relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
185.206.144.67301 Moved Permanently 162 B URL HTTP/1.1 relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
IP 185.206.144.67:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert openphish Societe Generale
fortinet Phishing
GET /828a09feacdfd93/login.php HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 20 Sep 2022 03:51:22 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
firefox.settings.services.mozilla.com/v1/
143.204.55.36200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 20 Sep 2022 03:13:03 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VI8f8GkmtrgmqTrOnDddRkEvLehvAPWU4A95DWBVga51zSrmat79Zg==
Age: 2299
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 861cfa99de956423d917ed0ddbea4b9c
ad65dbc394b48b04a45c205f56af296c8d008db4
5c706b2718b1698995f4feb91223779aef4bf6dc967c31f9ef9a93873197d5f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5C706B2718B1698995F4FEB91223779AEF4BF6DC967C31F9EF9A93873197D5F9"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2210
Expires: Tue, 20 Sep 2022 04:28:12 GMT
Date: Tue, 20 Sep 2022 03:51:22 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.35200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.35:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 19 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LzpMtceRyvt5Bnx41x-cOLi7nOe_EvUI0IEiQYJLzvYS4ny5qx_zWw==
age: 83769
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 90304c0d69fa73bb66910062fdd6eb81
379127e99e523327dfbe76430d91988187f5bd00
f86fcbd5b1441de519736e89585a8f4b3408c641b083e52250bf8e8787ed365b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F86FCBD5B1441DE519736E89585A8F4B3408C641B083E52250BF8E8787ED365B"
Last-Modified: Mon, 19 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 20 Sep 2022 09:51:22 GMT
Date: Tue, 20 Sep 2022 03:51:22 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.36200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 20 Sep 2022 03:03:22 GMT
Expires: Tue, 20 Sep 2022 03:51:12 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UkEajGE30sHWszid7aMakq1d_C1nJy--n1Xyr5e5vsjRyG189T_AIw==
Age: 2880
relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
185.206.144.67200 OK 1.8 kB URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
IP 185.206.144.67:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 917d2a276f48199f38eb1e30a55fd262
57b6162384edf085bff661154b9f1506b1f99bdf
271c801ecc5143932d2f9f1d80f7ce959a4ca9755881ba28d0af7504b665a49b
Analyzer Verdict Alert openphish Societe Generale
fortinet Phishing
GET /828a09feacdfd93/login.php HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: text/html; charset=UTF-8
content-length: 1760
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td; path=/
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PHP/8.0.23, PleskLin
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/images/index-content.png
185.206.144.67200 OK 44 kB URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/images/index-content.png
IP 185.206.144.67:0
File type PNG image data, 593 x 592, 8-bit/color RGB, non-interlaced\012- data
Hash f4c403921310dd027d80bee277a07894
45807a9a77230206cb0834c30ddceeae64850f59
f3aa0dd5b1e3d5f830cf26f58f5cfa81ab131fe433715ea0b6feb0264049c689
GET /assets/images/index-content.png HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: image/png
content-length: 43528
last-modified: Thu, 30 Sep 2021 19:56:16 GMT
etag: "61561660-aa08"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/images/logo2.jpg
185.206.144.67200 OK 1.3 kB URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/images/logo2.jpg
IP 185.206.144.67:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=PhotoFiltre Studio X, datetime=2019:11:09 02:50:21], baseline, precision 8, 30x30, components 3\012- data
Hash faae31dc56abb70d92d5802d5397ecfd
20ea10febe43d77f015205993a7941dc49ac6d57
3dc3d4f09a6caa938a754adf03cb9f7661ebffa085a55de8f04d2b52e1e5e46b
GET /assets/images/logo2.jpg HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: image/jpeg
content-length: 1258
last-modified: Thu, 30 Sep 2021 19:56:16 GMT
etag: "61561660-4ea"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 5c817aa82ca8ed4a4257fd1e1628b423
7905c62b6bbc582860c07b75eddae371a4b8d02b
dce1783ecfe50c83d30878b48d60e1cf3fe42a3fa4090fb5d318194de73e53d6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5001
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 03:51:22 GMT
Last-Modified: Tue, 20 Sep 2022 02:28:01 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
relaxed-lewin.185-206-144-67.plesk.page/assets/images/valider.png
185.206.144.67200 OK 1.8 kB URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/images/valider.png
IP 185.206.144.67:0
File type PNG image data, 230 x 44, 8-bit/color RGB, non-interlaced\012- data
Hash 25513691f92b8ccb0190e5c2dfbb48e9
d5251fab777fe48e33cd5fdd59467b7a0af7acd7
23882f29cd743d1e0058ac22d2a791196952dab003f83df83d186e94b175119d
GET /assets/images/valider.png HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: image/png
content-length: 1808
last-modified: Thu, 30 Sep 2021 19:56:16 GMT
etag: "61561660-710"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/images/logo.png
185.206.144.67200 OK 2.5 kB URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/images/logo.png
IP 185.206.144.67:0
File type PNG image data, 192 x 26, 8-bit/color RGB, non-interlaced\012- data
Hash 07d389f224c55f59359aa8ab746a31d1
ff3281d7db9e03ecba345c2b4b57d617dfd11926
19b11e9d230e5fc6e11924e8c07f604d7884a4107794810bc70eec129b915795
GET /assets/images/logo.png HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: image/png
content-length: 2487
last-modified: Thu, 30 Sep 2021 19:56:16 GMT
etag: "61561660-9b7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/images/new-account.png
185.206.144.67200 OK 2.5 kB URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/images/new-account.png
IP 185.206.144.67:0
File type PNG image data, 171 x 44, 8-bit/color RGB, non-interlaced\012- data
Hash b622349d9f97e5c39d581e873857edf2
a37280d3e63eb4cf4ae734f2e08e5dd61025bb80
12151d5190ac2f09ed928c16b833c8f4ab3daab155cf9c7c00fcd2466b6012bd
GET /assets/images/new-account.png HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: image/png
content-length: 2487
last-modified: Thu, 30 Sep 2021 19:56:16 GMT
etag: "61561660-9b7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/images/remember.jpg
185.206.144.67200 OK 3.3 kB URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/images/remember.jpg
IP 185.206.144.67:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=PhotoFiltre Studio X, datetime=2019:11:08 21:41:22], baseline, precision 8, 232x26, components 3\012- data
Hash 749caf8b2ee7d53e19e9aefc264f1edd
6e47816ee429dce1b7bc90d3c4e7077f7717abef
523f01e171ebf63770e025487bdcfe986841d4ec2da50c1486d2632066eacd5f
GET /assets/images/remember.jpg HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: image/jpeg
content-length: 3349
last-modified: Thu, 30 Sep 2021 19:56:16 GMT
etag: "61561660-d15"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/images/social.png
185.206.144.67200 OK 1.1 kB URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/images/social.png
IP 185.206.144.67:0
File type PNG image data, 154 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash 8c6df0e9f76dfa34c82c796fb0614e08
aaaec6b398f9be853f693da4556856b010d2ef22
cda417f25f0b74a3b88979725a4bd5bcba224008dc354277ef48bbefdb96f24d
GET /assets/images/social.png HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: image/png
content-length: 1116
last-modified: Thu, 30 Sep 2021 19:56:16 GMT
etag: "61561660-45c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/images/footer-info.png
185.206.144.67200 OK 7.6 kB URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/images/footer-info.png
IP 185.206.144.67:0
File type PNG image data, 792 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash b4dd3961b8377bae8ba5024cfe80be66
9b36d135212fc15883cc080feb1ffc1be31690e2
95d316972cfd6654daf6d407fb1334f4f7aff938e389b010291d241d8d57ad4f
GET /assets/images/footer-info.png HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: image/png
content-length: 7592
last-modified: Thu, 30 Sep 2021 19:56:16 GMT
etag: "61561660-1da8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/images/logo.jpg
185.206.144.67200 OK 3.8 kB URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/images/logo.jpg
IP 185.206.144.67:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=PhotoFiltre Studio X, datetime=2019:11:08 21:35:13], baseline, precision 8, 160x33, components 3\012- data
Hash f85385da3d92ffbf4a5f706ec6f6b1fe
c6321ff15f1d136f6c04728b8c058d301ca66c3d
04690f1deb47cc41bcb7fbc072a9fdc7893c279a2857bea2d0fdfb90f5aebf17
GET /assets/images/logo.jpg HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: image/jpeg
content-length: 3772
last-modified: Thu, 30 Sep 2021 19:56:16 GMT
etag: "61561660-ebc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/images/footer-links.jpg
185.206.144.67200 OK 8.4 kB URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/images/footer-links.jpg
IP 185.206.144.67:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=PhotoFiltre Studio X, datetime=2019:11:08 21:40:28], baseline, precision 8, 713x16, components 3\012- data
Hash 12962121b758a6679970b22c02e978a2
c8af650f6bcefbc374ea21ddf2e54ecd67c8811a
f6f7e0611ba3d6ba2268c51b20205b322d51d1cee76bdd6911b49f1d12b4f05a
GET /assets/images/footer-links.jpg HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: image/jpeg
content-length: 8378
last-modified: Thu, 30 Sep 2021 19:56:16 GMT
etag: "61561660-20ba"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/images/footer-info2.png
185.206.144.67200 OK 9.0 kB URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/images/footer-info2.png
IP 185.206.144.67:0
File type PNG image data, 346 x 187, 8-bit/color RGB, non-interlaced\012- data
Hash b065809f2face89f453b75d954cdb1ea
8aea05cfed6a0e5f146de91f1610b0b5fc49a724
0607cd016f97fa4c139040c64dbc900d4d3e11676f1c00897c88fbb84850a083
GET /assets/images/footer-info2.png HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: image/png
content-length: 8977
last-modified: Thu, 30 Sep 2021 19:56:16 GMT
etag: "61561660-2311"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/images/index-content2.png
185.206.144.67200 OK 36 kB URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/images/index-content2.png
IP 185.206.144.67:0
File type PNG image data, 460 x 455, 8-bit/color RGB, non-interlaced\012- data
Hash a6e1f764ffba84d8c87d5c6ff580567d
e2711a90ac191e0c595f3cd7de89cec9de32242a
8b51f84ac604efc8feee2300fdddb1da05829fffad58b827063b178846a5d4e8
GET /assets/images/index-content2.png HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: image/png
content-length: 36228
last-modified: Thu, 30 Sep 2021 19:56:16 GMT
etag: "61561660-8d84"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/images/footer-links2.png
185.206.144.67200 OK 7.8 kB URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/images/footer-links2.png
IP 185.206.144.67:0
File type PNG image data, 143 x 193, 8-bit/color RGB, non-interlaced\012- data
Hash 73d8f36e38c0e2bf8b369cfd72f6f8f1
5100afd98867c52d7c01fb6cbaa50a8af9476e62
7c3bdc670b04048dc2d7516878af352dcc5d2a377e384c6c8c183a36133ca076
GET /assets/images/footer-links2.png HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: image/png
content-length: 7765
last-modified: Thu, 30 Sep 2021 19:56:16 GMT
etag: "61561660-1e55"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.149.101.24101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.149.101.24:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AdJs6O2YDTF1pXX9+f3bpg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: UfDM/KgLyvT5SsamDGHEo8HN53Q=
relaxed-lewin.185-206-144-67.plesk.page/assets/js/fontawesome.min.js
185.206.144.67200 OK 360 kB URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/js/fontawesome.min.js
IP 185.206.144.67:0
File type ASCII text, with very long lines (65347), with CRLF line terminators
Size 360 kB (359734 bytes)
Hash 58df0c3a5031dda29ac4e864f3d8a232
9a373dd41bf0415d709e2aa72bbb139067f0fac1
4ecd6d4c1002a6b1db19d172646bca3bb26a625cbc8a7233128bc9bdf9d45a52
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/fontawesome.min.js HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: application/javascript
last-modified: Thu, 30 Sep 2021 19:56:18 GMT
etag: W/"61561662-10314e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5534
Expires: Tue, 20 Sep 2022 05:23:38 GMT
Date: Tue, 20 Sep 2022 03:51:24 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5534
Expires: Tue, 20 Sep 2022 05:23:38 GMT
Date: Tue, 20 Sep 2022 03:51:24 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5534
Expires: Tue, 20 Sep 2022 05:23:38 GMT
Date: Tue, 20 Sep 2022 03:51:24 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5534
Expires: Tue, 20 Sep 2022 05:23:38 GMT
Date: Tue, 20 Sep 2022 03:51:24 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb7ceffe-3c92-417f-bd64-15a9e9118a4a.jpeg
34.120.237.76200 OK 3.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb7ceffe-3c92-417f-bd64-15a9e9118a4a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1e8175cd370c35ad06cb2d009c3f7095
4f71cdda787ce98a58f2fe9ce8ba2e7ec7b150d2
649f5309448c163e4d379f02c4af8d9b6801935eea1939c61c010b7f76af1591
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb7ceffe-3c92-417f-bd64-15a9e9118a4a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2951
x-amzn-requestid: 087a36dd-984f-49d1-8a37-b357967e67ce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugIiH7KoAMF5uQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09c-38b316cc31454446524f7b01;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:24 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: eaJ3KQP30-QAP5UBuWX8BEjGmcp_cJgDVeIfQoU2c0U_WQzb1x-t5A==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:09:27 GMT
age: 20517
etag: "4f71cdda787ce98a58f2fe9ce8ba2e7ec7b150d2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ca0c1a7f205ad07f1cce80b26448873
0e14f5062e40ce94346494ff947bfcf74b5e88c1
ebc960279032671136749823c126ec807334d9eaf2b019abcc63b41bcdbf4a7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9873
x-amzn-requestid: 7171299f-e6e3-40ef-a292-33779346e1ee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI-FDIIAMF-xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-31f9413434a6b00e77e7709b;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: evL3aL1ULo6B2a8Rp6iILKCX7F14O9HMSbEqkEY3XHFhmMptE8FaVw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:09:44 GMT
age: 20500
etag: "0e14f5062e40ce94346494ff947bfcf74b5e88c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcf62dac-1ffa-4daa-b23e-b3be303c9660.jpeg
34.120.237.76200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcf62dac-1ffa-4daa-b23e-b3be303c9660.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 29f4a52fb629dce4ef8038d4df7ea58a
4a5b84c77bd53f4c94e1af4a702f6f85b46b51b0
32cee35b22110b83738f49f49edb6efcedb54fe793d5ccc900004e16e3fefda3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcf62dac-1ffa-4daa-b23e-b3be303c9660.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5827
x-amzn-requestid: 9a4bb6fa-13e5-4271-a5be-c551a570a5d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugoqHKbIAMF9WQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e16a-53ccce5d5ab40afc1d0901af;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:38:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: m_-3SrgDfwcLY1kI5UKd2rrKapa8I3AwVwi-le2zWh40lt-GfIbNIw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:08:56 GMT
etag: "4a5b84c77bd53f4c94e1af4a702f6f85b46b51b0"
content-type: image/jpeg
age: 20548
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbdf1293-7221-4e73-bb22-17a56bdc7f27.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbdf1293-7221-4e73-bb22-17a56bdc7f27.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd3eea4b2c2b9f4f8dcfe0c0b8e97fb3
3083eba7b12b01b52a06b8083aede4db64c80e2a
d6f34a71a7783922bc41018e99b42ae624a793dd5e3320aaa32836af8da5bb91
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbdf1293-7221-4e73-bb22-17a56bdc7f27.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11613
x-amzn-requestid: 79200307-be8b-4ad6-b365-bdb284f9d69c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfWItHMDIAMFwDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322d09d-6e80fc0600130e043fde5bcc;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:13:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: JhguJugImKeTXL3Ffhu0LJka6NYEV0FVtbSEcMrW6iBZNOKX26RAow==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:40:25 GMT
age: 18659
etag: "3083eba7b12b01b52a06b8083aede4db64c80e2a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32d94aa1-e164-4f98-8fe2-beb3868db074.jpeg
34.120.237.76200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32d94aa1-e164-4f98-8fe2-beb3868db074.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5f4438521bfdc6871ae384abcb7da547
a17fc7a7c30999b8789011c2064f5a8704b00eee
2e40ac154724af625c4858b09b90fa3f6a600b70c9e5e959598f0cdb05a78847
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32d94aa1-e164-4f98-8fe2-beb3868db074.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5402
x-amzn-requestid: 0442580c-9024-46b1-8ad5-5c7e8d35371d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfMALHT2oAMFmgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322c067-254ecd9003455f090f7d5ef9;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 06:04:23 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Y4IeHZWMs_JdT2dG8d3BNqpxvU3lcYDsXub1CuCoVBxzTPsjuU_5Ww==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 18:11:38 GMT
age: 34786
etag: "a17fc7a7c30999b8789011c2064f5a8704b00eee"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a6c4141-897e-4893-81f2-a7382686ab37.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a6c4141-897e-4893-81f2-a7382686ab37.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4653898fc83ae1b62d9b975658cc7fe9
adc6def18885ff49efd6b61c47d4b36eaca057b4
642a2e27f6635db0f9670cce2cba91f24f881db8f19d3f9b00e439f746fbc225
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a6c4141-897e-4893-81f2-a7382686ab37.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6961
x-amzn-requestid: 3177a5d3-6be5-426f-84ff-c044443c8627
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugHuHGZoAMFuwg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e097-00d08a4e1c0ebd3f62716843;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:19 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _dXQRIghNGF2FVKY8rbWdykpQd225TT_e645hfVwkq8SMhT5O16lFg==
via: 1.1 2a44ef7b9d28e74c78ffadeedcbb887c.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 21:53:49 GMT
age: 21455
etag: "adc6def18885ff49efd6b61c47d4b36eaca057b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F099b68b9-9e16-49e4-85b1-93b59b2ba2e0.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F099b68b9-9e16-49e4-85b1-93b59b2ba2e0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f816c646aefe417c3b980f432b98b41f
39c46ac3c49f0e2067aa6937a95839845b372dea
b9d8cb82c21257f9d5b5d82cf12bbf8aff690321f39c26e4a89f8a4d89fb00a7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F099b68b9-9e16-49e4-85b1-93b59b2ba2e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8746
x-amzn-requestid: 23ee3cce-0abd-436a-b4d8-a2ad451cbeaf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yuh7zElLoAMF0cw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e37e-1e03d3ee7a0033dd78620f20;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:47:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ChuMpL0m_XtTffIvROFslpQUwz13cx8rKF8UfD3LTfMtHvKKm5VNAQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:08:46 GMT
age: 20565
etag: "39c46ac3c49f0e2067aa6937a95839845b372dea"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/css/fonts.css
185.206.144.67200 OK 0 B URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/css/fonts.css
IP 185.206.144.67:0
GET /assets/css/fonts.css HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: text/css
last-modified: Thu, 30 Sep 2021 19:56:12 GMT
etag: W/"6156165c-e92"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/css/main.css
185.206.144.67200 OK 0 B URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/css/main.css
IP 185.206.144.67:0
GET /assets/css/main.css HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: text/css
last-modified: Thu, 30 Sep 2021 19:56:12 GMT
etag: W/"6156165c-1621"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/js/bootstrap.min.js
185.206.144.67200 OK 0 B URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/js/bootstrap.min.js
IP 185.206.144.67:0
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/bootstrap.min.js HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: application/javascript
last-modified: Thu, 30 Sep 2021 19:56:16 GMT
etag: W/"61561660-21388"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/css/helpers.css
185.206.144.67200 OK 0 B URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/css/helpers.css
IP 185.206.144.67:0
GET /assets/css/helpers.css HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: text/css
last-modified: Thu, 30 Sep 2021 19:56:12 GMT
etag: W/"6156165c-a318"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/js/main.js
185.206.144.67200 OK 0 B URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/js/main.js
IP 185.206.144.67:0
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/main.js HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: application/javascript
last-modified: Thu, 30 Sep 2021 19:56:18 GMT
etag: W/"61561662-13ff"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/js/jquery.min.js
185.206.144.67200 OK 0 B URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/js/jquery.min.js
IP 185.206.144.67:0
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/jquery.min.js HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: application/javascript
last-modified: Thu, 30 Sep 2021 19:56:18 GMT
etag: W/"61561662-15851"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/css/bootstrap.min.css
185.206.144.67200 OK 0 B URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/css/bootstrap.min.css
IP 185.206.144.67:0
GET /assets/css/bootstrap.min.css HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: text/css
last-modified: Thu, 30 Sep 2021 19:56:12 GMT
etag: W/"6156165c-2606e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
relaxed-lewin.185-206-144-67.plesk.page/assets/js/popper.min.js
185.206.144.67200 OK 0 B URL HTTP/2 relaxed-lewin.185-206-144-67.plesk.page/assets/js/popper.min.js
IP 185.206.144.67:0
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/popper.min.js HTTP/1.1
Host: relaxed-lewin.185-206-144-67.plesk.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://relaxed-lewin.185-206-144-67.plesk.page/828a09feacdfd93/login.php
Cookie: PHPSESSID=e3ju1b65473tpg1da6oqs9h5td
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 03:51:22 GMT
content-type: application/javascript
last-modified: Thu, 30 Sep 2021 19:56:18 GMT
etag: W/"61561662-4f74"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2