Report - protechnodeals.com/campaigns/gf614bqk5m8e7/track-url/ah528o11d4538/3ea40f348a340f2074d2ae4aa44642ecf02938a5

Report Overview

Submitted URL
protechnodeals.com/campaigns/gf614bqk5m8e7/track-url/ah528o11d4538/3ea40f348a340f2074d2ae4aa44642ecf02938a5
IP
172.67.134.173
ASN
#13335 CLOUDFLARENET
Submitted
2023-01-24 09:06:27
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	6.2 kB	23.36.77.32
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
e1.o.lencr.org	6159	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	676 B	1.5 kB	23.36.76.226
p.typekit.net	620	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	471 B	338 B	23.36.76.96
landing.adobe.com	32496	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	7.4 kB	416 kB	23.32.89.123
t-info.mail.adobe.com	43516	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	407 B	440 B	54.230.111.92
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
www.adobe.com	2202	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	384 B	1.3 kB	95.101.11.89
protechnodeals.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.0 kB	6.5 kB	172.67.134.173
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.6 kB	93.184.220.29
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	54.70.239.215
use.typekit.net	494	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.1 kB	193 kB	23.36.76.122
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	61 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-01-23	medium	protechnodeals.com/campaigns/gf614bqk5m8e7/web-version/ah528o11d4538	Adobe Inc.
2023-01-23	medium	protechnodeals.com/campaigns/gf614bqk5m8e7/track-url/ah528o11d4538/3ea40f348a340f2074d2ae4aa44642ecf02938a5	Adobe Inc.

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-01-24	medium	protechnodeals.com/campaigns/gf614bqk5m8e7/web-version/ah528o11d4538	Phishing
2023-01-24	medium	protechnodeals.com/campaigns/gf614bqk5m8e7/track-url/ah528o11d4538/3ea40f348a340f2074d2ae4aa44642ecf02938a5	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	protechnodeals.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	1.2 kB	2023-03-07	2024-05-10
Pretty URL protechnodeals.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-10 13:57:16 Times Seen56516 Hash 9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8 Loading...

HTTP Transactions (50)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f416977a8d6dfaafb2dbfd0e68b871f8
dfa97bd829b03162de91c80133f2fde69b58a8d2
2c4d0fd1b7a6d398026a4817267adce203429acdd3defa44a879f0d945f392d5

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2C4D0FD1B7A6D398026A4817267ADCE203429ACDD3DEFA44A879F0D945F392D5"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2924
Expires: Tue, 24 Jan 2023 09:55:00 GMT
Date: Tue, 24 Jan 2023 09:06:16 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
0be6cec5607bb65c06dbadd33456aec1
9d13129e936eb5fc82e403931884cdc8c6e6ab92
cb028034340b709ece65e45e8fc1a26a64dd85926beaa542f308d3f1d5ee2c84

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CB028034340B709ECE65E45E8FC1A26A64DD85926BEAA542F308D3F1D5EE2C84"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5852
Expires: Tue, 24 Jan 2023 10:43:48 GMT
Date: Tue, 24 Jan 2023 09:06:16 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
31c8743c2b5202ce0228bac5aad7229b
4b5eee8e1ecbfc992505003be58e265ff3a0ee0a
8b3b47ea29fc02b8a08ee2a340a05ab23e391f0eb3b8d6beb17516706bb2e94d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B3B47EA29FC02B8A08EE2A340A05AB23E391F0EB3B8D6BEB17516706BB2E94D"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17591
Expires: Tue, 24 Jan 2023 13:59:27 GMT
Date: Tue, 24 Jan 2023 09:06:16 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 24 Jan 2023 08:42:43 GMT
content-type: application/json
age: 1413
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: aGrtNzyAM+/ybPvUf/2IJM1L1kjKRd1roRhFy3EJ+UhVYcaEfN/EgzB7N3uWt2S6OCQmTBiQRX8=
x-amz-request-id: 5TB37H26JT09P3SN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 24 Jan 2023 08:48:05 GMT
age: 1091
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

e1.o.lencr.org/

23.36.76.226

200 OK

346 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
346 B (346 bytes)
Hash
bfc6576b4f5571f5ea01523326f2adb6
f27c5ea794a323445235dde5adf7b32b91920680
7e55f633ca7a7b08361fbb4cfcd87b2fda79c7da72eba8d66139661f2b3c5012

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "7E55F633CA7A7B08361FBB4CFCD87B2FDA79C7DA72EBA8D66139661F2B3C5012"
Last-Modified: Sun, 22 Jan 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 24 Jan 2023 15:06:16 GMT
Date: Tue, 24 Jan 2023 09:06:16 GMT
Connection: keep-alive

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 24 Jan 2023 09:06:16 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 24 Jan 2023 08:48:59 GMT
age: 1038
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
bb280016d8f12fa0a6ae86792ba89e67
53188091dab8e35ba20d2e341624777c2fb1536a
c28ed8dc9af97c7096f60030048432a41fb853e81ea91208e91493784d382bb9

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3678
Cache-Control: max-age=90109
Content-Type: application/ocsp-response
Date: Tue, 24 Jan 2023 09:06:17 GMT
Etag: "63ce4e28-1d7"
Expires: Wed, 25 Jan 2023 10:08:06 GMT
Last-Modified: Mon, 23 Jan 2023 09:06:48 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

e1.o.lencr.org/

23.36.76.226

200 OK

346 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
346 B (346 bytes)
Hash
bfc6576b4f5571f5ea01523326f2adb6
f27c5ea794a323445235dde5adf7b32b91920680
7e55f633ca7a7b08361fbb4cfcd87b2fda79c7da72eba8d66139661f2b3c5012

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "7E55F633CA7A7B08361FBB4CFCD87B2FDA79C7DA72EBA8D66139661F2B3C5012"
Last-Modified: Sun, 22 Jan 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21599
Expires: Tue, 24 Jan 2023 15:06:16 GMT
Date: Tue, 24 Jan 2023 09:06:17 GMT
Connection: keep-alive

push.services.mozilla.com/

54.70.239.215

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.70.239.215:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: PiviZvfLlLKyuuAzpSDFpw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: uuZt9CjNk/WzwLnAX9YD/erf854=

use.typekit.net/onr8tbr.css

23.36.76.122

200 OK

966 B

URL HTTP/2
use.typekit.net/onr8tbr.css
IP
23.36.76.122:0
ASN
#20940 Akamai International B.V.

File type
Unicode text, UTF-8 text, with very long lines (516)
Size
966 B (966 bytes)
Hash
b8633e394034a817d7fb18cf0cfd95d6
0355f348d8583204fbe4d202b808079d2968b884
1265959176d8637384b8a5730e9b95b1e0347c8fc86350387b1c50287ff8a518

HTTP Headers

GET /onr8tbr.css HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://protechnodeals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-type: text/css;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 966
date: Tue, 24 Jan 2023 09:06:18 GMT
X-Firefox-Spdy: h2

p.typekit.net/p.css?s=1&k=onr8tbr&ht=tk&f=7180.7181.7182.7183.7184.7185.22474.22475.22476.22477&a=1237835&app=typekit&e=css

23.36.76.96

200 OK

5 B

URL HTTP/2
p.typekit.net/p.css?s=1&k=onr8tbr&ht=tk&f=7180.7181.7182.7183.7184.7185.22474.22475.22476.22477&a=1237835&app=typekit&e=css
IP
23.36.76.96:0
ASN
#20940 Akamai International B.V.

File type
ASCII text
Size
5 B (5 bytes)
Hash
83d24d4b43cc7eef2b61e66c95f3d158
f0cafc285ee23bb6c28c5166f305493c4331c84d
1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb

HTTP Headers

GET /p.css?s=1&k=onr8tbr&ht=tk&f=7180.7181.7182.7183.7184.7185.22474.22475.22476.22477&a=1237835&app=typekit&e=css HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/2 200 OK
server: nginx
content-type: text/css
content-length: 5
last-modified: Thu, 28 Jul 2022 22:24:50 GMT
etag: "62e30cb2-5"
cache-control: public, max-age=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Tue, 24 Jan 2023 09:06:18 GMT
X-Firefox-Spdy: h2

use.typekit.net/af/180c9d/00000000000000003b9b3f8a/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n8&v=3

23.36.76.122

200 OK

64 kB

URL HTTP/2
use.typekit.net/af/180c9d/00000000000000003b9b3f8a/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n8&v=3
IP
23.36.76.122:0
ASN
#20940 Akamai International B.V.

File type
Web Open Font Format (Version 2), CFF, length 64120, version 1.0\012- data
Size
64 kB (64120 bytes)
Hash
0c01f9520ac0790c4c232e2ef23ceaa7
a57d955f915e4d8c094fe53258937d695644dba4
15be59e712a7df68c0aed6c00d00ee121dd1414095caf33b7fdef6c77edb03e5

HTTP Headers

GET /af/180c9d/00000000000000003b9b3f8a/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n8&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://protechnodeals.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 64120
etag: "607be03b83afaa774c920d433d2c6bca85e2b4b3"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Tue, 24 Jan 2023 09:06:18 GMT
X-Firefox-Spdy: h2

use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3

23.36.76.122

200 OK

63 kB

URL HTTP/2
use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
IP
23.36.76.122:0
ASN
#20940 Akamai International B.V.

File type
Web Open Font Format (Version 2), CFF, length 63016, version 1.0\012- data
Size
63 kB (63016 bytes)
Hash
391380bbc0159b7d0a63ce997aea767d
fc302a65311f78ef807f90245d7ee798fcc63193
79191f95b954c64e415a427179391c53d48b8caaec6c212886c9cc5b23424c16

HTTP Headers

GET /af/97fbd1/00000000000000003b9b3f88/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://protechnodeals.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 63016
etag: "0f02da16b460e9771f7c9e35351a67e0e361db68"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Tue, 24 Jan 2023 09:06:18 GMT
X-Firefox-Spdy: h2

use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3

23.36.76.122

200 OK

63 kB

URL HTTP/2
use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
IP
23.36.76.122:0
ASN
#20940 Akamai International B.V.

File type
Web Open Font Format (Version 2), CFF, length 63268, version 1.0\012- data
Size
63 kB (63268 bytes)
Hash
bdd7b80a0aeee2f0ae939d87775431f0
9649d1eff98c30c90253e6e94aed715f276e4bb2
6562e3d5058e8427f580329e7368468538ed5faaac1e3693dc927c8ec10d52bc

HTTP Headers

GET /af/b0c5f5/00000000000000003b9b3f85/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://protechnodeals.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 63268
etag: "855f9f8887d5710bdbda493cc38f00496327c10e"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Tue, 24 Jan 2023 09:06:18 GMT
X-Firefox-Spdy: h2

landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-marquee.12000x800.jpg

23.32.89.123

301 Moved Permanently

0 B

URL HTTP/1.1
landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-marquee.12000x800.jpg
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-marquee.12000x800.jpg HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-marquee.12000x800.jpg
Date: Tue, 24 Jan 2023 09:06:18 GMT
Connection: keep-alive

landing.adobe.com/dam/global/images/adobe-logo.classic.160x222.png

23.32.89.123

301 Moved Permanently

0 B

URL HTTP/1.1
landing.adobe.com/dam/global/images/adobe-logo.classic.160x222.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /dam/global/images/adobe-logo.classic.160x222.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://landing.adobe.com/dam/global/images/adobe-logo.classic.160x222.png
Date: Tue, 24 Jan 2023 09:06:18 GMT
Connection: keep-alive

landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/sign_logotype-white.270x60.png

23.32.89.123

301 Moved Permanently

0 B

URL HTTP/1.1
landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/sign_logotype-white.270x60.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /content/dam/landing/uploads/2021/na/dme/q121/sign_logotype-white.270x60.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/sign_logotype-white.270x60.png
Date: Tue, 24 Jan 2023 09:06:18 GMT
Connection: keep-alive

landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-williams.200x200.png

23.32.89.123

301 Moved Permanently

0 B

URL HTTP/1.1
landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-williams.200x200.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-williams.200x200.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-williams.200x200.png
Date: Tue, 24 Jan 2023 09:06:18 GMT
Connection: keep-alive

landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-kumar.200x200.png

23.32.89.123

301 Moved Permanently

0 B

URL HTTP/1.1
landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-kumar.200x200.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-kumar.200x200.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-kumar.200x200.png
Date: Tue, 24 Jan 2023 09:06:18 GMT
Connection: keep-alive

landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-surbhat.200x200.png

23.32.89.123

301 Moved Permanently

0 B

URL HTTP/1.1
landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-surbhat.200x200.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-surbhat.200x200.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-surbhat.200x200.png
Date: Tue, 24 Jan 2023 09:06:18 GMT
Connection: keep-alive

landing.adobe.com/dam/global/images/social/linkedin.959595.png

23.32.89.123

301 Moved Permanently

0 B

URL HTTP/1.1
landing.adobe.com/dam/global/images/social/linkedin.959595.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /dam/global/images/social/linkedin.959595.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://landing.adobe.com/dam/global/images/social/linkedin.959595.png
Date: Tue, 24 Jan 2023 09:06:18 GMT
Connection: keep-alive

landing.adobe.com/dam/global/images/social/facebook.959595.png

23.32.89.123

301 Moved Permanently

0 B

URL HTTP/1.1
landing.adobe.com/dam/global/images/social/facebook.959595.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /dam/global/images/social/facebook.959595.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://landing.adobe.com/dam/global/images/social/facebook.959595.png
Date: Tue, 24 Jan 2023 09:06:18 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
625e3dc77b217b0d39c1f9f4ee222972
bfe495c323e4bc3537d3ca4d3f8c61a095655b7d
a7edf9f52e29be82a0e7195e965c7ec285c1825c80148c8dd3bf364ee941eafc

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4924
Cache-Control: max-age=169509
Content-Type: application/ocsp-response
Date: Tue, 24 Jan 2023 09:06:18 GMT
Etag: "63cf7f73-1d7"
Expires: Thu, 26 Jan 2023 08:11:27 GMT
Last-Modified: Tue, 24 Jan 2023 06:49:23 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

landing.adobe.com/dam/global/images/social/twitter.959595.png

23.32.89.123

301 Moved Permanently

0 B

URL HTTP/1.1
landing.adobe.com/dam/global/images/social/twitter.959595.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /dam/global/images/social/twitter.959595.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://landing.adobe.com/dam/global/images/social/twitter.959595.png
Date: Tue, 24 Jan 2023 09:06:18 GMT
Connection: keep-alive

www.adobe.com/favicon.ico

95.101.11.89

200 OK

800 B

URL HTTP/2
www.adobe.com/favicon.ico
IP
95.101.11.89:0
ASN
#20940 Akamai International B.V.

File type
MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel\012- data
Size
800 B (800 bytes)
Hash
0c202d710e28efa07c730acd072eee59
073aba8e2f660480ee4672772fa15117a427d2da
623855d56389ebba028c423396d12e6234c77a2278c742b8ef7e9818af004efd

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://protechnodeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: image/x-icon
server: Apache
strict-transport-security: max-age=86400
x-adobe-content: AEM-Offers
x-frame-options: SAMEORIGIN
last-modified: Tue, 24 Jan 2023 06:55:18 GMT
accept-ranges: bytes
x-adobe-loc: ew1
x-adobe-source: 128.15
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=21600
expires: Tue, 24 Jan 2023 15:06:18 GMT
date: Tue, 24 Jan 2023 09:06:18 GMT
content-length: 800
server-timing: cdn-cache; desc=HIT, edge; dur=1
X-Firefox-Spdy: h2

landing.adobe.com/content/dam/landing/uploads/2020/na/dme_q3/200059e.en.dc-it_covid_pivots-webinar-sept25-adobe_x_wipro.758x250.png

23.32.89.123

200 OK

45 kB

URL HTTP/2
landing.adobe.com/content/dam/landing/uploads/2020/na/dme_q3/200059e.en.dc-it_covid_pivots-webinar-sept25-adobe_x_wipro.758x250.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type
PNG image data, 758 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size
45 kB (44713 bytes)
Hash
e04a6e4ab013010ac7b1025b403c1bd2
fb72b01ff48dcb7cd2c404e8da8ff5cbe1f0ad3c
8509ffca249ac7e5480c28198e90b0fcd479ac9ab8e7bf4093d24ae137ebe3c5

HTTP Headers

GET /content/dam/landing/uploads/2020/na/dme_q3/200059e.en.dc-it_covid_pivots-webinar-sept25-adobe_x_wipro.758x250.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://protechnodeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
last-modified: Mon, 14 Sep 2020 20:23:06 GMT
accept-ranges: bytes
content-length: 44713
content-type: image/png
cache-control: max-age=900
expires: Tue, 24 Jan 2023 09:21:18 GMT
date: Tue, 24 Jan 2023 09:06:18 GMT
X-Firefox-Spdy: h2

landing.adobe.com/dam/global/images/adobe-logo.classic.160x222.png

23.32.89.123

200 OK

4.4 kB

URL HTTP/2
landing.adobe.com/dam/global/images/adobe-logo.classic.160x222.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type
PNG image data, 160 x 222, 8-bit colormap, non-interlaced\012- data
Size
4.4 kB (4373 bytes)
Hash
3558445edc3e2a03733963652d134d7d
4a093b09ec6de666becd1542f8479c324caaf038
7617f2fb8ab47d5313f1ac6fa45671e0e2ced7dd8ebdf482bf8effe6ec1f483f

HTTP Headers

GET /dam/global/images/adobe-logo.classic.160x222.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
last-modified: Tue, 22 Dec 2020 21:07:35 GMT
accept-ranges: bytes
content-length: 4373
content-type: image/png
cache-control: max-age=900
expires: Tue, 24 Jan 2023 09:21:18 GMT
date: Tue, 24 Jan 2023 09:06:18 GMT
X-Firefox-Spdy: h2

landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-marquee.12000x800.jpg

23.32.89.123

200 OK

192 kB

URL HTTP/2
landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-marquee.12000x800.jpg
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, components 3\012- data
Size
192 kB (192512 bytes)
Hash
a8b16c3f8dc686a2545264f60ec6b1a9
489797b49331622f779dbf69b3a0c33f663cddec
cf784707c63a6ea2bfad5cee3136c5e5991a4ebf08361badfaae38236382aec8

HTTP Headers

GET /content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-marquee.12000x800.jpg HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
last-modified: Thu, 11 Feb 2021 18:03:38 GMT
accept-ranges: bytes
content-length: 192512
content-type: image/jpeg
cache-control: max-age=900
expires: Tue, 24 Jan 2023 09:21:18 GMT
date: Tue, 24 Jan 2023 09:06:18 GMT
X-Firefox-Spdy: h2

landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/sign_logotype-white.270x60.png

23.32.89.123

200 OK

3.6 kB

URL HTTP/2
landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/sign_logotype-white.270x60.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type
PNG image data, 270 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size
3.6 kB (3639 bytes)
Hash
b2e12c255d066b704ff76cc19448b688
2ea2b0793ee4a2e4877f1ff8bc1189671772bc49
734fff4fdee25b63340d681f1926a565bc6bf1efcce9761a19f601cd9d361b52

HTTP Headers

GET /content/dam/landing/uploads/2021/na/dme/q121/sign_logotype-white.270x60.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
last-modified: Thu, 11 Feb 2021 18:22:22 GMT
accept-ranges: bytes
content-length: 3639
content-type: image/png
cache-control: max-age=900
expires: Tue, 24 Jan 2023 09:21:18 GMT
date: Tue, 24 Jan 2023 09:06:18 GMT
X-Firefox-Spdy: h2

landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-kumar.200x200.png

23.32.89.123

200 OK

45 kB

URL HTTP/2
landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-kumar.200x200.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
45 kB (44849 bytes)
Hash
4a9848a22c1ece03c15acb6c2e22f888
ed58b774e4c380ac06fa95762b074931d9511549
a375b02f634195fa9575cabec53573b40ab45f3e7284e46d4e951c3b5192e3f8

HTTP Headers

GET /content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-kumar.200x200.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
last-modified: Thu, 11 Feb 2021 18:03:38 GMT
accept-ranges: bytes
content-length: 44849
content-type: image/png
cache-control: max-age=900
expires: Tue, 24 Jan 2023 09:21:18 GMT
date: Tue, 24 Jan 2023 09:06:18 GMT
X-Firefox-Spdy: h2

landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-surbhat.200x200.png

23.32.89.123

200 OK

56 kB

URL HTTP/2
landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-surbhat.200x200.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
56 kB (56243 bytes)
Hash
7c2f703288e80bf6cdafb8617bd71ab6
bb0657c64c2ba5960c97d0bfb1f6ec28efe5bcf4
cc5f9bc90b40424f27f7b11b991fbbc199e2c936d749d24aae69f7839df1f0da

HTTP Headers

GET /content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-surbhat.200x200.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
last-modified: Thu, 11 Feb 2021 18:03:39 GMT
accept-ranges: bytes
content-length: 56243
content-type: image/png
cache-control: max-age=900
expires: Tue, 24 Jan 2023 09:21:18 GMT
date: Tue, 24 Jan 2023 09:06:18 GMT
X-Firefox-Spdy: h2

landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-williams.200x200.png

23.32.89.123

200 OK

62 kB

URL HTTP/2
landing.adobe.com/content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-williams.200x200.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
62 kB (62486 bytes)
Hash
fa09cc413c9b2120859c0a018a0fd2cd
bd75db1eb58afcd9b6023d1805e6ffcabd45f777
d4a241219b1ed82ab1bae19914e88b531499637b4e21b212210a0aac873bc109

HTTP Headers

GET /content/dam/landing/uploads/2021/na/dme/q121/210022e.en.sign-wipro-paperless-webinar-feb24-speaker-williams.200x200.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
last-modified: Thu, 11 Feb 2021 18:03:39 GMT
accept-ranges: bytes
content-length: 62486
content-type: image/png
cache-control: max-age=900
expires: Tue, 24 Jan 2023 09:21:18 GMT
date: Tue, 24 Jan 2023 09:06:18 GMT
X-Firefox-Spdy: h2

landing.adobe.com/dam/global/images/social/facebook.959595.png

23.32.89.123

200 OK

201 B

URL HTTP/2
landing.adobe.com/dam/global/images/social/facebook.959595.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type
PNG image data, 20 x 38, 8-bit gray+alpha, non-interlaced\012- data
Size
201 B (201 bytes)
Hash
1996fb32a59dc39e676f3b37e7df0d59
c70a3ffa5940d38ff0b3e1083bdfc0720854c741
3df3ad83e686d3f59795fc3b9a6531894eb399db77acf3195605bfe497f45211

HTTP Headers

GET /dam/global/images/social/facebook.959595.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
last-modified: Tue, 10 Dec 2019 19:44:01 GMT
accept-ranges: bytes
content-length: 201
content-type: image/png
cache-control: max-age=900
expires: Tue, 24 Jan 2023 09:21:18 GMT
date: Tue, 24 Jan 2023 09:06:18 GMT
X-Firefox-Spdy: h2

landing.adobe.com/dam/global/images/social/twitter.959595.png

23.32.89.123

200 OK

433 B

URL HTTP/2
landing.adobe.com/dam/global/images/social/twitter.959595.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type
PNG image data, 40 x 32, 8-bit colormap, non-interlaced\012- data
Size
433 B (433 bytes)
Hash
518b26094ec83438d399a59407a8ecca
6e45a89893ee5bd81aad0de0d7c351a9475512c2
ab08fe4e2e3ccd6af914459a3222d7a33c9b583811822558d45610d7c45e049f

HTTP Headers

GET /dam/global/images/social/twitter.959595.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
last-modified: Tue, 10 Dec 2019 19:44:02 GMT
accept-ranges: bytes
content-length: 433
content-type: image/png
cache-control: max-age=900
expires: Tue, 24 Jan 2023 09:21:18 GMT
date: Tue, 24 Jan 2023 09:06:18 GMT
X-Firefox-Spdy: h2

landing.adobe.com/dam/global/images/social/linkedin.959595.png

23.32.89.123

200 OK

337 B

URL HTTP/2
landing.adobe.com/dam/global/images/social/linkedin.959595.png
IP
23.32.89.123:0
ASN
#16625 AKAMAI-AS

File type
PNG image data, 40 x 40, 8-bit colormap, non-interlaced\012- data
Size
337 B (337 bytes)
Hash
e5ca202e46506dae83b3cafae7ee6211
63415e3f2490349b35d316eb4773885f94fd36c8
ca438760fd0469ec4267b1d027928849cd6ae13e0cdf7bdf26d8bf5a0d95fd68

HTTP Headers

GET /dam/global/images/social/linkedin.959595.png HTTP/1.1
Host: landing.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
last-modified: Sat, 27 Jun 2020 02:59:34 GMT
accept-ranges: bytes
content-length: 337
content-type: image/png
cache-control: max-age=900
expires: Tue, 24 Jan 2023 09:21:18 GMT
date: Tue, 24 Jan 2023 09:06:18 GMT
X-Firefox-Spdy: h2

protechnodeals.com/campaigns/gf614bqk5m8e7/web-version/ah528o11d4538

172.67.134.173

200 OK

4.8 kB

URL HTTP/2
protechnodeals.com/campaigns/gf614bqk5m8e7/web-version/ah528o11d4538
IP
172.67.134.173:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (799), with CRLF, LF line terminators
Size
4.8 kB (4767 bytes)
Hash
b271a0a09f8f6b709e8cce8c884b45e7
27fcddf7da507beff8cdefb24c9b857ca80739f9
954e60e4a4e079dfd6faa5271770f63238c331fbc864b8b5f6cfe1e71de9fc9f

Detections

Analyzer	Verdict	Alert
openphish	Adobe Inc.
fortinet	Phishing

HTTP Headers

GET /campaigns/gf614bqk5m8e7/web-version/ah528o11d4538 HTTP/1.1
Host: protechnodeals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

HTTP/2 200 OK
date: Tue, 24 Jan 2023 09:06:17 GMT
content-type: text/html; charset=UTF-8
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: mwsid=2bf938c2822973285fc48785d321cc86; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rWEXkS59%2Bi4NMqgbpVx8aU2rAfSnVhdZC%2BL73SfvInP%2FudXRt4%2Ffd3kULvU5MZJ7MSM54%2FaowlnFogytpNcLoTNBUASGvOTEMU9IYtqR7P3uoB91aRNRbvNjpKHXuWWbPvt8GNw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78e79cbb592f1c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d5528af26e629a9bfbf0c421146b921f
1e4f99245d551384bedfe9b59b5f9905127d87bf
989830d93a90c30051b948a26ce403fb4370587ed3407d8d77ad0ad9cc28eb7a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "989830D93A90C30051B948A26CE403FB4370587ED3407D8D77AD0AD9CC28EB7A"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16039
Expires: Tue, 24 Jan 2023 13:33:37 GMT
Date: Tue, 24 Jan 2023 09:06:18 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d5528af26e629a9bfbf0c421146b921f
1e4f99245d551384bedfe9b59b5f9905127d87bf
989830d93a90c30051b948a26ce403fb4370587ed3407d8d77ad0ad9cc28eb7a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "989830D93A90C30051B948A26CE403FB4370587ED3407D8D77AD0AD9CC28EB7A"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16050
Expires: Tue, 24 Jan 2023 13:33:48 GMT
Date: Tue, 24 Jan 2023 09:06:18 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d5528af26e629a9bfbf0c421146b921f
1e4f99245d551384bedfe9b59b5f9905127d87bf
989830d93a90c30051b948a26ce403fb4370587ed3407d8d77ad0ad9cc28eb7a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "989830D93A90C30051B948A26CE403FB4370587ED3407D8D77AD0AD9CC28EB7A"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16039
Expires: Tue, 24 Jan 2023 13:33:37 GMT
Date: Tue, 24 Jan 2023 09:06:18 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d5528af26e629a9bfbf0c421146b921f
1e4f99245d551384bedfe9b59b5f9905127d87bf
989830d93a90c30051b948a26ce403fb4370587ed3407d8d77ad0ad9cc28eb7a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "989830D93A90C30051B948A26CE403FB4370587ED3407D8D77AD0AD9CC28EB7A"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16050
Expires: Tue, 24 Jan 2023 13:33:48 GMT
Date: Tue, 24 Jan 2023 09:06:18 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22e89ac2-c17b-48fc-854a-20b3464821b0.jpeg

34.120.237.76

200 OK

9.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22e89ac2-c17b-48fc-854a-20b3464821b0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.5 kB (9498 bytes)
Hash
ff16db4df786db9d342f85c9f2c22150
aa5f8f439f86983a1abeb2d00f8186f6119989f2
c2c4bdbbbb56277f9929d21df9d3d8065112cd0e10e3086e58ad4e82cd872c8f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22e89ac2-c17b-48fc-854a-20b3464821b0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9498
x-amzn-requestid: d2eba35c-9dde-4cd1-b591-c7903e25d511
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNzFTGHbIAMFtPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cefeee-2734aa4e2e32ad311984ec3b;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:41:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Xdm-3NhMlUf49o1YTuIF5ozyzizgnUOWjbd9PWEqVw0IuHRuaJWc8g==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 23 Jan 2023 22:18:27 GMT
age: 38871
etag: "aa5f8f439f86983a1abeb2d00f8186f6119989f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5077587b-9e6f-47b1-863e-800ea6ad04e8.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.2 kB (9181 bytes)
Hash
0ecfc916499d81c20675968924f4b27c
fd19b6b53a7f2360b2751ef4cc1b267a4c009f99
a30d964e1b2532e8c59d4e1b07dc2b8e36cbe2dbc8c8c873cad93201307256e0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5077587b-9e6f-47b1-863e-800ea6ad04e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9181
x-amzn-requestid: 8e8c1f20-3b0f-4b40-a820-ad3968e49dcc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNysjG4koAMFb0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cefe50-4e6003847371afa939b2fbad;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:38:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: si17KWUVUyj5yPMjUxdQPeoG05T832JvKhHE8k2gKci1OB-C2KWiTw==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Mon, 23 Jan 2023 21:56:59 GMT
age: 40159
etag: "fd19b6b53a7f2360b2751ef4cc1b267a4c009f99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0bda661-6105-498a-a20c-ce0c2449ddf8.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.8 kB (8799 bytes)
Hash
e1187451b413ac59b1078f7b8cf36ed5
a7f31d6e1b50efed95c57a693ded7117a31cc763
bf984d8675751540825eb41d2ba7bbbf09833a09c04ad505605b895418262e7f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0bda661-6105-498a-a20c-ce0c2449ddf8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8799
x-amzn-requestid: 402ea147-7591-482d-8a01-5824672910be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNyrNEa-oAMFi2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cefe47-20f9aff615c9a0b74cfe4cd1;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:38:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tTLJAp5trxBBKuxWtRPP9P-k-tf_WMgXlv1d9kXmfqarxHTJoYZPOg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Mon, 23 Jan 2023 22:19:21 GMT
etag: "a7f31d6e1b50efed95c57a693ded7117a31cc763"
content-type: image/jpeg
age: 38817
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (12758 bytes)
Hash
7458f7a9b2070055df6f1d496794e43e
0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9
373097662c419eef9f4a19ce9f3bcead70f6eafbf0acf44806685eece43ce251

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12758
x-amzn-requestid: c3540562-8c62-4957-9528-7ae952daebaa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9gf1E87oAMFpsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c87acb-49fd3f78275937e24d23fca3;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 23:03:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: c5YOTqrEv9RLv_lKsrC377yost8auxYRPLubBFGjIWtnbueiGMJYGw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 24 Jan 2023 04:36:21 GMT
age: 16197
etag: "0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F140a90fd-357c-46c9-a6c8-87ba604d4d03.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.7 kB (5664 bytes)
Hash
53b13174aad4c8a3fd46552a6ac200da
64f9cbd0604812e72c037dd805dd959087cf9f89
8a4aff1f9887fb590f72a2e81bb9752fa5cbc84cd149f0a179fb0d56aec4c817

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F140a90fd-357c-46c9-a6c8-87ba604d4d03.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5664
x-amzn-requestid: dddf598e-c703-4c1a-9221-5a33f2609f2e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNza6FBmIAMFnRg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ceff78-1c19e9dc6097976248411cf2;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:43:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6D4ujywPYPiPrwoDgnB2ymDfyY4c71TeCD_LYoFIW-H7baZ-mRyc2Q==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 23 Jan 2023 22:08:04 GMT
age: 39494
etag: "64f9cbd0604812e72c037dd805dd959087cf9f89"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67efee66-d227-4c28-89a3-8fd7f382049b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.3 kB (8308 bytes)
Hash
91b2e12a39dc4f63b9d52e8800cce1f2
42d5b4b4a091778d98c351f0002d8656449d0243
d4dbc79e3383e83f861ccf8cde3e78ba427a66cd3fa99c17e23ec935867de4ad

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67efee66-d227-4c28-89a3-8fd7f382049b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8308
x-amzn-requestid: 1988d3b3-5e1a-41fd-83f5-092eddb9185f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNys5GDKoAMFdbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cefe52-2349fde60b7db8a34c996717;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:38:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 5_1j_Z6HZ3DSGFPAACJduM5D9eAqMQT42GgI61x8dHAmPQtUexpEYQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 23 Jan 2023 21:59:05 GMT
age: 40033
etag: "42d5b4b4a091778d98c351f0002d8656449d0243"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

t-info.mail.adobe.com/r/?id=hd6139021,c1c6d0f3,1

54.230.111.92

200 OK

44 B

URL HTTP/2
t-info.mail.adobe.com/r/?id=hd6139021,c1c6d0f3,1
IP
54.230.111.92:0
ASN
#16509 AMAZON-02

File type
GIF image data, version 89a, 1 x 1\012- data
Size
44 B (44 bytes)
Hash
fbbcaf826e664c94b0595c67dbccdea7
ca878624b7bdd3e2a87657b0bee4d6e38b8fed0a
2e09cc2e7dde2d5636fe0bed0d424e497967fbcbfbc380ff278d856b068abf5f

HTTP Headers

GET /r/?id=hd6139021,c1c6d0f3,1 HTTP/1.1
Host: t-info.mail.adobe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://protechnodeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: image/gif
content-length: 44
cache-control: no-cache
date: Tue, 24 Jan 2023 09:06:18 GMT
pragma: no-cache
server: Apache
x-robots-tag: noindex
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Yhb7CgebpmV7nxjXXf0D6CjMrB8tCG5o3YZE4afTtoii3OFHmbohxg==
X-Firefox-Spdy: h2

protechnodeals.com/campaigns/gf614bqk5m8e7/track-url/ah528o11d4538/3ea40f348a340f2074d2ae4aa44642ecf02938a5

172.67.134.173

301 Moved Permanently

0 B

URL HTTP/2
protechnodeals.com/campaigns/gf614bqk5m8e7/track-url/ah528o11d4538/3ea40f348a340f2074d2ae4aa44642ecf02938a5
IP
172.67.134.173:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	Adobe Inc.
fortinet	Phishing

HTTP Headers

GET /campaigns/gf614bqk5m8e7/track-url/ah528o11d4538/3ea40f348a340f2074d2ae4aa44642ecf02938a5 HTTP/1.1
Host: protechnodeals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 301 Moved Permanently
date: Tue, 24 Jan 2023 09:06:17 GMT
content-type: text/html; charset=UTF-8
location: https://protechnodeals.com/campaigns/gf614bqk5m8e7/web-version/ah528o11d4538
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Tue, 24 Jan 2023 09:06:17 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h%2Bss3jaLz1Hf1jIr%2Bqg6NpU0%2B5K4lLVJib5hV%2BKS38Tsfdg8ycOMqa3X5%2F5TTHpnnbI1u3GB0YjrfHOIUieg3h04TwdNN%2BXr%2Fd4bgmU8nbKEZdZUjvzTbB9FYUCaPXs9No87k98%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78e79cb69c0d1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (50)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type