urlquery - report: punjabivirasat.com/BAAA/personal2.html

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-11-28 05:55:58 UTC	34.102.187.140
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-28 05:53:26 UTC	34.117.237.239
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	52.43.253.52
punjabivirasat.com (13)	0	2019-11-04 03:02:23 UTC	2022-11-28 20:23:19 UTC	43.225.55.146	Unknown ranking
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76
r3.o.lencr.org (6)	344	No data	No data	23.36.76.226
ocsp.digicert.com (2)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29

Scan Date	Severity	Indicator	Comment
2022-11-28	2	punjabivirasat.com/BAAA/personal2.html	Phishing
2022-11-28	2	punjabivirasat.com/BAAA/images/mask.js	Phishing
2022-11-28	2	punjabivirasat.com/BAAA/images/assets-images-global-logos-BofA_rgb-CSX5624a (...)	Phishing
2022-11-28	2	punjabivirasat.com/BAAA/images/assets-images-site-secure-ah-forgot-common-B (...)	Phishing
2022-11-28	2	punjabivirasat.com/BAAA/cnx-regular.woff2	Phishing
2022-11-28	2	punjabivirasat.com/BAAA/cnx-bold.woff2	Phishing
2022-11-28	2	punjabivirasat.com/BAAA/cnx-medium.woff2	Phishing
2022-11-28	2	punjabivirasat.com/BAAA/images/assets-images-global-header-secure-lock-CSXa (...)	Phishing
2022-11-28	2	punjabivirasat.com/BAAA/images/assets-images-global-title-flagscape_red-CSX (...)	Phishing

Date	UQ / IDS / BL	URL	IP
2023-02-06 16:05:46 +0000	0 - 0 - 1	futureinstitutes.in/	43.225.55.146
2023-02-06 11:53:59 +0000	0 - 0 - 1	futureinstitutes.in/	43.225.55.146
2023-01-23 07:03:55 +0000	0 - 0 - 31	speedyimmigration.ca/	43.225.55.146
2023-01-18 07:05:12 +0000	19 - 0 - 8	goggijewellers.in/alerts/stp	43.225.55.146
2023-01-18 07:04:51 +0000	10 - 0 - 8	goggijewellers.in/alerts/stp/info.html	43.225.55.146

Date	UQ / IDS / BL	URL	IP
2023-02-08 23:50:06 +0000	0 - 2 - 0	sushmaenterprises.co.in/	103.21.58.15
2023-02-08 22:59:32 +0000	0 - 2 - 0	maheshpansare.in/lobe/index.php?est=4	119.18.58.248
2023-02-08 21:35:17 +0000	4 - 0 - 19	alter-ed.com.ng/wells_fargo/login.php?id=sign (...)	199.79.63.115
2023-02-08 21:35:14 +0000	4 - 0 - 19	alter-ed.com.ng/wells_fargo/login.php?id=sign (...)	199.79.63.115
2023-02-08 21:35:11 +0000	4 - 0 - 19	alter-ed.com.ng/wells_fargo/login.php?id=sign (...)	199.79.63.115

Date	UQ / IDS / BL	URL	IP
2022-11-28 21:53:30 +0000	0 - 0 - 9	punjabivirasat.com/BAAA/personal2.html	43.225.55.146

Date	UQ / IDS / BL	URL	IP
2023-01-18 07:04:09 +0000	9 - 0 - 7	goggijewellers.in/alerts/stp/personal2.html	43.225.55.146
2023-01-18 07:03:32 +0000	10 - 0 - 9	goggijewellers.in/alerts/stp/personal.html	43.225.55.146
2023-01-04 17:55:19 +0000	13 - 0 - 10	alittleleftfield.com/Aillgotoschoolii/persona (...)	203.26.41.136
2023-01-04 17:54:40 +0000	14 - 0 - 10	alittleleftfield.com/Aillgotoschoolii/persona (...)	203.26.41.136
2023-01-04 15:35:31 +0000	13 - 0 - 10	alittleleftfield.com/Aillgotoschoolii/persona (...)	203.26.41.136

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9334 Expires: Tue, 29 Nov 2022 00:28:53 GMT Date: Mon, 28 Nov 2022 21:53:19 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 150792cfc458af013998f4ef6bdf5f74 Sha1: d5179b2dcb11d06f82606bf6eb6648319998d63e Sha256: 72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 2649 Cache-Control: max-age=134531 Date: Mon, 28 Nov 2022 21:53:19 GMT Etag: "63848df9-1d7" Expires: Wed, 30 Nov 2022 11:15:30 GMT Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT Server: ECS (ska/F6FE) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 9408cc0694fcbea57966c3a3ba906092 Sha1: fddcee1fdcf3209298e41a4b1b5560357fa165f0 Sha256: 6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12977 Expires: Tue, 29 Nov 2022 01:29:36 GMT Date: Mon, 28 Nov 2022 21:53:19 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3b56944f0e5716fd4fad2ec18994d4be Sha1: 61cafa4de31ba960d1145ec37272f6f6b6944e0c Sha256: 4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Mon, 28 Nov 2022 21:17:49 GMT cache-control: public,max-age=3600 age: 2130 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 14cd9a0afb6ba9a763651d5112760d1e Sha1: 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: kqNzmqK3bDXgGR8bBa6D6pitANZiy6HOcI5pDNApPcpGyDmoHhlW3VFwa0/+AQByUYl7pR0yUXs= x-amz-request-id: 0QK1H5H900CNJZ82 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Mon, 28 Nov 2022 21:45:11 GMT age: 488 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Mon, 28 Nov 2022 21:53:19 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Mon, 28 Nov 2022 21:11:12 GMT cache-control: public,max-age=3600 age: 2528 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5275 Cache-Control: 'max-age=158059' Date: Mon, 28 Nov 2022 21:53:20 GMT Last-Modified: Mon, 28 Nov 2022 20:25:25 GMT Server: ECS (ska/F6FE) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 7ab2ef968cb6a3078f4b9cb2dda813d4 Sha1: e669116047ca058a2c1b2999ff0ea8682719162c Sha256: 6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: YfVDOgXG291ojAab2ueceg== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 52.43.253.52 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 52.43.253.52 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: Y37SpfBAGuqNIQokhWVsSBbaHvY= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /BAAA/personal2.html HTTP/1.1 Host: punjabivirasat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: punjabivirasat.com/BAAA/personal2.html FQDN: punjabivirasat.com IP: 43.225.55.146 HASH: 14384805242c54634d66297ead4e9abfbb7ac2f2779ef928505390d94815a989 43.225.55.146 HTTP/1.1 200 OK Content-Type: text/html Date: Mon, 28 Nov 2022 21:53:20 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 06 Nov 2022 08:32:20 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Keep-Alive: timeout=5, max=75 Transfer-Encoding: chunked --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (64588), with CRLF line terminators Size: 68749 Md5: 3416aa8832511768d9a5bc11fe0afa61 Sha1: b79f8ac763355913b972535c36fe026c8e8d0dc3 Sha256: 14384805242c54634d66297ead4e9abfbb7ac2f2779ef928505390d94815a989 Alerts: Blocklists: - fortinet: Phishing
GET /BAAA/images/mask.js HTTP/1.1 Host: punjabivirasat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://punjabivirasat.com/BAAA/personal2.html	URL: punjabivirasat.com/BAAA/images/mask.js FQDN: punjabivirasat.com IP: 43.225.55.146 HASH: 125bfe1ef7c1de5c9468de8f7169b6bbf14916b100d5d66f893ffd44acd770fb 43.225.55.146 HTTP/1.1 200 OK Content-Type: application/javascript Date: Mon, 28 Nov 2022 21:53:20 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Fri, 28 Oct 2022 10:24:28 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Keep-Alive: timeout=5, max=75 Transfer-Encoding: chunked --- Additional Info --- Magic: Algol 68 source text\012- Pascal source, Unicode text, UTF-8 text, with very long lines (4222), with CRLF line terminators Size: 44989 Md5: 134c917c4dc8ae22c205b6048e827667 Sha1: a9acc66023991bf818e81fce30a26f2560c4a14e Sha256: 125bfe1ef7c1de5c9468de8f7169b6bbf14916b100d5d66f893ffd44acd770fb Alerts: Blocklists: - fortinet: Phishing
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12337 Expires: Tue, 29 Nov 2022 01:18:59 GMT Date: Mon, 28 Nov 2022 21:53:22 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12337 Expires: Tue, 29 Nov 2022 01:18:59 GMT Date: Mon, 28 Nov 2022 21:53:22 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12337 Expires: Tue, 29 Nov 2022 01:18:59 GMT Date: Mon, 28 Nov 2022 21:53:22 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12337 Expires: Tue, 29 Nov 2022 01:18:59 GMT Date: Mon, 28 Nov 2022 21:53:22 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1ee10f9-36dd-4ca4-986e-a80758149640.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 28e70e38cfad65ad8a7a68ab1dc78747c7013a87b854fc35b163cc5765cd0570 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8460 x-amzn-requestid: 51416479-3854-4f1a-9d86-35e104c57f6a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cVNnkHuZIAMF-_A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63852963-180b323d4a45fa2f29f9b1fc;Sampled=0 x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:27 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: ieDA8l_Up51cFaB9IExlSs8A5m-H77va1rCVF_WRMg_FN53Xakipuw== via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 21:46:55 GMT age: 391 etag: "be4c4d01fc67218e26a3e9d27a2f708e639c9d4b" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8460 Md5: 516776052e5e906ea9f42d25bae5cc85 Sha1: be4c4d01fc67218e26a3e9d27a2f708e639c9d4b Sha256: 28e70e38cfad65ad8a7a68ab1dc78747c7013a87b854fc35b163cc5765cd0570
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9082acd6-44fd-454b-b215-451cf6d822a1.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: aeeaa56714fbd157e788cd24da03d43ede527959e2563e6d7d99489753dee85f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8106 x-amzn-requestid: 73d1b662-99a8-4ad7-95f9-c0b1ebf7c45a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cVNnQEhQoAMFbLA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63852961-64954bc92997c9302e291381;Sampled=0 x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:25 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: UO4hCMgPgR4-ld-QCKgNPrq4p1gduUSA5R4ffZmnFodBj-1_NcFLmg== via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 21:37:21 GMT age: 961 etag: "b703ea2cc2fcd68e60135ff77d5a5f1b93fac128" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8106 Md5: 5ab97acd46d3380fa12711c96b3c2d35 Sha1: b703ea2cc2fcd68e60135ff77d5a5f1b93fac128 Sha256: aeeaa56714fbd157e788cd24da03d43ede527959e2563e6d7d99489753dee85f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F306bb762-e2a8-4771-9a39-086c46f94b11.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: abfbf4ecf2423736a29686859f6a8f2b77204b48f3f60d208f6d491e80611e7f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7549 x-amzn-requestid: bb37235a-8c7d-47fe-abb6-6cc633560165 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cP-7lHmsoAMF9lA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638311e3-1f2a4abc40119f3e026dc393;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 07:29:39 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: ds96jURZ0epaXMg2oTUETRQCpHwlVJrl5hTqvpUAWEGVa5rbDve1FA== via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 21:46:42 GMT age: 400 etag: "600859401c885cc2cdd1f199cccc198eb41d6a04" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7549 Md5: 415b1b1d5a29fc17b4114bb3df1d1c22 Sha1: 600859401c885cc2cdd1f199cccc198eb41d6a04 Sha256: abfbf4ecf2423736a29686859f6a8f2b77204b48f3f60d208f6d491e80611e7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1172c72b-d329-4446-80cb-92b8cf104425.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 2178a96e120661e43d8e8ed0df1fcf500caf4c58db9e1bedaf0706af0a80b286 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 3944 x-amzn-requestid: 8a6732c1-72da-4a73-ba51-8533c6a01a9c x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cVNmfFgeIAMFjLw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6385295c-0c807d93277bfb7f6b13c2ee;Sampled=0 x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:20 GMT x-amz-cf-pop: SEA19-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: oW4xFfsPp-Jmf28Uc88iZ2jLgtMRjn2gW0orrJ4K201r6Y6OlHkacQ== via: 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 21:46:51 GMT age: 391 etag: "5008d7344dd85ae61a598c17e7baf427def3e25d" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 3944 Md5: 9cd333c474420e235831d96ed881167e Sha1: 5008d7344dd85ae61a598c17e7baf427def3e25d Sha256: 2178a96e120661e43d8e8ed0df1fcf500caf4c58db9e1bedaf0706af0a80b286
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7faa45dd-b9de-4dae-a2d6-ee678d7d3906.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: ec3799922c38ee6394601744ff4b2c405ee44c4718a2b90c104134657f8b480b 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9015 x-amzn-requestid: 9f657586-a44e-46f0-8c38-f1bf26142486 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cVOlEE6ZoAMFUPw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63852aed-1da2400f4165dd553418f8b9;Sampled=0 x-amzn-remapped-date: Mon, 28 Nov 2022 21:41:01 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: mqdz1NhVCqmSrhYLIF0miDzrBiS82SUU6ZRFzDMllbCwS70hC0rMRQ== via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 21:46:55 GMT age: 387 etag: "c6dfd277cdbd057472e6df6ad1a200f50684d442" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9015 Md5: ae2e2986caa15a90b615147f229b51ec Sha1: c6dfd277cdbd057472e6df6ad1a200f50684d442 Sha256: ec3799922c38ee6394601744ff4b2c405ee44c4718a2b90c104134657f8b480b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10176 x-amzn-requestid: c2231955-5c78-4073-8399-b8b90f1add78 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cMo3oHpSoAMF5Qw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6381bb63-55a1cb004ac73c8b02f2fb8d;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 07:08:19 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: uGocx-Lv8ieJVvICjnTGQZyzaQzjVdICX2RZaNyBTQvUKeIcNxaCJQ== via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 07:38:02 GMT age: 51320 etag: "772d86ad983042a728ee3490630a9cf1134ad0dd" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10176 Md5: 03014221d7f49b50ffc2d1b0a0e75457 Sha1: 772d86ad983042a728ee3490630a9cf1134ad0dd Sha256: 81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
GET /BAAA/images/assets-images-global-logos-BofA_rgb-CSX5624a146.svg HTTP/1.1 Host: punjabivirasat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://punjabivirasat.com/BAAA/personal2.html	URL: punjabivirasat.com/BAAA/images/assets-images-global-log (...) FQDN: punjabivirasat.com IP: 43.225.55.146 HASH: 6c7f8fb9f19d36be96cb37942cbd0ff926437d0ad258fbbbd7e24a85b2b85f6b 43.225.55.146 HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 28 Nov 2022 21:53:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Fri, 28 Oct 2022 10:24:28 GMT Accept-Ranges: bytes Content-Length: 3527 Keep-Alive: timeout=5, max=75 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 3527 Md5: f2faf5d162775f32f041ef7fd349f31e Sha1: 5692cc3dd9d9294dd180b92d05595c7e7ddf4608 Sha256: 6c7f8fb9f19d36be96cb37942cbd0ff926437d0ad258fbbbd7e24a85b2b85f6b Alerts: Blocklists: - fortinet: Phishing
GET /BAAA/images/assets-images-site-secure-ah-forgot-common-BofA_symbol_rgb-CSX33067442.svg HTTP/1.1 Host: punjabivirasat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://punjabivirasat.com/BAAA/personal2.html	URL: punjabivirasat.com/BAAA/images/assets-images-site-secur (...) FQDN: punjabivirasat.com IP: 43.225.55.146 HASH: 46b1bdd52215324f3660248b3d50538503d8ad4f32afe3d82e2d8f7b35bf820d 43.225.55.146 HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 28 Nov 2022 21:53:21 GMT Server: Apache Last-Modified: Fri, 28 Oct 2022 10:24:28 GMT Accept-Ranges: bytes Content-Length: 2007 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 2007 Md5: df0f459c9691ea42eb8cd2a20c23971d Sha1: 3057dace3786727ba9c91c497dcbe452fb4a83f1 Sha256: 46b1bdd52215324f3660248b3d50538503d8ad4f32afe3d82e2d8f7b35bf820d Alerts: Blocklists: - fortinet: Phishing
GET /BAAA/images/assets-images-global-footer-eha_logo_1x-CSXc5bd9130.png HTTP/1.1 Host: punjabivirasat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://punjabivirasat.com/BAAA/personal2.html	URL: punjabivirasat.com/BAAA/images/assets-images-global-foo (...) FQDN: punjabivirasat.com IP: 43.225.55.146 HASH: 35a77234f396ce2e5cc205ab9dd78c0cef11eaf14e4ef92bb910243021e83147 43.225.55.146 HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 28 Nov 2022 21:53:21 GMT Server: Apache Last-Modified: Fri, 28 Oct 2022 10:24:28 GMT Accept-Ranges: bytes Content-Length: 343 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive --- Additional Info --- Magic: PNG image data, 12 x 9, 8-bit/color RGBA, non-interlaced\012- data Size: 343 Md5: c577e2bea8cf9b70cc39827debe61198 Sha1: 0b78f70baeed5b061f0d08127d262368da3e62a1 Sha256: 35a77234f396ce2e5cc205ab9dd78c0cef11eaf14e4ef92bb910243021e83147
GET /BAAA/cnx-regular.woff2 HTTP/1.1 Host: punjabivirasat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: http://punjabivirasat.com/BAAA/personal2.html	URL: punjabivirasat.com/BAAA/cnx-regular.woff2 FQDN: punjabivirasat.com IP: 43.225.55.146 HASH: 79f02d139cfd07f2a19e0a8831553b3de4627fcab371e18eb776af035465949b 43.225.55.146 HTTP/1.1 200 OK Content-Type: font/woff2 Date: Mon, 28 Nov 2022 21:53:22 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Fri, 28 Oct 2022 10:24:22 GMT Accept-Ranges: bytes Content-Length: 11608 Keep-Alive: timeout=5, max=75 --- Additional Info --- Magic: Web Open Font Format (Version 2), TrueType, length 11608, version 1.197\012- data Size: 11608 Md5: 46b5329e8e4e5925129ab2c36b336d0f Sha1: 63cd5fbcbe5331e7d8059a4caee8d2510f834d68 Sha256: 79f02d139cfd07f2a19e0a8831553b3de4627fcab371e18eb776af035465949b Alerts: Blocklists: - fortinet: Phishing
GET /BAAA/cnx-bold.woff2 HTTP/1.1 Host: punjabivirasat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: http://punjabivirasat.com/BAAA/personal2.html	URL: punjabivirasat.com/BAAA/cnx-bold.woff2 FQDN: punjabivirasat.com IP: 43.225.55.146 HASH: d48faa13adcd567a29299db487912dd91fd45f777cadf153520f52023b58cee7 43.225.55.146 HTTP/1.1 200 OK Content-Type: font/woff2 Date: Mon, 28 Nov 2022 21:53:22 GMT Server: Apache Last-Modified: Fri, 28 Oct 2022 10:24:22 GMT Accept-Ranges: bytes Content-Length: 11800 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive --- Additional Info --- Magic: Web Open Font Format (Version 2), TrueType, length 11800, version 1.197\012- data Size: 11800 Md5: 79e7bc718644146e98b5d55f19c8ed4a Sha1: 9d0c5c674b242443a055a654e1ef0fa0e31642e2 Sha256: d48faa13adcd567a29299db487912dd91fd45f777cadf153520f52023b58cee7 Alerts: Blocklists: - fortinet: Phishing
GET /BAAA/images/assets-images-site-secure-ah-forgot-common-loader_black-CSX85ecad56.gif HTTP/1.1 Host: punjabivirasat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://punjabivirasat.com/BAAA/personal2.html	URL: punjabivirasat.com/BAAA/images/assets-images-site-secur (...) FQDN: punjabivirasat.com IP: 43.225.55.146 HASH: 72bbc2c68bdc05b4adda6000dc8e80bcbdc92ddd40a91b910ec06f94991a9022 43.225.55.146 HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Date: Mon, 28 Nov 2022 21:53:22 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-transform, no-cache, must-revalidate, max-age=0 Link: <http://punjabivirasat.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 8025 Keep-Alive: timeout=5, max=75 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1746), with CRLF, LF line terminators Size: 8025 Md5: 58b3c307452aec05d6fd60d953d79f4f Sha1: ada18a6d937446e4bc48dfacc917e4a45b6c6598 Sha256: 72bbc2c68bdc05b4adda6000dc8e80bcbdc92ddd40a91b910ec06f94991a9022
GET /BAAA/cnx-medium.woff2 HTTP/1.1 Host: punjabivirasat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: http://punjabivirasat.com/BAAA/personal2.html	URL: punjabivirasat.com/BAAA/cnx-medium.woff2 FQDN: punjabivirasat.com IP: 43.225.55.146 HASH: a431986817e5d309cdd61c623a5259d6ea5840375876ffb41f5a2cab65ddd2e3 43.225.55.146 HTTP/1.1 200 OK Content-Type: font/woff2 Date: Mon, 28 Nov 2022 21:53:22 GMT Server: Apache Last-Modified: Fri, 28 Oct 2022 10:24:22 GMT Accept-Ranges: bytes Content-Length: 11984 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive --- Additional Info --- Magic: Web Open Font Format (Version 2), TrueType, length 11984, version 1.197\012- data Size: 11984 Md5: 50d39f33c7179280df5acb6a5bb2716b Sha1: eb19d2940c727bb4e7f66e1e5c89ecff30725875 Sha256: a431986817e5d309cdd61c623a5259d6ea5840375876ffb41f5a2cab65ddd2e3 Alerts: Blocklists: - fortinet: Phishing
GET /BAAA/images/assets-images-global-header-secure-lock-CSXa09bf5fc.svg HTTP/1.1 Host: punjabivirasat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://punjabivirasat.com/BAAA/personal2.html	URL: punjabivirasat.com/BAAA/images/assets-images-global-hea (...) FQDN: punjabivirasat.com IP: 43.225.55.146 HASH: ef1e2c7f7966523d78b1c294052dfa4b2db256a21ead9fb711d187e0fd54be7a 43.225.55.146 HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 28 Nov 2022 21:53:22 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Fri, 28 Oct 2022 10:24:28 GMT Accept-Ranges: bytes Content-Length: 353 Keep-Alive: timeout=5, max=75 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (353), with no line terminators Size: 353 Md5: 92740423e6f96c6ff515af0ab6c19c43 Sha1: 6a768d5e5c7ba98c8b5992b81547ba70ec56ad43 Sha256: ef1e2c7f7966523d78b1c294052dfa4b2db256a21ead9fb711d187e0fd54be7a Alerts: Blocklists: - fortinet: Phishing
GET /BAAA/images/assets-images-global-title-flagscape_red-CSX345e7fd7.svg HTTP/1.1 Host: punjabivirasat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://punjabivirasat.com/BAAA/personal2.html	URL: punjabivirasat.com/BAAA/images/assets-images-global-tit (...) FQDN: punjabivirasat.com IP: 43.225.55.146 HASH: a154e9972c58b8a28ab486b93d7b7a702bf3f71505b5c1556b8fdaa8ab12b95a 43.225.55.146 HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 28 Nov 2022 21:53:22 GMT Server: Apache Last-Modified: Fri, 28 Oct 2022 10:24:28 GMT Accept-Ranges: bytes Content-Length: 2124 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1709) Size: 2124 Md5: 90d6f72ab25f2bf58b46347d934a380c Sha1: 6fa0c9f09df670c82b52e2e3395c9a5786844589 Sha256: a154e9972c58b8a28ab486b93d7b7a702bf3f71505b5c1556b8fdaa8ab12b95a Alerts: Blocklists: - fortinet: Phishing
GET /BAAA/images/assets-images-global-header-lock-CSX1f35fd71.png HTTP/1.1 Host: punjabivirasat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://punjabivirasat.com/BAAA/personal2.html	URL: punjabivirasat.com/BAAA/images/assets-images-global-hea (...) FQDN: punjabivirasat.com IP: 43.225.55.146 HASH: 38fc756dfdd0689c674e787e6e030549f7f3856e533350aabeb46cce0d2b9b77 43.225.55.146 HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 28 Nov 2022 21:53:22 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Fri, 28 Oct 2022 10:24:28 GMT Accept-Ranges: bytes Content-Length: 52278 Keep-Alive: timeout=5, max=75 --- Additional Info --- Magic: PNG image data, 10 x 14, 8-bit/color RGBA, non-interlaced\012- data Size: 52278 Md5: a86676a23cf698c92603069a6ee6dc65 Sha1: 54e430c27af1b2bc1cde3b7f4e5cbfe51aaf99e6 Sha256: 38fc756dfdd0689c674e787e6e030549f7f3856e533350aabeb46cce0d2b9b77
GET /BAAA/images/favicon.ico HTTP/1.1 Host: punjabivirasat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://punjabivirasat.com/BAAA/personal2.html	URL: punjabivirasat.com/BAAA/images/favicon.ico FQDN: punjabivirasat.com IP: 43.225.55.146 HASH: d5bba1cae66759adfee0d50ab0419e6bb19a48f8c360e4be8e582ba75e7a1402 43.225.55.146 HTTP/1.1 200 OK Content-Type: image/x-icon Date: Mon, 28 Nov 2022 21:53:23 GMT Server: Apache Last-Modified: Fri, 28 Oct 2022 10:24:28 GMT Accept-Ranges: bytes Content-Length: 15086 Cache-Control: max-age=604800 Expires: Mon, 05 Dec 2022 21:53:23 GMT Keep-Alive: timeout=5, max=72 Connection: Keep-Alive --- Additional Info --- Magic: MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data Size: 15086 Md5: f5cf9991c119848718497291eedfdf12 Sha1: 00aadfc922701304d16aa1d7b888aea549e87578 Sha256: d5bba1cae66759adfee0d50ab0419e6bb19a48f8c360e4be8e582ba75e7a1402

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=9334 

                                        
                                            
Expires: Tue, 29 Nov 2022 00:28:53 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 21:53:19 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    150792cfc458af013998f4ef6bdf5f74

                                                Sha1:   d5179b2dcb11d06f82606bf6eb6648319998d63e

                                                Sha256: 72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=12977 

                                        
                                            
Expires: Tue, 29 Nov 2022 01:29:36 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 21:53:19 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    3b56944f0e5716fd4fad2ec18994d4be

                                                Sha1:   61cafa4de31ba960d1145ec37272f6f6b6944e0c

                                                Sha256: 4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.160.144.191

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
x-amz-id-2: kqNzmqK3bDXgGR8bBa6D6pitANZiy6HOcI5pDNApPcpGyDmoHhlW3VFwa0/+AQByUYl7pR0yUXs= 

                                        
                                            
x-amz-request-id: 0QK1H5H900CNJZ82 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-length: 5348 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Mon, 28 Nov 2022 21:45:11 GMT 

                                        
                                            
age: 488 

                                        
                                            
last-modified: Thu, 10 Nov 2022 09:21:27 GMT 

                                        
                                            
etag: "9ebddc2b260d081ebbefee47c037cb28" 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    9ebddc2b260d081ebbefee47c037cb28

                                                Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39

                                                Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.102.187.140

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 329 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Mon, 28 Nov 2022 21:11:12 GMT 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
age: 2528 

                                        
                                            
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
etag: "1648230346554" 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: YfVDOgXG291ojAab2ueceg== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         52.43.253.52

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: Y37SpfBAGuqNIQokhWVsSBbaHvY= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=12337 

                                        
                                            
Expires: Tue, 29 Nov 2022 01:18:59 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 21:53:22 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=12337 

                                        
                                            
Expires: Tue, 29 Nov 2022 01:18:59 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 21:53:22 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9082acd6-44fd-454b-b215-451cf6d822a1.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8106 

                                        
                                            
x-amzn-requestid: 73d1b662-99a8-4ad7-95f9-c0b1ebf7c45a 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cVNnQEhQoAMFbLA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63852961-64954bc92997c9302e291381;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:25 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: UO4hCMgPgR4-ld-QCKgNPrq4p1gduUSA5R4ffZmnFodBj-1_NcFLmg== 

                                        
                                            
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Mon, 28 Nov 2022 21:37:21 GMT 

                                        
                                            
age: 961 

                                        
                                            
etag: "b703ea2cc2fcd68e60135ff77d5a5f1b93fac128" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8106

                                                Md5:    5ab97acd46d3380fa12711c96b3c2d35

                                                Sha1:   b703ea2cc2fcd68e60135ff77d5a5f1b93fac128

                                                Sha256: aeeaa56714fbd157e788cd24da03d43ede527959e2563e6d7d99489753dee85f

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1172c72b-d329-4446-80cb-92b8cf104425.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 3944 

                                        
                                            
x-amzn-requestid: 8a6732c1-72da-4a73-ba51-8533c6a01a9c 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cVNmfFgeIAMFjLw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6385295c-0c807d93277bfb7f6b13c2ee;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:20 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: oW4xFfsPp-Jmf28Uc88iZ2jLgtMRjn2gW0orrJ4K201r6Y6OlHkacQ== 

                                        
                                            
via: 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Mon, 28 Nov 2022 21:46:51 GMT 

                                        
                                            
age: 391 

                                        
                                            
etag: "5008d7344dd85ae61a598c17e7baf427def3e25d" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   3944

                                                Md5:    9cd333c474420e235831d96ed881167e

                                                Sha1:   5008d7344dd85ae61a598c17e7baf427def3e25d

                                                Sha256: 2178a96e120661e43d8e8ed0df1fcf500caf4c58db9e1bedaf0706af0a80b286

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10176 

                                        
                                            
x-amzn-requestid: c2231955-5c78-4073-8399-b8b90f1add78 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cMo3oHpSoAMF5Qw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6381bb63-55a1cb004ac73c8b02f2fb8d;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 26 Nov 2022 07:08:19 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: uGocx-Lv8ieJVvICjnTGQZyzaQzjVdICX2RZaNyBTQvUKeIcNxaCJQ== 

                                        
                                            
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Mon, 28 Nov 2022 07:38:02 GMT 

                                        
                                            
age: 51320 

                                        
                                            
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10176

                                                Md5:    03014221d7f49b50ffc2d1b0a0e75457

                                                Sha1:   772d86ad983042a728ee3490630a9cf1134ad0dd

                                                Sha256: 81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771

                                        
                                            GET /BAAA/images/assets-images-site-secure-ah-forgot-common-loader_black-CSX85ecad56.gif HTTP/1.1 

                                        
                                            
Host: punjabivirasat.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://punjabivirasat.com/BAAA/personal2.html

                                         43.225.55.146

                                        
                                            HTTP/1.1 404 Not Found 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 21:53:22 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Expires: Wed, 11 Jan 1984 05:00:00 GMT 

                                        
                                            
Cache-Control: no-transform, no-cache, must-revalidate, max-age=0 

                                        
                                            
Link: <http://punjabivirasat.com/wp-json/>; rel="https://api.w.org/" 

                                        
                                            
Upgrade: h2,h2c 

                                        
                                            
Connection: Upgrade, Keep-Alive 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Content-Length: 8025 

                                        
                                            
Keep-Alive: timeout=5, max=75 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1746), with CRLF, LF line terminators

                                                Size:   8025

                                                Md5:    58b3c307452aec05d6fd60d953d79f4f

                                                Sha1:   ada18a6d937446e4bc48dfacc917e4a45b6c6598

                                                Sha256: 72bbc2c68bdc05b4adda6000dc8e80bcbdc92ddd40a91b910ec06f94991a9022

                                        
                                            GET /BAAA/images/assets-images-global-header-lock-CSX1f35fd71.png HTTP/1.1 

                                        
                                            
Host: punjabivirasat.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://punjabivirasat.com/BAAA/personal2.html

                                         43.225.55.146

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 21:53:22 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Upgrade: h2,h2c 

                                        
                                            
Connection: Upgrade, Keep-Alive 

                                        
                                            
Last-Modified: Fri, 28 Oct 2022 10:24:28 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Content-Length: 52278 

                                        
                                            
Keep-Alive: timeout=5, max=75 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 10 x 14, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   52278

                                                Md5:    a86676a23cf698c92603069a6ee6dc65

                                                Sha1:   54e430c27af1b2bc1cde3b7f4e5cbfe51aaf99e6

                                                Sha256: 38fc756dfdd0689c674e787e6e030549f7f3856e533350aabeb46cce0d2b9b77

URL	punjabivirasat.com/BAAA/personal2.html
IP	43.225.55.146 (United Arab Emirates)
ASN	#394695 PUBLIC-DOMAIN-REGISTRY
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-28 21:53:30 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	9
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (8)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 43.225.55.146

Last 5 reports on ASN: PUBLIC-DOMAIN-REGISTRY

Last 1 reports on domain: punjabivirasat.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (2)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (32)

Overview

Domain Summary (8)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 43.225.55.146

Last 5 reports on ASN: PUBLIC-DOMAIN-REGISTRY

Last 1 reports on domain: punjabivirasat.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (2)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (32)

Network Intrusion Detection Systems