www.govplanet.com/jsp/mailing/mail-landing.jsp?userMailing=531485437&action=url&name=ImageBanner_1689024521039&url=https://whotly.com/akmu/kkkkk33333/s7qs////dGFtaS5jYWVzYXJAbm1zcy5vcmc=
54.214.85.174302 Found 257 B URL User Request GET HTTP/2 www.govplanet.com/jsp/mailing/mail-landing.jsp?userMailing=531485437&action=url&name=ImageBanner_1689024521039&url=https://whotly.com/akmu/kkkkk33333/s7qs////dGFtaS5jYWVzYXJAbm1zcy5vcmc=
IP 54.214.85.174:443
Certificate IssuerDigiCert, Inc.
Subject*.ironplanet.com
FingerprintDC:2E:40:7A:18:3C:D2:35:BA:E2:D3:83:1D:D9:7A:FF:74:79:21:B2
ValidityThu, 02 Feb 2023 00:00:00 GMT - Mon, 04 Mar 2024 23:59:59 GMT
File type HTML document, ASCII text
Hash 9dd533356ad45ec7c82c1ac60e1f0f87
c48c078a488a635b54aeb09ef61ccdcab6593148
93fa8be275ba4e717817a09cd63c677d662f7d4a6cc3730392596678ebd69c02
GET /jsp/mailing/mail-landing.jsp?userMailing=531485437&action=url&name=ImageBanner_1689024521039&url=https://whotly.com/akmu/kkkkk33333/s7qs////dGFtaS5jYWVzYXJAbm1zcy5vcmc= HTTP/1.1
Host: www.govplanet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 08 Nov 2023 13:53:49 GMT
content-type: text/html; charset=utf-8
content-length: 257
location: https://www.govplanet.eu/jsp/mailing/mail-landing.jsp?userMailing=531485437&action=url&name=ImageBanner_1689024521039&url=https://whotly.com/akmu/kkkkk33333/s7qs////dGFtaS5jYWVzYXJAbm1zcy5vcmc=&iprefoh=www.govplanet.com
set-cookie: AWSALB=/MQOEzWa92Uwxr8DCkHGIADgs9kuzZ60eMiEk93yYUsJ308rC2VGO5PLjqMFqsXanU12zc6V/Fpmqa+YYKDb/kB0Ks6lzRqWw8DiTo0q7Fdo+AlisppLyE+LDthz; Expires=Wed, 15 Nov 2023 13:53:49 GMT; Path=/
AWSALBCORS=/MQOEzWa92Uwxr8DCkHGIADgs9kuzZ60eMiEk93yYUsJ308rC2VGO5PLjqMFqsXanU12zc6V/Fpmqa+YYKDb/kB0Ks6lzRqWw8DiTo0q7Fdo+AlisppLyE+LDthz; Expires=Wed, 15 Nov 2023 13:53:49 GMT; Path=/; SameSite=None; Secure
gr=23; path=/
JIPSESS=aaawARUcnpGbXdznWLSUy; path=/; HttpOnly
LBSESSprod=1746210570.16671.0000; path=/; Httponly
server: IronPlanet/4.0.60
cache-control: private
X-Firefox-Spdy: h2
www.govplanet.eu/jsp/mailing/mail-landing.jsp?userMailing=531485437&action=url&name=ImageBanner_1689024521039&url=https://whotly.com/akmu/kkkkk33333/s7qs////dGFtaS5jYWVzYXJAbm1zcy5vcmc=&iprefoh=www.govplanet.com
54.214.85.174302 Found 221 B URL User Request GET HTTP/2 www.govplanet.eu/jsp/mailing/mail-landing.jsp?userMailing=531485437&action=url&name=ImageBanner_1689024521039&url=https://whotly.com/akmu/kkkkk33333/s7qs////dGFtaS5jYWVzYXJAbm1zcy5vcmc=&iprefoh=www.govplanet.com
IP 54.214.85.174:443
Certificate IssuerDigiCert, Inc.
Subject*.ironplanet.com
FingerprintDC:2E:40:7A:18:3C:D2:35:BA:E2:D3:83:1D:D9:7A:FF:74:79:21:B2
ValidityThu, 02 Feb 2023 00:00:00 GMT - Mon, 04 Mar 2024 23:59:59 GMT
File type HTML document, ASCII text
Hash 0825f4be893e83d81d5b90a532ccda0f
f05a09c7b4cbac596f861beb9186f1a1961243ac
89161c57cb005579c17fe40a6e26dde9657b10da4a71fe3cc3f6350b7a54073e
GET /jsp/mailing/mail-landing.jsp?userMailing=531485437&action=url&name=ImageBanner_1689024521039&url=https://whotly.com/akmu/kkkkk33333/s7qs////dGFtaS5jYWVzYXJAbm1zcy5vcmc=&iprefoh=www.govplanet.com HTTP/1.1
Host: www.govplanet.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 08 Nov 2023 13:53:49 GMT
content-type: text/html; charset=utf-8
content-length: 221
location: https://whotly.com/akmu/kkkkk33333/s7qs////dGFtaS5jYWVzYXJAbm1zcy5vcmc=?src=insideemail-GovPlanet-071123&utm_source=pet&utm_medium=email&utm_campaign=GP-Day1-071123-UserScores-120Days
set-cookie: AWSALB=gAC0mZthlMeK34vI5QKVuO9AgMgZ1xC9UQaq8dABwby5Ov4+sFvLyP4WPGxx647hQfa5K+Ww6But+P2mRk6HODl0NEal1YRcP3yMNFtSgpQICYtDfeDABBEqT8/n; Expires=Wed, 15 Nov 2023 13:53:49 GMT; Path=/
AWSALBCORS=gAC0mZthlMeK34vI5QKVuO9AgMgZ1xC9UQaq8dABwby5Ov4+sFvLyP4WPGxx647hQfa5K+Ww6But+P2mRk6HODl0NEal1YRcP3yMNFtSgpQICYtDfeDABBEqT8/n; Expires=Wed, 15 Nov 2023 13:53:49 GMT; Path=/; SameSite=None; Secure
al=false; path=/
lngLoc=en_GB; path=/; expires=Thu, 07-Mar-2024 13:53:49 GMT
fmtLoc=en_GB; path=/; expires=Thu, 07-Mar-2024 13:53:49 GMT
Apache=91.90.42.154.1699451629897; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT
JIPSESS=aaaLx80sS_xbI-ZaDJSUy; path=/; HttpOnly
LBSESSprod=1712656138.16671.0000; path=/; Httponly
server: IronPlanet/4.0.60
cache-control: private
content-language: en-GB
x-frame-options: ALLOW-FROM https://www.govplanet.eu
content-security-policy: frame-ancestors http://www.govplanet.eu https://www.govplanet.eu
X-Firefox-Spdy: h2
whotly.com/akmu/kkkkk33333/s7qs////dGFtaS5jYWVzYXJAbm1zcy5vcmc=?src=insideemail-GovPlanet-071123&utm_source=pet&utm_medium=email&utm_campaign=GP-Day1-071123-UserScores-120Days
50.116.84.18200 OK 0 B URL User Request GET HTTP/2 whotly.com/akmu/kkkkk33333/s7qs////dGFtaS5jYWVzYXJAbm1zcy5vcmc=?src=insideemail-GovPlanet-071123&utm_source=pet&utm_medium=email&utm_campaign=GP-Day1-071123-UserScores-120Days
IP 50.116.84.18:443
ASN #46606 UNIFIEDLAYER-AS-1
Certificate IssuerLet's Encrypt
Subjectwhotly.com
FingerprintC9:7A:83:02:F8:BF:AA:36:9C:20:2B:55:18:E1:15:F7:87:F4:E0:A7
ValiditySun, 05 Nov 2023 17:32:25 GMT - Sat, 03 Feb 2024 17:32:24 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /akmu/kkkkk33333/s7qs////dGFtaS5jYWVzYXJAbm1zcy5vcmc=?src=insideemail-GovPlanet-071123&utm_source=pet&utm_medium=email&utm_campaign=GP-Day1-071123-UserScores-120Days HTTP/1.1
Host: whotly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 Nov 2023 13:53:50 GMT
server: nginx/1.23.4
content-type: text/html; charset=UTF-8
content-length: 0
refresh: 0;url=https://tvl-groups.com/Mtami.caesar@nmss.org
cache-control: max-age=7200
expires: Wed, 08 Nov 2023 15:53:50 GMT
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: false
X-Firefox-Spdy: h2
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2%2BU%3D
104.17.3.184 41 kB URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2%2BU%3D
IP 104.17.3.184:0
File type PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced\012- data
Hash c30e4915661276bea95bf59cfb834691
5e2f2f444718bf8bf5445be73324185a969d0092
27ad41815c5731ed5c21e0b12d7f110c55daf0c8d6015c9f9abf0fd70173492e
GET /cdn-cgi/challenge-platform/h/g/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2%2BU%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/dh0kr/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 Nov 2023 13:53:51 GMT
content-type: image/png
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 822e4df988d4712e-OSL
alt-svc: h3=":443"; ma=86400
aadcdn.msauthimages.net/dbd5a2dd-j6ftudk4yv6qglcj71jupd6kmie-1fcgybr2t5earho/logintenantbranding/0/illustration?ts=637026077036382200
152.199.23.72200 OK 259 kB URL GET HTTP/2 aadcdn.msauthimages.net/dbd5a2dd-j6ftudk4yv6qglcj71jupd6kmie-1fcgybr2t5earho/logintenantbranding/0/illustration?ts=637026077036382200
IP 152.199.23.72:443
Requested by https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Certificate IssuerMicrosoft Corporation
Subjectaadcdn.msauthimages.net
Fingerprint6B:EB:AC:06:FC:06:82:11:17:1C:6B:72:7D:B5:95:2D:CF:E7:A3:5D
ValidityWed, 08 Mar 2023 11:16:34 GMT - Sat, 02 Mar 2024 11:16:34 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6], baseline, precision 8, 1920x1080, components 3\012- data
Size 259 kB (259361 bytes)
Hash 5491b9751ee871fd30a19135d9917d62
df90d26f3bb0427bc39917ec8b8e614c0832cf61
cc568a37d907fd44bcfb5ef8c561054fb49d236ca20e45dffb156f96f72dfc36
GET /dbd5a2dd-j6ftudk4yv6qglcj71jupd6kmie-1fcgybr2t5earho/logintenantbranding/0/illustration?ts=637026077036382200 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tvl-groups.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 1
cache-control: public, max-age=86400
content-md5: VJG5dR7ocf0woZE12ZF9Yg==
content-type: image/*
date: Wed, 08 Nov 2023 13:53:57 GMT
etag: 0x8D72BD78ABE24FB
last-modified: Wed, 28 Aug 2019 16:48:24 GMT
server: ECAcc (ska/F6C5)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: f56e427f-c01e-0071-7c4b-12a5c9000000
x-ms-version: 2009-09-19
content-length: 259361
X-Firefox-Spdy: h2
tvl-groups.com/Mtami.caesar@nmss.org
172.67.128.52302 Found 5.5 kB URL User Request POST HTTP/3 tvl-groups.com/Mtami.caesar@nmss.org
IP 172.67.128.52:443
Certificate IssuerGoogle Trust Services LLC
Subjecttvl-groups.com
Fingerprint94:6C:41:CC:85:4B:BE:04:79:E4:99:7A:83:E5:47:42:DD:07:C6:C4
ValidityTue, 17 Oct 2023 21:45:09 GMT - Mon, 15 Jan 2024 21:45:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
POST /Mtami.caesar@nmss.org HTTP/1.1
Host: tvl-groups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tvl-groups.com/Mtami.caesar@nmss.org?__cf_chl_tk=_kpxO.THC7GG3VUB7R2TezDhIna8Ii6Epe_Rt0hWxgk-1699451630-0-gaNycGzNDZA
Content-Type: application/x-www-form-urlencoded
Content-Length: 3873
Origin: https://tvl-groups.com
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Wed, 08 Nov 2023 13:53:54 GMT
content-type: text/html; charset=UTF-8
location: ./beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
set-cookie: cf_clearance=gdvDfedJHidx2tb_A3NGSzGq_OXTFjlpRkJaipEV.0g-1699451630-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; path=/; expires=Thu, 07-Nov-24 13:53:54 GMT; domain=.tvl-groups.com; HttpOnly; Secure; SameSite=None
PHPSESSID=a82cbd048abcfd8788fabae2972d32c6; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=no6opGT5NfHgoSCZofuIASKHHLqzwvwOzgoUjfQqlmMYbJdYBYaDwsUTc%2BFz2cA26EESOn%2FpTu9JbIGERKgPvZjSAmj4y2wdSw6Xa4pjQAgGu25UowFz4V7pbi2iVDbf2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 822e4e098ae27131-OSL
alt-svc: h3=":443"; ma=86400
tvl-groups.com/jq/a79e8098cf21c661fa08f218480b2886654b92f29c0ae
172.67.128.52200 OK 86 kB URL GET HTTP/3 tvl-groups.com/jq/a79e8098cf21c661fa08f218480b2886654b92f29c0ae
IP 172.67.128.52:443
Requested by https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Certificate IssuerGoogle Trust Services LLC
Subjecttvl-groups.com
Fingerprint94:6C:41:CC:85:4B:BE:04:79:E4:99:7A:83:E5:47:42:DD:07:C6:C4
ValidityTue, 17 Oct 2023 21:45:09 GMT - Mon, 15 Jan 2024 21:45:08 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /jq/a79e8098cf21c661fa08f218480b2886654b92f29c0ae HTTP/1.1
Host: tvl-groups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Cookie: cf_clearance=gdvDfedJHidx2tb_A3NGSzGq_OXTFjlpRkJaipEV.0g-1699451630-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=a82cbd048abcfd8788fabae2972d32c6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 Nov 2023 13:53:54 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Wed, 15 Nov 2023 13:53:54 GMT
last-modified: Wed, 08 Nov 2023 01:22:57 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m%2FR9UuNe1Qc5K0MRcfvd%2FvEIBtJVQL1ERkc59RD6rhrMOJukNUEjmvTP%2BAMwyyQifoFfBdxkFyzNpYyJGp5DSFCk1FRpJSFSTVyHxkcTi7IWOlMun7nE7U515d1oltJhWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 822e4e0dbfc77131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
unpkg.com/axios/dist/axios.min.js
104.16.123.175302 Found 32 kB URL GET HTTP/2 unpkg.com/axios/dist/axios.min.js
IP 104.16.123.175:443
Requested by https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /axios/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tvl-groups.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 08 Nov 2023 13:53:54 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.6.0/dist/axios.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HEQK4E7AJR8TNKDT4DE5K3YQ-arn
cf-cache-status: HIT
age: 248
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 822e4e0ddbb2b515-OSL
X-Firefox-Spdy: h2
tvl-groups.com/favicon.ico
172.67.128.52404 Not Found 1.2 kB URL GET HTTP/3 tvl-groups.com/favicon.ico
IP 172.67.128.52:443
Requested by https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Certificate IssuerGoogle Trust Services LLC
Subjecttvl-groups.com
Fingerprint94:6C:41:CC:85:4B:BE:04:79:E4:99:7A:83:E5:47:42:DD:07:C6:C4
ValidityTue, 17 Oct 2023 21:45:09 GMT - Mon, 15 Jan 2024 21:45:08 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1276), with no line terminators
Hash 24b426fea67958554911ff4c943fdfe4
b92889146d4c1bbddccabe58ca15c814ea066f72
335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c
GET /favicon.ico HTTP/1.1
Host: tvl-groups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Cookie: cf_clearance=gdvDfedJHidx2tb_A3NGSzGq_OXTFjlpRkJaipEV.0g-1699451630-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=a82cbd048abcfd8788fabae2972d32c6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 08 Nov 2023 13:53:56 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P4NzHjT32oTfUSoavQCIRfp%2FJ0VxL5pDNXQ1L1WbEWdnJXKnFqXuPsHsR95w9QTbE3q%2F3FoHjA1NxvnaDgnqrHMaJiymhAjPTSOZgH0CFAgyCmkr9ustKn%2Fx0KCaszmNJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 822e4e15b87f7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tvl-groups.com/e/a79e8098cf21c661fa08f218480b2886654b92f413b7f
172.67.128.52200 OK 513 B URL GET HTTP/3 tvl-groups.com/e/a79e8098cf21c661fa08f218480b2886654b92f413b7f
IP 172.67.128.52:443
Requested by https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Certificate IssuerGoogle Trust Services LLC
Subjecttvl-groups.com
Fingerprint94:6C:41:CC:85:4B:BE:04:79:E4:99:7A:83:E5:47:42:DD:07:C6:C4
ValidityTue, 17 Oct 2023 21:45:09 GMT - Mon, 15 Jan 2024 21:45:08 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (529), with no line terminators
Hash adc405f5fd089662209870ca5d2106f7
3a8b776df84bf251afc6ddd802cc5bbeddfb0e36
e7bacc97751689afaae192e103fe9851664365c57c7d783560860ad456db7e49
GET /e/a79e8098cf21c661fa08f218480b2886654b92f413b7f HTTP/1.1
Host: tvl-groups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Cookie: cf_clearance=gdvDfedJHidx2tb_A3NGSzGq_OXTFjlpRkJaipEV.0g-1699451630-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=a82cbd048abcfd8788fabae2972d32c6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 Nov 2023 13:53:56 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800
expires: Wed, 15 Nov 2023 13:53:56 GMT
last-modified: Wed, 08 Nov 2023 01:22:57 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KUzPPtwPtps1l2Lt9iMCaXrlrktyzoUnLKXQeChMIi2u5hf7PIXGmw71uiZRWnk5GWBF7zhL1q%2FKa0sQDCo1dVdZm5%2BWr7fIZZHQnCMjih14QZkLDbn1b4lmc86ywTooOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 822e4e15c89d7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tvl-groups.com/boot/a79e8098cf21c661fa08f218480b2886654b92f29c0b3
172.67.128.52200 OK 51 kB URL GET HTTP/3 tvl-groups.com/boot/a79e8098cf21c661fa08f218480b2886654b92f29c0b3
IP 172.67.128.52:443
Requested by https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Certificate IssuerGoogle Trust Services LLC
Subjecttvl-groups.com
Fingerprint94:6C:41:CC:85:4B:BE:04:79:E4:99:7A:83:E5:47:42:DD:07:C6:C4
ValidityTue, 17 Oct 2023 21:45:09 GMT - Mon, 15 Jan 2024 21:45:08 GMT
File type ASCII text, with very long lines (50758)
Hash 67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /boot/a79e8098cf21c661fa08f218480b2886654b92f29c0b3 HTTP/1.1
Host: tvl-groups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Cookie: cf_clearance=gdvDfedJHidx2tb_A3NGSzGq_OXTFjlpRkJaipEV.0g-1699451630-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=a82cbd048abcfd8788fabae2972d32c6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 Nov 2023 13:53:55 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Wed, 15 Nov 2023 13:53:55 GMT
last-modified: Wed, 08 Nov 2023 01:22:57 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FhQ3YN2tKRm7Bi2OCEdH8Ah5EflPUyU1j9GZn233ATPteqwFn8wxQYJg5inn5cIIWUiOPh%2FL7iw0R6j4rrD2nmgtH%2Bre2FfKKF8ImNM1nZ%2B0shiZ2YMg6YdPi556hULgxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 822e4e0dbfce7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tvl-groups.com/ic/a79e8098cf21c661fa08f218480b2886654b92f413b4c
172.67.128.52200 OK 17 kB URL GET HTTP/3 tvl-groups.com/ic/a79e8098cf21c661fa08f218480b2886654b92f413b4c
IP 172.67.128.52:443
Requested by https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Certificate IssuerGoogle Trust Services LLC
Subjecttvl-groups.com
Fingerprint94:6C:41:CC:85:4B:BE:04:79:E4:99:7A:83:E5:47:42:DD:07:C6:C4
ValidityTue, 17 Oct 2023 21:45:09 GMT - Mon, 15 Jan 2024 21:45:08 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /ic/a79e8098cf21c661fa08f218480b2886654b92f413b4c HTTP/1.1
Host: tvl-groups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Cookie: cf_clearance=gdvDfedJHidx2tb_A3NGSzGq_OXTFjlpRkJaipEV.0g-1699451630-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=a82cbd048abcfd8788fabae2972d32c6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 Nov 2023 13:53:56 GMT
content-type: image/x-icon
cache-control: public, max-age=604800
expires: Wed, 15 Nov 2023 13:53:56 GMT
last-modified: Wed, 08 Nov 2023 01:22:57 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LxGM4wrDTGGyC66%2Bv7eXASxnWhrsgAmyBPm%2FumGmyzelSRVS7cDeUj%2FZakxoWFtRnX2roxbiPS84cUvtcSTA8lQ37ZkEb2MthpkbmxNjoxW5WkxqdWNNbJGlqR0BLMuGxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 822e4e180b097131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
172.67.128.52200 OK 5.5 kB URL User Request GET HTTP/3 tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
IP 172.67.128.52:443
Certificate IssuerGoogle Trust Services LLC
Subjecttvl-groups.com
Fingerprint94:6C:41:CC:85:4B:BE:04:79:E4:99:7A:83:E5:47:42:DD:07:C6:C4
ValidityTue, 17 Oct 2023 21:45:09 GMT - Mon, 15 Jan 2024 21:45:08 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5541), with no line terminators
Hash e66fc5368590cdb69ca4e68bc6fa7958
1a313e1263acb5e76b6e4798fe09cddb5fc0a5ad
4c8d081a12423a58e57a87fc28f1e08259cdc95f00eb9873d845fa064045145e
GET /beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c HTTP/1.1
Host: tvl-groups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tvl-groups.com/Mtami.caesar@nmss.org?__cf_chl_tk=_kpxO.THC7GG3VUB7R2TezDhIna8Ii6Epe_Rt0hWxgk-1699451630-0-gaNycGzNDZA
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=gdvDfedJHidx2tb_A3NGSzGq_OXTFjlpRkJaipEV.0g-1699451630-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=a82cbd048abcfd8788fabae2972d32c6
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 Nov 2023 13:53:54 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2gosS33hIKQ6ii0PSSSTovfDqVMyVWjOZ%2BR43R6UhRNgBtfHFIF8U3pVjyaPmCDdw6G3E9oHNklbuj4tgUOh6Fa6EvZXn2%2FDfPZqHzQTo7vOurQVCoAitJwjawBjWpSsZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 822e4e0c5e337131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tvl-groups.com/api-as1f?email=tami.caesar@nmss.org&data=background
172.67.128.52200 OK 176 B URL GET HTTP/3 tvl-groups.com/api-as1f?email=tami.caesar@nmss.org&data=background
IP 172.67.128.52:443
Requested by https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Certificate IssuerGoogle Trust Services LLC
Subjecttvl-groups.com
Fingerprint94:6C:41:CC:85:4B:BE:04:79:E4:99:7A:83:E5:47:42:DD:07:C6:C4
ValidityTue, 17 Oct 2023 21:45:09 GMT - Mon, 15 Jan 2024 21:45:08 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 7df707b4a0ecc0008d2bdd9769100e41
e4dc5bf1a4b3a24f69214ffb249ae3e9d1cf0954
a6725d4d0367972c81da819bd0d16a1dff9dcd5415d2f62807a1625e548ac5b5
GET /api-as1f?email=tami.caesar@nmss.org&data=background HTTP/1.1
Host: tvl-groups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Cookie: cf_clearance=gdvDfedJHidx2tb_A3NGSzGq_OXTFjlpRkJaipEV.0g-1699451630-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=a82cbd048abcfd8788fabae2972d32c6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 Nov 2023 13:53:57 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DueDb1IXXqpfXfLNrt7bQIzwygyg1EPeFaPxS6g8vVuS4jADvoBfNNEP4ZBk9U8tYhOPrdUTRxiclt%2BxZp4646tmR9PM5VSanZNM77zpe5IQ34fgzK1YjZ4uCEYTaH5r3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 822e4e15d8ac7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tvl-groups.com/jm/a79e8098cf21c661fa08f218480b2886654b92f29c0b4
172.67.128.52200 OK 6.4 kB URL GET HTTP/3 tvl-groups.com/jm/a79e8098cf21c661fa08f218480b2886654b92f29c0b4
IP 172.67.128.52:443
Requested by https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Certificate IssuerGoogle Trust Services LLC
Subjecttvl-groups.com
Fingerprint94:6C:41:CC:85:4B:BE:04:79:E4:99:7A:83:E5:47:42:DD:07:C6:C4
ValidityTue, 17 Oct 2023 21:45:09 GMT - Mon, 15 Jan 2024 21:45:08 GMT
File type ASCII text, with very long lines (6376), with no line terminators
Hash 1e07a363eef4b40ab4a38d5e4371da5c
7351be2a378540a016aec380141927221a45f19b
01ba4de80540981fd34be681b5c1fce8b205e341ac6fa73a61817068ff566510
GET /jm/a79e8098cf21c661fa08f218480b2886654b92f29c0b4 HTTP/1.1
Host: tvl-groups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Cookie: cf_clearance=gdvDfedJHidx2tb_A3NGSzGq_OXTFjlpRkJaipEV.0g-1699451630-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=a82cbd048abcfd8788fabae2972d32c6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 Nov 2023 13:53:54 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Wed, 15 Nov 2023 13:53:54 GMT
last-modified: Wed, 08 Nov 2023 01:22:57 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ygqeki4Q19Xuk9d5o7o1nn0fxdoYXrATsTYAEKaNv7gI0XyI0u%2BXNSq3reyBdf9tl9tiTy7HN1ztOKYNUAJNbyyWjO%2FulI9Q89OdSEC47TgwTnmvxYAzPvNo1%2BBMVxHA5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 822e4e0dbfd07131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tvl-groups.com/APP-YPCVQA/a79e8098cf21c661fa08f218480b2886654b92f413b50
172.67.128.52200 OK 105 kB URL GET HTTP/3 tvl-groups.com/APP-YPCVQA/a79e8098cf21c661fa08f218480b2886654b92f413b50
IP 172.67.128.52:443
Requested by https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Certificate IssuerGoogle Trust Services LLC
Subjecttvl-groups.com
Fingerprint94:6C:41:CC:85:4B:BE:04:79:E4:99:7A:83:E5:47:42:DD:07:C6:C4
ValidityTue, 17 Oct 2023 21:45:09 GMT - Mon, 15 Jan 2024 21:45:08 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 105 kB (105369 bytes)
Hash 8e6b0f88563f9c33f78bce65cf287df7
ef7765cd2a7d64ed27dd7344702597aff6f8c397
a7057bebfff43e7281ca31da00d40bd88c8d02d1576b9c45891dd56a3853269a
GET /APP-YPCVQA/a79e8098cf21c661fa08f218480b2886654b92f413b50 HTTP/1.1
Host: tvl-groups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Cookie: cf_clearance=gdvDfedJHidx2tb_A3NGSzGq_OXTFjlpRkJaipEV.0g-1699451630-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=a82cbd048abcfd8788fabae2972d32c6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 Nov 2023 13:53:56 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 15 Nov 2023 13:53:56 GMT
last-modified: Wed, 08 Nov 2023 01:22:57 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q9R1Qx8XGxpKbRwOrkzk1M2fcDle0BLRi3ehLFxoJCvLNA4wTjupSeO9VdPf4lbMZEfbzMnduzdkS8SovHY8h6htxHER2pNxb%2FgR6ojsrfpABNAmhOfNu1rTdHOveqxA2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 822e4e15d8ad7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tvl-groups.com/api-as1f?email=tami.caesar@nmss.org&data=logo
172.67.128.52200 OK 168 B URL GET HTTP/3 tvl-groups.com/api-as1f?email=tami.caesar@nmss.org&data=logo
IP 172.67.128.52:443
Requested by https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Certificate IssuerGoogle Trust Services LLC
Subjecttvl-groups.com
Fingerprint94:6C:41:CC:85:4B:BE:04:79:E4:99:7A:83:E5:47:42:DD:07:C6:C4
ValidityTue, 17 Oct 2023 21:45:09 GMT - Mon, 15 Jan 2024 21:45:08 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash ff31b79aacb8b37483586b8dc4e194e5
bc7a5c00e9aba0a2ad999dd89b5fca87c5955566
c0a34d88cd0287e741fa92e2e66698f62161a91278f1cf6fa5dd20e0dbfe19b0
GET /api-as1f?email=tami.caesar@nmss.org&data=logo HTTP/1.1
Host: tvl-groups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Cookie: cf_clearance=gdvDfedJHidx2tb_A3NGSzGq_OXTFjlpRkJaipEV.0g-1699451630-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=a82cbd048abcfd8788fabae2972d32c6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 Nov 2023 13:53:56 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u6niunkrpVMWvM7gIguVTJo83w5CpmGUqyughbhTQacJ5CF%2BrVh4voyZmP6aGJrY6HC6Bx%2BX1D8SmVc8Sxc4SbTh8nVpj6KWlMAFyUuHN7xeBqXqMDmBXtd26KNb%2FMiasQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 822e4e15d8aa7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tvl-groups.com/o/a79e8098cf21c661fa08f218480b2886654b92f413b78
172.67.128.52200 OK 3.7 kB URL GET HTTP/3 tvl-groups.com/o/a79e8098cf21c661fa08f218480b2886654b92f413b78
IP 172.67.128.52:443
Requested by https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Certificate IssuerGoogle Trust Services LLC
Subjecttvl-groups.com
Fingerprint94:6C:41:CC:85:4B:BE:04:79:E4:99:7A:83:E5:47:42:DD:07:C6:C4
ValidityTue, 17 Oct 2023 21:45:09 GMT - Mon, 15 Jan 2024 21:45:08 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3695), with no line terminators
Hash d633a913e6f3b1f45774b9874dfc85e0
5ba1344048578062c93cfddfdf8458477eaca476
c1fbfbd9a81fc4d9c9539a65bdfb4c6738926b8d4681b0346706196413e92714
GET /o/a79e8098cf21c661fa08f218480b2886654b92f413b78 HTTP/1.1
Host: tvl-groups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Cookie: cf_clearance=gdvDfedJHidx2tb_A3NGSzGq_OXTFjlpRkJaipEV.0g-1699451630-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=a82cbd048abcfd8788fabae2972d32c6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 Nov 2023 13:53:56 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800
expires: Wed, 15 Nov 2023 13:53:56 GMT
last-modified: Wed, 08 Nov 2023 01:22:57 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6399Z%2FevtARJ8DU6tZ9tICWoM55qEdMSetXteNdUtqTOO4fFP7ZbeQ3HyuWBCPa3zHCMmiEyEsUP7fZKDL%2Btb%2BzK%2BRWWCbBqIR0xUabK2pgHbfi104NskBRjfECWNgzcvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 822e4e15c88d7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aadcdn.msauthimages.net/dbd5a2dd-j6ftudk4yv6qglcj71jupd6kmie-1fcgybr2t5earho/logintenantbranding/0/bannerlogo?ts=636917891221047332
152.199.23.72200 OK 7.7 kB URL GET HTTP/2 aadcdn.msauthimages.net/dbd5a2dd-j6ftudk4yv6qglcj71jupd6kmie-1fcgybr2t5earho/logintenantbranding/0/bannerlogo?ts=636917891221047332
IP 152.199.23.72:443
Requested by https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Certificate IssuerMicrosoft Corporation
Subjectaadcdn.msauthimages.net
Fingerprint6B:EB:AC:06:FC:06:82:11:17:1C:6B:72:7D:B5:95:2D:CF:E7:A3:5D
ValidityWed, 08 Mar 2023 11:16:34 GMT - Sat, 02 Mar 2024 11:16:34 GMT
File type PNG image data, 238 x 50, 8-bit colormap, non-interlaced\012- data
Hash e5bfa8b0a62b0291dcc69dd04abe9ee6
9dc80e719329092c59f4f683cff7f3b727632655
50a31f6990e9b602812a2c3c564e0abd432df647007e73414b30983ddc45749e
GET /dbd5a2dd-j6ftudk4yv6qglcj71jupd6kmie-1fcgybr2t5earho/logintenantbranding/0/bannerlogo?ts=636917891221047332 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tvl-groups.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 68402
cache-control: public, max-age=86400
content-md5: 5b+osKYrApHcxp3QSr6e5g==
content-type: image/*
date: Wed, 08 Nov 2023 13:53:56 GMT
etag: 0x8D6C97291C850EE
last-modified: Thu, 25 Apr 2019 11:38:42 GMT
server: ECAcc (ska/F75E)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: b6bd6a4a-201e-000b-19ab-11b889000000
x-ms-version: 2009-09-19
content-length: 7697
X-Firefox-Spdy: h2
tvl-groups.com/Mtami.caesar@nmss.org
172.67.128.52403 Forbidden 6.7 kB URL User Request GET HTTP/2 tvl-groups.com/Mtami.caesar@nmss.org
IP 172.67.128.52:443
Certificate IssuerGoogle Trust Services LLC
Subjecttvl-groups.com
Fingerprint94:6C:41:CC:85:4B:BE:04:79:E4:99:7A:83:E5:47:42:DD:07:C6:C4
ValidityTue, 17 Oct 2023 21:45:09 GMT - Mon, 15 Jan 2024 21:45:08 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6778), with no line terminators
Hash f193f60316c1f25c3b4c87a064c93f90
43614ca3912aaf3a3fc1fb1d71665cfe220e1ee9
79f098a244e0474d431f348b6c0c0d9053c58b21c2f3fa65984a060b6a234516
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /Mtami.caesar@nmss.org HTTP/1.1
Host: tvl-groups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Wed, 08 Nov 2023 13:53:50 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HQ0fThRhhDenSLDNAROVSx%2BVA5LDjAC2Ww4AlbvoCY3Pdp585viQgj0TS5zEtvXMkUXn4LupGQtIJTw3T%2Bi9prTxjGKL0W2jx2METvFKUbzz0hQFbzN9TdWcWhiYg18oOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 822e4df53dcab4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
unpkg.com/axios@1.6.0/dist/axios.min.js
104.16.123.175200 OK 32 kB URL GET HTTP/2 unpkg.com/axios@1.6.0/dist/axios.min.js
IP 104.16.123.175:443
Requested by https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (32277)
Hash 9421becae239f8fbbd3eea14471cda59
7b5c013451c8527a9e605c059a364a879303555a
1dc60b613493f242077201a552d894e8b6bbf844396e92206441a3772e19f8d5
GET /axios@1.6.0/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tvl-groups.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 Nov 2023 13:53:54 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"7e3c-e1wBNFHIUnqeYFwFmjZKh5MDVVo"
via: 1.1 fly.io
fly-request-id: 01HDTBKZ37GTRS3J3NCJ39CR10-arn
cf-cache-status: HIT
age: 981207
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 822e4e0debccb515-OSL
content-encoding: br
X-Firefox-Spdy: h2
tvl-groups.com/2
172.67.128.52200 OK 36 kB IP 172.67.128.52:443
Requested by https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Certificate IssuerGoogle Trust Services LLC
Subjecttvl-groups.com
Fingerprint94:6C:41:CC:85:4B:BE:04:79:E4:99:7A:83:E5:47:42:DD:07:C6:C4
ValidityTue, 17 Oct 2023 21:45:09 GMT - Mon, 15 Jan 2024 21:45:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2 HTTP/1.1
Host: tvl-groups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tvl-groups.com/beebb091955c06fa68b3eb8afc0bae51654b92f28da6bPASbeebb091955c06fa68b3eb8afc0bae51654b92f28da6c
Cookie: cf_clearance=gdvDfedJHidx2tb_A3NGSzGq_OXTFjlpRkJaipEV.0g-1699451630-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=a82cbd048abcfd8788fabae2972d32c6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 Nov 2023 13:53:56 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h7U1bFy3XZY7z1jlhN7I%2BOTJ8whJQ8zWJpIy54kJooaI5pM%2BxkMRQrVfPVZbgsEWjE5U7h42HTy80fI8jfs8fG44PbFtdSy%2F%2F9gb0pEVBAf1HG%2F%2FRp03T%2B8Kg4M0rwZEug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 822e4e155fea7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400