urlquery - report: www.spectrumpharmatech.com/assets/dhl/home.php?ip=94.102.63.27&countryCode=&OS=Mac%20OS%20X

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
nosir.github.io (1)	309655	2014-04-11 12:09:42 UTC	2023-01-03 18:16:28 UTC	185.199.109.153
r3.o.lencr.org (7)	344	2020-12-02 08:52:13 UTC	2023-01-03 17:12:06 UTC	23.36.76.226
ocsp.digicert.com (1)	86	2012-05-21 07:02:23 UTC	2023-01-03 17:57:02 UTC	93.184.220.29
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2023-01-03 17:13:07 UTC	34.117.237.239
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2023-01-03 17:19:31 UTC	35.160.45.85
www.spectrumpharmatech.com (11)	0	2014-10-25 07:35:20 UTC	2023-01-03 18:16:14 UTC	121.240.11.32	Unknown ranking
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2023-01-03 17:18:17 UTC	34.120.237.76
cdnjs.cloudflare.com (1)	235	2012-05-23 12:49:49 UTC	2023-01-03 17:39:45 UTC	104.17.25.14
firefox.settings.services.mozilla.com (2)	867	2020-05-25 20:06:39 UTC	2023-01-03 17:12:58 UTC	35.241.9.150
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2023-01-03 17:17:13 UTC	34.160.144.191

Scan Date	Severity	Indicator	Comment
2023-01-04	2	www.spectrumpharmatech.com/assets/dhl/date.js	Phishing
2023-01-04	2	www.spectrumpharmatech.com/assets/dhl/script.js	Phishing
2023-01-04	2	www.spectrumpharmatech.com/assets/dhl/lg.svg	Phishing
2023-01-04	2	www.spectrumpharmatech.com/assets/dhl/style.js	Phishing

Date	UQ / IDS / BL	URL	IP
2023-03-21 17:28:13 +0000	0 - 0 - 1	www.perfomicslabs.com/0o/?Y2l0b0BwcmlvMy5jb20uYnI=	121.240.11.32
2023-03-17 22:24:16 +0000	0 - 0 - 14	www.spectrumpharmatech.com/assets/dhl/home.ph (...)	121.240.11.32
2023-03-12 00:38:41 +0000	0 - 0 - 17	www.spectrumpharmatech.com/assets/dhl/home.ph (...)	121.240.11.32
2023-03-07 02:00:03 +0000	0 - 0 - 17	www.spectrumpharmatech.com/assets/dhl/home.ph (...)	121.240.11.32
2023-03-06 20:57:00 +0000	0 - 1 - 10	www.spectrumpharmatech.com/ajaxcode/Confirme/	121.240.11.32

Date	UQ / IDS / BL	URL	IP
2023-03-28 08:30:44 +0000	0 - 0 - 1	115.113.136.118/	115.113.136.118
2023-03-24 12:24:36 +0000	0 - 0 - 2	121.243.83.19/	121.243.83.19
2023-03-23 17:57:38 +0000	0 - 0 - 0	tx.gl/r/9DqoQ	59.162.167.84
2023-03-23 17:56:10 +0000	0 - 0 - 2	tx.gl/r/9Q5uQ/	59.162.167.84
2023-03-21 17:28:13 +0000	0 - 0 - 1	www.perfomicslabs.com/0o/?Y2l0b0BwcmlvMy5jb20uYnI=	121.240.11.32

Date	UQ / IDS / BL	URL	IP
2023-03-31 08:56:34 +0000	0 - 0 - 14	www.spectrumpharmatech.com/assets/dhl/home.ph (...)	182.66.212.220
2023-03-31 07:40:50 +0000	0 - 0 - 16	www.spectrumpharmatech.com/assets/dhl/home.ph (...)	182.66.212.220
2023-03-30 22:06:40 +0000	0 - 0 - 17	www.spectrumpharmatech.com/assets/dhl/home.ph (...)	182.66.212.220
2023-03-30 04:13:51 +0000	0 - 0 - 16	www.spectrumpharmatech.com/assets/dhl/home.ph (...)	182.66.212.220
2023-03-29 12:55:38 +0000	0 - 0 - 18	www.spectrumpharmatech.com/assets/dhl/home.ph (...)	182.66.212.220

Date	UQ / IDS / BL	URL	IP
2023-01-05 03:04:19 +0000	11 - 0 - 0	mediagator.net/dhl/home.php?ip=102.78.165.181 (...)	188.165.1.159
2023-01-04 20:14:19 +0000	21 - 0 - 4	www.spectrumpharmatech.com/assets/dhl/home.ph (...)	121.240.11.32
2023-01-04 17:45:52 +0000	21 - 0 - 4	www.spectrumpharmatech.com/assets/dhl/home.ph (...)	121.240.11.32
2023-01-04 12:11:35 +0000	21 - 0 - 0	www.spectrumpharmatech.com/assets/dhl/home.ph (...)	121.240.11.32
2023-01-04 11:18:48 +0000	21 - 0 - 0	www.spectrumpharmatech.com/assets/dhl/home.ph (...)	121.240.11.32

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 96c2c75f700ab55649882111713ca3cfb2eaf08e404c2bc245a641dc12ae168a 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "96C2C75F700AB55649882111713CA3CFB2EAF08E404C2BC245A641DC12AE168A" Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=20688 Expires: Thu, 05 Jan 2023 01:12:54 GMT Date: Wed, 04 Jan 2023 19:28:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 326898eb925368408f6f42ee173b9d89 Sha1: b8b20ee34b7e7b139e7729b8e46a54ea25f54ac8 Sha256: 96c2c75f700ab55649882111713ca3cfb2eaf08e404c2bc245a641dc12ae168a
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 52edddbda4a3a3b778f61a491b21e6ea439e9d8024189e636b1f37b2dd7226fc 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "52EDDDBDA4A3A3B778F61A491B21E6EA439E9D8024189E636B1F37B2DD7226FC" Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14140 Expires: Wed, 04 Jan 2023 23:23:46 GMT Date: Wed, 04 Jan 2023 19:28:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ce8af3d72e7e9af609039abee59c8b87 Sha1: 8e1b16591fbc632df35f15e23da55ee86af31bc3 Sha256: 52edddbda4a3a3b778f61a491b21e6ea439e9d8024189e636b1f37b2dd7226fc
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 068d0da23acbe7f6b600c4e7dbe9c81d3ad78c8afd122255bbf3550e8a290686 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "068D0DA23ACBE7F6B600C4E7DBE9C81D3AD78C8AFD122255BBF3550E8A290686" Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2423 Expires: Wed, 04 Jan 2023 20:08:29 GMT Date: Wed, 04 Jan 2023 19:28:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: da484f5e9c6805745e063b236fb81473 Sha1: ae454bf4a7ae0e96935afc81ee0f89c049097b15 Sha256: 068d0da23acbe7f6b600c4e7dbe9c81d3ad78c8afd122255bbf3550e8a290686
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Wed, 04 Jan 2023 18:47:46 GMT age: 2420 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 30db107dcf4380cef05efea409c2e6a3 Sha1: 96e6a306fbc07299aba64e5c14e2bfca35872fa9 Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: Fyy1ysBaVIcQ4wp01/G2L3Yrj7WsHOLoFjPMcrE4/3aMC5XCEmHKcZDEnI2O75DBpxUhtfVZ0CU= x-amz-request-id: MNTD8P6BVK9F84H3 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Wed, 04 Jan 2023 19:01:25 GMT age: 1601 last-modified: Tue, 20 Dec 2022 14:47:58 GMT etag: "b1fcd419a4245617397846e8d17233f6" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: b1fcd419a4245617397846e8d17233f6 Sha1: 2a037ce244587640b27ead9a0ec2af4f862d91b2 Sha256: e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Wed, 04 Jan 2023 19:28:06 GMT content-length: 12 access-control-expose-headers: content-type access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Wed, 04 Jan 2023 19:08:11 GMT age: 1196 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 511f11fe968867447f6d7e5862d8003e3a5fc18bdb62496ea09d140e9a11f53b 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 2659 Cache-Control: max-age=138183 Date: Wed, 04 Jan 2023 19:28:07 GMT Etag: "63b541ab-1d7" Expires: Fri, 06 Jan 2023 09:51:10 GMT Last-Modified: Wed, 04 Jan 2023 09:06:51 GMT Server: ECS (ska/F714) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: fe74c226e54f2f382d278b594df930ae Sha1: 4e4ebc661443f56b74d7c924ddae50bcb107f0af Sha256: 511f11fe968867447f6d7e5862d8003e3a5fc18bdb62496ea09d140e9a11f53b
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 7q0wvT52TCLilARoVkcPKQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 35.160.45.85 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 35.160.45.85 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: 9cN5Jshq+eU4A3ktLY/He0iqgAM= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/dhl/home.php?ip=94.102.63.27&countryCode=&OS=Mac%20OS%20X HTTP/1.1 Host: www.spectrumpharmatech.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: www.spectrumpharmatech.com/assets/dhl/home.php?ip=94.10 (...) FQDN: www.spectrumpharmatech.com IP: 121.240.11.32 HASH: 23566a10f4982d08acbcdfc337f0ee3ed33afd10b6dc2302ea86ab74e95316e8 121.240.11.32 HTTP/1.1 302 Found Content-Type: text/html; charset=iso-8859-1 Date: Wed, 04 Jan 2023 19:28:07 GMT Server: Apache Location: https://www.spectrumpharmatech.com/assets/dhl/home.php?ip=94.102.63.27&countryCode=&OS=Mac%20OS%20X Content-Length: 291 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 291 Md5: 1f46f3b45b32c1ddd456a600b254b840 Sha1: 70bd6c904c13c4a807e62946f9cfab897907c61f Sha256: 23566a10f4982d08acbcdfc337f0ee3ed33afd10b6dc2302ea86ab74e95316e8
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA" Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9474 Expires: Wed, 04 Jan 2023 22:06:02 GMT Date: Wed, 04 Jan 2023 19:28:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 872ad13c3966689cbd481bebca0b21f8 Sha1: 2a052c414b68b9e71b00fa3903995e8bdd22a81c Sha256: bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA" Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9474 Expires: Wed, 04 Jan 2023 22:06:02 GMT Date: Wed, 04 Jan 2023 19:28:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 872ad13c3966689cbd481bebca0b21f8 Sha1: 2a052c414b68b9e71b00fa3903995e8bdd22a81c Sha256: bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA" Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9474 Expires: Wed, 04 Jan 2023 22:06:02 GMT Date: Wed, 04 Jan 2023 19:28:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 872ad13c3966689cbd481bebca0b21f8 Sha1: 2a052c414b68b9e71b00fa3903995e8bdd22a81c Sha256: bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8476606b-7383-49cb-8c93-76705bedbbb8.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b31c198d6b76827201a870da6f9fe9b28c2cffe0d3f7f3d8e0530223ea8fc9d9 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8148 x-amzn-requestid: 7712cf7e-ea08-47da-876a-ba70c723b68b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: eL33cHXsIAMFhhw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63b4a02f-3c965abb517a33ce31cbdf4c;Sampled=0 x-amzn-remapped-date: Tue, 03 Jan 2023 21:37:51 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: oJ4e7NUOg62KQDiD04fLCiSoQgBO_AQGw6mrIYbqcgdrylEMwoDQUA== via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google date: Tue, 03 Jan 2023 21:50:17 GMT age: 77871 etag: "dbff30aac035b502e27a3a538dbdfd475d3fc1d4" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8148 Md5: 0f7ef195ef59caf6b47f13ceae04987f Sha1: dbff30aac035b502e27a3a538dbdfd475d3fc1d4 Sha256: b31c198d6b76827201a870da6f9fe9b28c2cffe0d3f7f3d8e0530223ea8fc9d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ff2360c-5204-4d20-b397-821a4c4421e7.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: fff1b001462468cc953092a2312650c03f307e95c40e2c6bb7356e2a8b9b0283 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11877 x-amzn-requestid: 884b9243-6a8a-4434-9b2a-e5eff84d4e99 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: eL33bFnDoAMFpoQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63b4a02f-3f7043ae29d21e010ddc1ff9;Sampled=0 x-amzn-remapped-date: Tue, 03 Jan 2023 21:37:51 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: WcUVY1LHWCEWWyJZEhS8M5tlXhx5WDnIr9RmxLMvqIilnREfwORJew== via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google date: Tue, 03 Jan 2023 22:12:53 GMT age: 76515 etag: "ac965c8642c4d1e47713965060fa2fc8f19088b1" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 11877 Md5: 359f30e64bec00d0a01acd69a08b684d Sha1: ac965c8642c4d1e47713965060fa2fc8f19088b1 Sha256: fff1b001462468cc953092a2312650c03f307e95c40e2c6bb7356e2a8b9b0283
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7367913c-a0ac-494d-9929-dad9f308a082.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 5b7c3e9920d5058a2342a3e85e3046de75c3f8ff88bc55099f5cfc3ad5041b69 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7126 x-amzn-requestid: 48f19ee3-5b35-438b-b088-91297ef2c816 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: eMUhEG5wIAMFu5Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63b4ce06-08436eaf7f54288c4a258770;Sampled=0 x-amzn-remapped-date: Wed, 04 Jan 2023 00:53:26 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: Z3YUeSR6ZBHfxf2lswIkBhlBSdSuwLkDx60bSkYA2MVUqnsvUHkfkg== via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google date: Wed, 04 Jan 2023 05:08:25 GMT age: 51583 etag: "34b2acc4195a5e36f0acbd10669219c7ef14a5fa" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7126 Md5: 366b35900303af09c9dd28131a105a66 Sha1: 34b2acc4195a5e36f0acbd10669219c7ef14a5fa Sha256: 5b7c3e9920d5058a2342a3e85e3046de75c3f8ff88bc55099f5cfc3ad5041b69
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03ececd-3935-4a1b-ae41-45a5aea9ebe3.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 7bcb20dc641e46d033dee76b3d92b701b31aecfbf88241a5a95dfdc1c5e95885 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5018 x-amzn-requestid: 7a68cfb1-dedd-4f08-8d99-4678c1087422 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: eL3HtFHkoAMFwYQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63b49efd-7880e5f93c99cc794f9a03bb;Sampled=0 x-amzn-remapped-date: Tue, 03 Jan 2023 21:32:45 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: MvV5dXthUr0Qo499_5eG6Z_yW0gmflen3kRBrse7ngQjUgOVA0OMvg== via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google date: Tue, 03 Jan 2023 21:50:49 GMT age: 77839 etag: "96df0d8c10c666811cfeb98187ca93e65480c2ff" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5018 Md5: af78916e285d0f6c5c5a5ff33894e108 Sha1: 96df0d8c10c666811cfeb98187ca93e65480c2ff Sha256: 7bcb20dc641e46d033dee76b3d92b701b31aecfbf88241a5a95dfdc1c5e95885
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F26b683df-9643-4ff8-b098-1efad9d79718.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: ddada04725b434f0b1aa0b9a3f2732e82ec7d04714c1569de192664edf2d273f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10779 x-amzn-requestid: 78509014-ef20-4b14-93af-7f340c493104 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: dyR4fE80oAMFR8g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63aa6369-5fddb69c6a8bb95d3a441584;Sampled=0 x-amzn-remapped-date: Tue, 27 Dec 2022 03:15:53 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: hJ1M7LkKdEgql8_7dwuS_sbK1DOkPXzK1J2VXrWPiDUEmB-COGQ4ug== via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google date: Wed, 04 Jan 2023 15:39:33 GMT age: 13715 etag: "d221d11157dc0fe23c5751ac7696975445c4e884" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10779 Md5: ada6b864a52071ec64fe1089642da007 Sha1: d221d11157dc0fe23c5751ac7696975445c4e884 Sha256: ddada04725b434f0b1aa0b9a3f2732e82ec7d04714c1569de192664edf2d273f
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA" Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9474 Expires: Wed, 04 Jan 2023 22:06:02 GMT Date: Wed, 04 Jan 2023 19:28:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 872ad13c3966689cbd481bebca0b21f8 Sha1: 2a052c414b68b9e71b00fa3903995e8bdd22a81c Sha256: bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b11930d-f72d-464d-8f7d-bbd0bb247c74.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 6e6061581018dc0ec494631e7861cf2e44f82ac94d1b0056679555ff6dae5f8e 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 13546 x-amzn-requestid: 6758cca7-bc06-43dd-8545-3e05aa760218 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: eL3p7GYjIAMFw7A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63b49fd8-038317190f3df26f13c9d961;Sampled=0 x-amzn-remapped-date: Tue, 03 Jan 2023 21:36:25 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: _ppyHa_jCBaOxdhFxe2mk83Tk35L97BMENr5W2wsMFHmtTnVXy2bFg== via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google date: Tue, 03 Jan 2023 21:54:33 GMT age: 77616 etag: "0df6f090574996e472064765c6f27b6b8e012414" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 13546 Md5: 235b1a6e2b61b3068bf7a8e7a2607634 Sha1: 0df6f090574996e472064765c6f27b6b8e012414 Sha256: 6e6061581018dc0ec494631e7861cf2e44f82ac94d1b0056679555ff6dae5f8e
GET /assets/dhl/home.php?ip=94.102.63.27&countryCode=&OS=Mac%20OS%20X HTTP/1.1 Host: www.spectrumpharmatech.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: www.spectrumpharmatech.com/assets/dhl/home.php?ip=94.10 (...) FQDN: www.spectrumpharmatech.com IP: 121.240.11.32 HASH: bbb640bb1d2b1815e612675d861cbaff8f9904c3169233643b2ccbdf292fbf17 121.240.11.32 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Wed, 04 Jan 2023 19:28:08 GMT Server: Apache Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators Size: 5196 Md5: 92878204bd766028118dd43ab1b88328 Sha1: 1c09d76a64307c5277eea89f45a797a98a6d44ce Sha256: bbb640bb1d2b1815e612675d861cbaff8f9904c3169233643b2ccbdf292fbf17
GET /ajax/libs/imask/3.4.0/imask.min.js HTTP/1.1 Host: cdnjs.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.spectrumpharmatech.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdnjs.cloudflare.com/ajax/libs/imask/3.4.0/imask.min.js FQDN: cdnjs.cloudflare.com IP: 104.17.25.14 HASH: 1238c95de9a6c90c1992853fd140b31d2ec8854a09deaa0d4a2d3136281af5e9 104.17.25.14 HTTP/2 200 OK content-type: application/javascript; charset=utf-8 date: Wed, 04 Jan 2023 19:28:09 GMT content-length: 10899 access-control-allow-origin: * cache-control: public, max-age=30672000 content-encoding: br etag: "5eb03e9f-b217" last-modified: Mon, 04 May 2020 16:11:11 GMT cf-cdnjs-via: cfworker/kv cross-origin-resource-policy: cross-origin timing-allow-origin: * x-content-type-options: nosniff vary: Accept-Encoding cf-cache-status: HIT age: 7860217 expires: Mon, 25 Dec 2023 19:28:09 GMT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BTkmH6ddk7F7GYBnMgIMZQQsRxHvU1P2Gjo0bbRsgfxI9IMH0JuqAOBciPF7WaqdkWu9yqt4Jd%2Fenvc6ly0sR6VcnmHs8wCJiyifG23XfuOZ7IZCA5qXy9gCyGIWQG9iaBSx4ElH"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15780000 server: cloudflare cf-ray: 7846602d2e38b503-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (45552) Size: 10899 Md5: 6dd93e13c5bb3b67dadd0de250ffea2f Sha1: 961bf5bb7cc4aa32bcd66b9ac34461f7e02d96d3 Sha256: 1238c95de9a6c90c1992853fd140b31d2ec8854a09deaa0d4a2d3136281af5e9
GET /cleave.js/dist/cleave.min.js HTTP/1.1 Host: nosir.github.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.spectrumpharmatech.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: nosir.github.io/cleave.js/dist/cleave.min.js FQDN: nosir.github.io IP: 185.199.109.153 HASH: 0b00bad54f9f54a374b05ab0dad2aa0405d1646cfe9a3756d763713af151e5f3 185.199.109.153 HTTP/2 200 OK content-type: application/javascript; charset=utf-8 server: GitHub.com permissions-policy: interest-cohort=() x-origin-cache: HIT last-modified: Tue, 19 May 2020 10:51:11 GMT access-control-allow-origin: * etag: W/"5ec3ba1f-528d" expires: Tue, 03 Jan 2023 20:51:36 GMT cache-control: max-age=600 content-encoding: gzip x-proxy-cache: HIT x-github-request-id: A9E6:3584:8C728:B4C39:63B4933F accept-ranges: bytes date: Wed, 04 Jan 2023 19:28:09 GMT via: 1.1 varnish age: 581 x-served-by: cache-bma1634-BMA x-cache: HIT x-cache-hits: 1 x-timer: S1672860490.838045,VS0,VE2 vary: Accept-Encoding x-fastly-request-id: 78e13e9ac932274712cc61ff43e2f63bbd543239 content-length: 6354 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (20970) Size: 6354 Md5: 8378b0a97cdaa165e55a407e99191b8f Sha1: b8115b0f8c4b3df2323df521d8bc9d29fe3bf1c8 Sha256: 0b00bad54f9f54a374b05ab0dad2aa0405d1646cfe9a3756d763713af151e5f3 Alerts: urlquery: - Phishing - DHL - Phishing - DHL
GET /assets/dhl/date.js HTTP/1.1 Host: www.spectrumpharmatech.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.spectrumpharmatech.com/assets/dhl/home.php?ip=94.102.63.27&countryCode=&OS=Mac%20OS%20X Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.spectrumpharmatech.com/assets/dhl/date.js FQDN: www.spectrumpharmatech.com IP: 121.240.11.32 HASH: 24f3e5ffeacabdddb258ab390d49bde1a17bdf7ac112a6f96a57447160163a5e 121.240.11.32 HTTP/1.1 200 OK Content-Type: application/javascript Date: Wed, 04 Jan 2023 19:28:09 GMT Server: Apache Last-Modified: Mon, 12 Dec 2022 13:11:56 GMT Accept-Ranges: bytes Content-Length: 125 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive --- Additional Info --- Magic: ASCII text, with CRLF line terminators Size: 125 Md5: 5918900913f429f3f7dce86a0e4324f5 Sha1: 85d6a4276866324c58b0eb5c05756fb6f83e228a Sha256: 24f3e5ffeacabdddb258ab390d49bde1a17bdf7ac112a6f96a57447160163a5e Alerts: urlquery: - Phishing - DHL - Phishing - DHL Blocklists: - fortinet: Phishing
GET /assets/dhl/cc.css HTTP/1.1 Host: www.spectrumpharmatech.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.spectrumpharmatech.com/assets/dhl/home.php?ip=94.102.63.27&countryCode=&OS=Mac%20OS%20X Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.spectrumpharmatech.com/assets/dhl/cc.css FQDN: www.spectrumpharmatech.com IP: 121.240.11.32 HASH: c1bf237574102e2f75a34a4ab790747a8cc47b8da4f3ca7ae18e4a520ec76e2f 121.240.11.32 HTTP/1.1 200 OK Content-Type: text/css Date: Wed, 04 Jan 2023 19:28:10 GMT Server: Apache Last-Modified: Mon, 12 Dec 2022 13:11:56 GMT Accept-Ranges: bytes Content-Length: 5583 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive --- Additional Info --- Magic: ASCII text Size: 5583 Md5: e1f01d0ff7832762872c54bbdb67a9e0 Sha1: 7d551b418151be67be05028abf67d5bea2b5c74b Sha256: c1bf237574102e2f75a34a4ab790747a8cc47b8da4f3ca7ae18e4a520ec76e2f Alerts: urlquery: - Phishing - DHL - Phishing - DHL
GET /assets/dhl/style.css HTTP/1.1 Host: www.spectrumpharmatech.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.spectrumpharmatech.com/assets/dhl/home.php?ip=94.102.63.27&countryCode=&OS=Mac%20OS%20X Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.spectrumpharmatech.com/assets/dhl/style.css FQDN: www.spectrumpharmatech.com IP: 121.240.11.32 HASH: d79ec35dc8277aff48adaf9df3ddd5b3e18ac7013e8c374510624ae37cdfba31 121.240.11.32 HTTP/1.1 200 OK Content-Type: text/css Date: Wed, 04 Jan 2023 19:28:09 GMT Server: Apache Last-Modified: Mon, 12 Dec 2022 13:11:56 GMT Accept-Ranges: bytes Content-Length: 249464 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive --- Additional Info --- Magic: ASCII text, with very long lines (724) Size: 249464 Md5: 83b9653d14c8f7fb95d6ed6a4a3f18eb Sha1: e3bb0fc9a8422cd8d08cd73c6138579c16c24821 Sha256: d79ec35dc8277aff48adaf9df3ddd5b3e18ac7013e8c374510624ae37cdfba31 Alerts: urlquery: - Phishing - DHL - Phishing - DHL
GET /assets/dhl/script.js HTTP/1.1 Host: www.spectrumpharmatech.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.spectrumpharmatech.com/assets/dhl/home.php?ip=94.102.63.27&countryCode=&OS=Mac%20OS%20X Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.spectrumpharmatech.com/assets/dhl/script.js FQDN: www.spectrumpharmatech.com IP: 121.240.11.32 HASH: 4b29570ccd4eb182097a77750e4594c53b889aa7c606ffa0da191ea0bcc82fea 121.240.11.32 HTTP/1.1 200 OK Content-Type: application/javascript Date: Wed, 04 Jan 2023 19:28:10 GMT Server: Apache Last-Modified: Mon, 12 Dec 2022 13:11:56 GMT Accept-Ranges: bytes Content-Length: 97851 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive --- Additional Info --- Magic: ASCII text, with very long lines (18129) Size: 97851 Md5: 4fec3ce74963f648af9f827df1089657 Sha1: 5ddb11e55e0b03eb125c6ad836ad52d74789d4dd Sha256: 4b29570ccd4eb182097a77750e4594c53b889aa7c606ffa0da191ea0bcc82fea Alerts: urlquery: - Phishing - DHL - Phishing - DHL Blocklists: - fortinet: Phishing
GET /assets/dhl/lg.svg HTTP/1.1 Host: www.spectrumpharmatech.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.spectrumpharmatech.com/assets/dhl/home.php?ip=94.102.63.27&countryCode=&OS=Mac%20OS%20X Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.spectrumpharmatech.com/assets/dhl/lg.svg FQDN: www.spectrumpharmatech.com IP: 121.240.11.32 HASH: aeed178a287002e32c4a7767dc24b3c732a812cdd42017835055e42db4d2eae1 121.240.11.32 HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Wed, 04 Jan 2023 19:28:11 GMT Server: Apache Last-Modified: Mon, 12 Dec 2022 13:11:56 GMT Accept-Ranges: bytes Content-Length: 2040 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (2040), with no line terminators Size: 2040 Md5: d5a053f0005dd58489a461f599b5a508 Sha1: ba71dd77800ef3d410beb8282d790642bec8193b Sha256: aeed178a287002e32c4a7767dc24b3c732a812cdd42017835055e42db4d2eae1 Alerts: urlquery: - Phishing - DHL - Phishing - DHL Blocklists: - fortinet: Phishing
GET /assets/dhl/pubr.gif HTTP/1.1 Host: www.spectrumpharmatech.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.spectrumpharmatech.com/assets/dhl/home.php?ip=94.102.63.27&countryCode=&OS=Mac%20OS%20X Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.spectrumpharmatech.com/assets/dhl/pubr.gif FQDN: www.spectrumpharmatech.com IP: 121.240.11.32 HASH: 38d38e7a9e31f364cf1238ed6efcad478b3d71b56a8070c7aeda136e7a09dfa6 121.240.11.32 HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 04 Jan 2023 19:28:11 GMT Server: Apache Last-Modified: Mon, 12 Dec 2022 13:11:56 GMT Accept-Ranges: bytes Content-Length: 8344 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive --- Additional Info --- Magic: GIF image data, version 89a, 468 x 60\012- data Size: 8344 Md5: 8f1cbb67f49a41df278431ef173c6269 Sha1: d7147e8695b1c4abc80f08fefe36326b2de0cc15 Sha256: 38d38e7a9e31f364cf1238ed6efcad478b3d71b56a8070c7aeda136e7a09dfa6 Alerts: urlquery: - Phishing - DHL - Phishing - DHL
GET /assets/dhl/style.js HTTP/1.1 Host: www.spectrumpharmatech.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.spectrumpharmatech.com/assets/dhl/home.php?ip=94.102.63.27&countryCode=&OS=Mac%20OS%20X Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.spectrumpharmatech.com/assets/dhl/style.js FQDN: www.spectrumpharmatech.com IP: 121.240.11.32 HASH: c3b69b4ee8ef3e469b69b3b648adbb41675f3c0ee010ba846e4d7b7433c4085e 121.240.11.32 HTTP/1.1 200 OK Content-Type: application/javascript Date: Wed, 04 Jan 2023 19:28:10 GMT Server: Apache Last-Modified: Mon, 12 Dec 2022 13:11:56 GMT Accept-Ranges: bytes Content-Length: 97713 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive --- Additional Info --- Magic: ASCII text, with very long lines (32033) Size: 97713 Md5: 273e7bd62be482af7c0ae092f23c6136 Sha1: 197a65cf616f82393b4ff0600bb6e2b7a8f07aba Sha256: c3b69b4ee8ef3e469b69b3b648adbb41675f3c0ee010ba846e4d7b7433c4085e Alerts: urlquery: - Phishing - DHL - Phishing - DHL Blocklists: - fortinet: Phishing
GET /assets/dhl/favicon.ico HTTP/1.1 Host: www.spectrumpharmatech.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.spectrumpharmatech.com/assets/dhl/home.php?ip=94.102.63.27&countryCode=&OS=Mac%20OS%20X Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.spectrumpharmatech.com/assets/dhl/favicon.ico FQDN: www.spectrumpharmatech.com IP: 121.240.11.32 HASH: 9ada5709e264c31b04a05bd85448a9bd5e91925e8d83df5cef0762ec97cc283e 121.240.11.32 HTTP/1.1 200 OK Content-Type: image/x-icon Date: Wed, 04 Jan 2023 19:28:12 GMT Server: Apache Last-Modified: Mon, 12 Dec 2022 13:11:56 GMT Accept-Ranges: bytes Content-Length: 1150 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive --- Additional Info --- Magic: MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data Size: 1150 Md5: d8106bf3a1d00ab43b01e6e3c92500eb Sha1: 202b5e8654ab1b28351378293bca3b9d844cc29b Sha256: 9ada5709e264c31b04a05bd85448a9bd5e91925e8d83df5cef0762ec97cc283e Alerts: urlquery: - Phishing - DHL - Phishing - DHL
GET /assets/dhl/pub.jpg HTTP/1.1 Host: www.spectrumpharmatech.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.spectrumpharmatech.com/assets/dhl/home.php?ip=94.102.63.27&countryCode=&OS=Mac%20OS%20X Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: www.spectrumpharmatech.com/assets/dhl/pub.jpg FQDN: www.spectrumpharmatech.com IP: 121.240.11.32 HASH: fd6d79b881550d2aced201e506cbd7dfacafc19c16db81a655ad06f2835819c5 121.240.11.32 HTTP/1.1 200 OK Content-Type: image/jpeg Date: Wed, 04 Jan 2023 19:28:11 GMT Server: Apache Last-Modified: Mon, 12 Dec 2022 13:11:56 GMT Accept-Ranges: bytes Content-Length: 82133 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive --- Additional Info --- Magic: JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x150, components 3\012- data Size: 82133 Md5: 5000355f5ce08e172610325f3f5ac5bc Sha1: 381442803d0a67fa45def5d89d3ff49000e4a28d Sha256: fd6d79b881550d2aced201e506cbd7dfacafc19c16db81a655ad06f2835819c5 Alerts: urlquery: - Phishing - DHL - Phishing - DHL

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "96C2C75F700AB55649882111713CA3CFB2EAF08E404C2BC245A641DC12AE168A" 

                                        
                                            
Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=20688 

                                        
                                            
Expires: Thu, 05 Jan 2023 01:12:54 GMT 

                                        
                                            
Date: Wed, 04 Jan 2023 19:28:06 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    326898eb925368408f6f42ee173b9d89

                                                Sha1:   b8b20ee34b7e7b139e7729b8e46a54ea25f54ac8

                                                Sha256: 96c2c75f700ab55649882111713ca3cfb2eaf08e404c2bc245a641dc12ae168a

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "068D0DA23ACBE7F6B600C4E7DBE9C81D3AD78C8AFD122255BBF3550E8A290686" 

                                        
                                            
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2423 

                                        
                                            
Expires: Wed, 04 Jan 2023 20:08:29 GMT 

                                        
                                            
Date: Wed, 04 Jan 2023 19:28:06 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    da484f5e9c6805745e063b236fb81473

                                                Sha1:   ae454bf4a7ae0e96935afc81ee0f89c049097b15

                                                Sha256: 068d0da23acbe7f6b600c4e7dbe9c81d3ad78c8afd122255bbf3550e8a290686

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.160.144.191

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
x-amz-id-2: Fyy1ysBaVIcQ4wp01/G2L3Yrj7WsHOLoFjPMcrE4/3aMC5XCEmHKcZDEnI2O75DBpxUhtfVZ0CU= 

                                        
                                            
x-amz-request-id: MNTD8P6BVK9F84H3 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-length: 5348 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Wed, 04 Jan 2023 19:01:25 GMT 

                                        
                                            
age: 1601 

                                        
                                            
last-modified: Tue, 20 Dec 2022 14:47:58 GMT 

                                        
                                            
etag: "b1fcd419a4245617397846e8d17233f6" 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    b1fcd419a4245617397846e8d17233f6

                                                Sha1:   2a037ce244587640b27ead9a0ec2af4f862d91b2

                                                Sha256: e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         35.241.9.150

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 329 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Wed, 04 Jan 2023 19:08:11 GMT 

                                        
                                            
age: 1196 

                                        
                                            
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
etag: "1648230346554" 

                                        
                                            
cache-control: max-age=3600,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: 7q0wvT52TCLilARoVkcPKQ== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         35.160.45.85

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: 9cN5Jshq+eU4A3ktLY/He0iqgAM= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA" 

                                        
                                            
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=9474 

                                        
                                            
Expires: Wed, 04 Jan 2023 22:06:02 GMT 

                                        
                                            
Date: Wed, 04 Jan 2023 19:28:08 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    872ad13c3966689cbd481bebca0b21f8

                                                Sha1:   2a052c414b68b9e71b00fa3903995e8bdd22a81c

                                                Sha256: bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA" 

                                        
                                            
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=9474 

                                        
                                            
Expires: Wed, 04 Jan 2023 22:06:02 GMT 

                                        
                                            
Date: Wed, 04 Jan 2023 19:28:08 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    872ad13c3966689cbd481bebca0b21f8

                                                Sha1:   2a052c414b68b9e71b00fa3903995e8bdd22a81c

                                                Sha256: bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ff2360c-5204-4d20-b397-821a4c4421e7.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 11877 

                                        
                                            
x-amzn-requestid: 884b9243-6a8a-4434-9b2a-e5eff84d4e99 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: eL33bFnDoAMFpoQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63b4a02f-3f7043ae29d21e010ddc1ff9;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 03 Jan 2023 21:37:51 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: WcUVY1LHWCEWWyJZEhS8M5tlXhx5WDnIr9RmxLMvqIilnREfwORJew== 

                                        
                                            
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 03 Jan 2023 22:12:53 GMT 

                                        
                                            
age: 76515 

                                        
                                            
etag: "ac965c8642c4d1e47713965060fa2fc8f19088b1" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   11877

                                                Md5:    359f30e64bec00d0a01acd69a08b684d

                                                Sha1:   ac965c8642c4d1e47713965060fa2fc8f19088b1

                                                Sha256: fff1b001462468cc953092a2312650c03f307e95c40e2c6bb7356e2a8b9b0283

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03ececd-3935-4a1b-ae41-45a5aea9ebe3.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 5018 

                                        
                                            
x-amzn-requestid: 7a68cfb1-dedd-4f08-8d99-4678c1087422 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: eL3HtFHkoAMFwYQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63b49efd-7880e5f93c99cc794f9a03bb;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 03 Jan 2023 21:32:45 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: MvV5dXthUr0Qo499_5eG6Z_yW0gmflen3kRBrse7ngQjUgOVA0OMvg== 

                                        
                                            
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 03 Jan 2023 21:50:49 GMT 

                                        
                                            
age: 77839 

                                        
                                            
etag: "96df0d8c10c666811cfeb98187ca93e65480c2ff" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   5018

                                                Md5:    af78916e285d0f6c5c5a5ff33894e108

                                                Sha1:   96df0d8c10c666811cfeb98187ca93e65480c2ff

                                                Sha256: 7bcb20dc641e46d033dee76b3d92b701b31aecfbf88241a5a95dfdc1c5e95885

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA" 

                                        
                                            
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=9474 

                                        
                                            
Expires: Wed, 04 Jan 2023 22:06:02 GMT 

                                        
                                            
Date: Wed, 04 Jan 2023 19:28:08 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    872ad13c3966689cbd481bebca0b21f8

                                                Sha1:   2a052c414b68b9e71b00fa3903995e8bdd22a81c

                                                Sha256: bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa

                                        
                                            GET /assets/dhl/home.php?ip=94.102.63.27&countryCode=&OS=Mac%20OS%20X HTTP/1.1 

                                        
                                            
Host: www.spectrumpharmatech.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: none 

                                        
                                            
Sec-Fetch-User: ?1

                                         121.240.11.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Date: Wed, 04 Jan 2023 19:28:08 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Keep-Alive: timeout=5, max=100 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators

                                                Size:   5196

                                                Md5:    92878204bd766028118dd43ab1b88328

                                                Sha1:   1c09d76a64307c5277eea89f45a797a98a6d44ce

                                                Sha256: bbb640bb1d2b1815e612675d861cbaff8f9904c3169233643b2ccbdf292fbf17

URL	www.spectrumpharmatech.com/assets/dhl/home.php?ip=94.102.63.27&countryCode=&OS=Mac%20OS%20X
IP	121.240.11.32 (India)
ASN	#4755 TATA Communications formerly VSNL is Leading ISP
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2023-01-04 19:28:17 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	4
urlquery alerts	21 Phishing - DHL
Tags	dhl logistics phishing

Overview

Domain Summary (10)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 121.240.11.32

Last 5 reports on ASN: TATA Communications formerly VSNL is Leading ISP

Last 5 reports on domain: spectrumpharmatech.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (6)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (32)

Overview

Domain Summary (10)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 121.240.11.32

Last 5 reports on ASN: TATA Communications formerly VSNL is Leading ISP

Last 5 reports on domain: spectrumpharmatech.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (6)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (32)

Network Intrusion Detection Systems