r20.rs6.net/tn.jsp?f=001vmeGwuYuhdeaKOsIQK3OvkpL5524d-BRDNf9hUDZbu2w97HE5zuA7iX1C-o1oLveQDwWYRVHqVbKa8vQ4FzxAF5a3EEcnXq5SoBLpEgvgtEmuzoi8my4X-bPGe7uvpoa2I0eojj5mZ0XkS1BNvfop7bgHgpNFznB&c=S9yfuO76AYxLFNDOGEUllys8ugcXmbp24YxrhMoPIes17CeSa1yJYQ===&__=/qwer/a2hhbWlsdG9uQGdwYWxhYi5jb20=
208.75.122.11 0 B URL r20.rs6.net/tn.jsp?f=001vmeGwuYuhdeaKOsIQK3OvkpL5524d-BRDNf9hUDZbu2w97HE5zuA7iX1C-o1oLveQDwWYRVHqVbKa8vQ4FzxAF5a3EEcnXq5SoBLpEgvgtEmuzoi8my4X-bPGe7uvpoa2I0eojj5mZ0XkS1BNvfop7bgHgpNFznB&c=S9yfuO76AYxLFNDOGEUllys8ugcXmbp24YxrhMoPIes17CeSa1yJYQ===&__=/qwer/a2hhbWlsdG9uQGdwYWxhYi5jb20=
IP 208.75.122.11:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tn.jsp?f=001vmeGwuYuhdeaKOsIQK3OvkpL5524d-BRDNf9hUDZbu2w97HE5zuA7iX1C-o1oLveQDwWYRVHqVbKa8vQ4FzxAF5a3EEcnXq5SoBLpEgvgtEmuzoi8my4X-bPGe7uvpoa2I0eojj5mZ0XkS1BNvfop7bgHgpNFznB&c=S9yfuO76AYxLFNDOGEUllys8ugcXmbp24YxrhMoPIes17CeSa1yJYQ===&__=/qwer/a2hhbWlsdG9uQGdwYWxhYi5jb20= HTTP/1.1
Host: r20.rs6.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sun, 10 Dec 2023 08:58:38 GMT
Server: Apache
P3P: CP="CAO DSP TAIa OUR NOR UNI"
Location: https://mulayamsingh.com/sil/Elay//qwer/a2hhbWlsdG9uQGdwYWxhYi5jb20=
Content-Length: 0
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate, no-cache="Set-Cookie"
Pragma: no-cache
Connection: close
Content-Type: text/html;charset=ISO-8859-1
mulayamsingh.com/sil/Elay//qwer/a2hhbWlsdG9uQGdwYWxhYi5jb20=
103.109.180.41 0 B URL mulayamsingh.com/sil/Elay//qwer/a2hhbWlsdG9uQGdwYWxhYi5jb20=
IP 103.109.180.41:0
ASN #137134 Triple Play Broadband Services India Pvt Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sil/Elay//qwer/a2hhbWlsdG9uQGdwYWxhYi5jb20= HTTP/1.1
Host: mulayamsingh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
refresh: 0;url=https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/12345.html?email=khamilton@gpalab.com
content-type: text/html; charset=UTF-8
content-length: 0
date: Sun, 10 Dec 2023 08:58:39 GMT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/12345.html?email=khamilton@gpalab.com
104.18.3.35200 OK 5.9 kB URL User Request GET HTTP/1.1 pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/12345.html?email=khamilton@gpalab.com
IP 104.18.3.35:443
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint4F:76:7B:87:A0:AD:97:E8:F7:6F:90:89:C3:5D:51:AC:FD:EA:F4:F9
ValiditySat, 09 Dec 2023 16:41:44 GMT - Fri, 08 Mar 2024 16:41:43 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (19152), with CRLF line terminators
Hash 277f60521d669b758833c48afa3aa97a
309925911377d7ff777e9e8456ae0b1142f71162
6d8e644faa2d78f9185afd8417e6893e1859e9992e935fb3186b529f5e363716
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
urlquery phishing Phishing - Microsoft Outlook
GET /12345.html?email=khamilton@gpalab.com HTTP/1.1
Host: pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 10 Dec 2023 08:58:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"277f60521d669b758833c48afa3aa97a"
Last-Modified: Sun, 10 Dec 2023 01:34:06 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8334498cf8c65691-OSL
Content-Encoding: gzip
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.0/jquery.min.js
104.17.24.14200 OK 28 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.0/jquery.min.js
IP 104.17.24.14:443
Requested by https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/12345.html?email=khamilton@gpalab.com
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash 12108007906290015100837a6a61e9f4
1d6ae46f2ffa213dede37a521b011ec1cd8d1ad3
c4dccdd9ae25b64078e0c73f273de94f8894d5c99e4741645ece29aeefc9c5a4
GET /ajax/libs/jquery/3.5.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 08:58:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 27964
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15d95"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1399554
expires: Fri, 29 Nov 2024 08:58:39 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cVuZ5ZxlPbCvV5UxHLYsdm06qPd%2FvXygiRbA9Mj%2Bqu%2BwUTnxfp4EWkUmT%2F5OGNe272R5z6MxTLhnnuDBadY4eJQHwixX2u%2BlGv%2BWrxzu%2BG2wIUwl50QlKgI4hiitpyRpaEsNEA%2Fu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8334498ed9a5b51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn-jm-tools.web.app/d..p/others/mi..cro---t/Converged_v21033_U7M7Fc-d_yiO2hIJng7nRg2.css
199.36.158.100200 OK 19 kB URL GET HTTP/2 cdn-jm-tools.web.app/d..p/others/mi..cro---t/Converged_v21033_U7M7Fc-d_yiO2hIJng7nRg2.css
IP 199.36.158.100:443
Requested by https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/12345.html?email=khamilton@gpalab.com
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3
ValidityMon, 13 Nov 2023 20:32:12 GMT - Sun, 11 Feb 2024 20:32:11 GMT
File type ASCII text, with very long lines (61112)
Hash 53b33b15cf9dff288eda12099e0ee746
1748b7bd3b89b84d800374083af646fec11ff082
30c90ea15ddeec7d675ed3eaaf26e8283b908265c5a6a5ff00345d03c24233f0
GET /d..p/others/mi..cro---t/Converged_v21033_U7M7Fc-d_yiO2hIJng7nRg2.css HTTP/1.1
Host: cdn-jm-tools.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: text/css; charset=utf-8
etag: "180ed6b42ce49176e493ebf3f2145e670be96178b9e2f60001e81532e32268cb"
last-modified: Sat, 25 Apr 2020 21:22:54 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 10 Dec 2023 08:58:39 GMT
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 4
x-timer: S1702198720.823057,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 18705
X-Firefox-Spdy: h2
cdn-jm-tools.web.app/d..p/others/mi..cro---t/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
199.36.158.100200 OK 1.3 kB URL GET HTTP/2 cdn-jm-tools.web.app/d..p/others/mi..cro---t/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
IP 199.36.158.100:443
Requested by https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/12345.html?email=khamilton@gpalab.com
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3
ValidityMon, 13 Nov 2023 20:32:12 GMT - Sun, 11 Feb 2024 20:32:11 GMT
File type SVG Scalable Vector Graphics image
- HTML document, ASCII text, with very long lines (3651), with no line terminators
Hash ee5c8d9fb6248c938fd0dc19370e90bd
d01a22720918b781338b5bbf9202b241a5f99ee4
04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a
GET /d..p/others/mi..cro---t/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1
Host: cdn-jm-tools.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: "2084deafc36fbaca40a6352319b3c1edb1262245428033547de6b82e0c2dcfe8-br"
last-modified: Sat, 25 Apr 2020 21:22:54 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 10 Dec 2023 08:58:39 GMT
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 6
x-timer: S1702198720.823314,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1274
X-Firefox-Spdy: h2
cdn-jm-tools.web.app/d..p/others/mi..cro---t/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg
199.36.158.100200 OK 230 B URL GET HTTP/2 cdn-jm-tools.web.app/d..p/others/mi..cro---t/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg
IP 199.36.158.100:443
Requested by https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/12345.html?email=khamilton@gpalab.com
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3
ValidityMon, 13 Nov 2023 20:32:12 GMT - Sun, 11 Feb 2024 20:32:11 GMT
File type SVG Scalable Vector Graphics image
- HTML document, ASCII text, with very long lines (915), with no line terminators
Hash 2b5d393db04a5e6e1f739cb266e65b4c
6a435df5cac3d58ccad655fe022ccf3dd4b9b721
16c3f6531d0fa5b4d16e82abf066233b2a9f284c068c663699313c09f5e8d6e6
GET /d..p/others/mi..cro---t/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg HTTP/1.1
Host: cdn-jm-tools.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: "cf034e803491c0dbb1074332cd18fac418b94b0a139a7ddbf92ec40574951a8a-br"
last-modified: Sat, 25 Apr 2020 21:22:54 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 10 Dec 2023 08:58:39 GMT
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 6
x-timer: S1702198720.823353,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 230
X-Firefox-Spdy: h2
cdn-jm-tools.web.app/d..p/others/mi..cro---t/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png
199.36.158.100200 OK 240 B URL GET HTTP/2 cdn-jm-tools.web.app/d..p/others/mi..cro---t/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png
IP 199.36.158.100:443
Requested by https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/12345.html?email=khamilton@gpalab.com
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3
ValidityMon, 13 Nov 2023 20:32:12 GMT - Sun, 11 Feb 2024 20:32:11 GMT
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
- data
Hash 7cc096da6aa2dba3f81fcc1c8262157c
a50776316f0220ed7cd7882a68c742a8861c999d
ab50358475adae73a435466c72d1a48ab124e8ae06614663716a46dce5ac8b83
GET /d..p/others/mi..cro---t/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png HTTP/1.1
Host: cdn-jm-tools.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "a512441fed43fc63c5a2bbce213d4081532632f57c75eb60cb7dd0e4a1126b38"
last-modified: Sat, 25 Apr 2020 21:22:54 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 10 Dec 2023 08:58:39 GMT
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 6
x-timer: S1702198720.824979,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 240
X-Firefox-Spdy: h2
aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
13.107.246.53200 OK 673 B URL GET HTTP/2 aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
IP 13.107.246.53:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/12345.html?email=khamilton@gpalab.com
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C
ValiditySun, 29 Oct 2023 00:00:00 GMT - Tue, 29 Oct 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (1864), with no line terminators
Hash bc3d32a696895f78c19df6c717586a5d
9191cb156a30a3ed79c44c0a16c95159e8ff689d
0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68
GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 673
content-type: image/svg+xml
content-encoding: gzip
content-md5: DhdidjYrlCeaRJJRG/y9mA==
last-modified: Wed, 12 Feb 2020 22:01:30 GMT
etag: 0x8D7B0071D86E386
x-cache: TCP_HIT
x-ms-request-id: 02072373-801e-009f-1de3-28591b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 05JNxZQAAAAAYaqh6H5tfTby+pPRUcMU7QU1TMDRFREdFMTgxNQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0wH11ZQAAAACiQExmF1mARrIIbv8zvN6KU1ZHMjBFREdFMDUxMQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Sun, 10 Dec 2023 08:58:40 GMT
X-Firefox-Spdy: h2
pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/*https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg*/
104.18.3.35404 Not Found 6.5 kB URL GET HTTP/1.1 pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/*https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg*/
IP 104.18.3.35:443
Requested by https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/12345.html?email=khamilton@gpalab.com
Certificate IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint4F:76:7B:87:A0:AD:97:E8:F7:6F:90:89:C3:5D:51:AC:FD:EA:F4:F9
ValiditySat, 09 Dec 2023 16:41:44 GMT - Fri, 08 Mar 2024 16:41:43 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (611)
Hash df3d48946e8d3f5a83608308edbb4b86
47b9c40c97abf2658df96b1c06109324e15e1a00
570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /*https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg*/ HTTP/1.1
Host: pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/12345.html?email=khamilton@gpalab.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sun, 10 Dec 2023 08:58:40 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 833449904b7e5691-OSL
Content-Encoding: gzip
cdn-jm-tools.web.app/d..p/others/mi..cro---t/favicon.ico
199.36.158.100 421 B URL GET cdn-jm-tools.web.app/d..p/others/mi..cro---t/favicon.ico
IP 199.36.158.100:0
Requested by https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/12345.html?email=khamilton@gpalab.com
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3
ValidityMon, 13 Nov 2023 20:32:12 GMT - Sun, 11 Feb 2024 20:32:11 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
- data
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /d..p/others/mi..cro---t/favicon.ico HTTP/1.1
Host: cdn-jm-tools.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-bb0c42312d2c4097ad42431aaf00906c.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 421
cache-control: max-age=3600
content-encoding: br
content-type: image/x-icon
etag: "928026765089cd2a4183510ed4f8be0259cd85b776338ee2c337cacc18bdf016-br"
last-modified: Sat, 25 Apr 2020 21:22:54 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sun, 10 Dec 2023 08:58:40 GMT
x-served-by: cache-bma1672-BMA
x-cache: HIT
x-cache-hits: 5
x-timer: S1702198720.228758,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
35.244.181.201 444 B URL aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
IP 35.244.181.201:0
File type XML 1.0 document text
- XML document, ASCII text, with very long lines (332)
Hash 3b324dec137a87ef7e24a30a65b13dd0
c0faa95b2f1018e264b3a14aaf50d1003e6c27b3
6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-01-19-16-42-22.chain; p384ecdsa=kMCK8vkv3ntbh5AKLWc5je7suMtvE4VTPYwSPfxTmaTSz5d0V6htiwrYFDE9JrfT1BmsQNS5aIP6i4766BclzZ1y7GegfnKZ97awCvEW-zGxNobvymFSR2LH31DLwBXC
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
content-length: 444
date: Sun, 10 Dec 2023 08:57:09 GMT
age: 108
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
2.22.61.59 512 kB URL ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
IP 2.22.61.59:0
ASN #20940 Akamai International B.V.
File type Zip archive data, at least v2.0 to extract, compression method=deflate
- data
Size 512 kB (511815 bytes)
Hash 152eda253e242e18443ef3282495bc7c
ff0fa85565f21ec4931baad4573b4c0bd08c4019
8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48
GET /openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Last-Modified: Thu, 16 Nov 2023 07:38:15 GMT
ETag: 152eda253e242e18443ef3282495bc7c
Content-Length: 511815
Accept-Ranges: bytes
X-Timestamp: 1700120294.87662
Content-Type: application/zip
X-Trans-Id: tx35e1afa589ba4bd9a93ea-006556c567dfw1
Cache-Control: public, max-age=136686
Expires: Mon, 11 Dec 2023 22:57:03 GMT
Date: Sun, 10 Dec 2023 08:58:57 GMT
Connection: keep-alive