Report - 1950.com.ar/qezj/dhl/

Report Overview

Submitted URL
1950.com.ar/qezj/dhl/
IP
50.116.92.76
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2022-08-30 23:42:44
Access
Website Title
Final URL
Tags
None
urlquery detections
Phishing - DHL

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-06T05:09:34Z	758 B	2.7 kB	143.204.55.115
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-06T05:10:30Z	401 B	5.8 kB	143.204.55.25
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-06T05:09:43Z	321 B	229 B	34.117.237.239
1950.com.ar	unknown	2021-08-06T13:38:36Z	2023-01-28T05:00:53Z	8.1 kB	1.8 MB	50.116.92.76
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-06T05:09:12Z	594 B	127 B	35.160.51.228
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-06T05:09:35Z	2.6 kB	40 kB	34.120.237.76
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-06T05:09:03Z	2.3 kB	6.2 kB	23.36.76.226
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-06T06:00:56Z	329 B	737 B	93.184.220.29
kit-free.fontawesome.com	22974	2019-05-10T14:34:22Z	2023-03-06T08:52:58Z	1.2 kB	9.1 kB	172.67.197.109

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	1950.com.ar/qezj/dhl/	6.3 kB	2023-03-07	2023-12-21
Pretty URL 1950.com.ar/qezj/dhl/ IP 50.116.92.76 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:20:20 Last Seen2023-12-21 04:17:50 Times Seen25 Hash 66626b480cee6582749ef6889cc003a3 93a4dc0cb464023dccfd0230bd7725804fbc5e51 5f0aee4772099dffa6404875d4504ea7c1a126f4bd3cb4b42e39e37af8889726 Loading...

	1950.com.ar/qezj/dhl/js/fa.js	5.8 kB	2023-03-07	2024-02-19
Pretty URL 1950.com.ar/qezj/dhl/js/fa.js IP 50.116.92.76 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:20:20 Last Seen2024-02-19 18:10:03 Times Seen89 Hash a8e6a3dde655976cfaa1ae45d67d78de 59d0646c28ea61558c1266ba00002a84b20868d9 717360f1759b6925a3e40ea293d825b50fc17e8bf7e849de44d70769664bf696 Loading...

	1950.com.ar/qezj/dhl/js/jquery.steps.js	55 kB	2023-03-07	2024-02-28
Pretty URL 1950.com.ar/qezj/dhl/js/jquery.steps.js IP 50.116.92.76 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:20:20 Last Seen2024-02-28 06:00:28 Times Seen142 Hash f90f52a6cf425581cd6d4d9030206b7d c2108a6336dfa75271c155e026d86d4ed8149efb 1591281f92394d16d6cc50fd69c9ca67619cdff00f5447eecd9b6e2345c1afaa Loading...

	1950.com.ar/qezj/dhl/js/jquery-3.3.1.min.js	87 kB	2023-03-07	2024-04-22
Pretty URL 1950.com.ar/qezj/dhl/js/jquery-3.3.1.min.js IP 50.116.92.76 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:32 Last Seen2024-04-22 06:11:10 Times Seen2973 Hash 378087a64e1394fc51f300bb9c11878c 0c3192b500a4fd550e483cf77a49806a5872185b 4fe68fa216176e6d1f4580e924bafecc9f519984ecc06b1a840a08b0d88c95de Loading...

	1950.com.ar/qezj/dhl/js/jquery-ui.min.js	254 kB	2023-03-07	2024-03-19
Pretty URL 1950.com.ar/qezj/dhl/js/jquery-ui.min.js IP 50.116.92.76 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:20:20 Last Seen2024-03-19 05:09:47 Times Seen79 Hash d9770b4828d7480cd1f665c2c9363dbe 8ae1bdecefab956f66abd6c18f7de753e22c4704 35f185a2aacd3c120d77143582a9fede64aa4568dcc65a3137ff3a5a711de6a4 Loading...

HTTP Transactions (40)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

143.204.55.115

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 30 Aug 2022 23:26:12 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QlheFUx61t2xJvxG31VlLWfD7C7e1Px-XWFSIj5Pl-XNPslqxSALLw==
Age: 981

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain

143.204.55.25

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
143.204.55.25:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
date: Tue, 30 Aug 2022 02:27:04 GMT
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
etag: "742edb4038f38bc533514982f3d2e861"
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KRSC3ddL54g9KFATpNq8fPlFyfhnr17c5WqgR3L31sGgubSh2tiqrw==
age: 76530
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
517693963cc46e7a35a054296d0edfd5
11dfcd7e118e5f8d31e664e56ac29c57f973b8b3
ece269e8b9be8a5839d75c1343823d68b96930c593c2e3e8d522999176ee3149

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ECE269E8B9BE8A5839D75C1343823D68B96930C593C2E3E8D522999176EE3149"
Last-Modified: Mon, 29 Aug 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6817
Expires: Wed, 31 Aug 2022 01:36:10 GMT
Date: Tue, 30 Aug 2022 23:42:33 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
9f017cd2a298fe77bcc21c97cbcdd183
a07aac487f6eefcf581f75f8b19351a141e1a08b
289f5e4e0f310383dca5e1afe210270e1bd31cde8d8edb7314ce79a4d758de73

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "289F5E4E0F310383DCA5E1AFE210270E1BD31CDE8D8EDB7314CE79A4D758DE73"
Last-Modified: Tue, 30 Aug 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21576
Expires: Wed, 31 Aug 2022 05:42:09 GMT
Date: Tue, 30 Aug 2022 23:42:33 GMT
Connection: keep-alive

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 30 Aug 2022 23:42:33 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/

50.116.92.76

200 OK

4.7 kB

URL HTTP/2
1950.com.ar/qezj/dhl/
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (312)
Size
4.7 kB (4681 bytes)
Hash
ea58706313ab5e7c21a2472c53fe3a03
cb6d53008f46be4aae6798dcf2314c70f732c714
fc103a7c28484090760cae82120e60560e680676c93331278ff883ac0ed1802f

HTTP Headers

GET /qezj/dhl/ HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: none
content-length: 4681
content-type: text/html; charset=UTF-8
date: Tue, 30 Aug 2022 23:42:33 GMT
server: Apache
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/css/roboto-font.css

50.116.92.76

200 OK

248 B

URL HTTP/2
1950.com.ar/qezj/dhl/css/roboto-font.css
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text
Size
248 B (248 bytes)
Hash
0e5de0410b6eda664e4d90641801289a
a3f7f030147b31d446d3837aa25422f48eef0bc8
e06151a518cc0ea25c2a4d15316cffc023e2bd705669d594a43c8b667ac68f11

HTTP Headers

GET /qezj/dhl/css/roboto-font.css HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 248
content-type: text/css
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/css/style.css

50.116.92.76

200 OK

3.6 kB

URL HTTP/2
1950.com.ar/qezj/dhl/css/style.css
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with CRLF line terminators
Size
3.6 kB (3607 bytes)
Hash
74cc2304962494183924f70c18eac75d
2cfaed273602611c864a10a8ad4178402a0cb970
23b8199cc39c6f8efaf0b1ceaf991c88dafde953630e6837776cba855963ac85

HTTP Headers

GET /qezj/dhl/css/style.css HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 3607
content-type: text/css
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/js/fa.js

50.116.92.76

200 OK

2.4 kB

URL HTTP/2
1950.com.ar/qezj/dhl/js/fa.js
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (5479)
Size
2.4 kB (2353 bytes)
Hash
ab2952ea2cc5f15b7ec5ae20856f6c93
79ea24a81be8742a364b88b2133f960a68cdbd3c
72c2929cb67e5312eeecc083dd37a369289c1dfc694bf935fcde7d6f4c717c0a

HTTP Headers

GET /qezj/dhl/js/fa.js HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 2353
content-type: application/javascript
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/css/jquery-ui.min.css

50.116.92.76

200 OK

9.0 kB

URL HTTP/2
1950.com.ar/qezj/dhl/css/jquery-ui.min.css
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (29135)
Size
9.0 kB (8965 bytes)
Hash
6729afa6a30e95fa5e4df8dbd403a616
5c3fc9235d0e8e2b844020661fa8362af9fb48d9
7316162364bf9758ac5a9dd1465841803a1678d850789a79bcf673e550cb5947

HTTP Headers

GET /qezj/dhl/css/jquery-ui.min.css HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 8965
content-type: text/css
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.115

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 30 Aug 2022 23:17:13 GMT
Cache-Control: max-age=3600
Expires: Tue, 30 Aug 2022 23:30:15 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SZpF9rE1k7-BxSuUMmIbwevpS7-B4qFMTNQ6c19muG8y3Fei2dYelQ==
Age: 1522

1950.com.ar/qezj/dhl/fonts/material-design-iconic-font/css/material-design-iconic-font.min.css

50.116.92.76

200 OK

13 kB

URL HTTP/2
1950.com.ar/qezj/dhl/fonts/material-design-iconic-font/css/material-design-iconic-font.min.css
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (65536), with no line terminators
Size
13 kB (12911 bytes)
Hash
62ae265dac0ef9c47ae112b683582857
571152aaa673a33099e913b3dee7047184971dc7
b14cade07a32928df81c6c161a5ed442412b3ce731bcb2a0332dd8ec14dcd583

HTTP Headers

GET /qezj/dhl/fonts/material-design-iconic-font/css/material-design-iconic-font.min.css HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 12911
content-type: text/css
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/images/img.svg

50.116.92.76

200 OK

1.6 kB

URL HTTP/2
1950.com.ar/qezj/dhl/images/img.svg
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
1.6 kB (1603 bytes)
Hash
3fecc9db35d5d2a9e6e71ab4b02d22e5
628ba2f505b480097445aaf08649a08242bd6847
362bcaa42090e36611031bec6bdaa0600375ef847092cca195c58d3bae9b4419

HTTP Headers

GET /qezj/dhl/images/img.svg HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: bytes
content-length: 1603
content-type: image/svg+xml
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/js/jquery.steps.js

50.116.92.76

200 OK

16 kB

URL HTTP/2
1950.com.ar/qezj/dhl/js/jquery.steps.js
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with CRLF line terminators
Size
16 kB (16203 bytes)
Hash
5901f373842d3c05900bda6e99e17f3b
56e89852ab62f745875bea010d58f1a1b851628c
e1862de04c1321cb7e47062b4aabf8db3eedbe64923f9dead871acfbb191c8b7

HTTP Headers

GET /qezj/dhl/js/jquery.steps.js HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 16203
content-type: application/javascript
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/images/wizard_v3_icon_1.png

50.116.92.76

200 OK

4.6 kB

URL HTTP/2
1950.com.ar/qezj/dhl/images/wizard_v3_icon_1.png
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 150 x 35, 8-bit/color RGBA, non-interlaced\012- data
Size
4.6 kB (4633 bytes)
Hash
9be5e19e6f7538afce632d82b855dd24
12dec760d83e8db9c2073d46512c1b76b7a4edc2
5abaa5a71c4481349f88fb44e395b25d99a953329d0d5fbb11880312f4752fec

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - DHL

HTTP Headers

GET /qezj/dhl/images/wizard_v3_icon_1.png HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: bytes
content-length: 4633
content-type: image/png
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
f67e41cdd7e5f2aa8f93d031979c9109
5f4c0093f9bf8f8e48e0d7f56ed31aba0c6f43f6
608e2b7d208977f18da12165c9eb1539656d7754dc49f3f687736151a4810e06

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4627
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 23:42:34 GMT
Last-Modified: Tue, 30 Aug 2022 22:25:28 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471

1950.com.ar/qezj/dhl/images/wizard_v4_icon.png

50.116.92.76

200 OK

1.1 kB

URL HTTP/2
1950.com.ar/qezj/dhl/images/wizard_v4_icon.png
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Size
1.1 kB (1131 bytes)
Hash
d3aab532241c4ae850bf45efa0047073
cfb509e3a77c0f8ab1a8083b7cd9754ac8b1a06e
4927e407f1f4b81dbc5d6269117fafdda60011698398015591dd10f33b779ffc

HTTP Headers

GET /qezj/dhl/images/wizard_v4_icon.png HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: bytes
content-length: 1131
content-type: image/png
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

push.services.mozilla.com/

35.160.51.228

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.160.51.228:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: z6Ev+zUSMpv4kT8tJ4GM9A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: URBQfCvxZSXhZVLs65Ovw6gnXLs=

1950.com.ar/qezj/dhl/fonts/material-design-iconic-font/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0

50.116.92.76

200 OK

38 kB

URL HTTP/2
1950.com.ar/qezj/dhl/fonts/material-design-iconic-font/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
Web Open Font Format (Version 2), TrueType, length 38384, version 1.0\012- data
Size
38 kB (38384 bytes)
Hash
a4d31128b633bc0b1cc1f18a34fb3851
6ee4c79372c3fd679706306ede47e4b03cf53d60
e8eea96e29a7c0a72612ab85ca3229979666467a28349642c2176e7189a1a39c

HTTP Headers

GET /qezj/dhl/fonts/material-design-iconic-font/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0 HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/fonts/material-design-iconic-font/css/material-design-iconic-font.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: bytes
content-length: 38384
content-type: font/woff2
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/fonts/Roboto/Roboto-Medium.ttf

50.116.92.76

200 OK

172 kB

URL HTTP/2
1950.com.ar/qezj/dhl/fonts/Roboto/Roboto-Medium.ttf
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
TrueType Font data, 18 tables, 1st "GDEF", 28 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med\012- data
Size
172 kB (172064 bytes)
Hash
d08840599e05db7345652d3d417574a9
5f16f4d6dbb4a4f12d8ae96488ac209bb49762a5
f205cc511821ea56078a105557fcea6253129404d411c997e1866fbd006abb68

HTTP Headers

GET /qezj/dhl/fonts/Roboto/Roboto-Medium.ttf HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/css/roboto-font.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: bytes
content-length: 172064
content-type: font/ttf
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/fonts/Roboto/Roboto-Black.ttf

50.116.92.76

200 OK

172 kB

URL HTTP/2
1950.com.ar/qezj/dhl/fonts/Roboto/Roboto-Black.ttf
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
TrueType Font data, 18 tables, 1st "GDEF", 28 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.Roboto BlackRegularVersion 2.137; 2017Roboto-Blac\012- data
Size
172 kB (171480 bytes)
Hash
ec4c9962ba54eb91787aa93d361c10a8
c572416b9587c40d49ea60c7128f7f17b9317ad8
3872e9b39760a1b59ac1e192633dbb3b58e595b4d423930ac7ded525e9ae25e0

HTTP Headers

GET /qezj/dhl/fonts/Roboto/Roboto-Black.ttf HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/css/roboto-font.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: bytes
content-length: 171480
content-type: font/ttf
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/fonts/Roboto/Roboto-Bold.ttf

50.116.92.76

200 OK

171 kB

URL HTTP/2
1950.com.ar/qezj/dhl/fonts/Roboto/Roboto-Bold.ttf
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
TrueType Font data, 18 tables, 1st "GDEF", 26 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo\012- data
Size
171 kB (170760 bytes)
Hash
ee7b96fa85d8fdb8c126409326ac2d2b
0ce37ced9c5fcac9bdc452a432c1258870ba4677
7d0b991ee3e0be7af01ad7ea8cd2beea6c00a25e679a0226b6737f079aafff86

HTTP Headers

GET /qezj/dhl/fonts/Roboto/Roboto-Bold.ttf HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/css/roboto-font.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: bytes
content-length: 170760
content-type: font/ttf
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/fonts/Roboto/Roboto-Regular.ttf

50.116.92.76

200 OK

172 kB

URL HTTP/2
1950.com.ar/qezj/dhl/fonts/Roboto/Roboto-Regular.ttf
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
TrueType Font data, 18 tables, 1st "GDEF", 26 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob\012- data
Size
172 kB (171676 bytes)
Hash
3e1af3ef546b9e6ecef9f3ba197bf7d2
dd1b1db13ff1f72138c134c62f38fef83749f36a
79e851404657dac2106b3d22ad256d47824a9a5765458edb72c9102a45816d95

HTTP Headers

GET /qezj/dhl/fonts/Roboto/Roboto-Regular.ttf HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/css/roboto-font.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: bytes
content-length: 171676
content-type: font/ttf
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/images/bg.jpg

50.116.92.76

200 OK

1.1 MB

URL HTTP/2
1950.com.ar/qezj/dhl/images/bg.jpg
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=9, description=Frankfurt/ Main, 31 October 2002 Deutsche Post World Net launches STAR - Group-wide value enhancement programme ## Frankfurt/, orientation=upper-left, xresolution=354, yresolution=362, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2008:06:26 16:37:43, copyright=Deutsche Post World Net], baseline, precision 8, 2880x2045, components 4\012- data
Size
1.1 MB (1052344 bytes)
Hash
5c2ac9314ae3c0259449424163081404
c879027f32270cfe72949d12f73f09de8ae87a5f
81295e3657ad03f98dafc8b01981859656dcf33a052bfe61183ad7072821acd8

HTTP Headers

GET /qezj/dhl/images/bg.jpg HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: bytes
content-length: 1052344
content-type: image/jpeg
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/images/favicon.ico

50.116.92.76

200 OK

1.2 kB

URL HTTP/2
1950.com.ar/qezj/dhl/images/favicon.ico
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size
1.2 kB (1150 bytes)
Hash
d8106bf3a1d00ab43b01e6e3c92500eb
202b5e8654ab1b28351378293bca3b9d844cc29b
9ada5709e264c31b04a05bd85448a9bd5e91925e8d83df5cef0762ec97cc283e

HTTP Headers

GET /qezj/dhl/images/favicon.ico HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: bytes
content-length: 1150
cache-control: max-age=604800
expires: Tue, 06 Sep 2022 23:42:35 GMT
content-type: image/x-icon
date: Tue, 30 Aug 2022 23:42:35 GMT
server: Apache
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3047
Expires: Wed, 31 Aug 2022 00:33:22 GMT
Date: Tue, 30 Aug 2022 23:42:35 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3047
Expires: Wed, 31 Aug 2022 00:33:22 GMT
Date: Tue, 30 Aug 2022 23:42:35 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3047
Expires: Wed, 31 Aug 2022 00:33:22 GMT
Date: Tue, 30 Aug 2022 23:42:35 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3047
Expires: Wed, 31 Aug 2022 00:33:22 GMT
Date: Tue, 30 Aug 2022 23:42:35 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3047
Expires: Wed, 31 Aug 2022 00:33:22 GMT
Date: Tue, 30 Aug 2022 23:42:35 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4a0e321-c414-4af7-9075-ed1965872194.jpeg

34.120.237.76

200 OK

5.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4a0e321-c414-4af7-9075-ed1965872194.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.9 kB (5911 bytes)
Hash
084c7b9f1244ec72236ab517787af1e2
18d7ffa17365f5f43f3ed702ef2ba80d9a7a12cb
2ea7697ebc332bec201ffeaed54a738869b6c64784916574db2c7e6a7990fb3f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4a0e321-c414-4af7-9075-ed1965872194.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5911
x-amzn-requestid: ff3b12df-1798-40bb-bf02-ad198710da96
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XdcGHFGYoAMFw_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630873c0-00cd86e97d0687c702a49ecb;Sampled=0
x-amzn-remapped-date: Fri, 26 Aug 2022 07:18:24 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Cye1gqpeY74FmJV8LaYt9HN_CHH0l-OhkdHM35WydK61gQm50CrMVw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 18:11:33 GMT
age: 19862
etag: "18d7ffa17365f5f43f3ed702ef2ba80d9a7a12cb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

kit-free.fontawesome.com/releases/latest/css/free-v4-font-face.min.css

172.67.197.109

200 OK

6.2 kB

URL HTTP/2
kit-free.fontawesome.com/releases/latest/css/free-v4-font-face.min.css
IP
172.67.197.109:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (2774)
Size
6.2 kB (6188 bytes)
Hash
ef180f5b6b5e110b972f4f2b6ba2707f
75dd2c6be8d7ddcf92259d96f6f2f6eaf3ae8092
39884221cd3204eec5d319dababea71d3fc0a3109632b0e82e600f0a41796913

HTTP Headers

GET /releases/latest/css/free-v4-font-face.min.css HTTP/1.1
Host: kit-free.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Tue, 30 Aug 2022 23:42:34 GMT
content-type: text/css
x-amz-id-2: DIlQTfEeEQmYXomh5e2uJvcjb1Dz0QR05djtSYcqb3+uWxFP2JPbNze0nk+QktzP04wIlEcUKk0=
x-amz-request-id: 1JT1ED578Z028JDJ
last-modified: Wed, 04 Aug 2021 21:22:51 GMT
etag: W/"f2e0b2680d9b0bcb6e0039c4424e5a59"
cache-control: max-age=1800
cf-cache-status: HIT
age: 311
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l1GvXA4n0L3MkZZH7qDz1DG2hvQIiGfdSoQD4OxSJTe8Ns0cWXfcaOIZD2SHGysmUKhjm7tqZmrfIw04vNGmznhLNiyxZZRMfcitxxY9zODsW2ymuGB%2BcPQkH%2BdC0D3zHm7nsTsS9fOokac%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74316238ee0ab505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d2b8cd4-2da8-44e6-9499-b1190e129379.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.3 kB (6266 bytes)
Hash
9843fcd5eb49c75b942e3dd042f3a931
ff6de19656bc0ee5649c1367448116a9576a690a
8e9679e05e1b2194e44a962a19f226793b5d7fc2334df64f8dd560498532ad3a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d2b8cd4-2da8-44e6-9499-b1190e129379.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6266
x-amzn-requestid: 82231f45-328a-479a-b346-108fe6a0c190
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XjU6bEP5IAMFaGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630acea8-6545154a39b44bb04d3bc18c;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 02:10:48 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: P_a-E2SVJUpYrlOzoX9kDtHoAeyEpcqEXau-5wDupR-9AAk3gQgaHQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 12:26:10 GMT
age: 40585
etag: "ff6de19656bc0ee5649c1367448116a9576a690a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5063739-1c9f-40f5-b9ed-027475845ff2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.5 kB (8479 bytes)
Hash
008c84b9611059791740d4a8e7d75bdf
90f57fe85e4580d6faaa2060a710a118bd2f1c61
0765c45e4abc10dc22f17e6e72cb0d55aad0c60c7c8c4f8a86d7261b18a0c9ba

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5063739-1c9f-40f5-b9ed-027475845ff2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8479
x-amzn-requestid: 34934335-ca4f-49ea-aa06-7f700f29ee00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XW1bRHM-IAMF9Bw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6305cf7b-2915163f79d6af4f2766a203;Sampled=0
x-amzn-remapped-date: Wed, 24 Aug 2022 07:12:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: D9V5InAyNLTKAAObXRNk-Fm93zFuRRbWGQVdjUlr7Jl3kviVw5q5OA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 04:28:01 GMT
age: 69274
etag: "90f57fe85e4580d6faaa2060a710a118bd2f1c61"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff15ebc5c-f5e8-44d0-a5a1-89c85072d787.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.6 kB (7647 bytes)
Hash
91714ae2d4ac8d9eed886d6bebb3cee9
e098fa053d68618b9507b4fdb75a1ca34a310440
c6433e347c20801daa0e8ab667074c3e8ef509b1dfadb4806a0eca989d52710c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff15ebc5c-f5e8-44d0-a5a1-89c85072d787.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7647
x-amzn-requestid: 2a5e7d11-e1a9-44d3-a98c-fab467cae8b3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xmw-LFA9IAMFnMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c2ec0-58048d0d2299d9de29283fb8;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 03:13:05 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OFbLMxlYpAtD0tjK_X3Y3yAyScuT88gTbHncEek6S1Qz4UH-8mqojg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 03:57:23 GMT
age: 71112
etag: "e098fa053d68618b9507b4fdb75a1ca34a310440"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb21182a7-c320-4c58-9822-7605821e65a5.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.9 kB (5910 bytes)
Hash
7dcb5acc5186b678254184c5dac12079
d7c84b42a0dd5b86a0668127698fd5f25b647fcb
8173103eda58bf2f1af2d077fc90c2c1b6d2a93265092a9c3152b686e05a4f9d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb21182a7-c320-4c58-9822-7605821e65a5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5910
x-amzn-requestid: 935b97da-1473-4863-bad2-a732709de9d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XslNHEfTIAMFWrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630e8253-150847db7280350c19e2e464;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 21:34:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 4aUTNIPL-Pl5Vz-xh4gI21QtLwdmMMrc7NJGLWRJPz0oJtvnFPfk8w==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 21:45:06 GMT
age: 7049
etag: "d7c84b42a0dd5b86a0668127698fd5f25b647fcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

kit-free.fontawesome.com/releases/latest/css/free-v4-shims.min.css

172.67.197.109

200 OK

0 B

URL HTTP/2
kit-free.fontawesome.com/releases/latest/css/free-v4-shims.min.css
IP
172.67.197.109:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /releases/latest/css/free-v4-shims.min.css HTTP/1.1
Host: kit-free.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Tue, 30 Aug 2022 23:42:34 GMT
content-type: text/css
x-amz-id-2: yBVgXOI1p1cQzefoffXhziBF5Jgpek6e7OoszIxkICR473TwIFpWfHO7oW2w1nosT1t0IulOypU=
x-amz-request-id: 1JT537VQK7AMARG6
last-modified: Wed, 04 Aug 2021 21:22:51 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=1800
cf-cache-status: HIT
age: 352
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wrC%2B0eK0vmrSRsmkrNez%2BHr%2FM9Fuc%2Bp%2F2vzKszVJdjpBA726eFl8DYt8iLhm9JFwc6auZ%2FumKgWkr4EXTKzygq%2FTKHlMFg6cgLGZuHehD8EKjVgIWfOQMv%2Fq5awz1P6m7NO4unuZS4hXp7Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74316238cdfab505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/js/jquery-ui.min.js

50.116.92.76

200 OK

0 B

URL HTTP/2
1950.com.ar/qezj/dhl/js/jquery-ui.min.js
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /qezj/dhl/js/jquery-ui.min.js HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

1950.com.ar/qezj/dhl/js/jquery-3.3.1.min.js

50.116.92.76

200 OK

0 B

URL HTTP/2
1950.com.ar/qezj/dhl/js/jquery-3.3.1.min.js
IP
50.116.92.76:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /qezj/dhl/js/jquery-3.3.1.min.js HTTP/1.1
Host: 1950.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/qezj/dhl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 29 Aug 2022 22:56:10 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 30 Aug 2022 23:42:34 GMT
server: Apache
X-Firefox-Spdy: h2

kit-free.fontawesome.com/releases/latest/css/free.min.css

172.67.197.109

200 OK

0 B

URL HTTP/2
kit-free.fontawesome.com/releases/latest/css/free.min.css
IP
172.67.197.109:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /releases/latest/css/free.min.css HTTP/1.1
Host: kit-free.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1950.com.ar/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Tue, 30 Aug 2022 23:42:34 GMT
content-type: text/css
x-amz-id-2: p6m9baBJ/2L4abWgnkZ6Suc7OaldZNjs+wuGAblaCmalxDD/KdvznACKl34pnITKK/2I85IKPW4=
x-amz-request-id: A4WG19PHWNZEDZHW
last-modified: Wed, 04 Aug 2021 21:22:50 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=1800
cf-cache-status: HIT
age: 352
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Plt8Bswytd9ELkRkOpqZB5L7mMPMG1zezcTjdp%2BsqRh4VyyyMsNOvfNmOQqBeXM%2F3ecVZAmIlR%2BzqtF0gvdq%2Fbwpnu2Bt7yzq119yltNepTbZfnzWHuFhZiP5YfnbmBnUKek%2F2SZza4mpu4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74316238ee09b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (40)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size