Overview

URLsignin-appleid.iotcost.com/?6fjq51i6kzjyj=
IP 44.233.243.30 (United States)
ASN#16509 AMAZON-02
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-09 22:24:41 UTC
StatusLoading report..
IDS alerts0
Blocklist alert0
urlquery alerts
8
Phishing - Apple
Tags None

Domain Summary (8)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
signin-appleid.iotcost.com (18) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 8232 1393437 44.233.243.30
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 35.83.91.138
img-getpocket.cdn.mozilla.net (7) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3801 57434 34.120.237.76
r3.o.lencr.org (7) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2366 6203 23.36.77.32
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2373 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 391 34.117.237.239
ocsp.digicert.com (1) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 341 797 93.184.220.29

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 44.233.243.30
Date UQ / IDS / BL URL IP
2022-11-22 20:53:35 UTC 9 - 0 - 0 idmsa-accountapp1e.squcumber.com/?w2eqa9ypv6wm2nl 44.233.243.30
2022-11-21 23:23:38 UTC 9 - 0 - 0 idmsa-accountapp1e.bemtee.com/?mvc5o1bgzh59kuz 44.233.243.30
2022-11-21 22:38:25 UTC 9 - 0 - 0 idmsa-accountapp1e.buyanacreage.com/?mvc5o1bg (...) 44.233.243.30
2022-12-09 22:24:41 UTC 8 - 0 - 0 signin-appleid.iotcost.com/?6fjq51i6kzjyj= 44.233.243.30
2022-12-08 23:00:03 UTC 3 - 0 - 0 signin-authappleid-4unsv.duckdns.org/account/ (...) 44.233.243.30


Last 5 reports on ASN: AMAZON-02
Date UQ / IDS / BL URL IP
2023-06-02 02:41:17 UTC 0 - 1 - 0 c1.stylezip.info/?step_id=1&installer_id=1117 (...) 52.8.134.32
2023-06-02 02:35:41 UTC 0 - 2 - 14 ww25.anpmnmxo.biz/whmweqarlmvfxif?subid1=2023 (...) 199.59.243.223
2023-06-02 02:33:03 UTC 0 - 10 - 0 b2b.starlit-group.ua/admin/ 52.58.235.142
2023-06-02 02:26:32 UTC 0 - 1 - 0 languageschoolsuk.com/admin/uploadify/js/pqw.exe 3.130.204.160
2023-06-02 02:18:22 UTC 0 - 0 - 2 67.220.226.232/ 67.220.226.232


Last 1 reports on domain: iotcost.com
Date UQ / IDS / BL URL IP
2022-12-09 22:24:41 UTC 8 - 0 - 0 signin-appleid.iotcost.com/?6fjq51i6kzjyj= 44.233.243.30


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-24 20:40:24 UTC 15 - 2 - 0 qrco.de/bdpShy 54.230.111.126
2023-03-08 11:52:12 UTC 34 - 22 - 0 poyahbdgacm-entopilmanbdhte6ta.duckdns.org/?s (...) 172.173.152.220
2023-02-24 22:51:46 UTC 8 - 0 - 0 signinauth-accountapp1e.dizenasac.com/?hvh4b8zgp7 43.156.34.241
2023-02-15 23:54:49 UTC 8 - 0 - 5 signinauth-accountapp1e.farabiresults.com/?hv (...) 43.156.34.241
2023-02-08 23:02:44 UTC 8 - 0 - 5 signinauth-accountapp1e.democratscdmx.com/?hv (...) 43.130.114.211

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (38)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11558
Expires: Sat, 10 Dec 2022 01:37:08 GMT
Date: Fri, 09 Dec 2022 22:24:30 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3695
Expires: Fri, 09 Dec 2022 23:26:05 GMT
Date: Fri, 09 Dec 2022 22:24:30 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 21:33:14 GMT
age: 3076
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    b44c4b5daa307a355e7bab1c83c1ca82
Sha1:   dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
Sha256: fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6445
Expires: Sat, 10 Dec 2022 00:11:55 GMT
Date: Fri, 09 Dec 2022 22:24:30 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: Ki7y4+Y9ZUqO//15b2VIxNIteaknmSALuKNkN7WGtXJaV2rJ0B0fyHe4CSRNpdwujl4hCvSSoec=
x-amz-request-id: 2902XE3M6WBEW0BD
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 21:50:25 GMT
age: 2045
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Fri, 09 Dec 2022 22:24:30 GMT
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 22:07:55 GMT
age: 995
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4328
Cache-Control: max-age=129273
Date: Fri, 09 Dec 2022 22:24:30 GMT
Etag: "6392faaf-1d7"
Expires: Sun, 11 Dec 2022 10:19:03 GMT
Last-Modified: Fri, 09 Dec 2022 09:06:55 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /?6fjq51i6kzjyj= HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: text/html; charset=UTF-8
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
set-cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
content-length: 183
content-encoding: gzip
date: Fri, 09 Dec 2022 22:24:30 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  HTML document text\012- exported SGML document, ASCII text, with no line terminators
Size:   183
Md5:    065a247f74f91ced025a96ce037d4e4a
Sha1:   1429b159fb99f184dbd8ab9b03d12d5f1c52140f
Sha256: 560cd5d7b73da85d9563b0e08b49b049552bdacc88d670afba6ae2c921800a6a
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rrhpiuMzvu4fX8Y0Ia0rDg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             35.83.91.138
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: y6zCef9Lbfv+vFkZOR6kbAQCW6M=

                                        
                                            GET /account/?view=login&appIdKey=a964943ec381744cbbb60a46dea5418a2da4614af1fe33eecfd658e&country=NO HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/?6fjq51i6kzjyj=
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb
Upgrade-Insecure-Requests: 1

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: text/html; charset=UTF-8
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
content-length: 2803
content-encoding: gzip
date: Fri, 09 Dec 2022 22:24:31 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (330)
Size:   2803
Md5:    49dac9ebe841c5fe3cbdf1ece5f46ded
Sha1:   36a6e0be7036b6e86935c042f7712f47d823c9e8
Sha256: 58e2b7b4409e627b79ef88b9c1942bdf34c34deaf06614c2ef9b05012353d561
                                        
                                            GET /assets/css/modal.css HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/account/?view=login&appIdKey=a964943ec381744cbbb60a46dea5418a2da4614af1fe33eecfd658e&country=NO
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: text/css
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:31 GMT
last-modified: Wed, 11 Jul 2018 10:56:28 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2881
date: Fri, 09 Dec 2022 22:24:31 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  ASCII text, with very long lines (17803), with no line terminators
Size:   2881
Md5:    a7f19133c80fb7fb9c695c10ff93e01c
Sha1:   63292453965e26f5020eff45871d7766010069c9
Sha256: 7808c75338145d0eb05c61de3a2af0eb0cbfda8f0a4be33c1890fc5b2ea4e627
                                        
                                            GET /assets/css/bootstrap.min.css HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/account/?view=login&appIdKey=a964943ec381744cbbb60a46dea5418a2da4614af1fe33eecfd658e&country=NO
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: text/css
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:31 GMT
last-modified: Tue, 24 Jun 2014 13:14:12 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 18148
date: Fri, 09 Dec 2022 22:24:31 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  ASCII text, with very long lines (65371)
Size:   18148
Md5:    edb6e9116546e00e17919b0bd3fceb02
Sha1:   75091b9ee884ed5f3469d4164db30ca3cb07f724
Sha256: d39a6172436ee86ca3ce1c6fc78dc4afc6771bba64265bec73804e2034f0df26
                                        
                                            GET /assets/js/jquery.validate.min.js HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/account/?view=login&appIdKey=a964943ec381744cbbb60a46dea5418a2da4614af1fe33eecfd658e&country=NO
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: application/javascript
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:32 GMT
last-modified: Mon, 12 Nov 2018 02:18:56 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 7526
date: Fri, 09 Dec 2022 22:24:32 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (23122), with CRLF line terminators
Size:   7526
Md5:    7c059dab4a9321ae2b27c7acbc1203e4
Sha1:   ba9be8785a1b88acfce267d11d18d0f0bd39ee1d
Sha256: c345510541f587e31e6e1860237f9338ebc15029a453b87c658184ab1238337f
                                        
                                            GET /assets/css/style-login-desktop.css HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/account/?view=login&appIdKey=a964943ec381744cbbb60a46dea5418a2da4614af1fe33eecfd658e&country=NO
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: text/css
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:32 GMT
last-modified: Wed, 11 Jul 2018 10:57:02 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1699
date: Fri, 09 Dec 2022 22:24:32 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  ASCII text, with very long lines (7994), with no line terminators
Size:   1699
Md5:    7f0008fe6a5714f86775e8f175a83e21
Sha1:   4f65d4cce9dd977ca16f0673a31767323e8fc0d6
Sha256: f796a66d6c9c0009598a0d4fe292b30c084a027bbe79a572c601574584f3c466
                                        
                                            GET /assets/js/script-login-desktop.js HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/account/?view=login&appIdKey=a964943ec381744cbbb60a46dea5418a2da4614af1fe33eecfd658e&country=NO
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: application/javascript
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:32 GMT
last-modified: Tue, 26 Dec 2017 06:59:06 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 364
date: Fri, 09 Dec 2022 22:24:32 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   364
Md5:    aad3cd871cb74617433409f076c50085
Sha1:   6ee0b8648e2dbeab7448e83a705fda2383dea4ef
Sha256: a7d811eb7cd3546964c47a4e5c76820aa53370cbf9e13c13ef1a03cc4e1bf53a
                                        
                                            GET /assets/js/jquery.js HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/account/?view=login&appIdKey=a964943ec381744cbbb60a46dea5418a2da4614af1fe33eecfd658e&country=NO
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: application/javascript
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:32 GMT
last-modified: Mon, 12 Nov 2018 02:38:58 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 29912
date: Fri, 09 Dec 2022 22:24:32 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  ASCII text, with very long lines (32065), with CRLF line terminators
Size:   29912
Md5:    639056f8010e5edf521bd1a7b89e2da8
Sha1:   f9cf412b6e6a278880d2da5268ca4f75ff8c1878
Sha256: 3c6b384468c60e3509e07be64d4e7340cca8c239a10ec25002fb1773b5c3830c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8238
Expires: Sat, 10 Dec 2022 00:41:50 GMT
Date: Fri, 09 Dec 2022 22:24:32 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8238
Expires: Sat, 10 Dec 2022 00:41:50 GMT
Date: Fri, 09 Dec 2022 22:24:32 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8238
Expires: Sat, 10 Dec 2022 00:41:50 GMT
Date: Fri, 09 Dec 2022 22:24:32 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8238
Expires: Sat, 10 Dec 2022 00:41:50 GMT
Date: Fri, 09 Dec 2022 22:24:32 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7897
x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F51IAMFunw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: N-zFZ8yeL7RrOZ5xfqvfBaE3zcXWecvr6Jd-93nKiUZlCXp2n2_Bgw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:41:46 GMT
age: 67366
etag: "7558222788f06623ddae6e883413e38e1146281e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7897
Md5:    8c3214044657f3b876d1f1848bca5684
Sha1:   7558222788f06623ddae6e883413e38e1146281e
Sha256: e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 12748
x-amzn-requestid: edd028e3-c23e-4985-b12d-d3ebe760df47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjuciEptIAMFj9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638af783-1c151eb66f590c9c0e0c4c82;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 07:15:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -y4-_OwHl5_OFykJYYZSqwIopjKoYy1MhaGTpVXd4Grq2EsUP2c3IA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 07:44:29 GMT
age: 52803
etag: "55a236fedf6f5f7ca2bb88ae13e20846a50fd36d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12748
Md5:    730ba1a8edb79ba6f83b46d1ba5aed7b
Sha1:   55a236fedf6f5f7ca2bb88ae13e20846a50fd36d
Sha256: f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18fc6c7c-4552-4358-9e4d-cdf93bc52b43.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4914
x-amzn-requestid: b709d5ff-617b-480b-8fc3-b1408ee358b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQsoEkSIAMF0ZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c7ea-4150ac397b97d1217cece045;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:03:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vU8PVYI3RMCLSJ_lK5NDOv5wBeEXeqngYURGrYkY-jZ9rvOw_MrBIw==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 08:55:58 GMT
age: 48514
etag: "6ae9a3c17dcbac5912a46ca0c99977ca3adad4ea"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4914
Md5:    06799a30d9977b0845f525ae82355d23
Sha1:   6ae9a3c17dcbac5912a46ca0c99977ca3adad4ea
Sha256: d7a7eeb42d36167243b3dea7147a61119cbb5d1dcc2e2304c6ddd4a62e41efd3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6578
x-amzn-requestid: 6392feb9-e33e-42fa-bc10-b5e31e654c9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4beGG7oAMF8hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903aaf-2c890b7b0a16617346a0f7e7;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: H067kZXU_djWxbWO34bYMqa0xZ-WF9ntEBhZ-kV_TDoJFXQL_J1hqQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:34:27 GMT
age: 67805
etag: "5c8ffe91490006a9890188b53f875568c2b6bd8f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6578
Md5:    8546542f00ea29ef4df6ab8d3c7c2164
Sha1:   5c8ffe91490006a9890188b53f875568c2b6bd8f
Sha256: 7fb11750ac339ac283da62fd370862c6b95a103a585ca5dd8c90038718d818a1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5188
x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ck2-5G9joAMFlPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7Dp35PIr_WYUI1bBa21AvmCMEPi0d3jnhuS8eEk3Q3CXRcGWAnkD8g==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 16:56:53 GMT
age: 19659
etag: "8fbff7725c842d70e047c635a725723a9dc9c55a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5188
Md5:    fba9a3854df65740512f96efe7442e58
Sha1:   8fbff7725c842d70e047c635a725723a9dc9c55a
Sha256: 6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7557
x-amzn-requestid: 400d1465-ecbf-4d95-8aa8-4dce5dca0716
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctluwGo4oAMFhTg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ee991-6dba29ae7065d5347a1a420d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 07:04:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Lazl-stakC-31gMuQ2WzH9uFkIb0g7HaaM3xkwSFdFJMWKTaKqrBEQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 04:07:07 GMT
age: 65845
etag: "cde4c7fa0145d3645af17e34c83c63c08f76a076"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7557
Md5:    5de5d319f43d9c9c641419d96655541f
Sha1:   cde4c7fa0145d3645af17e34c83c63c08f76a076
Sha256: fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa
                                        
                                            GET /assets/img/logo.png HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/account/?view=login&appIdKey=a964943ec381744cbbb60a46dea5418a2da4614af1fe33eecfd658e&country=NO
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: image/png
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:32 GMT
last-modified: Wed, 29 Nov 2017 07:29:44 GMT
accept-ranges: bytes
content-length: 4690
date: Fri, 09 Dec 2022 22:24:32 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image data, 420 x 112, 8-bit colormap, non-interlaced\012- data
Size:   4690
Md5:    643a1f9fc2aa09799472c39031456af5
Sha1:   70f89834a607b4a00e5c1e8ff2bd66b798db04df
Sha256: c691a459c75691e086dfbbacf08d2f4591a8316f11484ff99a5ca500a172e2b4

urlquery:
  - Phishing - Apple
                                        
                                            GET /assets/img/navbar-repeat-login.png HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/assets/css/style-login-desktop.css
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: image/png
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:32 GMT
last-modified: Wed, 29 Nov 2017 07:57:10 GMT
accept-ranges: bytes
content-length: 186
date: Fri, 09 Dec 2022 22:24:32 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image data, 1 x 105, 8-bit/color RGBA, non-interlaced\012- data
Size:   186
Md5:    830a3bf9352f3c3b78865d529d72cee4
Sha1:   1b5d9f63eb347cee0e8a612e8af6adcfc3b929f3
Sha256: e49898a9129afa7b491faa3cfe7e03667c7152e1aad867b3c910c9de8aad2ab7

urlquery:
  - Phishing - Apple
                                        
                                            GET /assets/img/btn.png HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/assets/css/style-login-desktop.css
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: image/png
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:32 GMT
last-modified: Sat, 26 Dec 2015 16:24:34 GMT
accept-ranges: bytes
content-length: 711
date: Fri, 09 Dec 2022 22:24:32 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image data, 29 x 28, 8-bit/color RGBA, non-interlaced\012- data
Size:   711
Md5:    72ae62bf41ef56795a918c54169c1243
Sha1:   ed438963479a897b970eb29f916f8b81c46d5cff
Sha256: 20561e3f883ab183123a6ef5a08a66fd701c6553766be53950034e487731b3fb

urlquery:
  - Phishing - Apple
                                        
                                            GET /assets/img/footerbawah.png HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/assets/css/style-login-desktop.css
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: image/png
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:32 GMT
last-modified: Thu, 17 Feb 2022 15:43:42 GMT
accept-ranges: bytes
content-length: 17794
date: Fri, 09 Dec 2022 22:24:32 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image data, 1904 x 648, 8-bit/color RGB, non-interlaced\012- data
Size:   17794
Md5:    25df2c6e44b26835c1fce66d9f75b18c
Sha1:   2ee160b67ceff16bca4809d95e195c569e4c2e7e
Sha256: baf8e9f894f6c7bc28f3bde57e17845f74360c496ad97ba288954deec210c7bc
                                        
                                            GET /assets/img/navbar.png HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/assets/css/style-login-desktop.css
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: image/png
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:32 GMT
last-modified: Fri, 25 Dec 2015 13:19:08 GMT
accept-ranges: bytes
content-length: 20218
date: Fri, 09 Dec 2022 22:24:32 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image data, 1000 x 44, 8-bit/color RGBA, non-interlaced\012- data
Size:   20218
Md5:    3eec9a839c236164353015a4becf6310
Sha1:   ad05219c34d3a4dc026e708436701fe8ad6eb116
Sha256: 9d031ab45532cbbc836814405707597d04c0830d59c713fc26176c4e48e6a5cc

urlquery:
  - Phishing - Apple
                                        
                                            GET /assets/css/31642.ttf HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/assets/css/style-login-desktop.css
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: font/ttf
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:32 GMT
last-modified: Fri, 03 Jun 2016 08:29:00 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 61274
date: Fri, 09 Dec 2022 22:24:32 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  OpenType font data\012- data
Size:   61274
Md5:    ac12dcfaf66432f2a03841b143885edc
Sha1:   db7761528f3a664929adccf84fadc1db823272cd
Sha256: 7a8a6c668e967c89719f22492cf9ad7582a48f602f051ce54c6a75b2e9fbbd75
                                        
                                            GET /assets/img/footer-login-desktop.png HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/assets/css/style-login-desktop.css
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: image/png
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:32 GMT
last-modified: Tue, 26 Dec 2017 14:25:54 GMT
accept-ranges: bytes
content-length: 67831
date: Fri, 09 Dec 2022 22:24:32 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image data, 1010 x 387, 8-bit/color RGBA, non-interlaced\012- data
Size:   67831
Md5:    03f050d044fa1712f4da42ba60c1bb57
Sha1:   980756aec61d0ada8dd224449bcb7ae6acee1d7e
Sha256: 63d0b4747b1208a82a115837bf59556c26a2bf4173bcf7a6cbb9254373a7c0f5

urlquery:
  - Phishing - Apple
                                        
                                            GET /assets/img/fot.png HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/assets/css/style-login-desktop.css
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: image/png
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:32 GMT
last-modified: Mon, 22 Feb 2021 04:46:18 GMT
accept-ranges: bytes
content-length: 67059
date: Fri, 09 Dec 2022 22:24:32 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image data, 1902 x 61, 8-bit/color RGBA, non-interlaced\012- data
Size:   67059
Md5:    3dcdedf20bc77cbbdee5f2b8ae29dbb1
Sha1:   cd93f3ffdd276085fe8181d434aecd397617d98f
Sha256: 345e61aa67f62cfe752729e2762f0e371ae85c46b72c4be81dda8a639b77c5ed
                                        
                                            GET /assets/img/favicon.ico HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/account/?view=login&appIdKey=a964943ec381744cbbb60a46dea5418a2da4614af1fe33eecfd658e&country=NO
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: image/x-icon
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:33 GMT
last-modified: Fri, 25 Dec 2015 16:05:32 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1699
date: Fri, 09 Dec 2022 22:24:33 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  MS Windows icon resource - 4 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Size:   1699
Md5:    07bc3f17fb6d83d454c8683dc4f41729
Sha1:   bd9ed118a5b5adcb213fa4e3aeaceb2009da3c68
Sha256: ef45c64ec3437c7f9f7b81d94ac77774d41b047129f12ed638fdd71a38f52361

urlquery:
  - Phishing - Apple
                                        
                                            GET /assets/img/login-desktop.png HTTP/1.1 
Host: signin-appleid.iotcost.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signin-appleid.iotcost.com/account/?view=login&appIdKey=a964943ec381744cbbb60a46dea5418a2da4614af1fe33eecfd658e&country=NO
Cookie: PHPSESSID=7c55d17b74d486be0ade22c92487fabb

                                        
                                             44.233.243.30
HTTP/1.1 200 OK
content-type: image/png
                                            
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 22:24:32 GMT
last-modified: Tue, 10 Jul 2018 22:32:34 GMT
accept-ranges: bytes
content-length: 1080923
date: Fri, 09 Dec 2022 22:24:32 GMT
server: LiteSpeed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 4628x1732, components 3\012- data
Size:   1080923
Md5:    e2f376b6b058ff6c7c1e6f3b525a9157
Sha1:   5c50c1cd477de76e7b1e2c6437479664bb86ca7b
Sha256: bca2ec8caf9eaaa75ed49a2f0de20067590b055d7457ae1f0c67acd394055fdc

urlquery:
  - Phishing - Apple
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2654f7a6-bd8b-4c13-9c46-9b7582ba979a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5169
x-amzn-requestid: 277a1b04-4e19-4313-8aac-5f9ab9076305
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctEdkFGrIAMFvHg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb456-5b21edd57297665012d536cc;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:17:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Xi-bshsYa4LlKbJgAt0h-lPnB_5uQbqln5JGBRE8io2Fp1y41cS9xg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 04:08:48 GMT
age: 65751
etag: "ebb97e5b97f394e8c67098f55581d5329ce819a2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5169
Md5:    06514ce96ae21cb01f526a5febdcbeb4
Sha1:   ebb97e5b97f394e8c67098f55581d5329ce819a2
Sha256: 4099a2fb6ddc4feaa30f357a180d64aeb7c9fc73f115fc762d5fe5c221d2e89e