Report - aacinvestments.info/c1/login.html

Report Overview

URL

aacinvestments.info/c1/login.html
IP

213.136.93.164

ASN

#51167 Contabo GmbH
Submitted

2023-03-28T03:40:40Z

Access

public
Tags

capitalone financial phishing
urlquery detections

Phishing - Capital One

Detections

urlquery

7
Network Intrusion Detection

1
Threat Detection Systems

1

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
aacinvestments.info (23)	unknown	2023-01-23T16:28:59Z	2023-03-29T04:39:36Z	7363	2128898	213.136.93.164
r3.o.lencr.org (7)	344	2020-12-02T09:52:13Z	2023-03-29T05:09:11Z	2366	6208	23.36.76.226
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-29T05:09:03Z	782	2373	35.241.9.150
ocsp.digicert.com (3)	86	2012-05-21T09:02:23Z	2023-03-29T11:45:01Z	1023	2397	192.229.221.95
ecm.capitalone.com (3)	13649	2017-02-01T18:32:51Z	2023-03-28T05:40:29Z	1453	86750	104.110.12.190
tms.capitalone.com (2)	15539	2019-02-06T22:53:36Z	2023-03-28T13:56:35Z	776	5438	34.242.179.188
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-29T05:09:31Z	413	5882	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-29T05:09:31Z	333	391	34.117.237.239
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-29T05:09:32Z	606	127	35.163.224.214
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-22T01:36:00Z	2023-03-29T05:09:12Z	3246	56743	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-03-28T03:40:48Z	low	213.136.93.164	Client IP	ET INFO JAVA - ClassID

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-03-27	medium	aacinvestments.info/c1/login.html	Capital One Financial Corporation

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (49)

URL IP Response Size

aacinvestments.info/c1/login.html

213.136.93.164

200 OK

79228

URL HTTP/1.1

aacinvestments.info/c1/login.html
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (54012), with CRLF line terminators

Size

79228
Hash

d00327583baf971b5d6489132bc84f6a

425647135df2fd6c54b8d91e1638fbb1a01ae529

fb96ebc546ebf20d9a54fc87bd442704610d3a26494b0327bf11786d41c87dbc

Detections

Analyzer	Verdict	Alert
openphish	Capital One Financial Corporation

HTTP Headers

                                        GET /c1/login.html HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:28 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 13 Apr 2020 09:48:46 GMT
Accept-Ranges: bytes
Content-Length: 79228
Keep-Alive: timeout=5, max=10
Content-Type: text/html

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

93f633ce30c038eb581544323c5a971e

2f60526cb750c6babccc207f75fb5a8ae6f7598b

0ff6df80a892199848fb943af78541b66efc09a7ab70d4b169906fdbac1eabf8

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FF6DF80A892199848FB943AF78541B66EFC09A7AB70D4B169906FDBAC1EABF8"
Last-Modified: Mon, 27 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11284
Expires: Tue, 28 Mar 2023 06:48:32 GMT
Date: Tue, 28 Mar 2023 03:40:28 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

911d74784325663a0d95b463b0e9ae9b

21e999229be584d8e42696bce71236ad5bcb9a25

f48cbe4d605e660a45267400e0add4f7bc7cd523c450376ecd8e3a7f094abf56

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F48CBE4D605E660A45267400E0ADD4F7BC7CD523C450376ECD8E3A7F094ABF56"
Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12980
Expires: Tue, 28 Mar 2023 07:16:48 GMT
Date: Tue, 28 Mar 2023 03:40:28 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

4ad6984a756720fbfff47b37a75513a2

355e35258114452af8b9638985ed9d8ef3bf0aca

43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 28 Mar 2023 03:28:00 GMT
content-type: application/json
age: 748
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

5ad3eec59bebbf969f175627757507c1

b176af3a70db378c9e1f219bab24d9d446070d6f

704fa284035b4c9aa487331b516f5f11c324e204756ae2503bad2606ed34f25e

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "704FA284035B4C9AA487331B516F5F11C324E204756AE2503BAD2606ED34F25E"
Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7461
Expires: Tue, 28 Mar 2023 05:44:50 GMT
Date: Tue, 28 Mar 2023 03:40:29 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

e7bace7c1e04d44012e37ddffe36e5d5

3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2

6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: b/7VcSYGbsEfAM5nqrwLNZpSZg7XayiOMeiB5CBNH7lh2zxao56NYAD/euM8WbSVVlhDsE0vd6c=
x-amz-request-id: E1C11CC2M3TB86GW
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 28 Mar 2023 03:01:53 GMT
age: 2316
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

aacinvestments.info/c1/files/6.js

213.136.93.164

200 OK

1058

URL HTTP/1.1

aacinvestments.info/c1/files/6.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with very long lines (1058), with no line terminators

Size

1058
Hash

77d105489f030434206468f6f7249246

e29bbd00749631b34450ed295f20bd367047aa00

be9e107f1dead2ed7b1d2f6a478c89560b9558fa64d3919c2528d5b030bb418e

HTTP Headers

                                        GET /c1/files/6.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 1058
Keep-Alive: timeout=5, max=9
Connection: Keep-Alive
Content-Type: application/javascript

aacinvestments.info/c1/files/uba.js

213.136.93.164

200 OK

23147

URL HTTP/1.1

aacinvestments.info/c1/files/uba.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with very long lines (23147), with no line terminators

Size

23147
Hash

3a1b75c529ae0515e60d150b0c6c4971

b440405e410d86929368e65715fdf079b8492687

079eaddf883a8b4c1144de1382712fe40e246c780914f766cfe73c90b707116d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Capital One

NIDS	Severity	Alert
suricata	low	ET INFO JAVA - ClassID

HTTP Headers

                                        GET /c1/files/uba.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 23147
Keep-Alive: timeout=5, max=8
Connection: Keep-Alive
Content-Type: application/javascript

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Tue, 28 Mar 2023 03:40:29 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

aacinvestments.info/c1/files/cc.js

213.136.93.164

200 OK

29892

URL HTTP/1.1

aacinvestments.info/c1/files/cc.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with very long lines (4761)

Size

29892
Hash

46e27fb05f2d0fba5d9aaa502d72ac00

30dcd387cccbebe0dd0dbe612c24caa441fd39cb

421b8dd91a148f86218190f758f82d069d7f6e7e1712475c5511d6167409ec36

HTTP Headers

                                        GET /c1/files/cc.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 29892
Keep-Alive: timeout=5, max=10
Content-Type: application/javascript

aacinvestments.info/c1/files/web_properties.js

213.136.93.164

200 OK

3022

URL HTTP/1.1

aacinvestments.info/c1/files/web_properties.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

C source, ASCII text

Size

3022
Hash

6efacd4806c99a4c851a8f7dde3e92de

b49a5c4b54162ccdc4fd938a2fe9f84be8f7ba36

44efd9241a3081212f758bed113ed3561861c6040a885b49696bea95c46e28da

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Capital One

HTTP Headers

                                        GET /c1/files/web_properties.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 3022
Keep-Alive: timeout=5, max=7
Connection: Keep-Alive
Content-Type: application/javascript

aacinvestments.info/c1/files/browserFingerPrintv1.js

213.136.93.164

200 OK

28442

URL HTTP/1.1

aacinvestments.info/c1/files/browserFingerPrintv1.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with very long lines (28442), with no line terminators

Size

28442
Hash

0f537e63c621f88c0c4bf4257394b2c2

7f28eaf9bbf93c3a2d4e012aaca4f34c3cbc3c97

559d96c9ff8af5055471707c21b22ac1a7bca706d199dc9f5659a65c02d7e944

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Capital One

HTTP Headers

                                        GET /c1/files/browserFingerPrintv1.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 28442
Keep-Alive: timeout=5, max=10
Content-Type: application/javascript

aacinvestments.info/c1/files/smartBanner.js

213.136.93.164

200 OK

1621

URL HTTP/1.1

aacinvestments.info/c1/files/smartBanner.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text

Size

1621
Hash

1cb97af58dead900c1345745358b85da

d3ac0a66cff1c23afaa6d958b972b874e5990779

fb506dd556d29c2b2b968853f96a25fa748753e2d26b1aa5eef0e9464802e4b8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Capital One

HTTP Headers

                                        GET /c1/files/smartBanner.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 1621
Keep-Alive: timeout=5, max=9
Connection: Keep-Alive
Content-Type: application/javascript

aacinvestments.info/c1/files/styles.css

213.136.93.164

200 OK

90201

URL HTTP/1.1

aacinvestments.info/c1/files/styles.css
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with very long lines (65536), with no line terminators

Size

90201
Hash

f941b08aea64f93adc0448ed7afff198

99047a58fb3122a1d70904cd49e1f9ab135dc63e

af1bf8f9a02a4a74f57d2a160cf36cb0f4ba009c0ab3fde8b04a1226da287020

HTTP Headers

                                        GET /c1/files/styles.css HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 90201
Keep-Alive: timeout=5, max=10
Content-Type: text/css

aacinvestments.info/c1/files/bfp-ah-min.js

213.136.93.164

200 OK

32932

URL HTTP/1.1

aacinvestments.info/c1/files/bfp-ah-min.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with very long lines (32932), with no line terminators

Size

32932
Hash

2f9cb2db6ef5c82af190b8efdaaf9d72

1c914b203ecbb86ce7e06365030eb7b91633ebd4

f94ffda9316950cb9cc14a67ee823df463454f5ed02e08efe0106ee7dcdf9296

HTTP Headers

                                        GET /c1/files/bfp-ah-min.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 32932
Keep-Alive: timeout=5, max=6
Connection: Keep-Alive
Content-Type: application/javascript

aacinvestments.info/c1/files/runtime.js

213.136.93.164

200 OK

2461

URL HTTP/1.1

aacinvestments.info/c1/files/runtime.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with very long lines (2461), with no line terminators

Size

2461
Hash

e6767c986b1192774091f50c1e9211c8

1d7cc4547e41e8a9e1902754aa56611471595444

5e167d34700719d1b41d3ca03bfcc248422d6302904160ebf3d8aea83f2d8937

HTTP Headers

                                        GET /c1/files/runtime.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 2461
Keep-Alive: timeout=5, max=9
Connection: Keep-Alive
Content-Type: application/javascript

aacinvestments.info/c1/files/1880a96772ee310bc813c29e05ce6650.js

213.136.93.164

200 OK

101362

URL HTTP/1.1

aacinvestments.info/c1/files/1880a96772ee310bc813c29e05ce6650.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with very long lines (564)

Size

101362
Hash

06d8056d4cdf82e609b0dd80e38c0a4b

14ea5ee97a2faa6da153677a0d710cd9d42cd951

392bba71b832e02a0b9411ec15f260cf53ff3b32ee21a965929e169b45426e1d

HTTP Headers

                                        GET /c1/files/1880a96772ee310bc813c29e05ce6650.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 101362
Keep-Alive: timeout=5, max=10
Content-Type: application/javascript

aacinvestments.info/c1/files/scripts.js

213.136.93.164

200 OK

4937

URL HTTP/1.1

aacinvestments.info/c1/files/scripts.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

C source text\012- HTML document, ASCII text, with very long lines (4937), with no line terminators

Size

4937
Hash

3a54af86bcbb89a6b1d424279cb8f7d7

46b6cdf2e86e546062a87b94f57b0ae0618b9db5

252b9bf8710aeff6c5b553933263ec264ba681f2bd82e0ac13e4113c73301faf

HTTP Headers

                                        GET /c1/files/scripts.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 4937
Keep-Alive: timeout=5, max=9
Connection: Keep-Alive
Content-Type: application/javascript

aacinvestments.info/c1/files/fff382b01e4bbdef82ae7b35cdf3081f.js

213.136.93.164

200 OK

32305

URL HTTP/1.1

aacinvestments.info/c1/files/fff382b01e4bbdef82ae7b35cdf3081f.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with very long lines (551)

Size

32305
Hash

47e3bf944d46294c2e0dc43dfc1a7513

f59dc8a4a16142bd915b380b75c8df487a9213c3

30ed32bb9b18a74b6750bb888feb1fe4d63349d45a687edf84a9d99f0f8d441b

HTTP Headers

                                        GET /c1/files/fff382b01e4bbdef82ae7b35cdf3081f.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 32305
Keep-Alive: timeout=5, max=9
Connection: Keep-Alive
Content-Type: application/javascript

aacinvestments.info/c1/files/40a7ccab7b354d965d0b501f67163bd0.js

213.136.93.164

200 OK

8722

URL HTTP/1.1

aacinvestments.info/c1/files/40a7ccab7b354d965d0b501f67163bd0.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with very long lines (585)

Size

8722
Hash

cb110ab2626a16ed10879107ca13a283

82e4f03f2dc6068eefc21bb71acd680c4aaeab56

ac90855d62f92c834c27e6b31e16d6cfc9401bb4f8a9d4a274ddd54c20c029f4

HTTP Headers

                                        GET /c1/files/40a7ccab7b354d965d0b501f67163bd0.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 8722
Keep-Alive: timeout=5, max=9
Connection: Keep-Alive
Content-Type: application/javascript

aacinvestments.info/c1/files/Bootstrap.js

213.136.93.164

200 OK

83404

URL HTTP/1.1

aacinvestments.info/c1/files/Bootstrap.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with very long lines (579)

Size

83404
Hash

c11f10c7798c5c0a9f3ca2c6e7cfae1a

75fa0c996a2608bcd16bc0c16f25de99415fe27f

8c125fda4c79dd98d8c343e6185298f7f1e11dc508aba0dee95ad32309f8b837

HTTP Headers

                                        GET /c1/files/Bootstrap.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 83404
Keep-Alive: timeout=5, max=8
Connection: Keep-Alive
Content-Type: application/javascript

aacinvestments.info/c1/files/serverComponent.php

213.136.93.164

200 OK

495

URL HTTP/1.1

aacinvestments.info/c1/files/serverComponent.php
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with very long lines (494)

Size

495
Hash

1fef7fff425d894da5f0ff05ddde694a

5fbdf740ff0c1668b83f21dde86c7890809e3575

07a6a5a2f75c2bd68d9b5cb54404df7e4ec172e7710315f3447fdfe5b6143c0e

HTTP Headers

                                        GET /c1/files/serverComponent.php HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Keep-Alive: timeout=5, max=8
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

aacinvestments.info/c1/css/gen_validatorv2.js

213.136.93.164

200 OK

12315

URL HTTP/1.1

aacinvestments.info/c1/css/gen_validatorv2.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with CRLF line terminators

Size

12315
Hash

ff694275e402976163e602b85c44ff26

a4542f32a8ef18a17782b06beb85cebdd81de021

344ce7ae9a0179e949d1daf2b1811828294ec092ebdd622a7d8f2f379e801823

HTTP Headers

                                        GET /c1/css/gen_validatorv2.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sat, 28 Nov 2009 19:08:16 GMT
Accept-Ranges: bytes
Content-Length: 12315
Keep-Alive: timeout=5, max=8
Connection: Keep-Alive
Content-Type: application/javascript

aacinvestments.info/c1/files/polyfills.js

213.136.93.164

200 OK

105816

URL HTTP/1.1

aacinvestments.info/c1/files/polyfills.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with very long lines (65536), with no line terminators

Size

105816
Hash

e834e1e0f7c0eb68e0cb448c500b44c2

640bc2c367a71d9eebbe44fe4329d83ef9b5036f

bafb8b40ead03640274db83997f6f97feaf8900beefc11d8ab0f65e3fa3b2f2a

HTTP Headers

                                        GET /c1/files/polyfills.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 105816
Keep-Alive: timeout=5, max=8
Connection: Keep-Alive
Content-Type: application/javascript

aacinvestments.info/c1/files/capital-one-logo.svg

213.136.93.164

200 OK

3971

URL HTTP/1.1

aacinvestments.info/c1/files/capital-one-logo.svg
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with very long lines (3967), with CRLF line terminators

Size

3971
Hash

f0b7ad81821effc52540e39cafda48f9

33d64bc7001f414f12bd92e740a45e5ced239add

57dfca5b95599a613da940f4a49ab6378fcf0586366a47cae679796930bf0eed

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Capital One

HTTP Headers

                                        GET /c1/files/capital-one-logo.svg HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 3971
Keep-Alive: timeout=5, max=8
Connection: Keep-Alive
Content-Type: image/svg+xml

aacinvestments.info/c1/files/icon-user.svg

213.136.93.164

200 OK

584

URL HTTP/1.1

aacinvestments.info/c1/files/icon-user.svg
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (584), with no line terminators

Size

584
Hash

1f46c36bca03354edd25a3e35b7977db

c002468fca8f3910fccba86c6d67602191eaeaed

32f101709eb4240f21b330c854ed3bd539c0dc9001f08bf51d4e6a5b6bf641c6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Capital One

HTTP Headers

                                        GET /c1/files/icon-user.svg HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 584
Keep-Alive: timeout=5, max=7
Connection: Keep-Alive
Content-Type: image/svg+xml

aacinvestments.info/c1/files/main.js

213.136.93.164

200 OK

1475973

URL HTTP/1.1

aacinvestments.info/c1/files/main.js
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

ASCII text, with very long lines (65536), with no line terminators

Size

1475973
Hash

19d9877f7464e17227504ce2da70cdd5

41862a2e498e7d13607178167fe63ccbfe0f9593

69ab5ca85c004804c6b4b4eb8b9ecb2aedebe9436a8e571f5852c40a5448562b

HTTP Headers

                                        GET /c1/files/main.js HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sun, 12 Apr 2020 18:02:02 GMT
Accept-Ranges: bytes
Content-Length: 1475973
Keep-Alive: timeout=5, max=5
Connection: Keep-Alive
Content-Type: application/javascript

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329

URL HTTP/2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 28 Mar 2023 03:17:24 GMT
age: 1385
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

da5340ee69a1000f751686df9e716663

a5da880a61ed119790a7990bbdcc0c97eecf04f2

d1ff10bfe40f290935abe1feeb975a6af8cf310f9ce9d45bbf482a604da73560

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D1FF10BFE40F290935ABE1FEEB975A6AF8CF310F9CE9D45BBF482A604DA73560"
Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11283
Expires: Tue, 28 Mar 2023 06:48:32 GMT
Date: Tue, 28 Mar 2023 03:40:29 GMT
Connection: keep-alive

ocsp.digicert.com/

192.229.221.95

200 OK

471

URL HTTP/1.1

ocsp.digicert.com/
IP

192.229.221.95:0
ASN

#15133 EDGECAST

Magic

data

Size

471
Hash

ce14546c826b16acab9d49cf54b97352

920b5e705a7ec747ec4a57d50671fa6b111d3039

3389e655cca64cc02418879e1b10e54b3396401295aafbdca84a67a4e7f895ee

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3606
Cache-Control: max-age=164344
Content-Type: application/ocsp-response
Date: Tue, 28 Mar 2023 03:40:29 GMT
Etag: "6422328f-1d7"
Expires: Thu, 30 Mar 2023 01:19:33 GMT
Last-Modified: Tue, 28 Mar 2023 00:19:27 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471

ocsp.digicert.com/

192.229.221.95

200 OK

471

URL HTTP/1.1

ocsp.digicert.com/
IP

192.229.221.95:0
ASN

#15133 EDGECAST

Magic

data

Size

471
Hash

ce14546c826b16acab9d49cf54b97352

920b5e705a7ec747ec4a57d50671fa6b111d3039

3389e655cca64cc02418879e1b10e54b3396401295aafbdca84a67a4e7f895ee

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3606
Cache-Control: max-age=164344
Content-Type: application/ocsp-response
Date: Tue, 28 Mar 2023 03:40:29 GMT
Etag: "6422328f-1d7"
Expires: Thu, 30 Mar 2023 01:19:33 GMT
Last-Modified: Tue, 28 Mar 2023 00:19:27 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471

ocsp.digicert.com/

192.229.221.95

200 OK

471

URL HTTP/1.1

ocsp.digicert.com/
IP

192.229.221.95:0
ASN

#15133 EDGECAST

Magic

data

Size

471
Hash

ce14546c826b16acab9d49cf54b97352

920b5e705a7ec747ec4a57d50671fa6b111d3039

3389e655cca64cc02418879e1b10e54b3396401295aafbdca84a67a4e7f895ee

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3606
Cache-Control: max-age=164344
Content-Type: application/ocsp-response
Date: Tue, 28 Mar 2023 03:40:29 GMT
Etag: "6422328f-1d7"
Expires: Thu, 30 Mar 2023 01:19:33 GMT
Last-Modified: Tue, 28 Mar 2023 00:19:27 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471

ecm.capitalone.com/CI_Common/assets/fonts/Optimist_W_Lt.woff2

104.110.12.190

200 OK

27852

URL HTTP/2

ecm.capitalone.com/CI_Common/assets/fonts/Optimist_W_Lt.woff2
IP

104.110.12.190:0
ASN

#16625 AKAMAI-AS

Magic

Web Open Font Format (Version 2), TrueType, length 27852, version 1.0\012- data

Size

27852
Hash

cb37fa55f3dfdd26d61901032a53644f

1115e8d43a08c1f74ec1f6a886d1cb530bb9da97

902c5a9d8ad932630fb2021fe1a1a7f4f06513b19e8d073866178ee65ff33fe9

HTTP Headers

                                        GET /CI_Common/assets/fonts/Optimist_W_Lt.woff2 HTTP/1.1
Host: ecm.capitalone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://aacinvestments.info
Connection: keep-alive
Referer: http://aacinvestments.info/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 27852
last-modified: Fri, 28 Jun 2019 00:26:02 GMT
etag: "cb37fa55f3dfdd26d61901032a53644f"
x-amz-server-side-encryption: AES256
x-amz-version-id: Q75rYxmglrbgkwTTGgaHL71RQB9n5YCD
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: WZLHu-KyMHr9Oi38M7o8z4XXwUqHnVG-f6Rg-E6l9knxWl69APaosA==
x-datastream-cache-status: 1
cache-control: max-age=2474954
expires: Tue, 25 Apr 2023 19:09:43 GMT
date: Tue, 28 Mar 2023 03:40:29 GMT
access-control-request-method: POST,GET,PUT,DELETE
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2

ecm.capitalone.com/CI_Common/assets/fonts/Optimist_W_SBd.woff2

104.110.12.190

200 OK

28188

URL HTTP/2

ecm.capitalone.com/CI_Common/assets/fonts/Optimist_W_SBd.woff2
IP

104.110.12.190:0
ASN

#16625 AKAMAI-AS

Magic

Web Open Font Format (Version 2), TrueType, length 28188, version 1.0\012- data

Size

28188
Hash

d647937062406e5cc182de0cc77947d8

9d4c283a4fca43ae95019091bbd0a9e1b77b97bc

48b4ed4ba8ee0eaeddfba861e6772c61f818931816102636a888ec0b49bce056

HTTP Headers

                                        GET /CI_Common/assets/fonts/Optimist_W_SBd.woff2 HTTP/1.1
Host: ecm.capitalone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://aacinvestments.info
Connection: keep-alive
Referer: http://aacinvestments.info/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 28188
last-modified: Fri, 28 Jun 2019 00:26:02 GMT
etag: "d647937062406e5cc182de0cc77947d8"
x-amz-server-side-encryption: AES256
x-amz-version-id: QmX7yv6RJT4hT4UTSJmqyU0reaonF3KP
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: SxgW2j2Ku0ctcy9uifxoUSuEGDe6rOxpREUwMoFk23y-XvIAp5y9VA==
x-datastream-cache-status: 1
cache-control: max-age=1084991
expires: Sun, 09 Apr 2023 17:03:40 GMT
date: Tue, 28 Mar 2023 03:40:29 GMT
access-control-request-method: POST,GET,PUT,DELETE
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2

ecm.capitalone.com/CI_Common/assets/fonts/Optimist_W_Rg.woff2

104.110.12.190

200 OK

28388

URL HTTP/2

ecm.capitalone.com/CI_Common/assets/fonts/Optimist_W_Rg.woff2
IP

104.110.12.190:0
ASN

#16625 AKAMAI-AS

Magic

Web Open Font Format (Version 2), TrueType, length 28388, version 1.0\012- data

Size

28388
Hash

f4e1fbca28c954a486a90828b2ee7543

7750f00fe0337120e16632ea7fff2a78b11c874a

9b98e19f831844b3dae8e1fd65b6802bc778446fbdacac8203e34bbc02eacbcd

HTTP Headers

                                        GET /CI_Common/assets/fonts/Optimist_W_Rg.woff2 HTTP/1.1
Host: ecm.capitalone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://aacinvestments.info
Connection: keep-alive
Referer: http://aacinvestments.info/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 28388
last-modified: Fri, 28 Jun 2019 00:26:02 GMT
etag: "f4e1fbca28c954a486a90828b2ee7543"
x-amz-server-side-encryption: AES256
x-amz-version-id: 1GgM.ruzxSoQhqV._aklwOsuyVwoqFBE
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: BGWuX4caZ0kfZbeEU9EBXkYNIfAXAQn7qhOobVDMcBZpZGYT9HOYpw==
x-datastream-cache-status: 1
cache-control: max-age=2126624
expires: Fri, 21 Apr 2023 18:24:13 GMT
date: Tue, 28 Mar 2023 03:40:29 GMT
access-control-request-method: POST,GET,PUT,DELETE
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2

aacinvestments.info/c1/images/favicon.ico

213.136.93.164

200 OK

1150

URL HTTP/1.1

aacinvestments.info/c1/images/favicon.ico
IP

213.136.93.164:0
ASN

#51167 Contabo GmbH

Magic

MS Windows icon resource - 1 icon, 16x16\012- data

Size

1150
Hash

31753808e6cef2d990d5ecd76a422451

5d4cc5e945e32f8cd70bcdfef615386f409bdb76

88be3175253e818bf5d5eccc0d90e74ab5ee99ffcb09a7bcebff011872bdcfac

HTTP Headers

                                        GET /c1/images/favicon.ico HTTP/1.1
Host: aacinvestments.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/c1/login.html

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:29 GMT
Server: Apache
Last-Modified: Sun, 12 Apr 2020 18:12:28 GMT
Accept-Ranges: bytes
Content-Length: 1150
Keep-Alive: timeout=5, max=7
Connection: Keep-Alive
Content-Type: image/x-icon

push.services.mozilla.com/

35.163.224.214

101 Switching Protocols

URL HTTP/1.1

push.services.mozilla.com/
IP

35.163.224.214:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: VWPwZINURIQ5Ioojdl8QBA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: clL3JhC3pl8aiSDRhRA5yWBAh7g=

tms.capitalone.com/capitalone/prod/serverComponent.php?r=818816617.3357943&ClientID=581&PageID=http%3A%2F%2Faacinvestments.info%2Fc1%2Flogin.html%3Fwebview%3Dundefined

34.242.179.188

200 OK

221

URL HTTP/1.1

tms.capitalone.com/capitalone/prod/serverComponent.php?r=818816617.3357943&ClientID=581&PageID=http%3A%2F%2Faacinvestments.info%2Fc1%2Flogin.html%3Fwebview%3Dundefined
IP

34.242.179.188:0
ASN

#16509 AMAZON-02

Magic

ASCII text

Size

221
Hash

c47ad927e162e8f47ad02066cba13099

55892284ea14c46b2030c669e7f45faf9cea899d

10d3ce34b05f3500192d5dc3c51ab3482d006ba57cf7eb706fbec5544d5c9cb3

HTTP Headers

                                        GET /capitalone/prod/serverComponent.php?r=818816617.3357943&ClientID=581&PageID=http%3A%2F%2Faacinvestments.info%2Fc1%2Flogin.html%3Fwebview%3Dundefined HTTP/1.1
Host: tms.capitalone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:30 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: CloudFront
Expires: Tue, 28 Mar 2023 03:40:29 GMT
Cache-Control: no-cache, no-store
X-Cache: Miss from cloudfront
Via: 1.1 d8e6d5a84eb26ff3b7d1801d7337b390.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P1
X-Amz-Cf-Id: Jb3mLtI5cc0cYVeko8M6_Yq2v9xCNBZIo4PO1OwN-WVQFQdgoz7Jxw==
Content-Encoding: gzip

tms.capitalone.com/capitalone/prod/code/5304bc6524ff023b83c116252fdef747.js?conditionId0=421879

34.242.179.188

200 OK

4056

URL HTTP/1.1

tms.capitalone.com/capitalone/prod/code/5304bc6524ff023b83c116252fdef747.js?conditionId0=421879
IP

34.242.179.188:0
ASN

#16509 AMAZON-02

Magic

ASCII text, with very long lines (600)

Size

4056
Hash

1a9b8dfc6583e3dcd12f2650add4407e

488cceabc0ce560711775e00a31a089388140f04

bf58478f70ac788872c9a02c8158afa0b0e4b2c63ef426e1ccb9055f98afa21c

HTTP Headers

                                        GET /capitalone/prod/code/5304bc6524ff023b83c116252fdef747.js?conditionId0=421879 HTTP/1.1
Host: tms.capitalone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aacinvestments.info/

                                        HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 03:40:30 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-replication-status: COMPLETED
Last-Modified: Mon, 27 Mar 2023 21:18:32 GMT
ETag: W/"22d25da09d835f761420b2fa0c000ff7"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=315360000
x-amz-version-id: 2zrlS7ynGajfydt2eJM2uRkKjY51OiNJ
Server: CloudFront
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 87c2f129ca002f6811a7e1d2fe8c6810.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P1
X-Amz-Cf-Id: atwI_ak7lUGoFjA8L2vQFHynAAzo98lM9P8xNkS_0ymYzUCo8JCnug==
Age: 22704

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

be1cd1cf8e462ca6f6acb2f132e614d5

037f3bc7ab850fa2c69f2584bb24340b25bb6f3c

e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11393
Expires: Tue, 28 Mar 2023 06:50:24 GMT
Date: Tue, 28 Mar 2023 03:40:31 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

be1cd1cf8e462ca6f6acb2f132e614d5

037f3bc7ab850fa2c69f2584bb24340b25bb6f3c

e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11393
Expires: Tue, 28 Mar 2023 06:50:24 GMT
Date: Tue, 28 Mar 2023 03:40:31 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

be1cd1cf8e462ca6f6acb2f132e614d5

037f3bc7ab850fa2c69f2584bb24340b25bb6f3c

e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11393
Expires: Tue, 28 Mar 2023 06:50:24 GMT
Date: Tue, 28 Mar 2023 03:40:31 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg

34.120.237.76

200 OK

9859

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (22)

#1 JS:Script (size: 32305)

#2 JS:Script (size: 12315)

#3 JS:Script (size: 4937)

#4 JS:Script (size: 272)

#5 JS:Script (size: 495)

#6 JS:Script (size: 1058)

#7 JS:Script (size: 28442)

#8 JS:Script (size: 0)

#9 JS:Script (size: 8722)

#10 JS:Script (size: 11374)

#11 JS:Script (size: 83404)

#12 JS:Script (size: 29892)

#13 JS:Script (size: 1621)

#14 JS:Script (size: 281)

#15 JS:Script (size: 3022)

#16 JS:Script (size: 2461)

#17 JS:Script (size: 23147)

#18 JS:Script (size: 32932)

#19 JS:Script (size: 187435)

#20 JS:Script (size: 105816)

#1 JS:Eval (size: 5760)

#2 JS:Eval (size: 6201)

HTTP Transactions (49)

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic