ed511aca5bd00b2469fc9324ccfaabb5793f50ada256e86639337
              < span aria - hidden = "true" > � < /span>
#58 JavaScript::Write (size: 104) - SHA256: 065461a80f7fe808cc5d0364d8ba1db6250db34b43dbbd6176cbad0b688a4eba
              < button class = "btn btn-lg btn-info pull-right"
              id = "sub-btn"
              onclick = "sub()" > Login < /button>
#59 JavaScript::Write (size: 131) - SHA256: 9a39c26dc048698d41f731cf555a5b421283528ade090e62b337c5396fdf1324
< span > Built upon Adobe Document Cloud, Adobe Document Cloud features can be unlocked by providing an additional license key. < /span>
#60 JavaScript::Write (size: 16) - SHA256: a7bffbfa3c6613947bf28946fc23d56a941e60ae5c0bc48022e6c93d607f79fd
    left: 446 px;
#61 JavaScript::Write (size: 6) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23
< /div>
#62 JavaScript::Write (size: 38) - SHA256: fb4b66890a9eff14ede8f60f647514c1e4840d8d563e6302387c4835ea3a7082
      < div class = "modal"
      id = "myModal" >
#63 JavaScript::Write (size: 76) - SHA256: a5191f5d81190d92bc736622121c070cbf8caec265dde3a19ef6dd4005cd53c9
                  < label
                  for = "Password"
                  style = "color:black" > Password < /label>
#64 JavaScript::Write (size: 21) - SHA256: 4bd2d4fe325bc1c1c9aaf44ad43ea4422afd2b6b144583dda6a5a11cb388d936
< div id = "containerr" >
#65 JavaScript::Write (size: 46) - SHA256: 4d1fa46d36e073299d2163a34b213260909dde09c0ebe90d88a50b35c22dc587
    < span class = "button-text" > Office365 < /span>
#66 JavaScript::Write (size: 36) - SHA256: e5f887f7fa6ac8894030ca4ef75fea768ff88daf7cfe7c8503a0a3a9684ccfda
          < div class = "modal-header" >
#67 JavaScript::Write (size: 16) - SHA256: 18a26ac7ece324a554c6cd541a9b6eadabc9b88ef07f673f95392e3e8cfe4afa
          < /div>
#68 JavaScript::Write (size: 98) - SHA256: bd103176a721736367b7d3f2d1b04b239e42f778db7f538fb5918b7deba3601a
              < h5 class = "modal-title"
              style = "color:black" > Login with < span id = "field" > < /span></h
              5 >
#69 JavaScript::Write (size: 7) - SHA256: 411fdb22d8d9298e5d32f2cdcc7e865f8f3bf55c5ad15133b18e1b86bb7a2499
< /span>
#70 JavaScript::Write (size: 20) - SHA256: 0c16a0c801db92861bd04b1e5840547a3f2508f83a4fb3b6627e0a458df8d1eb
< div id = "container" >
#71 JavaScript::Write (size: 44) - SHA256: f808f82ff87e14f4de7cb8ea029c29248493bccd00c355dd854e89a9bba4028e
    < span class = "circle"
    aria - hidden = "true" >


HTTP Transactions (37)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15174
Expires: Sun, 04 Dec 2022 01:33:53 GMT
Date: Sat, 03 Dec 2022 21:20:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3542
Cache-Control: max-age=137355
Date: Sat, 03 Dec 2022 21:20:59 GMT
Etag: "638b2570-1d7"
Expires: Mon, 05 Dec 2022 11:30:14 GMT
Last-Modified: Sat, 03 Dec 2022 10:31:12 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3291
Expires: Sat, 03 Dec 2022 22:15:50 GMT
Date: Sat, 03 Dec 2022 21:20:59 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 21:20:00 GMT
cache-control: public,max-age=3600
age: 59
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: meg+Zug0iEcGvmXj+ByL7V31I1BN8MlGapLmWRbVhCGoSeAtHIzKvmwzzM5tgVWv2c/UMOx+Jes=
x-amz-request-id: HVED37K0MQDFFXQ3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 20:47:16 GMT
age: 2023
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Sat, 03 Dec 2022 21:20:59 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 21:08:58 GMT
cache-control: public,max-age=3600
age: 721
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "75880975C8B409B4068FA192535CCE396109E6B759762A9BFC1AEA31F19C7AEA"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 04 Dec 2022 03:20:59 GMT
Date: Sat, 03 Dec 2022 21:20:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3531
Cache-Control: max-age=132282
Date: Sat, 03 Dec 2022 21:21:00 GMT
Etag: "638b11ab-1d7"
Expires: Mon, 05 Dec 2022 10:05:42 GMT
Last-Modified: Sat, 03 Dec 2022 09:06:51 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /docs/Retry/index.html HTTP/1.1 
Host: corgetec.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             192.185.140.161
HTTP/2 200 OK
content-type: text/html
                                            
last-modified: Tue, 18 Oct 2022 15:44:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 03 Dec 2022 21:20:59 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   38163
Md5:    63ed379ffdda59868003368c13bba5aa
Sha1:   e8ee2e821abeb378872772558673fc46bf23a9e4
Sha256: d7dccf30e1bfdbd9ac87b238749edd76b4331c58b6969d1aadaac5a52f62dab3

Blocklists:
  - openphish: Adobe Inc.
  - fortinet: Phishing
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Y8TpCZcfkF2AZW0s9Ed0FA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             54.70.68.230
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XwbGRvPWl2gL7S89hyO4jYw+ld8=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 21:21:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 
Host: maxcdn.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://corgetec.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.18.11.207
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Sat, 03 Dec 2022 21:21:00 GMT
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 08/04/2021 00:04:37
cdn-edgestorageid: 601
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-proxyver: 1.0
cdn-status: 200
cdn-requestid: 1a094ec5f566140ad8ed25d8ea736316
cdn-cache: HIT
cf-cache-status: HIT
age: 13146207
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 773f59791bd3b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (48664)
Size:   13807
Md5:    5d2e946ae85ddb67276c43f2440d1203
Sha1:   f4acd803596fcae31c2650bfecb62e36e0dab517
Sha256: bd85c5ccfbd5a210d04af035cc8542aca9870ef57b01866894ef2462446d80e0
                                        
                                            GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://corgetec.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.106
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29707
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 15:04:39 GMT
expires: Fri, 01 Dec 2023 15:04:39 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
age: 195381
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32180)
Size:   29707
Md5:    f16500423cc2867eff8b773df637c48f
Sha1:   1cd32d75b59a89c3a70274e383151a61ce0594f4
Sha256: 6ca5dc8ad67639c69117ace46c93703cf5fff82824cfc0bada0cf0fb3b2d41d7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 21:21:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /DbbSn23/adobe.jpg HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://corgetec.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             162.19.58.158
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
date: Sat, 03 Dec 2022 21:21:00 GMT
content-length: 30925
last-modified: Mon, 25 Jul 2022 18:22:42 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, components 3\012- data
Size:   30925
Md5:    be5274af7d8bd25b8148a190ff515399
Sha1:   b8d0850fd92ee935287e17988b89e53607808c8c
Sha256: 26c62dbdf527b8dcbf378ea62f129cbbba3b244730687909ba21ecd729c9d2e6
                                        
                                            GET /SKSp1CJ/out.png HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://corgetec.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             162.19.58.158
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Sat, 03 Dec 2022 21:21:00 GMT
content-length: 67785
last-modified: Mon, 25 Jul 2022 18:23:37 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 2028 x 2048, 8-bit/color RGBA, non-interlaced\012- data
Size:   67785
Md5:    376aead995857685e2c462cbee2f41d9
Sha1:   30ae1e16b8c234681eeae19b0744f9de2cff1fe2
Sha256: 85d3b7fa7bf4b013d879e9f0d8ce82e12bdb91865158097b1ef6ea22bbcb29cb
                                        
                                            GET /whQZs5y/hot.png HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://corgetec.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             162.19.58.158
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Sat, 03 Dec 2022 21:21:00 GMT
content-length: 80752
last-modified: Mon, 25 Jul 2022 18:23:28 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 634 x 640, 8-bit/color RGBA, non-interlaced\012- data
Size:   80752
Md5:    d91879136dd63bbff908f172503ee8ef
Sha1:   d153df3a751bf597f9122ef5467344ea4cf9cc43
Sha256: 7140273615203c465f2cc158769c479a6c179d71990bf8d02fbfe120c812db10
                                        
                                            GET /QdgvH2K/8.jpg HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://corgetec.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             162.19.58.158
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
date: Sat, 03 Dec 2022 21:21:00 GMT
content-length: 161118
last-modified: Mon, 25 Jul 2022 18:22:46 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=709, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], baseline, precision 8, 1200x646, components 3\012- data
Size:   161118
Md5:    f17b5b1163efb6d2d47de6bae6d3a9cd
Sha1:   6d6964b34bc44c6d2b106ade1ae675985b96d012
Sha256: 7829f065e0e10c8466f3d57766e0719421b7b652f6a1082f21b98702f1b28a30
                                        
                                            GET /QrhwkBw/inbox.png HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://corgetec.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             162.19.58.158
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Sat, 03 Dec 2022 21:21:00 GMT
content-length: 402488
last-modified: Mon, 25 Jul 2022 18:23:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 2028 x 2048, 8-bit/color RGBA, non-interlaced\012- data
Size:   402488
Md5:    46f872f4edd542d9a5f74d3dae8cb920
Sha1:   c673e3270bf37eaa882144db99e7cbc1b8109f34
Sha256: b1a7e74d4c3e34abc30cf42b043f8d1bb0259ce5d385994226530dee576fca00
                                        
                                            GET /Km5sZSV/offic.png HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://corgetec.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             162.19.58.158
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Sat, 03 Dec 2022 21:21:00 GMT
content-length: 2053373
last-modified: Mon, 25 Jul 2022 18:24:10 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 2028 x 2048, 8-bit/color RGBA, non-interlaced\012- data
Size:   2053373
Md5:    2df8a0310bd444aaf3ae8611976a68eb
Sha1:   396ac216cbf9e696519a41e1e4b4a2cab2b4c5ee
Sha256: 179b0f95179408bdf0c2453d1faa5fa47b0bf198e326c26a4bd386f961e251db
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17714
Expires: Sun, 04 Dec 2022 02:16:15 GMT
Date: Sat, 03 Dec 2022 21:21:01 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17714
Expires: Sun, 04 Dec 2022 02:16:15 GMT
Date: Sat, 03 Dec 2022 21:21:01 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17714
Expires: Sun, 04 Dec 2022 02:16:15 GMT
Date: Sat, 03 Dec 2022 21:21:01 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17714
Expires: Sun, 04 Dec 2022 02:16:15 GMT
Date: Sat, 03 Dec 2022 21:21:01 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 00:57:24 GMT
age: 73417
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6174
Md5:    b986f9fcbeca91ed5c8d58fbfaf47d19
Sha1:   6e6c8bd2bce144cc4da1cd7be375b046b60dca79
Sha256: 07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XvG2dAUeB914GQ1qJwQRHovAtra8OSjG-CsXeR8UOBq5r8qVjEbPBQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 05:02:08 GMT
age: 58733
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   2942
Md5:    b47431190f34eccf0a6efb98e2a32b7d
Sha1:   9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
Sha256: 08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9715
x-amzn-requestid: c8102cfa-78dc-4d81-ad6a-e16b9132e238
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZO2HQKIAMF8IA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f2b-350c586b568e6565763376bd;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0QkVKyYm9UwlF5FEeli9UsRAQwEi3-c3bMR-QSJxIKRQe7WWT76dGQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:51:06 GMT
age: 84595
etag: "d4b3052021ff3ad1dc4134fa25eb12a98e7c17da"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9715
Md5:    45182367fd4f8b6dd234eef1022acdb1
Sha1:   d4b3052021ff3ad1dc4134fa25eb12a98e7c17da
Sha256: a57fadaf74db2fb457cfe761314d56f021d22146f5bdb6a8bf11b6519e8a558d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7732
x-amzn-requestid: 3781c2b7-082a-468a-a186-f7483494e749
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoEq3IAMFnKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-679fe9f905e07abf4e6a812c;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: V4Z3TZtTDMjnyxZx7VdJrKtZ-PbZkWnsQ0-1eFDem4TVyRGvk0dc7A==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:39:57 GMT
age: 85264
etag: "d45dceb3dc58a07197aa5077582b5b1cd2ff791a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7732
Md5:    379a4a1b95d3aa3c5a4f8e7f9abb030f
Sha1:   d45dceb3dc58a07197aa5077582b5b1cd2ff791a
Sha256: 1b92dec5bf90beffbcd9060052b8788f08645dd4ba34219f7ddb2d40bbd2d151
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4309
x-amzn-requestid: c824c317-e6e3-4006-9f9d-ea54e8170a4c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cf2_tGErIAMF8_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63896b97-7fc523296afea4dd4b5d1de8;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 03:05:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bd85z5A6C0nxpDjeSEPp1NHJxXFO5sy1OgTLz7KpdWz61TNrfyQ47Q==
via: 1.1 40b967aa4aa18637c4b91214147f3cb4.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 03:53:20 GMT
age: 62861
etag: "544428cdad754b1bb7be3cd46a79bf078fd5b450"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4309
Md5:    fcb89ca25035b2bbb71ae5dd175fcd40
Sha1:   544428cdad754b1bb7be3cd46a79bf078fd5b450
Sha256: 36dcbbe6cd2710ee502776b4bcf32053e92b750a55e2bd4cdeadbc694c7c2699
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5354
x-amzn-requestid: 3d58ffea-3433-4c5c-a60b-17f6de3a33e5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cSsnvG44oAMFfyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638427ca-63b375f04189b7ce7d84cd5d;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 03:15:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -AurmlKwF0QgfsWBsV3ZN9ZyDhw1Zo82zUqrpkBbvbCfh0j7evV2Tg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 11:01:04 GMT
age: 37197
etag: "65c8b4abf957f9b54d99d0f78559e639adb29efb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5354
Md5:    1e74254b3fdce7d6b84a71a7aff43789
Sha1:   65c8b4abf957f9b54d99d0f78559e639adb29efb
Sha256: f278c3cc6734da7188862a8c651c803e7ac1fda82234e191761453cb1359d3ee
                                        
                                            GET /jquery-3.5.1.min.js HTTP/1.1 
Host: code.jquery.com.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://corgetec.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             38.34.185.163
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Sat, 03 Dec 2022 21:21:01 GMT
Server: Apache
Last-Modified: Sun, 10 Jul 2022 16:27:33 GMT
Accept-Ranges: bytes
Content-Length: 403295
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   403295
Md5:    d735285640b4136d2176aa494f0f39de
Sha1:   662aace89bfb66cfa74931e9309fa872900e10b5
Sha256: 2dfef129dbe4c4f0ab2b2b0e67024e9486af9e29392a8a890da025e2bcafcd18

urlquery:
  - Phishing - Adobe
Blocklists:
  - fortinet: Phishing
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: corgetec.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://corgetec.org/docs/Retry/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             192.185.140.161
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                            
link: <https://corgetec.org/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
location: https://corgetec.org/wp-includes/images/w-logo-blue-white-bg.png
content-length: 0
date: Sat, 03 Dec 2022 21:21:01 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

urlquery:
  - Phishing - Adobe
                                        
                                            GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1 
Host: corgetec.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://corgetec.org/docs/Retry/index.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             192.185.140.161
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Tue, 16 Nov 2021 00:04:01 GMT
accept-ranges: bytes
content-length: 4119
date: Sat, 03 Dec 2022 21:21:03 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Size:   4119
Md5:    000bf649cc8f6bf27cfb04d1bcdcd3c7
Sha1:   d73d2f6d74ec6cdcbae07955592962e77d8ae814
Sha256: 6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0

urlquery:
  - Phishing - Adobe
                                        
                                            GET /ip.php HTTP/1.1 
Host: code.jquery.com.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://corgetec.org
Connection: keep-alive
Referer: https://corgetec.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             38.34.185.163
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                            
Date: Sat, 03 Dec 2022 21:21:02 GMT
Server: Apache
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Allow-Origin: *
Content-Length: 30
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   30
Md5:    d529a913b4d1412bb8c1a7dd9e8dc1dc
Sha1:   2867c06b1fec5e721ad357cf1e2d95c7f4926456
Sha256: 475e42377c36acc67d188104d368654fb92d0ea6ecac979add807fb63ba77e85

urlquery:
  - Phishing - Adobe
Blocklists:
  - fortinet: Phishing
                                        
                                            GET /post/index.php?title=Adobe%20Document%20Cloud&link=https://corgetec.org/docs/Retry/index.html&time=2022-12-3%2021:21:3&ip=91.90.42.154%20:%20Norway HTTP/1.1 
Host: code.jquery.com.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://corgetec.org
Connection: keep-alive
Referer: https://corgetec.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             38.34.185.163
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                            
Date: Sat, 03 Dec 2022 21:21:05 GMT
Server: Apache
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Allow-Origin: *
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

urlquery:
  - Phishing - Adobe
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7657
x-amzn-requestid: c0dbd862-41cf-4fa8-ab6b-256763c63fbf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZN1Fo6IAMF9EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f25-554ffbc83fd70c557437120f;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: V_7_ohQr9ENIjOvdvy65ZpJqg2OI9gzRdiuxCTJzl4qwXe2Nmu_tAQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:49:27 GMT
etag: "91f0d888c38db0899f106b652e3dcac062648099"
age: 84701
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7657
Md5:    3abdcce275bb9723b4ac1d0c38cc8891
Sha1:   91f0d888c38db0899f106b652e3dcac062648099
Sha256: ff411fc0d5abaf519d6600961ec51ad71ad9a02e23cc02ad818e27f0324b3d1e