helpdesk.randevupanzio.ro/public/uJI3NBTkv83YFunJAMKjANNSmogyOlZL
302 Found 402 B URL HTTP/1.1 helpdesk.randevupanzio.ro/public/uJI3NBTkv83YFunJAMKjANNSmogyOlZL
IP
ASN #20616 H88 Web Hosting S.r.l.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c7e2b93b8b57f8ec7abdc5562b1df370
b5366062dfeb8944f9a3adc6c3ef8cbc2e1ab967
eadfb206e403a9fa125e8e899f640bbcf15714ea9610b3799d1833457a7cfc7a
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /public/uJI3NBTkv83YFunJAMKjANNSmogyOlZL HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 28 Jan 2023 22:09:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkpaUW05WlhsUVZKSkkwNmloSmZlSmc9PSIsInZhbHVlIjoiTVM5cjRDRXBWRmtPYnlRZkRWcHFpME14d25wTEluWE9GUjI1M2tqUHoweUpCSFNaaFd5TDEycUU3QWE4VEcrS0ZGNXFOUjF1ZlVRMkE4NmJ5NENoeXY5ODI3a0ZORHBsZ2FJaXZTbXpseU1IMTJKZks0VEFLc2dhMkFML00zNUkiLCJtYWMiOiIwZDE2ZDdlMDQ3ZmNiZThkMTJiMWFlZTQzNDJmODQ5M2ZjYjliM2FhYjBmZTQ2ZDViNTEwYzNiMjJiOGQyMTczIiwidGFnIjoiIn0%3D; expires=Sun, 29-Jan-2023 00:09:03 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6InJNNDVLM0xuaEh6QjM2aFV3Qis1L0E9PSIsInZhbHVlIjoiVjd1QUJPdGhQYkdtRnRzZTJuc2FOT3JmZGJYNjBBQnY4R24xQ2hBR2RZWVV4RVNjVWFrSHlrUzZkUWIxS0syc1hkdUVmcGhWRktBdEZsUXVGMTZqaTYxYTlxMUJscDYwY00vNHhUbXQ4c1JrajRlQUI5V3JsdEpsRURUN0ZocnIiLCJtYWMiOiI3NzgwMTY1NTAzN2I4N2IzY2YzODZhMDczODFlYWVkZDY4ZmUzMGFmNThlZTc4MjQyNzAxY2UzODVkMmNhY2YzIiwidGFnIjoiIn0%3D; expires=Sun, 29-Jan-2023 00:09:03 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Location: http://helpdesk.randevupanzio.ro/public
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3014
Expires: Sat, 28 Jan 2023 23:00:37 GMT
Date: Sat, 28 Jan 2023 22:10:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6201
Expires: Sat, 28 Jan 2023 23:53:44 GMT
Date: Sat, 28 Jan 2023 22:10:23 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 21:43:06 GMT
content-type: application/json
age: 1637
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 302c7548412192add063ad6c8b99cf3b
e5d178931a27db036ce8daae302594d3ff7050b8
fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8697
Expires: Sun, 29 Jan 2023 00:35:20 GMT
Date: Sat, 28 Jan 2023 22:10:23 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZLyvVkknx6fk8H7ePP3EAFWDX0KL5E2HdtSGPqBidjeZ4SxNKHXqiATHOO6S5RvScZVEDvdFr+4=
x-amz-request-id: EX5G4TJQ3WFS42BG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 21:21:07 GMT
age: 2956
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
helpdesk.randevupanzio.ro/public
301 Moved Permanently 248 B URL HTTP/1.1 helpdesk.randevupanzio.ro/public
IP
ASN #20616 H88 Web Hosting S.r.l.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e27c781319443fad5fb4666d6211e2f8
1f3badd9f5f5d30f318072544ff3fd694f799a3e
24c2f56cce8a7a344840ce98dc465dd7d61758690d1485d47717c608fd60f750
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /public HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IkpaUW05WlhsUVZKSkkwNmloSmZlSmc9PSIsInZhbHVlIjoiTVM5cjRDRXBWRmtPYnlRZkRWcHFpME14d25wTEluWE9GUjI1M2tqUHoweUpCSFNaaFd5TDEycUU3QWE4VEcrS0ZGNXFOUjF1ZlVRMkE4NmJ5NENoeXY5ODI3a0ZORHBsZ2FJaXZTbXpseU1IMTJKZks0VEFLc2dhMkFML00zNUkiLCJtYWMiOiIwZDE2ZDdlMDQ3ZmNiZThkMTJiMWFlZTQzNDJmODQ5M2ZjYjliM2FhYjBmZTQ2ZDViNTEwYzNiMjJiOGQyMTczIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJNNDVLM0xuaEh6QjM2aFV3Qis1L0E9PSIsInZhbHVlIjoiVjd1QUJPdGhQYkdtRnRzZTJuc2FOT3JmZGJYNjBBQnY4R24xQ2hBR2RZWVV4RVNjVWFrSHlrUzZkUWIxS0syc1hkdUVmcGhWRktBdEZsUXVGMTZqaTYxYTlxMUJscDYwY00vNHhUbXQ4c1JrajRlQUI5V3JsdEpsRURUN0ZocnIiLCJtYWMiOiI3NzgwMTY1NTAzN2I4N2IzY2YzODZhMDczODFlYWVkZDY4ZmUzMGFmNThlZTc4MjQyNzAxY2UzODVkMmNhY2YzIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 28 Jan 2023 22:09:03 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 248
Connection: keep-alive
Location: http://helpdesk.randevupanzio.ro/public/
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 22:10:23 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 21:49:03 GMT
age: 1280
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6258
Expires: Sat, 28 Jan 2023 23:54:42 GMT
Date: Sat, 28 Jan 2023 22:10:24 GMT
Connection: keep-alive
helpdesk.randevupanzio.ro/public/
200 OK 558 B URL HTTP/1.1 helpdesk.randevupanzio.ro/public/
IP
ASN #20616 H88 Web Hosting S.r.l.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash d91d7fb1fae79ca37f2fd815ca15689f
92a99c1c301f5b54e27e02b6316ab18b0e87fabe
0e812a9c42ead4814384786870bc773e59c792e2628c0b8afafb9cbcce4336f9
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /public/ HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IkpaUW05WlhsUVZKSkkwNmloSmZlSmc9PSIsInZhbHVlIjoiTVM5cjRDRXBWRmtPYnlRZkRWcHFpME14d25wTEluWE9GUjI1M2tqUHoweUpCSFNaaFd5TDEycUU3QWE4VEcrS0ZGNXFOUjF1ZlVRMkE4NmJ5NENoeXY5ODI3a0ZORHBsZ2FJaXZTbXpseU1IMTJKZks0VEFLc2dhMkFML00zNUkiLCJtYWMiOiIwZDE2ZDdlMDQ3ZmNiZThkMTJiMWFlZTQzNDJmODQ5M2ZjYjliM2FhYjBmZTQ2ZDViNTEwYzNiMjJiOGQyMTczIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJNNDVLM0xuaEh6QjM2aFV3Qis1L0E9PSIsInZhbHVlIjoiVjd1QUJPdGhQYkdtRnRzZTJuc2FOT3JmZGJYNjBBQnY4R24xQ2hBR2RZWVV4RVNjVWFrSHlrUzZkUWIxS0syc1hkdUVmcGhWRktBdEZsUXVGMTZqaTYxYTlxMUJscDYwY00vNHhUbXQ4c1JrajRlQUI5V3JsdEpsRURUN0ZocnIiLCJtYWMiOiI3NzgwMTY1NTAzN2I4N2IzY2YzODZhMDczODFlYWVkZDY4ZmUzMGFmNThlZTc4MjQyNzAxY2UzODVkMmNhY2YzIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 22:09:04 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 558
Connection: keep-alive
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImZDTGNLclpKZ1JCbTM4RjRxNEh1TXc9PSIsInZhbHVlIjoibHNydENWMEthVHBtNTdTU2lKNHFtQnBGdlBJd3ZOSXByci9CRE1HOWlBYy9nUlBCZndNVFFFeUszVlJrb244SEVvQjVKK3dwZ1QzeGllVzlLUTVNN2xpbzBmQlMvR21POG80L3BGT3A2aXBxWmFwNGJobEtjc3hZU3BuWnFxVHEiLCJtYWMiOiI3MDc4YmU0ZDg3NWU4NmVlODY0YWEzM2ZmZGQ2ODFkNTE2OGRjZDEwMDYzMzZjNzk3YTQ4NmEyZjdjOTdhNDA1IiwidGFnIjoiIn0%3D; expires=Sun, 29-Jan-2023 00:09:04 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6ImtrTHVHTmxHVFZ3WGhlN2lhRmFCQkE9PSIsInZhbHVlIjoiaExUT0Y2NFpTYWM1dlBkWUpIelIwVzdnR1dFWURnWlY2YTA0a1EvK1ZqTy91c0tBclFWejBGY0NqS0V0b2M3TDBQa2hMZ2VyOERNSFBON0UxckR1QWJPbU1QdjFWSmJ1SG15amxrRGcydVlnSW85bVdFTWdzSTQ5ZGlvVEw1NHQiLCJtYWMiOiI4OWVlYjU1NjcwMmFhMjZkNWI0MjM3MjBkYzEyNDI2MmVkZjAxMTc4ODc1OTQyZDhlNDY2MmM4Y2ExZDMxZjhkIiwidGFnIjoiIn0%3D; expires=Sun, 29-Jan-2023 00:09:04 GMT; Max-Age=7200; path=/; httponly; samesite=lax
ocsp.digicert.com/
200 OK 279 B IP
Hash c3fa8c0d3d9045fff6a6da164946a6b2
3f49c2ca05a7a78f25950345231980b544a790e1
82258db78bc0594ae354753c0933d4defdd28c88d5f134635b888f3ca68d2f72
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2031
Cache-Control: max-age=158050
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 22:10:24 GMT
Etag: "63d55bc3-117"
Expires: Mon, 30 Jan 2023 18:04:34 GMT
Last-Modified: Sat, 28 Jan 2023 17:30:43 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash c3fa8c0d3d9045fff6a6da164946a6b2
3f49c2ca05a7a78f25950345231980b544a790e1
82258db78bc0594ae354753c0933d4defdd28c88d5f134635b888f3ca68d2f72
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2031
Cache-Control: max-age=158050
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 22:10:24 GMT
Etag: "63d55bc3-117"
Expires: Mon, 30 Jan 2023 18:04:34 GMT
Last-Modified: Sat, 28 Jan 2023 17:30:43 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 279
helpdesk.randevupanzio.ro/3Z814KFXwHGJE0kWO3eDieMcnJYAmHnq/
301 Moved Permanently 280 B URL HTTP/1.1 helpdesk.randevupanzio.ro/3Z814KFXwHGJE0kWO3eDieMcnJYAmHnq/
IP
ASN #20616 H88 Web Hosting S.r.l.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7f03ab05fe5da75eaae52fa8575a6237
612c942c4a03e405adebe9e8f23cfb45382cb595
529ebd0712d12496c7c55c226cfb40cf7fb5cf7182ebf00059e3fafc63e6a8f7
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /3Z814KFXwHGJE0kWO3eDieMcnJYAmHnq/ HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/public/
Cookie: XSRF-TOKEN=eyJpdiI6ImZDTGNLclpKZ1JCbTM4RjRxNEh1TXc9PSIsInZhbHVlIjoibHNydENWMEthVHBtNTdTU2lKNHFtQnBGdlBJd3ZOSXByci9CRE1HOWlBYy9nUlBCZndNVFFFeUszVlJrb244SEVvQjVKK3dwZ1QzeGllVzlLUTVNN2xpbzBmQlMvR21POG80L3BGT3A2aXBxWmFwNGJobEtjc3hZU3BuWnFxVHEiLCJtYWMiOiI3MDc4YmU0ZDg3NWU4NmVlODY0YWEzM2ZmZGQ2ODFkNTE2OGRjZDEwMDYzMzZjNzk3YTQ4NmEyZjdjOTdhNDA1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtrTHVHTmxHVFZ3WGhlN2lhRmFCQkE9PSIsInZhbHVlIjoiaExUT0Y2NFpTYWM1dlBkWUpIelIwVzdnR1dFWURnWlY2YTA0a1EvK1ZqTy91c0tBclFWejBGY0NqS0V0b2M3TDBQa2hMZ2VyOERNSFBON0UxckR1QWJPbU1QdjFWSmJ1SG15amxrRGcydVlnSW85bVdFTWdzSTQ5ZGlvVEw1NHQiLCJtYWMiOiI4OWVlYjU1NjcwMmFhMjZkNWI0MjM3MjBkYzEyNDI2MmVkZjAxMTc4ODc1OTQyZDhlNDY2MmM4Y2ExZDMxZjhkIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 28 Jan 2023 22:09:04 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 280
Connection: keep-alive
Location: http://helpdesk.randevupanzio.ro/public/3Z814KFXwHGJE0kWO3eDieMcnJYAmHnq
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: iKja80Pg+taBPtL2Sm3h/A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: RqyF9cVV7GfFECUL0tsoR4BBbqM=
ocsp.digicert.com/
200 OK 471 B IP
Hash d45e4036ad4a742751f256b53054a5db
3854359e843d7dd78c9dba3b83ebc9a7318f0af7
f660df4eb1067c10301e0b0272bdd3437a70f8b0556eee236dd4cd5c8727e4f2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4712
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 22:10:25 GMT
Last-Modified: Sat, 28 Jan 2023 20:51:53 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 5.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 109d1ed85cd01f9cdab73a4cac5bf80d
d6c6498ad46de2d8e2008a8ff68e364ae7f16b32
8b3a74fe462f5b3c0635995fd721a60eb640e237680b0b532b96711f2823e8bc
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 22:10:25 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 170861
expires: Thu, 18 Jan 2024 22:10:25 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O4YoDN3nlwi7v8AKtf2Ornk0lVAau%2BPcKNBBu4aO9DOOkOlbjprfXGS0d0HnwoggfvcACnLVtL6tHvUGSeV%2BdM%2BMG5GcDPXThqF3e2%2BIGGfEtMfs3BhNIc2oz%2BETs66jrGiykPjI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 790d0edbd95db503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
helpdesk.randevupanzio.ro/public/3Z814KFXwHGJE0kWO3eDieMcnJYAmHnq
200 OK 60 kB URL HTTP/1.1 helpdesk.randevupanzio.ro/public/3Z814KFXwHGJE0kWO3eDieMcnJYAmHnq
IP
ASN #20616 H88 Web Hosting S.r.l.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- assembler source text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (39884)
Hash d5e92d49d08aa99a03cd6a961a64fd61
e79ffbd1d8333cd4804c5a577a1a8422fa33871e
6b7638c43c63f483fd372998f762010f85aee659daf6ea4dcf577b9077a7fb13
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
NIDS Severity Alert suricata high ET EXPLOIT_KIT TDS Sutra - page redirecting to a SutraTDS
GET /public/3Z814KFXwHGJE0kWO3eDieMcnJYAmHnq HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://helpdesk.randevupanzio.ro/public/
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6ImZDTGNLclpKZ1JCbTM4RjRxNEh1TXc9PSIsInZhbHVlIjoibHNydENWMEthVHBtNTdTU2lKNHFtQnBGdlBJd3ZOSXByci9CRE1HOWlBYy9nUlBCZndNVFFFeUszVlJrb244SEVvQjVKK3dwZ1QzeGllVzlLUTVNN2xpbzBmQlMvR21POG80L3BGT3A2aXBxWmFwNGJobEtjc3hZU3BuWnFxVHEiLCJtYWMiOiI3MDc4YmU0ZDg3NWU4NmVlODY0YWEzM2ZmZGQ2ODFkNTE2OGRjZDEwMDYzMzZjNzk3YTQ4NmEyZjdjOTdhNDA1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtrTHVHTmxHVFZ3WGhlN2lhRmFCQkE9PSIsInZhbHVlIjoiaExUT0Y2NFpTYWM1dlBkWUpIelIwVzdnR1dFWURnWlY2YTA0a1EvK1ZqTy91c0tBclFWejBGY0NqS0V0b2M3TDBQa2hMZ2VyOERNSFBON0UxckR1QWJPbU1QdjFWSmJ1SG15amxrRGcydVlnSW85bVdFTWdzSTQ5ZGlvVEw1NHQiLCJtYWMiOiI4OWVlYjU1NjcwMmFhMjZkNWI0MjM3MjBkYzEyNDI2MmVkZjAxMTc4ODc1OTQyZDhlNDY2MmM4Y2ExZDMxZjhkIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 22:09:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6Imk5Zmh5UnZGaXowUFBXL05XNjRucVE9PSIsInZhbHVlIjoiZ1B3V2ZKUXZzVUhnRk5Jc2lZUWwrY0R0TFE3VldVU3ZNeU0vbWRkK3c1dlpMenBZRmZOYUd1MXMxZGdKcmVRam1vOVJ2d2IxQmk2ZzdFaHdhejhDUUxpR2F1ckdwL1BUM1l6VFZDZmVHdzNlYmpnUFZLUytKU1VNdXFEcWcrOGEiLCJtYWMiOiJiYzkyMTE3NzNmOWUzOWI0Y2YyNzdlMDk2ZTZjNGE4ZWRjNTIwMDU0ZTA5YmQ2YzIzZjIyZjdhOTM1YTU3OTI3IiwidGFnIjoiIn0%3D; expires=Sun, 29-Jan-2023 00:09:05 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IlR2TW5HWkRONzI0WmRZUEI5OEFneUE9PSIsInZhbHVlIjoiOU93N2pIeUZzK05IdExEWXdDaXlTQllIQmYzUWFkenRtVktvQjAydDFsaFBtVzcvTUs5bW9WQVRxbTNPVjdSZG9wdVdnMENmYUkyTmlzZE5wb0xsa0lzM2hCYUY2TU1QQXJBYVFneVR0aTZCODNDRmFoWGRMWWtmaWxjREdPVVciLCJtYWMiOiJlMDJhNWYwYTYxZDJkODk1ZTE5MWNmOWZkNGE0Yjk4OTliNjAyNzVhZjZjMWY5NTBlYmE5ZjllOWNhZmRmNzZmIiwidGFnIjoiIn0%3D; expires=Sun, 29-Jan-2023 00:09:05 GMT; Max-Age=7200; path=/; httponly; samesite=lax
helpdesk.randevupanzio.ro/public/js/session-recorder.js
200 OK 45 kB URL HTTP/1.1 helpdesk.randevupanzio.ro/public/js/session-recorder.js
IP
ASN #20616 H88 Web Hosting S.r.l.
File type ASCII text, with very long lines (44992)
Hash 701984b4995f3c29820e83c999b7eb23
a3b50104a3bfa05bf59a317273816c7d8ae1f81d
67ad94e12a745b1b09c6cd616e20a2ad283ed68f8060bd1dd0d9a2b6ad9dc7ee
Analyzer Verdict Alert urlquery phishing Phishing - DHL
openphish DHL Airways, Inc.
fortinet Phishing
GET /public/js/session-recorder.js HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/public/3Z814KFXwHGJE0kWO3eDieMcnJYAmHnq
Cookie: XSRF-TOKEN=eyJpdiI6Imk5Zmh5UnZGaXowUFBXL05XNjRucVE9PSIsInZhbHVlIjoiZ1B3V2ZKUXZzVUhnRk5Jc2lZUWwrY0R0TFE3VldVU3ZNeU0vbWRkK3c1dlpMenBZRmZOYUd1MXMxZGdKcmVRam1vOVJ2d2IxQmk2ZzdFaHdhejhDUUxpR2F1ckdwL1BUM1l6VFZDZmVHdzNlYmpnUFZLUytKU1VNdXFEcWcrOGEiLCJtYWMiOiJiYzkyMTE3NzNmOWUzOWI0Y2YyNzdlMDk2ZTZjNGE4ZWRjNTIwMDU0ZTA5YmQ2YzIzZjIyZjdhOTM1YTU3OTI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR2TW5HWkRONzI0WmRZUEI5OEFneUE9PSIsInZhbHVlIjoiOU93N2pIeUZzK05IdExEWXdDaXlTQllIQmYzUWFkenRtVktvQjAydDFsaFBtVzcvTUs5bW9WQVRxbTNPVjdSZG9wdVdnMENmYUkyTmlzZE5wb0xsa0lzM2hCYUY2TU1QQXJBYVFneVR0aTZCODNDRmFoWGRMWWtmaWxjREdPVVciLCJtYWMiOiJlMDJhNWYwYTYxZDJkODk1ZTE5MWNmOWZkNGE0Yjk4OTliNjAyNzVhZjZjMWY5NTBlYmE5ZjllOWNhZmRmNzZmIiwidGFnIjoiIn0%3D
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 22:09:05 GMT
Content-Type: application/javascript
Content-Length: 45066
Connection: keep-alive
Last-Modified: Wed, 03 Aug 2022 14:29:04 GMT
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6172
Expires: Sat, 28 Jan 2023 23:53:17 GMT
Date: Sat, 28 Jan 2023 22:10:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6172
Expires: Sat, 28 Jan 2023 23:53:17 GMT
Date: Sat, 28 Jan 2023 22:10:25 GMT
Connection: keep-alive
helpdesk.randevupanzio.ro/public/css/app.css
200 OK 440 kB URL HTTP/1.1 helpdesk.randevupanzio.ro/public/css/app.css
IP
ASN #20616 H88 Web Hosting S.r.l.
Size 440 kB (439658 bytes)
Hash 181990cc2279e4cea65c9363fb37fee9
b85a7ba40043b0c48a034d8382629ef7ec6a1e24
36839348d4cd3d5ffcb15317bc5e8f32b77c644d0c6c0f8f19bdf216caf49293
Analyzer Verdict Alert urlquery phishing Phishing - DHL
openphish DHL Airways, Inc.
GET /public/css/app.css HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/public/3Z814KFXwHGJE0kWO3eDieMcnJYAmHnq
Cookie: XSRF-TOKEN=eyJpdiI6Imk5Zmh5UnZGaXowUFBXL05XNjRucVE9PSIsInZhbHVlIjoiZ1B3V2ZKUXZzVUhnRk5Jc2lZUWwrY0R0TFE3VldVU3ZNeU0vbWRkK3c1dlpMenBZRmZOYUd1MXMxZGdKcmVRam1vOVJ2d2IxQmk2ZzdFaHdhejhDUUxpR2F1ckdwL1BUM1l6VFZDZmVHdzNlYmpnUFZLUytKU1VNdXFEcWcrOGEiLCJtYWMiOiJiYzkyMTE3NzNmOWUzOWI0Y2YyNzdlMDk2ZTZjNGE4ZWRjNTIwMDU0ZTA5YmQ2YzIzZjIyZjdhOTM1YTU3OTI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR2TW5HWkRONzI0WmRZUEI5OEFneUE9PSIsInZhbHVlIjoiOU93N2pIeUZzK05IdExEWXdDaXlTQllIQmYzUWFkenRtVktvQjAydDFsaFBtVzcvTUs5bW9WQVRxbTNPVjdSZG9wdVdnMENmYUkyTmlzZE5wb0xsa0lzM2hCYUY2TU1QQXJBYVFneVR0aTZCODNDRmFoWGRMWWtmaWxjREdPVVciLCJtYWMiOiJlMDJhNWYwYTYxZDJkODk1ZTE5MWNmOWZkNGE0Yjk4OTliNjAyNzVhZjZjMWY5NTBlYmE5ZjllOWNhZmRmNzZmIiwidGFnIjoiIn0%3D
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 22:09:05 GMT
Content-Type: text/css
Content-Length: 439658
Connection: keep-alive
Last-Modified: Wed, 03 Aug 2022 14:29:04 GMT
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6172
Expires: Sat, 28 Jan 2023 23:53:17 GMT
Date: Sat, 28 Jan 2023 22:10:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6172
Expires: Sat, 28 Jan 2023 23:53:17 GMT
Date: Sat, 28 Jan 2023 22:10:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88a27c66-393d-4cd0-b191-286277c9da31.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88a27c66-393d-4cd0-b191-286277c9da31.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1b66f2ccb0017b06d5e5903e00dede4
f3c7c1abdbab6510de54727cb68eedcc3103e1ce
44d84a015c27d9a298a2ef891e46f2fdd7764d45d914689e127244fef96ddd27
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88a27c66-393d-4cd0-b191-286277c9da31.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8149
x-amzn-requestid: 8c634b51-b124-4cf9-b20e-897babf98d0b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: feRtIG3sIAMF-rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d59653-3f20abcd6c56307b1ebabf2b;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 21:40:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jpe_r8O7AjOS1Mg4kmgDCvxstulkpZI9DXkagbRPmrgyjgwVbDFuog==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 21:46:36 GMT
etag: "f3c7c1abdbab6510de54727cb68eedcc3103e1ce"
content-type: image/jpeg
age: 1429
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167a00fc-5c65-46d1-816e-da9e473736e3.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167a00fc-5c65-46d1-816e-da9e473736e3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e7433eb3123a1f9b14507c78e38e7b9
fef8b905b580999963758a56be9c3226697929a2
895298ddf6822e9f95e10fe17c1ade0b0782c3753e96eab8a3798df5ba969dbe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167a00fc-5c65-46d1-816e-da9e473736e3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6518
x-amzn-requestid: 6e9c624a-2036-4161-ad9e-1c66068e3eb1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPHz0HmsoAMFljA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf867e-011e1c43072a8dfa22af6e88;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:19:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AxIaCwORa7FhDY5pxcNlrPMoam0z7DxSgKBytx5AG_qcKrxM8NnoOw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 21:46:36 GMT
age: 1429
etag: "fef8b905b580999963758a56be9c3226697929a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7f65e9-ca75-4ecb-ba7c-ae70877eaf01.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7f65e9-ca75-4ecb-ba7c-ae70877eaf01.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2f73f114f8dc452fc0b16825570ad50c
6bb1b3db6c36e2c9d23b6cb7d1c8616eeec19575
23fd69e6ccdd2ce2b5d3d8b3f075a07cdb36efd663a4119b5dca22165e7b2090
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7f65e9-ca75-4ecb-ba7c-ae70877eaf01.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10030
x-amzn-requestid: 0c6c82b5-f91b-4468-bb25-d87d4d7dedd5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVAbgERRIAMFdcw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1e116-7f17c79047447dff2de3ab67;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 02:10:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pHTs5LN29bSjD8GAXY_vstXiEQ7iy9qXsq23Pxl-GdXX16_5H5QKCQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 16:13:35 GMT
age: 21410
etag: "6bb1b3db6c36e2c9d23b6cb7d1c8616eeec19575"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd9499d0-2a81-41ee-b328-0d82ea64b349.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd9499d0-2a81-41ee-b328-0d82ea64b349.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57ff6665d99a17d06b75c8fe64c90ab3
05648eed6830a794aa7e30ba4da526ed4c45b0ca
728b809756a0faff1a55bb03f13f33e31518f321e50dd944a0267d585c09264c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd9499d0-2a81-41ee-b328-0d82ea64b349.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5198
x-amzn-requestid: 8117f45b-926a-4cbe-b152-dae983bc3526
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fOYdlG6XIAMF_vA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf3abd-7ce531f65f66ac3a73970841;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 01:56:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: naZHCCrUSwrLi2eWi3LOrir9zOGQcNUBJ1iS9wUewWoV3WM2E0kE2w==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 21:47:00 GMT
age: 1405
etag: "05648eed6830a794aa7e30ba4da526ed4c45b0ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61c84a42-94fd-4328-97f3-9602ba58a2d1.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61c84a42-94fd-4328-97f3-9602ba58a2d1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d19ea264e32a923808112293d74b97c7
19a01a961cca989ee07ff53e50d6f2e65d73729a
16792f5d3ff24bda8f7ac4b6b522c736c4e070b5aa9fd109fa868906064278c8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61c84a42-94fd-4328-97f3-9602ba58a2d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5021
x-amzn-requestid: 040ca906-0e98-4919-a238-06ad180d6260
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fcj5zESeoAMFqUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4e6a4-7f81446e78d233f16fc9b73f;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 09:11:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XeoloS-lP9UvWYMvblLHSIJdYMAU3yDj5AmJsYwxHtH3l2UjMkkung==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 21:46:36 GMT
age: 1429
etag: "19a01a961cca989ee07ff53e50d6f2e65d73729a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: f644ca78-a07a-43d1-96e4-95bcdecff7fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGLfFtOIAMFp7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf83e2-202ca7160544acd24259bd5d;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xRwqrWS66l4qJfg2HnGphN1dbrIUod9XKW3zTk_-Km9AQRPyV2UqWg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 20:46:16 GMT
age: 5049
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v6.2.1/css/free.min.css?token=f7165dd215
200 OK 36 kB URL HTTP/2 ka-f.fontawesome.com/releases/v6.2.1/css/free.min.css?token=f7165dd215
IP
File type ASCII text, with very long lines (65321)
Hash 3226efdbaf510c754b2863cfe90c8a78
ddc808900f0b2268f7f523ab6fbc5c4d0c217bff
3ce616cac9ae5bc15283dacb606b4f56943c9f43caca4ba21e2db5240d6e3fa7
GET /releases/v6.2.1/css/free.min.css?token=f7165dd215 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://helpdesk.randevupanzio.ro/
Origin: http://helpdesk.randevupanzio.ro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 22:10:25 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:06:08 GMT
etag: W/"2dbe34367e935e2684b01124b0860d71"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa5f00ed95fd16b8d894989f7ad491ba.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P1
x-amz-cf-id: TfYYGKqFmSt4twFzgWziaOQeSSGWxzAWhY5l1lofqojPgOCD44wVsg==
age: 67853
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GLlxEx%2BAqE3KBFi9QMP%2FM%2BALgfZHXD9kCgGEcCu7sRYkNIdTMs7Qkmu6l6i%2FKCqjbXyIROLQw0X0XJZ4KaKK3Zqvrk6ltEinjrnm4NVJ%2Fi7vINspifihk%2FHHDylYBdO36gFePoqmgg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d0edc7c6e7708-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
helpdesk.randevupanzio.ro/images/logo.png
200 OK 2.0 kB URL HTTP/1.1 helpdesk.randevupanzio.ro/images/logo.png
IP
ASN #20616 H88 Web Hosting S.r.l.
File type PNG image data, 214 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d14ab93691604e826e1319d53599eb9
78724360e9d25da584445b851e37bca05abe6b85
3f0c62b5ccdcdbf3b3ae3885f1e6959e2d937eba9b29dea9a6bdb98788041756
Analyzer Verdict Alert urlquery phishing Phishing - DHL
openphish DHL Airways, Inc.
GET /images/logo.png HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/public/3Z814KFXwHGJE0kWO3eDieMcnJYAmHnq
Cookie: XSRF-TOKEN=eyJpdiI6Imk5Zmh5UnZGaXowUFBXL05XNjRucVE9PSIsInZhbHVlIjoiZ1B3V2ZKUXZzVUhnRk5Jc2lZUWwrY0R0TFE3VldVU3ZNeU0vbWRkK3c1dlpMenBZRmZOYUd1MXMxZGdKcmVRam1vOVJ2d2IxQmk2ZzdFaHdhejhDUUxpR2F1ckdwL1BUM1l6VFZDZmVHdzNlYmpnUFZLUytKU1VNdXFEcWcrOGEiLCJtYWMiOiJiYzkyMTE3NzNmOWUzOWI0Y2YyNzdlMDk2ZTZjNGE4ZWRjNTIwMDU0ZTA5YmQ2YzIzZjIyZjdhOTM1YTU3OTI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR2TW5HWkRONzI0WmRZUEI5OEFneUE9PSIsInZhbHVlIjoiOU93N2pIeUZzK05IdExEWXdDaXlTQllIQmYzUWFkenRtVktvQjAydDFsaFBtVzcvTUs5bW9WQVRxbTNPVjdSZG9wdVdnMENmYUkyTmlzZE5wb0xsa0lzM2hCYUY2TU1QQXJBYVFneVR0aTZCODNDRmFoWGRMWWtmaWxjREdPVVciLCJtYWMiOiJlMDJhNWYwYTYxZDJkODk1ZTE5MWNmOWZkNGE0Yjk4OTliNjAyNzVhZjZjMWY5NTBlYmE5ZjllOWNhZmRmNzZmIiwidGFnIjoiIn0%3D
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 22:09:05 GMT
Content-Type: image/png
Content-Length: 1998
Connection: keep-alive
Last-Modified: Wed, 03 Aug 2022 14:29:04 GMT
Accept-Ranges: bytes
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://helpdesk.randevupanzio.ro
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 22:10:25 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 251755
expires: Thu, 18 Jan 2024 22:10:25 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l9GnHU7CVQIGp6iTAM5554da440sBAuy6Jw1yXG6v2s0CHMXltWbRXgkbpUX7UTCq%2F%2Bd0NezdNRSAhKIY0DBcyo8lMYiewwRCIKIi4ikCv7DCOTrPaWRoGcah4t4wHVM7eexNBDB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 790d0edfcecbb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v6.2.1/css/free-v4-shims.min.css?token=f7165dd215
200 OK 11 kB URL HTTP/2 ka-f.fontawesome.com/releases/v6.2.1/css/free-v4-shims.min.css?token=f7165dd215
IP
File type ASCII text, with very long lines (27377)
Hash ed6de11d667416f2ddf4c52e179020b3
4ec6ee6fa6c9d1182745030e7648c537bb2f2124
e18a28095fe2ce2db6d907550c14f756b97ca096333a833aebf97a3f45fc5510
GET /releases/v6.2.1/css/free-v4-shims.min.css?token=f7165dd215 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://helpdesk.randevupanzio.ro/
Origin: http://helpdesk.randevupanzio.ro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 22:10:25 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:06:08 GMT
etag: W/"0d00741459c51dd7330d97cd19326a7b"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 3a9ae57848ec862242f80d7f8b789bca.cloudfront.net (CloudFront)
x-amz-cf-pop: BOS50-C3
x-amz-cf-id: EjvQdvqup7FuxI86_vkfpOZzPb_ayH--FAFlpT0be3MJXWxk9qemuA==
age: 67853
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2Yfy8tc07dDoBz415DK1eqqzotxH4rrRM4wCEpjO%2BT07XCr83wLFAU1IesS1%2FGn9%2FoHGHzqWWT4CDerfg0j9%2BOK50PH%2B8p5q3lwVKL8YwghEmKXovN8R1Op2tS%2FafH0LqPnc2SSuEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d0edc7c697708-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
helpdesk.randevupanzio.ro/fonts/vendor/@fontsource/roboto/files/roboto-latin-400-normal.woff2?4673b4537a84c7f7a130799aa6af329b
404 Not Found 6.6 kB URL HTTP/1.1 helpdesk.randevupanzio.ro/fonts/vendor/@fontsource/roboto/files/roboto-latin-400-normal.woff2?4673b4537a84c7f7a130799aa6af329b
IP
ASN #20616 H88 Web Hosting S.r.l.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5395)
Hash 307dca9c775906b8de45869cabe98fcd
2b80c3a2fd4a235b2cc9f89315a554d0721c0dd1
8437bd0ef46a19c9a7c294c53e0429b40e76ebbd5fe9fd73a9025752495ddb1c
Analyzer Verdict Alert urlquery phishing Phishing - DHL
openphish DHL Airways, Inc.
fortinet Phishing
GET /fonts/vendor/@fontsource/roboto/files/roboto-latin-400-normal.woff2?4673b4537a84c7f7a130799aa6af329b HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/public/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6Imk5Zmh5UnZGaXowUFBXL05XNjRucVE9PSIsInZhbHVlIjoiZ1B3V2ZKUXZzVUhnRk5Jc2lZUWwrY0R0TFE3VldVU3ZNeU0vbWRkK3c1dlpMenBZRmZOYUd1MXMxZGdKcmVRam1vOVJ2d2IxQmk2ZzdFaHdhejhDUUxpR2F1ckdwL1BUM1l6VFZDZmVHdzNlYmpnUFZLUytKU1VNdXFEcWcrOGEiLCJtYWMiOiJiYzkyMTE3NzNmOWUzOWI0Y2YyNzdlMDk2ZTZjNGE4ZWRjNTIwMDU0ZTA5YmQ2YzIzZjIyZjdhOTM1YTU3OTI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR2TW5HWkRONzI0WmRZUEI5OEFneUE9PSIsInZhbHVlIjoiOU93N2pIeUZzK05IdExEWXdDaXlTQllIQmYzUWFkenRtVktvQjAydDFsaFBtVzcvTUs5bW9WQVRxbTNPVjdSZG9wdVdnMENmYUkyTmlzZE5wb0xsa0lzM2hCYUY2TU1QQXJBYVFneVR0aTZCODNDRmFoWGRMWWtmaWxjREdPVVciLCJtYWMiOiJlMDJhNWYwYTYxZDJkODk1ZTE5MWNmOWZkNGE0Yjk4OTliNjAyNzVhZjZjMWY5NTBlYmE5ZjllOWNhZmRmNzZmIiwidGFnIjoiIn0%3D
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 28 Jan 2023 22:09:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
ka-f.fontawesome.com/releases/v6.2.1/css/free-v4-font-face.min.css?token=f7165dd215
200 OK 1.6 MB URL HTTP/2 ka-f.fontawesome.com/releases/v6.2.1/css/free-v4-font-face.min.css?token=f7165dd215
IP
File type ASCII text, with very long lines (1560)
Size 1.6 MB (1614433 bytes)
Hash daeae4a74596abf858d7d947ccdad177
c611646f83c72f13e7aeaa46dbb3e5b60c0bd49b
74ba10f334d0b408deff799eba28de7ba75e5f122f12585860c7c379edbcad6e
GET /releases/v6.2.1/css/free-v4-font-face.min.css?token=f7165dd215 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://helpdesk.randevupanzio.ro/
Origin: http://helpdesk.randevupanzio.ro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 22:10:25 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:06:07 GMT
etag: W/"075b2106ba08d32bc88fff3724503b1e"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0dd1077162fbc5ae77bb4c494a180158.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P1
x-amz-cf-id: vwuen0lfVJvGSthaq3c8ZBb5z7FAWqsgIIuTDmZnFh1sUH7mift4Qw==
age: 67853
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f%2BjZsqW0AwkVtuqa1BNTF%2FmOBtallhrIMRyEY8nHfy1o9sFb0H6jUAxXwUYGbyCCjgLpI0NZBKeE9blKzyv6qasi%2BNtJFNbXvE31jgb2jmmK3FZjD2JCmKkVWD%2F84Y0ciLUzdfGCPg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d0edc7c6d7708-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
helpdesk.randevupanzio.ro/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff2?1551f4f60c37af51121f106501f69b80
404 Not Found 6.6 kB URL HTTP/1.1 helpdesk.randevupanzio.ro/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff2?1551f4f60c37af51121f106501f69b80
IP
ASN #20616 H88 Web Hosting S.r.l.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5395)
Hash 307dca9c775906b8de45869cabe98fcd
2b80c3a2fd4a235b2cc9f89315a554d0721c0dd1
8437bd0ef46a19c9a7c294c53e0429b40e76ebbd5fe9fd73a9025752495ddb1c
Analyzer Verdict Alert urlquery phishing Phishing - DHL
openphish DHL Airways, Inc.
fortinet Phishing
GET /fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff2?1551f4f60c37af51121f106501f69b80 HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/public/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6Imk5Zmh5UnZGaXowUFBXL05XNjRucVE9PSIsInZhbHVlIjoiZ1B3V2ZKUXZzVUhnRk5Jc2lZUWwrY0R0TFE3VldVU3ZNeU0vbWRkK3c1dlpMenBZRmZOYUd1MXMxZGdKcmVRam1vOVJ2d2IxQmk2ZzdFaHdhejhDUUxpR2F1ckdwL1BUM1l6VFZDZmVHdzNlYmpnUFZLUytKU1VNdXFEcWcrOGEiLCJtYWMiOiJiYzkyMTE3NzNmOWUzOWI0Y2YyNzdlMDk2ZTZjNGE4ZWRjNTIwMDU0ZTA5YmQ2YzIzZjIyZjdhOTM1YTU3OTI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR2TW5HWkRONzI0WmRZUEI5OEFneUE9PSIsInZhbHVlIjoiOU93N2pIeUZzK05IdExEWXdDaXlTQllIQmYzUWFkenRtVktvQjAydDFsaFBtVzcvTUs5bW9WQVRxbTNPVjdSZG9wdVdnMENmYUkyTmlzZE5wb0xsa0lzM2hCYUY2TU1QQXJBYVFneVR0aTZCODNDRmFoWGRMWWtmaWxjREdPVVciLCJtYWMiOiJlMDJhNWYwYTYxZDJkODk1ZTE5MWNmOWZkNGE0Yjk4OTliNjAyNzVhZjZjMWY5NTBlYmE5ZjllOWNhZmRmNzZmIiwidGFnIjoiIn0%3D
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 28 Jan 2023 22:09:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
helpdesk.randevupanzio.ro/public/css/fonts/webfa-brands-400.woff2?d878b0a6a1144760244ff0665888404c
404 Not Found 6.6 kB URL HTTP/1.1 helpdesk.randevupanzio.ro/public/css/fonts/webfa-brands-400.woff2?d878b0a6a1144760244ff0665888404c
IP
ASN #20616 H88 Web Hosting S.r.l.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5395)
Hash 307dca9c775906b8de45869cabe98fcd
2b80c3a2fd4a235b2cc9f89315a554d0721c0dd1
8437bd0ef46a19c9a7c294c53e0429b40e76ebbd5fe9fd73a9025752495ddb1c
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/css/fonts/webfa-brands-400.woff2?d878b0a6a1144760244ff0665888404c HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/public/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6Imk5Zmh5UnZGaXowUFBXL05XNjRucVE9PSIsInZhbHVlIjoiZ1B3V2ZKUXZzVUhnRk5Jc2lZUWwrY0R0TFE3VldVU3ZNeU0vbWRkK3c1dlpMenBZRmZOYUd1MXMxZGdKcmVRam1vOVJ2d2IxQmk2ZzdFaHdhejhDUUxpR2F1ckdwL1BUM1l6VFZDZmVHdzNlYmpnUFZLUytKU1VNdXFEcWcrOGEiLCJtYWMiOiJiYzkyMTE3NzNmOWUzOWI0Y2YyNzdlMDk2ZTZjNGE4ZWRjNTIwMDU0ZTA5YmQ2YzIzZjIyZjdhOTM1YTU3OTI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR2TW5HWkRONzI0WmRZUEI5OEFneUE9PSIsInZhbHVlIjoiOU93N2pIeUZzK05IdExEWXdDaXlTQllIQmYzUWFkenRtVktvQjAydDFsaFBtVzcvTUs5bW9WQVRxbTNPVjdSZG9wdVdnMENmYUkyTmlzZE5wb0xsa0lzM2hCYUY2TU1QQXJBYVFneVR0aTZCODNDRmFoWGRMWWtmaWxjREdPVVciLCJtYWMiOiJlMDJhNWYwYTYxZDJkODk1ZTE5MWNmOWZkNGE0Yjk4OTliNjAyNzVhZjZjMWY5NTBlYmE5ZjllOWNhZmRmNzZmIiwidGFnIjoiIn0%3D
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 28 Jan 2023 22:09:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
helpdesk.randevupanzio.ro/fonts/vendor/@fontsource/roboto/files/roboto-all-400-normal.woff?376ea5d93f71583052f65de4e0c6a92c
404 Not Found 6.6 kB URL HTTP/1.1 helpdesk.randevupanzio.ro/fonts/vendor/@fontsource/roboto/files/roboto-all-400-normal.woff?376ea5d93f71583052f65de4e0c6a92c
IP
ASN #20616 H88 Web Hosting S.r.l.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5395)
Hash 307dca9c775906b8de45869cabe98fcd
2b80c3a2fd4a235b2cc9f89315a554d0721c0dd1
8437bd0ef46a19c9a7c294c53e0429b40e76ebbd5fe9fd73a9025752495ddb1c
Analyzer Verdict Alert urlquery phishing Phishing - DHL
openphish DHL Airways, Inc.
fortinet Phishing
GET /fonts/vendor/@fontsource/roboto/files/roboto-all-400-normal.woff?376ea5d93f71583052f65de4e0c6a92c HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/public/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6Imk5Zmh5UnZGaXowUFBXL05XNjRucVE9PSIsInZhbHVlIjoiZ1B3V2ZKUXZzVUhnRk5Jc2lZUWwrY0R0TFE3VldVU3ZNeU0vbWRkK3c1dlpMenBZRmZOYUd1MXMxZGdKcmVRam1vOVJ2d2IxQmk2ZzdFaHdhejhDUUxpR2F1ckdwL1BUM1l6VFZDZmVHdzNlYmpnUFZLUytKU1VNdXFEcWcrOGEiLCJtYWMiOiJiYzkyMTE3NzNmOWUzOWI0Y2YyNzdlMDk2ZTZjNGE4ZWRjNTIwMDU0ZTA5YmQ2YzIzZjIyZjdhOTM1YTU3OTI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR2TW5HWkRONzI0WmRZUEI5OEFneUE9PSIsInZhbHVlIjoiOU93N2pIeUZzK05IdExEWXdDaXlTQllIQmYzUWFkenRtVktvQjAydDFsaFBtVzcvTUs5bW9WQVRxbTNPVjdSZG9wdVdnMENmYUkyTmlzZE5wb0xsa0lzM2hCYUY2TU1QQXJBYVFneVR0aTZCODNDRmFoWGRMWWtmaWxjREdPVVciLCJtYWMiOiJlMDJhNWYwYTYxZDJkODk1ZTE5MWNmOWZkNGE0Yjk4OTliNjAyNzVhZjZjMWY5NTBlYmE5ZjllOWNhZmRmNzZmIiwidGFnIjoiIn0%3D
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 28 Jan 2023 22:09:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
helpdesk.randevupanzio.ro/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff?eeccf4f66002c6f2ba24d3d22f2434c2
404 Not Found 6.6 kB URL HTTP/1.1 helpdesk.randevupanzio.ro/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff?eeccf4f66002c6f2ba24d3d22f2434c2
IP
ASN #20616 H88 Web Hosting S.r.l.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5395)
Hash 307dca9c775906b8de45869cabe98fcd
2b80c3a2fd4a235b2cc9f89315a554d0721c0dd1
8437bd0ef46a19c9a7c294c53e0429b40e76ebbd5fe9fd73a9025752495ddb1c
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff?eeccf4f66002c6f2ba24d3d22f2434c2 HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/public/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6Imk5Zmh5UnZGaXowUFBXL05XNjRucVE9PSIsInZhbHVlIjoiZ1B3V2ZKUXZzVUhnRk5Jc2lZUWwrY0R0TFE3VldVU3ZNeU0vbWRkK3c1dlpMenBZRmZOYUd1MXMxZGdKcmVRam1vOVJ2d2IxQmk2ZzdFaHdhejhDUUxpR2F1ckdwL1BUM1l6VFZDZmVHdzNlYmpnUFZLUytKU1VNdXFEcWcrOGEiLCJtYWMiOiJiYzkyMTE3NzNmOWUzOWI0Y2YyNzdlMDk2ZTZjNGE4ZWRjNTIwMDU0ZTA5YmQ2YzIzZjIyZjdhOTM1YTU3OTI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR2TW5HWkRONzI0WmRZUEI5OEFneUE9PSIsInZhbHVlIjoiOU93N2pIeUZzK05IdExEWXdDaXlTQllIQmYzUWFkenRtVktvQjAydDFsaFBtVzcvTUs5bW9WQVRxbTNPVjdSZG9wdVdnMENmYUkyTmlzZE5wb0xsa0lzM2hCYUY2TU1QQXJBYVFneVR0aTZCODNDRmFoWGRMWWtmaWxjREdPVVciLCJtYWMiOiJlMDJhNWYwYTYxZDJkODk1ZTE5MWNmOWZkNGE0Yjk4OTliNjAyNzVhZjZjMWY5NTBlYmE5ZjllOWNhZmRmNzZmIiwidGFnIjoiIn0%3D
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 28 Jan 2023 22:09:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
helpdesk.randevupanzio.ro/fonts/vendor/@fortawesome/fontawesome-free/webfa-brands-400.woff?2285773e6b4b172f07d9b777c81b0775
404 Not Found 6.6 kB URL HTTP/1.1 helpdesk.randevupanzio.ro/fonts/vendor/@fortawesome/fontawesome-free/webfa-brands-400.woff?2285773e6b4b172f07d9b777c81b0775
IP
ASN #20616 H88 Web Hosting S.r.l.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5395)
Hash 307dca9c775906b8de45869cabe98fcd
2b80c3a2fd4a235b2cc9f89315a554d0721c0dd1
8437bd0ef46a19c9a7c294c53e0429b40e76ebbd5fe9fd73a9025752495ddb1c
Analyzer Verdict Alert urlquery phishing Phishing - DHL
openphish DHL Airways, Inc.
fortinet Phishing
GET /fonts/vendor/@fortawesome/fontawesome-free/webfa-brands-400.woff?2285773e6b4b172f07d9b777c81b0775 HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/public/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6Imk5Zmh5UnZGaXowUFBXL05XNjRucVE9PSIsInZhbHVlIjoiZ1B3V2ZKUXZzVUhnRk5Jc2lZUWwrY0R0TFE3VldVU3ZNeU0vbWRkK3c1dlpMenBZRmZOYUd1MXMxZGdKcmVRam1vOVJ2d2IxQmk2ZzdFaHdhejhDUUxpR2F1ckdwL1BUM1l6VFZDZmVHdzNlYmpnUFZLUytKU1VNdXFEcWcrOGEiLCJtYWMiOiJiYzkyMTE3NzNmOWUzOWI0Y2YyNzdlMDk2ZTZjNGE4ZWRjNTIwMDU0ZTA5YmQ2YzIzZjIyZjdhOTM1YTU3OTI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR2TW5HWkRONzI0WmRZUEI5OEFneUE9PSIsInZhbHVlIjoiOU93N2pIeUZzK05IdExEWXdDaXlTQllIQmYzUWFkenRtVktvQjAydDFsaFBtVzcvTUs5bW9WQVRxbTNPVjdSZG9wdVdnMENmYUkyTmlzZE5wb0xsa0lzM2hCYUY2TU1QQXJBYVFneVR0aTZCODNDRmFoWGRMWWtmaWxjREdPVVciLCJtYWMiOiJlMDJhNWYwYTYxZDJkODk1ZTE5MWNmOWZkNGE0Yjk4OTliNjAyNzVhZjZjMWY5NTBlYmE5ZjllOWNhZmRmNzZmIiwidGFnIjoiIn0%3D
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 28 Jan 2023 22:09:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
101 Switching Protocols 0 B URL HTTP/1.1 ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false HTTP/1.1
Host: ws-mt1.pusher.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Sec-WebSocket-Version: 13
Origin: http://helpdesk.randevupanzio.ro
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: woQrRxYZyr8adbYikV8ODA==
Connection: keep-alive, Upgrade
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sat, 28 Jan 2023 22:10:26 GMT
Connection: upgrade
Server: nginx/1.17.7
Upgrade: websocket
Sec-WebSocket-Accept: uZLP3RS6yy1iq+a4tPLtIV3/SrA=
helpdesk.randevupanzio.ro/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.ttf?be9ee23c0c6390141475d519c2c5fb8f
404 Not Found 6.6 kB URL HTTP/1.1 helpdesk.randevupanzio.ro/fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.ttf?be9ee23c0c6390141475d519c2c5fb8f
IP
ASN #20616 H88 Web Hosting S.r.l.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5395)
Hash 307dca9c775906b8de45869cabe98fcd
2b80c3a2fd4a235b2cc9f89315a554d0721c0dd1
8437bd0ef46a19c9a7c294c53e0429b40e76ebbd5fe9fd73a9025752495ddb1c
Analyzer Verdict Alert urlquery phishing Phishing - DHL
openphish DHL Airways, Inc.
fortinet Phishing
GET /fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.ttf?be9ee23c0c6390141475d519c2c5fb8f HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/public/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6Imk5Zmh5UnZGaXowUFBXL05XNjRucVE9PSIsInZhbHVlIjoiZ1B3V2ZKUXZzVUhnRk5Jc2lZUWwrY0R0TFE3VldVU3ZNeU0vbWRkK3c1dlpMenBZRmZOYUd1MXMxZGdKcmVRam1vOVJ2d2IxQmk2ZzdFaHdhejhDUUxpR2F1ckdwL1BUM1l6VFZDZmVHdzNlYmpnUFZLUytKU1VNdXFEcWcrOGEiLCJtYWMiOiJiYzkyMTE3NzNmOWUzOWI0Y2YyNzdlMDk2ZTZjNGE4ZWRjNTIwMDU0ZTA5YmQ2YzIzZjIyZjdhOTM1YTU3OTI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR2TW5HWkRONzI0WmRZUEI5OEFneUE9PSIsInZhbHVlIjoiOU93N2pIeUZzK05IdExEWXdDaXlTQllIQmYzUWFkenRtVktvQjAydDFsaFBtVzcvTUs5bW9WQVRxbTNPVjdSZG9wdVdnMENmYUkyTmlzZE5wb0xsa0lzM2hCYUY2TU1QQXJBYVFneVR0aTZCODNDRmFoWGRMWWtmaWxjREdPVVciLCJtYWMiOiJlMDJhNWYwYTYxZDJkODk1ZTE5MWNmOWZkNGE0Yjk4OTliNjAyNzVhZjZjMWY5NTBlYmE5ZjllOWNhZmRmNzZmIiwidGFnIjoiIn0%3D; _lr_tabs_-mnnzup%2Fdus={%22sessionID%22:0%2C%22recordingID%22:%225-5db0ea4e-3b19-41fc-91f5-c0fca5bf9ec2%22%2C%22lastActivity%22:1674943830870}; _lr_hb_-mnnzup%2Fdus={%22heartbeat%22:1674943830871}; _lr_uf_-mnnzup=fd06b792-5482-470c-a10e-f596446e8366
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 28 Jan 2023 22:09:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
helpdesk.randevupanzio.ro/fonts/vendor/@fortawesome/fontawesome-free/webfa-brands-400.ttf?527940b104eb2ea366c8630f3f038603
404 Not Found 6.6 kB URL HTTP/1.1 helpdesk.randevupanzio.ro/fonts/vendor/@fortawesome/fontawesome-free/webfa-brands-400.ttf?527940b104eb2ea366c8630f3f038603
IP
ASN #20616 H88 Web Hosting S.r.l.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5395)
Hash 307dca9c775906b8de45869cabe98fcd
2b80c3a2fd4a235b2cc9f89315a554d0721c0dd1
8437bd0ef46a19c9a7c294c53e0429b40e76ebbd5fe9fd73a9025752495ddb1c
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /fonts/vendor/@fortawesome/fontawesome-free/webfa-brands-400.ttf?527940b104eb2ea366c8630f3f038603 HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/public/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6Imk5Zmh5UnZGaXowUFBXL05XNjRucVE9PSIsInZhbHVlIjoiZ1B3V2ZKUXZzVUhnRk5Jc2lZUWwrY0R0TFE3VldVU3ZNeU0vbWRkK3c1dlpMenBZRmZOYUd1MXMxZGdKcmVRam1vOVJ2d2IxQmk2ZzdFaHdhejhDUUxpR2F1ckdwL1BUM1l6VFZDZmVHdzNlYmpnUFZLUytKU1VNdXFEcWcrOGEiLCJtYWMiOiJiYzkyMTE3NzNmOWUzOWI0Y2YyNzdlMDk2ZTZjNGE4ZWRjNTIwMDU0ZTA5YmQ2YzIzZjIyZjdhOTM1YTU3OTI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR2TW5HWkRONzI0WmRZUEI5OEFneUE9PSIsInZhbHVlIjoiOU93N2pIeUZzK05IdExEWXdDaXlTQllIQmYzUWFkenRtVktvQjAydDFsaFBtVzcvTUs5bW9WQVRxbTNPVjdSZG9wdVdnMENmYUkyTmlzZE5wb0xsa0lzM2hCYUY2TU1QQXJBYVFneVR0aTZCODNDRmFoWGRMWWtmaWxjREdPVVciLCJtYWMiOiJlMDJhNWYwYTYxZDJkODk1ZTE5MWNmOWZkNGE0Yjk4OTliNjAyNzVhZjZjMWY5NTBlYmE5ZjllOWNhZmRmNzZmIiwidGFnIjoiIn0%3D; _lr_tabs_-mnnzup%2Fdus={%22sessionID%22:0%2C%22recordingID%22:%225-5db0ea4e-3b19-41fc-91f5-c0fca5bf9ec2%22%2C%22lastActivity%22:1674943830870}; _lr_hb_-mnnzup%2Fdus={%22heartbeat%22:1674943830871}; _lr_uf_-mnnzup=fd06b792-5482-470c-a10e-f596446e8366
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 28 Jan 2023 22:09:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
ka-f.fontawesome.com/releases/v6.2.1/webfonts/free-fa-solid-900.woff2
200 OK 150 kB URL HTTP/2 ka-f.fontawesome.com/releases/v6.2.1/webfonts/free-fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 150500, version 770.768\012- data
Size 150 kB (150500 bytes)
Hash 69a76555beae5c43a59559396c1aeb54
7d2759002c67a66fc38a72dd0e395e2da3d41474
1494e2691e1c13a3f35cbc3e1b56c5187c10ffe220d1fdc58d99494a666244d4
GET /releases/v6.2.1/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://helpdesk.randevupanzio.ro
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 22:10:26 GMT
content-type: font/woff2
content-length: 150500
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:15:23 GMT
etag: "69a76555beae5c43a59559396c1aeb54"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 dcf91885f867cf935702b92732a304e6.cloudfront.net (CloudFront)
x-amz-cf-pop: BOS50-C3
x-amz-cf-id: QpUNwv6sH90SmzztOOao7A1kVqafP1fJ1CoeEuqrWB6NYMqZQaZvIg==
age: 67851
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2CrbnRKcZ7rog%2Bz%2BtQLbV0%2Fx0JpAKisa9FgOVT5pLgFtI%2FR9v6XTEcT0jhI8kuon6pb8Tlr8lGV%2B8KACTp4vzkucuRVG4pT4H%2F1lqEz%2FUxMuZsPwarTKrwzcKxw46Oe960Ds1bZotQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790d0ee4687c7708-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v6.2.1/webfonts/free-fa-brands-400.woff2
200 OK 108 kB URL HTTP/2 ka-f.fontawesome.com/releases/v6.2.1/webfonts/free-fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 107656, version 770.768\012- data
Size 108 kB (107656 bytes)
Hash d3c93d772e2ec6d8c7c7e726f92a7dbf
4bed608cc63253a50fe7e1abbb28396066902d0e
4f04c94b287d7dfdfad36e60915eefbef7127a073546e6c21512b5052c6ac48d
GET /releases/v6.2.1/webfonts/free-fa-brands-400.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://helpdesk.randevupanzio.ro
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 22:10:26 GMT
content-type: font/woff2
content-length: 107656
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:15:23 GMT
etag: "d3c93d772e2ec6d8c7c7e726f92a7dbf"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 1f23e89336115d8a2b959bb2c7c2da90.cloudfront.net (CloudFront)
x-amz-cf-pop: BOS50-C3
x-amz-cf-id: tkXYNtRyvOYWAuJT0v6WI2L7t83vWh6LZrPQsaXVOopO1EdTSE9nHw==
age: 67851
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aMc0%2B7IVtpuUhAmyPd78DS6xZ3b4bYT9xH6Rq%2FGgs%2F%2BqKzuqVLt5kFbthtL9ZBby7Hd%2BTSUW%2FteizLz4Ucs60%2F5PLW5vlPxkwvG02itiHPvMXf8xc7FyhZhGGw9EPjTdCppajf%2F%2FJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790d0ee4a8f87708-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
helpdesk.randevupanzio.ro/images/favicon.gif
200 OK 2.2 kB URL HTTP/1.1 helpdesk.randevupanzio.ro/images/favicon.gif
IP
ASN #20616 H88 Web Hosting S.r.l.
File type MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel\012- data
Hash a6f1af8e79a11829ba9a66474b06bb97
d99e3ec7747c865033a8dfad43c9f49634404bc1
b0dbd00f3650fa6b931e678a9d8f79a405d23c7adf111ab91b1a01a0e7109807
Analyzer Verdict Alert urlquery phishing Phishing - DHL
openphish DHL Airways, Inc.
GET /images/favicon.gif HTTP/1.1
Host: helpdesk.randevupanzio.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/public/3Z814KFXwHGJE0kWO3eDieMcnJYAmHnq
Cookie: XSRF-TOKEN=eyJpdiI6Imk5Zmh5UnZGaXowUFBXL05XNjRucVE9PSIsInZhbHVlIjoiZ1B3V2ZKUXZzVUhnRk5Jc2lZUWwrY0R0TFE3VldVU3ZNeU0vbWRkK3c1dlpMenBZRmZOYUd1MXMxZGdKcmVRam1vOVJ2d2IxQmk2ZzdFaHdhejhDUUxpR2F1ckdwL1BUM1l6VFZDZmVHdzNlYmpnUFZLUytKU1VNdXFEcWcrOGEiLCJtYWMiOiJiYzkyMTE3NzNmOWUzOWI0Y2YyNzdlMDk2ZTZjNGE4ZWRjNTIwMDU0ZTA5YmQ2YzIzZjIyZjdhOTM1YTU3OTI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR2TW5HWkRONzI0WmRZUEI5OEFneUE9PSIsInZhbHVlIjoiOU93N2pIeUZzK05IdExEWXdDaXlTQllIQmYzUWFkenRtVktvQjAydDFsaFBtVzcvTUs5bW9WQVRxbTNPVjdSZG9wdVdnMENmYUkyTmlzZE5wb0xsa0lzM2hCYUY2TU1QQXJBYVFneVR0aTZCODNDRmFoWGRMWWtmaWxjREdPVVciLCJtYWMiOiJlMDJhNWYwYTYxZDJkODk1ZTE5MWNmOWZkNGE0Yjk4OTliNjAyNzVhZjZjMWY5NTBlYmE5ZjllOWNhZmRmNzZmIiwidGFnIjoiIn0%3D; _lr_tabs_-mnnzup%2Fdus={%22sessionID%22:0%2C%22recordingID%22:%225-5db0ea4e-3b19-41fc-91f5-c0fca5bf9ec2%22%2C%22lastActivity%22:1674943830870}; _lr_hb_-mnnzup%2Fdus={%22heartbeat%22:1674943830871}; _lr_uf_-mnnzup=fd06b792-5482-470c-a10e-f596446e8366
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 22:09:06 GMT
Content-Type: image/gif
Content-Length: 2238
Connection: keep-alive
Last-Modified: Wed, 03 Aug 2022 14:29:04 GMT
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6dee606ca43f3e0f5dcb9ec8229e7bc5
3a3e2b914481f6d6775d8e136a5636bd2702cb22
cd17661f7dc37ba33e2762b3aa210e9c8eeeda229eb84adea85bb9239c6a4e20
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CD17661F7DC37BA33E2762B3AA210E9C8EEEDA229EB84ADEA85BB9239C6A4E20"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4779
Expires: Sat, 28 Jan 2023 23:30:08 GMT
Date: Sat, 28 Jan 2023 22:10:29 GMT
Connection: keep-alive
r.lr-in.com/i?a=mnnzup%2Fdus&r=5-5db0ea4e-3b19-41fc-91f5-c0fca5bf9ec2&t=8e61882c-8469-4cd0-8e26-3d4fd5252c93&s=0&rs=0%2Cu&u=e0c8474e-0eb6-44a0-bc58-a87c397da389
201 Created 104 B URL HTTP/2 r.lr-in.com/i?a=mnnzup%2Fdus&r=5-5db0ea4e-3b19-41fc-91f5-c0fca5bf9ec2&t=8e61882c-8469-4cd0-8e26-3d4fd5252c93&s=0&rs=0%2Cu&u=e0c8474e-0eb6-44a0-bc58-a87c397da389
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 189e5aa5a897b0373bbde8ab5b70865d
6ca5b523eeae8ce1228d6cd12044762d6317b710
56c57ddb04140a37df2f0b9ae80dbdd58368da58e2705746420039eeb6a60b90
POST /i?a=mnnzup%2Fdus&r=5-5db0ea4e-3b19-41fc-91f5-c0fca5bf9ec2&t=8e61882c-8469-4cd0-8e26-3d4fd5252c93&s=0&rs=0%2Cu&u=e0c8474e-0eb6-44a0-bc58-a87c397da389 HTTP/1.1
Host: r.lr-in.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 391458
Origin: http://helpdesk.randevupanzio.ro
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 201 Created
date: Sat, 28 Jan 2023 22:10:30 GMT
content-type: application/json; charset=utf-8
content-length: 104
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
etag: W/"68-bKW1I+6ujOEijWzRIER2LWMXtxA"
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,X-Csrftoken,If-Modified-Since,Cache-Control,Content-Type,Authorization,Accept,Origin,X-Logrocket-Url,X-Logrocket-Ignore,X-Logrocket-Secret,X-LogRocket-ClickHouse-Override,X-LogRocket-ClickHouse-Enabled-Queries
access-control-max-age: 1728000
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-2895475.js?sv=6
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-2895475.js?sv=6
IP
GET /c/hotjar-2895475.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Sat, 28 Jan 2023 22:10:26 GMT
cache-control: max-age=60
etag: W/05de58662d28ecc1959c27a0af3e2776
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rxjnZpC0kW9RzZna6qlLdz-dH-3aaRIzduJ13vON_5SOegoYZCktaQ==
age: 57
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js
200 OK 0 B URL HTTP/2 cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js
IP
GET /gh/killbot-org/Killbot-JS@latest/dist/main.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 22:10:24 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"a7c-kmbumraAtj1yBda8Zbl2dRPRYqU"
x-served-by: cache-fra-eddf8230107-FRA, cache-yyz4577-YYZ
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 55
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FLTexoTPBTHnaW8V1SjUfBx7SvklOvAQfyY1Rvb3Mzr4kUwa905OVh7vX5jjq54rTLNhq0n9mludJoPQRNWj7mE%2FS3xudtdjHJHvc%2FfYhrBNc5HbM8UulhgaWuUKya7nvkk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d0ed689fdb4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
killbot.org/api/v2/blocker?apikey=dj7y2CXKgj_oOZX1izDVTqUIV5twCJfa26sG37hioQMAU&ip=91.90.42.154&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&url=
403 Forbidden 0 B URL HTTP/2 killbot.org/api/v2/blocker?apikey=dj7y2CXKgj_oOZX1izDVTqUIV5twCJfa26sG37hioQMAU&ip=91.90.42.154&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&url=
IP
GET /api/v2/blocker?apikey=dj7y2CXKgj_oOZX1izDVTqUIV5twCJfa26sG37hioQMAU&ip=91.90.42.154&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&url= HTTP/1.1
Host: killbot.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://helpdesk.randevupanzio.ro/
Origin: http://helpdesk.randevupanzio.ro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 22:10:26 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-max-age: 86400
bug-bounty: Report to live chat :)
access-control-allow-origin: *
access-control-allow-methods: POST, GET
set-cookie: _killbot=tp4c3p1m4ojc8f1940hvgnoobjsk9ood; expires=Sun, 29-Jan-2023 00:10:26 GMT; Max-Age=7200; path=/; SameSite=Lax; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pD7jbYhUN4AJcz8tngVND3TfITYUDQSIwVwe%2BnPvoTKKQQ55CYcDEpQah3bfhmq2jzHUsippI71YyYgDWxzBSxS25gzFM4fFX0Qk9EHoCfNIAheP4VAMe%2FC8uLOWiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d0ee1cd6fb500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.lr-in.com/logger-1.min.js
200 OK 0 B URL HTTP/2 cdn.lr-in.com/logger-1.min.js
IP
GET /logger-1.min.js HTTP/1.1
Host: cdn.lr-in.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 22:10:25 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
cross-origin-resource-policy: cross-origin
etag: W/"ec0c5d7fa89855eeb021d37009bda77d7fd638091d3463aac944ccbca0c6ce36"
last-modified: Fri, 27 Jan 2023 22:49:18 GMT
strict-transport-security: max-age=31556926
x-served-by: cache-hhn-etou8220039-HHN
x-cache: HIT
x-cache-hits: 1
x-timer: S1674859849.391048,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 232
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gMi6Bfq1v5CzEXsG7Q3KOQ3swowz%2FnDu111TdLdWcBQLs9vbzlsDDJiRRdL80%2B9B%2B%2FdCmFLkp3MJX21rgWAnRn%2FPrGbJE%2BkQvyRhIpVnaZey%2BtaNCg6swukVixOxxiff"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d0edc6bdf88c2-LHR
content-encoding: br
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v6.2.1/css/free-v5-font-face.min.css?token=f7165dd215
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v6.2.1/css/free-v5-font-face.min.css?token=f7165dd215
IP
GET /releases/v6.2.1/css/free-v5-font-face.min.css?token=f7165dd215 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://helpdesk.randevupanzio.ro/
Origin: http://helpdesk.randevupanzio.ro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 22:10:25 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:06:07 GMT
etag: W/"15e2713dff942747406520edde3fd0bf"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 a5b4cf1adb73fe635c9ad54a1ed17d0c.cloudfront.net (CloudFront)
x-amz-cf-pop: BOS50-C3
x-amz-cf-id: Vfsg-AxpmLd4533BIvkSSa4KbAUemv29bk_CwPqiSD1zLeb3Awwf1w==
age: 67853
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O4BRZCDXiCo%2B8TDR75Q7Xth3%2BJ3lYs1gb6NDfVl361QYl1lDRG6%2BsvDXzVufKkqb1ZGwtddeaEW7suaB4p66y0eyFwP7Jll5pHj8h2HNqjRvQZNYkP5x0mkhFg4LZw8V9Du2BOVGfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790d0edc7c6c7708-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kit.fontawesome.com/f7165dd215.js
200 OK 0 B URL HTTP/2 kit.fontawesome.com/f7165dd215.js
IP
GET /f7165dd215.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://helpdesk.randevupanzio.ro
Connection: keep-alive
Referer: http://helpdesk.randevupanzio.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 22:10:25 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: Fz5a0rgavKP6qFTFQTXh
cf-cache-status: HIT
age: 54
server: cloudflare
cf-ray: 790d0edbeeceb506-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
killbot.org/api/v2/whois?apikey=dj7y2CXKgj_oOZX1izDVTqUIV5twCJfa26sG37hioQMAU
200 OK 0 B URL HTTP/2 killbot.org/api/v2/whois?apikey=dj7y2CXKgj_oOZX1izDVTqUIV5twCJfa26sG37hioQMAU
IP
GET /api/v2/whois?apikey=dj7y2CXKgj_oOZX1izDVTqUIV5twCJfa26sG37hioQMAU HTTP/1.1
Host: killbot.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://helpdesk.randevupanzio.ro/
Origin: http://helpdesk.randevupanzio.ro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 22:10:26 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-max-age: 86400
bug-bounty: Report to live chat :)
set-cookie: _killbot=msne7oa8ng23ltdidimn5n8i6brtg7ji; expires=Sun, 29-Jan-2023 00:10:26 GMT; Max-Age=7200; path=/; SameSite=Lax; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-methods: POST, GET
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3oxzY10ODDqcDPehFhoSkBbsfxefrA1NpQN2wvRXCrP4Jq1enGffjkUZnKybM%2F%2BTH5i7qexQZVd%2BIH7KPpVUUjE3zah%2FAILs%2FiayuYi0GAk4TgOb2jA%2Fc1Ti4YAH1A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790d0edc3e20b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
89.35.204.123
104.16.88.20
104.198.23.205
93.184.220.29
95.101.11.115