mail.hsitesreviewmail.com/ck/owl/mail/E4FtE4U_VqF-/1ea920e0df946b73ef23429048012744/c2efa1cf25c4984a4605c8da72079ffd?vertical=1&template=ff22_o14&cid=4019&utm_source=&utm_medium=&clickId=E4FtE4U_VqF-&sId=42&svId=5
301 Moved Permanently 457 B URL HTTP/1.1 mail.hsitesreviewmail.com/ck/owl/mail/E4FtE4U_VqF-/1ea920e0df946b73ef23429048012744/c2efa1cf25c4984a4605c8da72079ffd?vertical=1&template=ff22_o14&cid=4019&utm_source=&utm_medium=&clickId=E4FtE4U_VqF-&sId=42&svId=5
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 823f7cc6e728a8af86f55ad29748f8dd
07a30482a51fa38a283c423e4c49f56e969b6a72
147644257c0a6de9e9e2541d898aeecad977be07d976a12254085a691893fea5
GET /ck/owl/mail/E4FtE4U_VqF-/1ea920e0df946b73ef23429048012744/c2efa1cf25c4984a4605c8da72079ffd?vertical=1&template=ff22_o14&cid=4019&utm_source=&utm_medium=&clickId=E4FtE4U_VqF-&sId=42&svId=5 HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 09 Dec 2022 23:45:55 GMT
Server: Apache/2.4.41 (Ubuntu)
Location: https://mail.hsitesreviewmail.com/ck/owl/mail/E4FtE4U_VqF-/1ea920e0df946b73ef23429048012744/c2efa1cf25c4984a4605c8da72079ffd?vertical=1&template=ff22_o14&cid=4019&utm_source=&utm_medium=&clickId=E4FtE4U_VqF-&sId=42&svId=5
Content-Length: 457
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2acd891dc6eb1f09f57a2b086791781
1e2088306501a61edcca1ade62c4d54f23b3b083
51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6652
Expires: Sat, 10 Dec 2022 01:36:48 GMT
Date: Fri, 09 Dec 2022 23:45:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 388f6fea5bafa378266622b72311a6ee
447f102dc12172ce1ba44c5e94e1d7bb49d43372
a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7869
Expires: Sat, 10 Dec 2022 01:57:05 GMT
Date: Fri, 09 Dec 2022 23:45:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4ee537977be9c03702f8ffe0025bf1fe
21637881c4aa34c4add703f8bff4eff573159f45
4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11098
Expires: Sat, 10 Dec 2022 02:50:54 GMT
Date: Fri, 09 Dec 2022 23:45:56 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 23:08:21 GMT
content-type: application/json
age: 2255
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: gxnegLzUnEKl6CRzWG+UNKOeY9+UudC2eUlNvDBjFammsD0/XkEtWRBak3b+kzLKbihYvZXRUjU=
x-amz-request-id: 1NZPBB4C6KGY684R
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 22:50:26 GMT
age: 3330
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 95c3ac1b60b1f1665aa012194f44b3ea
27d84c4fd3ffa353c33da1f71636afd10c8219bb
64ddd480c3c850b8cdbcb522a7309f7439912faa5790607d21425a913b417e1d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "64DDD480C3C850B8CDBCB522A7309F7439912FAA5790607D21425A913B417E1D"
Last-Modified: Wed, 07 Dec 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6951
Expires: Sat, 10 Dec 2022 01:41:47 GMT
Date: Fri, 09 Dec 2022 23:45:56 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 23:45:56 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 23:33:13 GMT
age: 763
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
mail.hsitesreviewmail.com/ck/owl/mail/E4FtE4U_VqF-/1ea920e0df946b73ef23429048012744/c2efa1cf25c4984a4605c8da72079ffd?vertical=1&template=ff22_o14&cid=4019&utm_source=&utm_medium=&clickId=E4FtE4U_VqF-&sId=42&svId=5
200 OK 3.2 kB URL HTTP/1.1 mail.hsitesreviewmail.com/ck/owl/mail/E4FtE4U_VqF-/1ea920e0df946b73ef23429048012744/c2efa1cf25c4984a4605c8da72079ffd?vertical=1&template=ff22_o14&cid=4019&utm_source=&utm_medium=&clickId=E4FtE4U_VqF-&sId=42&svId=5
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6500)
Hash 63dec03dbc8c97b7d3ccca726eb4c6f4
29434e15d1c0579a90882a2262224e76aad88049
0da284163b33a654e9629b85bd833eda71bf6bc30f9f091c8f7e36d6f682c50b
GET /ck/owl/mail/E4FtE4U_VqF-/1ea920e0df946b73ef23429048012744/c2efa1cf25c4984a4605c8da72079ffd?vertical=1&template=ff22_o14&cid=4019&utm_source=&utm_medium=&clickId=E4FtE4U_VqF-&sId=42&svId=5 HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22affId%22%3A298%2C%22networkId%22%3A2%2C%22cid%22%3A4057%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:56 GMT
Server: Apache/2.4.41 (Ubuntu)
Cache-Control: no-store
Set-Cookie: _cid=aca60b6759efdc4e60dd9d9184674b86; expires=Fri, 09-Dec-2022 23:46:56 GMT; Max-Age=60
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3221
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
ocsp.digicert.com/
200 OK 471 B IP
Hash e6be4d2155028ffff5d01ab6e7edf6da
07172071b5cf43c4cd7d7930b4ad8518ec1e32e9
4d8a5fa2362fd0910babd6d128d850d4460829468eb23d34ee5ee6eaa42d5a38
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2618
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 23:45:56 GMT
Last-Modified: Fri, 09 Dec 2022 23:02:18 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
mail.hsitesreviewmail.com/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 mail.hsitesreviewmail.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 183354cd8aef0b86eb21c3c990769e3a
1a9f66ae6db831dc774f9ba68f67aa12b6ece2d1
15feb3bb92077977c3a07a6810c346f592a800ecfec3c50d446773e48b514a7e
GET /favicon.ico HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22affId%22%3A298%2C%22networkId%22%3A2%2C%22cid%22%3A4057%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "47e-57f93df4f75c0"
Accept-Ranges: bytes
Content-Length: 1150
Cache-Control: public, max-age=604800, must-revalidate
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
mail.hsitesreviewmail.com/ck/owl/mail/E4FtE4U_VqF-/1ea920e0df946b73ef23429048012744/c2efa1cf25c4984a4605c8da72079ffd?vertical=1&template=ff22_o14&cid=4019&utm_source=&utm_medium=&clickId=E4FtE4U_VqF-&sId=42&svId=5
302 Found 0 B URL HTTP/1.1 mail.hsitesreviewmail.com/ck/owl/mail/E4FtE4U_VqF-/1ea920e0df946b73ef23429048012744/c2efa1cf25c4984a4605c8da72079ffd?vertical=1&template=ff22_o14&cid=4019&utm_source=&utm_medium=&clickId=E4FtE4U_VqF-&sId=42&svId=5
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ck/owl/mail/E4FtE4U_VqF-/1ea920e0df946b73ef23429048012744/c2efa1cf25c4984a4605c8da72079ffd?vertical=1&template=ff22_o14&cid=4019&utm_source=&utm_medium=&clickId=E4FtE4U_VqF-&sId=42&svId=5 HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 113056
Origin: null
Connection: keep-alive
Cookie: _cid=aca60b6759efdc4e60dd9d9184674b86; landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22affId%22%3A298%2C%22networkId%22%3A2%2C%22cid%22%3A4057%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Date: Fri, 09 Dec 2022 23:45:56 GMT
Server: Apache/2.4.41 (Ubuntu)
Cache-Control: no-store
Location: /
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html;charset=UTF-8
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: y6viXJUNMoz+bdcZo9oCkA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8p6yIhUvML0n/onAlMRtnl4271E=
mail.hsitesreviewmail.com/
200 OK 1.7 kB URL HTTP/1.1 mail.hsitesreviewmail.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (716)
Hash 521f98a6b56873c123cfbbaa48529207
7dd03552db9c9246edc6ab77b5ec56bea26a317d
1895dfb36195fdfac1f04b20c5e8fa32964bb1d8bbba88dbcac9673b023d9d70
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22affId%22%3A298%2C%22networkId%22%3A2%2C%22cid%22%3A4057%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D; expires=Mon, 06-Dec-2032 23:45:57 GMT; Max-Age=315360000; path=/
Cache-Control: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1700
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
mail.hsitesreviewmail.com/assets/scripts/trkng.js
200 OK 896 B URL HTTP/1.1 mail.hsitesreviewmail.com/assets/scripts/trkng.js
IP
Hash a07ed1a1999454c416189ece2eca7641
07a5ebc44bc4d4f961b3e7ca0d3220482a7dad1d
6dce144dbf75c228aaac7923528e2700acd69c1fc8d0ea302f0d3a774238e30a
Analyzer Verdict Alert fortinet Phishing
GET /assets/scripts/trkng.js HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "cdb-5ae6508325700-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=604800, must-revalidate
Content-Length: 896
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
200 OK 7.8 kB URL HTTP/1.1 mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2250)
Hash 5832fcc7c29f742c0ed436965a0e8181
2592e33f2c89a11665030913a52f247c3c869acc
cc90c63390b949e798648bcfced4be59aa44e23f8e715751c39f3ceabfa2db6e
GET /?bpuid=bprotect6393c8b51a97d6.50014301 HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D; expires=Mon, 06-Dec-2032 23:45:57 GMT; Max-Age=315360000; path=/
Cache-Control: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7759
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
mail.hsitesreviewmail.com/resources/Landing/owl_base/images/favicon-16x16.png
200 OK 1.5 kB URL HTTP/1.1 mail.hsitesreviewmail.com/resources/Landing/owl_base/images/favicon-16x16.png
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 1bc0e46970069a5ce40975a68cd26edd
84c1be33d52284f22aadc47a79c898c5fce33370
dbf2dba29c4c362563d4e22be1098c42eacff1f32ef623b9a742e5e0c47eea59
GET /resources/Landing/owl_base/images/favicon-16x16.png HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "5c7-5b086a69d82c0"
Accept-Ranges: bytes
Content-Length: 1479
Cache-Control: public, max-age=604800, must-revalidate
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
mail.hsitesreviewmail.com/resources/Landing/owl_base/images/apple-touch-icon.png
200 OK 20 kB URL HTTP/1.1 mail.hsitesreviewmail.com/resources/Landing/owl_base/images/apple-touch-icon.png
IP
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash a260b9011133f75ecd2e7d1c43c55151
0fd4a79df5474b47a98ec585f7db04119dc1a388
b9536fe69dd22cdf351df4766281cdc37a9c6312819187add2ee504fce088332
GET /resources/Landing/owl_base/images/apple-touch-icon.png HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "4e38-5b086a69d82c0"
Accept-Ranges: bytes
Content-Length: 20024
Cache-Control: public, max-age=604800, must-revalidate
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
code.jquery.com/jquery-migrate-1.2.1.min.js
200 OK 3.1 kB URL HTTP/2 code.jquery.com/jquery-migrate-1.2.1.min.js
IP
File type ASCII text, with very long lines (7085)
Hash e1084a25976d8b8999acadc7350ffb48
99b723d38b78d8347e8dfa60193b12864a370227
b98359c65420aa3864d5b86ef94c4c9a5fb8c772a905884a5ba4ce55319a3d13
GET /jquery-migrate-1.2.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 23:45:57 GMT
content-encoding: gzip
content-length: 3063
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-1c1f"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1670629557.dop211.sk1.t,1670629557.cds222.sk1.hn,1670629557.cds242.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash edac2b4e678c48b1fc3be3a06793bfcb
23f1f41a2194536d77a2497d7255b13747fd9af0
e6b36b71f3633bd9d2b80043967f9579820f0ef1d5f66e5c401806de13cbe2a1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 23:45:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mail.hsitesreviewmail.com/assets/scripts/wizard.js
200 OK 1.5 kB URL HTTP/1.1 mail.hsitesreviewmail.com/assets/scripts/wizard.js
IP
File type ASCII text, with CRLF line terminators
Hash cbe1c8719bc6c1da1d90626f1f56f4c2
8dfc7a80f0e93d617d2a4e7f8ac6f4e9852e592f
655637381fff62b3770e2df2bc192be437757cfa7cfe3e1fa3c35d1cd8872d46
Analyzer Verdict Alert fortinet Phishing
GET /assets/scripts/wizard.js HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "160a-586d03ff69f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=604800, must-revalidate
Content-Length: 1545
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
mail.hsitesreviewmail.com/assets/css/form.css
200 OK 640 B URL HTTP/1.1 mail.hsitesreviewmail.com/assets/css/form.css
IP
File type ASCII text, with CRLF line terminators
Hash 3664620290092626b5542cfcdf1ee76e
50a33f854a5f46c80d513d98e727ffc9f308c551
81098f4b1e453d6378cd524b5ecddd1cf82cdf8871d38a4e40e434d841f83963
GET /assets/css/form.css HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "6f1-58b364c690880-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=604800, must-revalidate
Content-Length: 640
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a49ab5ecc317aa7e4724050053737549
3ffff77715bf8c5dbcbb5e17abbbc2c683c36f60
844f25237f9906c3fb977d58259e132c41dacbbe546adc8b45e9992e6ee711c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 23:45:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mail.hsitesreviewmail.com/vendor/mailcheck/mailcheck.min.js
200 OK 1.1 kB URL HTTP/1.1 mail.hsitesreviewmail.com/vendor/mailcheck/mailcheck.min.js
IP
File type C source, ASCII text, with very long lines (2531), with no line terminators
Hash 7d83d84f1c6a8afb07955f51464629b5
dafb792d3b5de5633ebfba21c7386d8bb83378f4
074c047811d6cf6d75fb66c1e5fc237351e458e7817eeb7bd1ef94c18dc0156f
Analyzer Verdict Alert fortinet Phishing
GET /vendor/mailcheck/mailcheck.min.js HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "9e3-57f93df5eb800-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=604800, must-revalidate
Content-Length: 1080
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
mail.hsitesreviewmail.com/assets/scripts/prototype.js
200 OK 242 B URL HTTP/1.1 mail.hsitesreviewmail.com/assets/scripts/prototype.js
IP
File type ASCII text, with CRLF line terminators
Hash 0465b86f13b98c688c1626c46903efce
436922a5293363433c9646ac706b35ae18c34a12
3358fded42111823b0315e70e83798e904c7f53d231d5bda863388d340391a75
Analyzer Verdict Alert fortinet Phishing
GET /assets/scripts/prototype.js HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "140-57f93df4f75c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=604800, must-revalidate
Content-Length: 242
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
www.google.com/recaptcha/api.js?render=6LcWLaMUAAAAAGW3FZeJVek7QL4Sufn7HboWxA-4
200 OK 585 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6LcWLaMUAAAAAGW3FZeJVek7QL4Sufn7HboWxA-4
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash b02e4827420a240f47e9dfac3a97dfeb
57e39d17058f2fe2ffefc93e83267d6b758333a8
ba9049a6519801858a8d7a9ec25b8040b2118f8084f042c86bbd71e5bd36c598
GET /recaptcha/api.js?render=6LcWLaMUAAAAAGW3FZeJVek7QL4Sufn7HboWxA-4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 09 Dec 2022 23:45:57 GMT
date: Fri, 09 Dec 2022 23:45:57 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 585
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mail.hsitesreviewmail.com/assets/scripts/cookieconsent.js
200 OK 904 B URL HTTP/1.1 mail.hsitesreviewmail.com/assets/scripts/cookieconsent.js
IP
Hash 659a2368b759e65835517c258c25434d
77777e86df0cc19839653099e70fdf247e058745
244d4de8026b2aaa4dd3969548057eeb50f691965199a67cff950c0e3ce838ac
Analyzer Verdict Alert fortinet Phishing
GET /assets/scripts/cookieconsent.js HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "9a4-5b23fe6b727c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=604800, must-revalidate
Content-Length: 904
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
mail.hsitesreviewmail.com/assets/scripts/validation.js
200 OK 7.6 kB URL HTTP/1.1 mail.hsitesreviewmail.com/assets/scripts/validation.js
IP
File type ASCII text, with very long lines (6345), with CRLF line terminators
Hash 2fa53d93aad96e7783243edd86604b03
64c8cf89c3cbf7db61879614b91a9287bad24dce
7537888e5a39094c60c3cea8026ae4a65b5a6394d7d14692a6945acbc507f96d
Analyzer Verdict Alert fortinet Phishing
GET /assets/scripts/validation.js HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "6387-5aadd3c04dfc0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=604800, must-revalidate
Content-Length: 7623
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
mail.hsitesreviewmail.com/vendor/jquery/jquery.js
200 OK 106 kB URL HTTP/1.1 mail.hsitesreviewmail.com/vendor/jquery/jquery.js
IP
Size 106 kB (106227 bytes)
Hash 2cb5623cd3caf778d88ecb3c3504dffa
35d140f9adf188adc7a922cb28d20cd3b6146627
b6dd2c9bf6adcac6caf3c4ab60bc67a295f9445051ebc9faf87f48ec2eaffb28
Analyzer Verdict Alert fortinet Phishing
GET /vendor/jquery/jquery.js HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "42b2f-57f93df5eb800-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=604800, must-revalidate
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
mail.hsitesreviewmail.com/assets/css/progressbar.css
200 OK 803 B URL HTTP/1.1 mail.hsitesreviewmail.com/assets/css/progressbar.css
IP
Hash 930493803dfd4cfd42c028306f3e6014
ab2b0c31df4ed2a646599b8c1d2d99fab3b2e5ff
6263372d24194cfab44d7326f8c7cd7cdfca097f1dc4b9ff3abdb15f3e886198
GET /assets/css/progressbar.css HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/assets/css/form.css
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "a67-589658636e500-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=604800, must-revalidate
Content-Length: 803
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash edac2b4e678c48b1fc3be3a06793bfcb
23f1f41a2194536d77a2497d7255b13747fd9af0
e6b36b71f3633bd9d2b80043967f9579820f0ef1d5f66e5c401806de13cbe2a1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 23:45:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5496e18a30e039b44989d9a0e932d4bc
c5bfb1b9ce711e38d69e78486017f07cc47fe04a
26a3ad286e479cdabfcbb5a9d3fada211c73650628a35c80944b0e7e8aad27e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 23:45:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mail.hsitesreviewmail.com/resources/Landing/owl_base/images/s001.jpg
200 OK 94 kB URL HTTP/1.1 mail.hsitesreviewmail.com/resources/Landing/owl_base/images/s001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x960, components 3\012- data
Hash a0bc3682d7996d24ec41742da3e6235b
442266ce1f7f4bd7bc43bd0e3ff84393e41f6cfe
2156fe525b0af24e6703434450a0d8de1656ffe08d6cb55f4b6461265d1e47d9
GET /resources/Landing/owl_base/images/s001.jpg HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "16d58-5c19654695e40"
Accept-Ranges: bytes
Content-Length: 93528
Cache-Control: public, max-age=604800, must-revalidate
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4f546e102d986faf1029509d599b730
cc045a705fd6758b7b575fde5dfb79facc9c3546
ef492301b2b30e5076f7dffa07973e65e9a200ba9ef4d3568a527d3f973f3349
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 23:45:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c01.jpg
200 OK 16 kB URL HTTP/1.1 mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3\012- data
Hash 905b6fd1ae9c3315077dccffd06c58ef
58089cfdd2cd9f478566a11c076791676be49e06
e1974f1ed3a40f1b5aca2d60fc0626d93bb8aaac04bd876d045129930a9ff731
GET /resources/Landing/owl_base/images/c01.jpg HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "3f55-5c19654695e40"
Accept-Ranges: bytes
Content-Length: 16213
Cache-Control: public, max-age=604800, must-revalidate
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c02.jpg
200 OK 26 kB URL HTTP/1.1 mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c02.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3\012- data
Hash e12e2f44b67829a4f3d8925d19a8a1f5
a153fc9ced8ddd6dacedc66c19111b41e92b13d3
01bb95c31c087c4e1629749fe43e0d2c7d6001120ac7eeba9d591105d3db5194
GET /resources/Landing/owl_base/images/c02.jpg HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "644e-5c19654695e40"
Accept-Ranges: bytes
Content-Length: 25678
Cache-Control: public, max-age=604800, must-revalidate
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c03.jpg
200 OK 18 kB URL HTTP/1.1 mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c03.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3\012- data
Hash cd16028545618510d6c0fef05f4ba2f9
1ea8213c4819fafd25f49db9fe6191993da7cc56
22b66a089ae6c9f37c5252195e329b4659e4148a186a5cf05beab544491f163b
GET /resources/Landing/owl_base/images/c03.jpg HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "480f-5c19654695e40"
Accept-Ranges: bytes
Content-Length: 18447
Cache-Control: public, max-age=604800, must-revalidate
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4f546e102d986faf1029509d599b730
cc045a705fd6758b7b575fde5dfb79facc9c3546
ef492301b2b30e5076f7dffa07973e65e9a200ba9ef4d3568a527d3f973f3349
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 23:45:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mail.hsitesreviewmail.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Dec 2022 18:52:41 GMT
expires: Tue, 05 Dec 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 363196
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c04.jpg
200 OK 18 kB URL HTTP/1.1 mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c04.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3\012- data
Hash 47d6321d1dccee20443d29301d06f1d6
e864b280562eb29dfff5193d3ffee5b8cbb99ad6
1a486665264e703d234d2f8e6040d5048d01ab7e101bce766ff5196bfa9ca420
GET /resources/Landing/owl_base/images/c04.jpg HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "468c-5c19654695e40"
Accept-Ranges: bytes
Content-Length: 18060
Cache-Control: public, max-age=604800, must-revalidate
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c05.jpg
200 OK 21 kB URL HTTP/1.1 mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c05.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3\012- data
Hash f3674af82221eb08695591d1847c266e
96cde98194767120825d17affd052d77242b194e
8ca8e729c5e387242c336a3671d4700a0723eeb20f542fc6ec86303085019cf0
GET /resources/Landing/owl_base/images/c05.jpg HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "527e-5c19654695e40"
Accept-Ranges: bytes
Content-Length: 21118
Cache-Control: public, max-age=604800, must-revalidate
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c06.jpg
200 OK 19 kB URL HTTP/1.1 mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c06.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3\012- data
Hash b3b6a26aa148923a6753f0d0bf2c0257
3b5d43051bef583f9971e90232e0f76e5b4b04f4
d94c2e35bbe2966b4eb18ddeb86164e7f88ee783c88efe92112b498a952be020
GET /resources/Landing/owl_base/images/c06.jpg HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "497d-5c19654695e40"
Accept-Ranges: bytes
Content-Length: 18813
Cache-Control: public, max-age=604800, must-revalidate
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c09.jpg
200 OK 16 kB URL HTTP/1.1 mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c09.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3\012- data
Hash 7036fed0ed9542f91f79d3e5e7097d65
2bde51a2f66534e11f82bd09b63855ea29718bfe
437ceef73aeccaceddcc90372943f08aa64bcbca75cfa9429375f7d38971623f
GET /resources/Landing/owl_base/images/c09.jpg HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "409f-5c19654695e40"
Accept-Ranges: bytes
Content-Length: 16543
Cache-Control: public, max-age=604800, must-revalidate
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c08.jpg
200 OK 31 kB URL HTTP/1.1 mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c08.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 220x330, components 3\012- data
Hash 4f7a5bac21c4a3cd939da3f69391e338
213c9d1ae7d64912c9d3e4dbccb4574247362340
0cb77e8bc57b2c74e936ee52f4a54b806e4fe13efc7984b9374f930ec47d681b
GET /resources/Landing/owl_base/images/c08.jpg HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "77e0-5b088fb32bb00"
Accept-Ranges: bytes
Content-Length: 30688
Cache-Control: public, max-age=604800, must-revalidate
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c07.jpg
200 OK 21 kB URL HTTP/1.1 mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c07.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3\012- data
Hash cc73484ef605a09c94a974484eaa3db8
2bc5e9ee78149f05bce1dedc0150c414c2d7e4fc
34cbb6bc0350b08e0aa891b29935926acb6d5f4d2604280238b8fbc0875ba08e
GET /resources/Landing/owl_base/images/c07.jpg HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "511d-5c19654695e40"
Accept-Ranges: bytes
Content-Length: 20765
Cache-Control: public, max-age=604800, must-revalidate
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4f546e102d986faf1029509d599b730
cc045a705fd6758b7b575fde5dfb79facc9c3546
ef492301b2b30e5076f7dffa07973e65e9a200ba9ef4d3568a527d3f973f3349
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 23:45:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c10.jpg
200 OK 17 kB URL HTTP/1.1 mail.hsitesreviewmail.com/resources/Landing/owl_base/images/c10.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3\012- data
Hash 637829d9c026f7a00e4c2b9b5a33628e
db085a30365ef6e9c3df573771afd8c279d8c638
77f7b4108fe6719a1b15a5c54cd35a830a54333526109eba439c2bcf28396a1b
GET /resources/Landing/owl_base/images/c10.jpg HTTP/1.1
Host: mail.hsitesreviewmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/?bpuid=bprotect6393c8b51a97d6.50014301
Cookie: landing-coordinates=%7B%22host%22%3A%22mail.hsitesreviewmail.com%22%2C%22shortname%22%3A%22owl_base%22%2C%22cid%22%3A4057%2C%22affId%22%3A298%2C%22networkId%22%3A2%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 23:45:57 GMT
Server: Apache/2.4.41 (Ubuntu)
ETag: "41cc-5c19654695e40"
Accept-Ranges: bytes
Content-Length: 16844
Cache-Control: public, max-age=604800, must-revalidate
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mail.hsitesreviewmail.com
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 13:40:02 GMT
expires: Thu, 07 Dec 2023 13:40:02 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 209155
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 21:48:03 GMT
expires: Fri, 08 Dec 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 93474
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 16:40:43 GMT
expires: Fri, 08 Dec 2023 16:40:43 GMT
cache-control: public, max-age=31536000
age: 111914
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3461
Expires: Sat, 10 Dec 2022 00:43:39 GMT
Date: Fri, 09 Dec 2022 23:45:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3461
Expires: Sat, 10 Dec 2022 00:43:39 GMT
Date: Fri, 09 Dec 2022 23:45:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3461
Expires: Sat, 10 Dec 2022 00:43:39 GMT
Date: Fri, 09 Dec 2022 23:45:58 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3fdfa83b-145c-4be3-a6b8-f5793f03bb94.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3fdfa83b-145c-4be3-a6b8-f5793f03bb94.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2670e991a43d526b00562ed6451dd0aa
7ba541ab2af223148304d413e8a19d9e55d9ed7a
f703500f0bcef3b64f97fa17d6d6bb510b71d1fe43098964ff028de8155f1291
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3fdfa83b-145c-4be3-a6b8-f5793f03bb94.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7933
x-amzn-requestid: a1238d4e-29a4-433f-89a0-7f5e1c9d380f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eVeHUXoAMF4xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa89-26d996ae7911586c07a35c6d;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:37:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -naGV8_QoDyJ7fHOE6SZD7cUwZzC5_XMWx6J_KvVy-SExS0LdFWmcw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 21:53:07 GMT
age: 6771
etag: "7ba541ab2af223148304d413e8a19d9e55d9ed7a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32378252-8233-4d6b-b3d2-720e3ac2d0bd.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32378252-8233-4d6b-b3d2-720e3ac2d0bd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a2b4c44cc196e1f4263a895ef54e6650
c5cea524045b3394c1dfe5e5fcac4637416f8587
e31f4b95811c01b2f2f181e11b7a8e1b4c57c3c7fc067c304e8dacc6fb176442
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32378252-8233-4d6b-b3d2-720e3ac2d0bd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3963
x-amzn-requestid: f067a6cf-758c-4c35-be64-3970b690ea7c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5e7VHdnoAMF0Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393ab7b-485a18b738763b2029f6c653;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:41:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: s34c1vAKHso9NwDfhOn5053VIDeRGdwNscoMDkkfcNx95irwIB9Hrg==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 21:54:23 GMT
age: 6695
etag: "c5cea524045b3394c1dfe5e5fcac4637416f8587"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8eba44f9-82c7-4919-bc2f-4f847f621994.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8eba44f9-82c7-4919-bc2f-4f847f621994.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e8a5e9d0cddf26cf3a1478d2942f2478
e8a228a857a414f04108c84670ed7bc74534407c
3a15851f412000f1647057745348bc6f6e2f0cfe481ca7a72f6e94fab8d5e52e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8eba44f9-82c7-4919-bc2f-4f847f621994.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12990
x-amzn-requestid: 2e4f71f3-b81d-4822-a13a-e8367a76aa20
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eMREp3IAMFRJw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa4e-447650995616ab6a09780380;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DVOvH3hkkdKdQNGQSrJ90yGPigdD8UysVImEu_pMe_H69RagreIKsg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 21:53:07 GMT
age: 6771
etag: "e8a228a857a414f04108c84670ed7bc74534407c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c73a9d6-0f56-4366-b9bd-119b0034c1aa.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c73a9d6-0f56-4366-b9bd-119b0034c1aa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 44ee520c9a084ee2a04638b6abbb2b0b
ed170b8b964db1163e02c21fe4e9dbfe58e9d42d
e4f33f6556c414b498f99d6b43c4d94fa15e9b235596647d4a8513c78c21e6eb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c73a9d6-0f56-4366-b9bd-119b0034c1aa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5302
x-amzn-requestid: ababe39a-ea1a-4a20-9de4-ad71500d9c59
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eMWE-eoAMFZJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa4e-19c2e2c1445527c13b4b66e0;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w2vv_xDK6MNt2CX1nqsqt9mRjSOPMxVNrar2XcR44gJPtC0vaK68sg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 22:48:59 GMT
age: 3419
etag: "ed170b8b964db1163e02c21fe4e9dbfe58e9d42d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5de5d319f43d9c9c641419d96655541f
cde4c7fa0145d3645af17e34c83c63c08f76a076
fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7557
x-amzn-requestid: 09204b5e-8af5-4d4b-8186-628443866e0f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctlz5EISoAMFdWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ee9b2-357cd4f921c592e1319098dd;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 07:05:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3KZwQ5HqXa_-tUyDHA5m-65OprogFpFgbbKpEJ65k-Yy3lwoCg8M5w==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 07:13:15 GMT
age: 59563
etag: "cde4c7fa0145d3645af17e34c83c63c08f76a076"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3481e34b-ab9e-46b1-acd8-f9e532860477.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3481e34b-ab9e-46b1-acd8-f9e532860477.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d3acf5a494a6bb8b26858974ede70a33
4bccc3032f7427d881a49250e576c05dd7d5614f
786db0da1198986aeba9aa420a7c89b5b27a09bc48c3806769342159f116705d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3481e34b-ab9e-46b1-acd8-f9e532860477.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12047
x-amzn-requestid: 87cb3342-c784-4ea1-a96e-d1e581a86bea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czqP1Fd0IAMFdww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63915731-178eb2960448312e146f5bd4;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 03:17:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: BjbkkmxxwK9xut7yloGC9fRwhMLQRtfcU1JWiyqAUfMNk-WPQab1Cg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 22:03:10 GMT
age: 6168
etag: "4bccc3032f7427d881a49250e576c05dd7d5614f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9f369c6-4ce5-4eaa-9070-5c8609b145d1.png
200 OK 3.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9f369c6-4ce5-4eaa-9070-5c8609b145d1.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2f812f19fa34380de62bc57a879fa24f
102e8572c0ec9be444a976a6ac79e7d389651c46
07a0114317594dff40692d964fdeca4cf22e4324546866042c8712577346d107
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9f369c6-4ce5-4eaa-9070-5c8609b145d1.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 3924
x-amzn-requestid: b211e655-f36c-44c1-b316-5bdeea6b0921
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eMHG4ZoAMFSHQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa4d-75cd56ea0479970e3be4275e;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DB4kdpnob3tyFg5JwkA3zxfZzZUpHhOir1ltQklWOR2YjAZRfg43MQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 21:54:04 GMT
age: 6721
etag: "102e8572c0ec9be444a976a6ac79e7d389651c46"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700&display=swap
IP
GET /css?family=Open+Sans:400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.hsitesreviewmail.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 23:45:57 GMT
date: Fri, 09 Dec 2022 23:45:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
51.15.108.253
44.242.41.15
23.36.76.226
93.184.220.29
0.0.0.0