Overview

URLlepititchi.temp.swtest.ru/x/Iogin/home/particulares
IP 77.222.40.224 (Russia)
ASN#44112 SpaceWeb Ltd
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-25 12:16:57 UTC
StatusLoading report..
IDS alerts0
Blocklist alert12
urlquery alerts
16
Phishing - Santander
Phishing - Santander
Tags None

Domain Summary (8)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
r3.o.lencr.org (7) 344 No data No data 23.36.76.226
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-25 06:03:02 UTC 34.102.187.140
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-25 05:51:47 UTC 34.117.237.239
lepititchi.temp.swtest.ru (18) 0 No data No data 77.222.40.224 Domain (swtest.ru) ranked at: 439130
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 34.215.56.181
img-getpocket.cdn.mozilla.net (7) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-25 2 lepititchi.temp.swtest.ru/x/Iogin/home/particulares Phishing
2022-11-25 2 lepititchi.temp.swtest.ru/x/Iogin/home/style/js/jquery.validate.min.js Phishing
2022-11-25 2 lepititchi.temp.swtest.ru/x/Iogin/home/style/js/jquery.mask.js Phishing
2022-11-25 2 lepititchi.temp.swtest.ru/x/Iogin/home/style/js/angular.min.js Phishing
2022-11-25 2 lepititchi.temp.swtest.ru/x/Iogin/home/style/js/jquery.min.js Phishing
2022-11-25 2 lepititchi.temp.swtest.ru/x/Iogin/home/style//Lato-Regular.woff Phishing
2022-11-25 2 lepititchi.temp.swtest.ru/x/Iogin/home/style//ico3.ttf Phishing
2022-11-25 2 lepititchi.temp.swtest.ru/x/Iogin/home/style//Lato-Semibold.woff Phishing
2022-11-25 2 lepititchi.temp.swtest.ru/x/Iogin/home/style//Lato-Bold.woff Phishing
2022-11-25 2 lepititchi.temp.swtest.ru/x/Iogin/home/style//Lato-Light.woff Phishing
2022-11-25 2 lepititchi.temp.swtest.ru/x/Iogin/home/style//fonts/sec/text-security-disc.woff Phishing
2022-11-25 2 lepititchi.temp.swtest.ru/x/Iogin/home/style//text-security-disc.ttf Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 77.222.40.224
Date UQ / IDS / BL URL IP
2023-02-01 03:03:48 +0000 0 - 2 - 1 karsondel2.temp.swtest.ru/ 77.222.40.224
2023-01-29 01:36:06 +0000 0 - 2 - 1 retrynetfi.temp.swtest.ru/mlz/net/login.php 77.222.40.224
2023-01-28 19:47:54 +0000 0 - 2 - 1 austagovya.temp.swtest.ru/Mygovaustraliapro/a (...) 77.222.40.224
2023-01-28 16:37:33 +0000 0 - 2 - 1 augovtax2.temp.swtest.ru/baya/app/smserror.php 77.222.40.224
2023-01-28 15:06:43 +0000 0 - 2 - 1 austagovya.temp.swtest.ru/Mygovaustraliapro/a (...) 77.222.40.224


Last 5 reports on ASN: SpaceWeb Ltd
Date UQ / IDS / BL URL IP
2023-02-01 13:12:27 +0000 0 - 2 - 23 aablue.temp.swtest.ru/index1.php 77.222.40.105
2023-02-01 13:11:54 +0000 0 - 2 - 15 aablue.temp.swtest.ru/ 77.222.40.105
2023-02-01 12:46:17 +0000 0 - 2 - 2 benhaimyoh.temp.swtest.ru/microsoflauthentifi (...) 77.222.40.105
2023-02-01 10:25:36 +0000 0 - 2 - 23 aablue.temp.swtest.ru/index1.php 77.222.40.105
2023-02-01 10:25:17 +0000 0 - 2 - 17 aablue.temp.swtest.ru/ 77.222.40.105


Last 5 reports on domain: swtest.ru
Date UQ / IDS / BL URL IP
2023-02-01 13:12:27 +0000 0 - 2 - 23 aablue.temp.swtest.ru/index1.php 77.222.40.105
2023-02-01 13:11:54 +0000 0 - 2 - 15 aablue.temp.swtest.ru/ 77.222.40.105
2023-02-01 12:46:17 +0000 0 - 2 - 2 benhaimyoh.temp.swtest.ru/microsoflauthentifi (...) 77.222.40.105
2023-02-01 10:25:36 +0000 0 - 2 - 23 aablue.temp.swtest.ru/index1.php 77.222.40.105
2023-02-01 10:25:17 +0000 0 - 2 - 17 aablue.temp.swtest.ru/ 77.222.40.105


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-27 02:33:44 +0000 37 - 0 - 19 actualizar-seguridadonline.builderallwppro.co (...) 65.111.167.62
2023-01-26 09:44:06 +0000 37 - 0 - 19 actualizar-seguridadonline.builderallwppro.co (...) 65.111.167.62
2023-01-04 16:14:31 +0000 25 - 0 - 0 demo3.cloudwp.dev/trial-2v33u6t3/santanew/ 151.139.128.10
2023-01-04 16:13:15 +0000 23 - 0 - 0 demo3.cloudwp.dev/trial-2v33u6t3/santanew 151.139.128.10
2023-01-04 14:25:12 +0000 17 - 0 - 0 demo3.cloudwp.dev/trial-2v33u6t3/santanew 151.139.128.10

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (39)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3607
Expires: Fri, 25 Nov 2022 13:16:52 GMT
Date: Fri, 25 Nov 2022 12:16:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4445
Cache-Control: max-age=170914
Date: Fri, 25 Nov 2022 12:16:45 GMT
Etag: "63809972-1d7"
Expires: Sun, 27 Nov 2022 11:45:19 GMT
Last-Modified: Fri, 25 Nov 2022 10:31:14 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5465
Expires: Fri, 25 Nov 2022 13:47:50 GMT
Date: Fri, 25 Nov 2022 12:16:45 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 11:17:26 GMT
cache-control: public,max-age=3600
age: 3559
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    d130218d0e2841f39c99610fe1a2ab90
Sha1:   29fbe1e177ee55c7a61ae0a206afff271cf5f945
Sha256: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: FkcDNhjmGBvklbBVO2Y2ud2rcEpDZ6jTBPh8pXYwtRQqiU/W/L+h3mtXATVSW+TmS/QF89hhpRQ=
x-amz-request-id: BYA5KP3P05QNJWQ7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 11:40:47 GMT
age: 2158
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 25 Nov 2022 12:16:45 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 12:11:11 GMT
cache-control: public,max-age=3600
age: 335
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3522
Cache-Control: 'max-age=158059'
Date: Fri, 25 Nov 2022 12:16:46 GMT
Last-Modified: Fri, 25 Nov 2022 11:18:04 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /x/Iogin/home/particulares HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         77.222.40.224
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding
X-Powered-By: PHP/7.1.33
Set-Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1619), with CRLF line terminators
Size:   3610
Md5:    5d31f3bc9be067b6bf98cdd2263ac930
Sha1:   ba20efc6685f9cc223e46b0750b5336e78e16019
Sha256: fd21b3e7ce504c4b0ed951f8ac89eeb807c3c1ef618973fa87c8a42c15115abb

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /x/Iogin/home/style/js/jquery.validate.min.js HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/particulares
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding
Last-Modified: Sun, 30 Dec 2018 04:19:14 GMT
ETag: W/"6a15e-c3f1-57e35994ed480"
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (511), with CRLF line terminators
Size:   13073
Md5:    64fde4a4b9b5eba8239738bc37601e2f
Sha1:   8258ade456c276fb2fb663069658a2c73311715a
Sha256: c1d5adfa5b5e5b3b5879f51733c1676e6dd02d5a72035be34e82fb2b65a33c56

Alerts:
  urlquery:
    - Phishing - Santander
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /x/Iogin/home/style/js/jquery.mask.js HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/particulares
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding
Last-Modified: Sun, 31 Jan 2016 16:57:28 GMT
ETag: W/"6a15c-47fe-52aa429cf2e00"
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   4948
Md5:    72561daefcabe07fcd6e4a000ce2b1f9
Sha1:   29f4b8a00c67c6d29e8beb9cbe1fcc040bfc4bf5
Sha256: 3a19e4fd29ca6cd5ba35dd0f38915107a432a326280051d32ca2b16af7d668b7

Alerts:
  urlquery:
    - Phishing - Santander
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /x/Iogin/home/style//main.a5beaad1.css HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/particulares
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding
Last-Modified: Thu, 23 May 2019 18:37:04 GMT
ETag: W/"6a185-4e9fe-589925e4eb400"
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (65433), with CRLF line terminators
Size:   45087
Md5:    758ada00a6033a05546ee3c6228c7336
Sha1:   682d2178e156e8004c9cf943d65c9e93c8e7b960
Sha256: 24d2fc2483174965023f218905e3978cd236fa5cbbb401c1f69577832b757a2d

Alerts:
  urlquery:
    - Phishing - Santander
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 75GIcbUpmh501nSQUkJlbA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.215.56.181
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ccSQIlBncZ2AxHa4DVFQsFtyhLQ=

                                        
                                            GET /x/Iogin/home/style/js/angular.min.js HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/particulares
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding
Last-Modified: Mon, 20 Nov 2017 07:55:28 GMT
ETag: W/"6a159-28cdb-55e6568e37c00"
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (566)
Size:   58485
Md5:    7fea74563a0d2d9bb508a51c6e322b22
Sha1:   0a62a90f9a99d185e1bce49dabea132e0edb468a
Sha256: 8e65040e11a39214c1bb095831fc24b0e6799a732627f7d682c48442eeff2bfd

Alerts:
  urlquery:
    - Phishing - Santander
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /x/Iogin/home/style/js/jquery.min.js HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/particulares
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding
Last-Modified: Mon, 04 Dec 2017 08:11:38 GMT
ETag: W/"6a15d-478d0-55f7f447bc280"
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   85169
Md5:    cbe915655aaea508a1759d6e2d82058d
Sha1:   b91919490a633b42a632f21937ead78ee85e9cdd
Sha256: 738e409abbe6f20cfadb90cfd4a6046e0ec63b11e38c65408f855fd229ae7d91

Alerts:
  urlquery:
    - Phishing - Santander
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /x/Iogin/home/images/smarbannerimg.png HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/particulares
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding, accept-language,accept-charset
Content-Language: en
Content-Encoding: gzip


--- Additional Info ---
Magic:  XML 1.0 document text\012- XHTML document text (version 1.0)\012- broken XHTML document text (version 1.0)\012- HTML document text\012- XML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size:   722
Md5:    e301cb094cb357fdf7eb4120c562bf7d
Sha1:   a25e7d8bdb447a30ef497698be67ea8a8a360c47
Sha256: fcbbd098a8c881f9dabc75b525e11485e25677a17a53996e129d5bce11c1d886
                                        
                                            GET /x/Iogin/home/style//Lato-Regular.woff HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/style//main.a5beaad1.css
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:47 GMT
Content-Length: 37736
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding
Last-Modified: Thu, 23 May 2019 15:50:02 GMT
ETag: "6a176-9368-5899008f31e80"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 37736, version 1.104\012- data
Size:   37736
Md5:    d2f6258a060710d74acc296e3f35c8ed
Sha1:   90a652ec6db1ece6e27febd8133e33034972433e
Sha256: 34a85643617aca507bef2c232955d2b27a131b39dd8cff33d567148024e7b460

Alerts:
  urlquery:
    - Phishing - Santander
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /x/Iogin/home/style//ico3.ttf HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/style//main.a5beaad1.css
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 200 OK
Content-Type: application/x-font-ttf
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding
Last-Modified: Thu, 23 May 2019 15:56:58 GMT
ETag: W/"6a153-a560-5899021bec680"
Content-Encoding: gzip


--- Additional Info ---
Magic:  TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, ico \012- data
Size:   24840
Md5:    e65b707690146175b7b0e7b1ef3117ee
Sha1:   9699cd33f9637844c6c612fa957370051e1d8644
Sha256: d8404cd2bf9816886085e440f383f3407af944d6e5ff9d9521aafed91a7b69b5

Alerts:
  urlquery:
    - Phishing - Santander
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /x/Iogin/home/style//ico.ttf?xshdhgx HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/style//main.a5beaad1.css
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 200 OK
Content-Type: application/x-font-ttf
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding
Last-Modified: Thu, 23 May 2019 15:56:12 GMT
ETag: W/"6a14d-6dd0-589901f00df00"
Content-Encoding: gzip


--- Additional Info ---
Magic:  TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, ico \012- data
Size:   15870
Md5:    191efbca00ebc8ed349eba702ec03ac8
Sha1:   b83c842cfa232bc9af697ca9e4d6f7281813705f
Sha256: 6cee06c8a1c3f2e65233970a0e4cddcd75520bc335118aa532ce350f89906eef

Alerts:
  urlquery:
    - Phishing - Santander
                                        
                                            GET /x/Iogin/home/style//Lato-Semibold.woff HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/style//main.a5beaad1.css
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:47 GMT
Content-Length: 38544
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding
Last-Modified: Thu, 23 May 2019 15:52:10 GMT
ETag: "6a17e-9690-5899010943e80"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 38544, version 1.0\012- data
Size:   38544
Md5:    c3104059bd79a9410db2f79745c94655
Sha1:   3583429b4941b391f6d7c63cf3684e0151ee1d67
Sha256: 15f0dbfdc7e0142e35e0cfad279b9162494ebe5d2d2f0dcd19b079c4e4a48682

Alerts:
  urlquery:
    - Phishing - Santander
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /x/Iogin/home/style/spring_afternoon_p.jpg HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/particulares
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:47 GMT
Content-Length: 380355
Connection: keep-alive
Keep-Alive: timeout=10
Last-Modified: Wed, 01 Jul 2020 11:50:00 GMT
ETag: "6a18d-5cdc3-5a95fe440ea00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1366x768, components 3\012- data
Size:   380355
Md5:    f55929eb9427788868eefbcd37387a52
Sha1:   844ab6a5ae53c87df651d660b7d8da5b39df0438
Sha256: 1b52e8efb42bc0849b0f75fb64eea8c25035d624a4bd507db661b41ba89bd552

Alerts:
  urlquery:
    - Phishing - Santander
                                        
                                            GET /x/Iogin/home/style//Lato-Bold.woff HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/style//main.a5beaad1.css
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:47 GMT
Content-Length: 36920
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding
Last-Modified: Thu, 23 May 2019 15:51:10 GMT
ETag: "6a167-9038-589900d00b780"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 36920, version 1.104\012- data
Size:   36920
Md5:    1530e091a2105ca3eb3717a9a1b847fc
Sha1:   75593b0ed1339b112ff00406634ba088c12ef9f6
Sha256: 8194873b3cd30305dda0b8b5e8db89e48a977f086b7f22781f2e53e34fe362e5

Alerts:
  urlquery:
    - Phishing - Santander
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /x/Iogin/home/style//Lato-Light.woff HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/style//main.a5beaad1.css
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:47 GMT
Content-Length: 35748
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding
Last-Modified: Thu, 23 May 2019 15:54:58 GMT
ETag: "6a16e-8ba4-589901a97b880"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 35748, version 1.104\012- data
Size:   35748
Md5:    e437981e51163218eb11fd1c46be6538
Sha1:   445c68fa9509a66d555358520a4751f0850d70a0
Sha256: 47378272154e50107f0f3ffa755ca6fcd1495fdc931e922f880d7240f998029c

Alerts:
  urlquery:
    - Phishing - Santander
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /x/Iogin/home/style//fonts/sec/text-security-disc.woff HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/style//main.a5beaad1.css
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding, accept-language,accept-charset
Accept-Ranges: bytes
Content-Language: en


--- Additional Info ---
Magic:  XML 1.0 document text\012- XHTML document text (version 1.0)\012- broken XHTML document text (version 1.0)\012- HTML document text\012- XML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size:   1282
Md5:    4aa80bd8ddce9fd7cb7e52560db5a6c0
Sha1:   788bb5495d8889728397ad3bfe75a8fc149bbcb3
Sha256: 2bbe5fe31da5b15899e31402bfb915424dbbdae27a8e991daf90d543f25f653f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /x/Iogin/home/style/favicon-16x16.png HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/particulares
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:47 GMT
Content-Length: 1273
Connection: keep-alive
Keep-Alive: timeout=10
Last-Modified: Thu, 23 May 2019 15:25:40 GMT
ETag: "6a148-4f9-5898fb1cec500"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size:   1273
Md5:    b9c59e4aa4bbd9fb374bd793577dcf9a
Sha1:   0388640dc02244042916462ad4e246bdfda6cc87
Sha256: 34c7ee1e476afa92bad62ab3bb04d1771d7f9e9af627635970283473f89a6208

Alerts:
  urlquery:
    - Phishing - Santander
                                        
                                            GET /x/Iogin/home/style//text-security-disc.ttf HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/style//main.a5beaad1.css
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 200 OK
Content-Type: application/x-font-ttf
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding
Last-Modified: Thu, 23 May 2019 15:47:26 GMT
ETag: W/"6a195-3068-5898fffa6bf80"
Content-Encoding: gzip


--- Additional Info ---
Magic:  TrueType Font data, 11 tables, 1st "GSUB", 16 names, Macintosh, type 1 string, text-security-discRegulartext-security-disctext-security-discVersion 1.0text-security-discGenera\012- data
Size:   2830
Md5:    0450a6b131116a1d62b06b795ecce35f
Sha1:   14e8787c77b83561be5447688aad57c05d6d5957
Sha256: 9d681f5c28dd3df021245633bbce1d29b69b59b174dbbe0796888064bfe76668

Alerts:
  urlquery:
    - Phishing - Santander
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /x/Iogin/home/style/android-icon-192x192.png HTTP/1.1 
Host: lepititchi.temp.swtest.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lepititchi.temp.swtest.ru/x/Iogin/home/particulares
Cookie: PHPSESSID=9c893ddecc1c4ff371d396772143d147

search
                                         77.222.40.224
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx/1.19.1
Date: Fri, 25 Nov 2022 12:16:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding, accept-language,accept-charset
Content-Language: en
Content-Encoding: gzip


--- Additional Info ---
Magic:  XML 1.0 document text\012- XHTML document text (version 1.0)\012- broken XHTML document text (version 1.0)\012- HTML document text\012- XML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size:   722
Md5:    e301cb094cb357fdf7eb4120c562bf7d
Sha1:   a25e7d8bdb447a30ef497698be67ea8a8a360c47
Sha256: fcbbd098a8c881f9dabc75b525e11485e25677a17a53996e129d5bce11c1d886
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9296
Expires: Fri, 25 Nov 2022 14:51:44 GMT
Date: Fri, 25 Nov 2022 12:16:48 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9296
Expires: Fri, 25 Nov 2022 14:51:44 GMT
Date: Fri, 25 Nov 2022 12:16:48 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9296
Expires: Fri, 25 Nov 2022 14:51:44 GMT
Date: Fri, 25 Nov 2022 12:16:48 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9296
Expires: Fri, 25 Nov 2022 14:51:44 GMT
Date: Fri, 25 Nov 2022 12:16:48 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9296
Expires: Fri, 25 Nov 2022 14:51:44 GMT
Date: Fri, 25 Nov 2022 12:16:48 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3955
x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM9NGJHoAMF4sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5MlzpHpq7auKLSAYikINuPAylXI11VJL3xxIJ9Dyub-7rjQaPfg0WQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 02:07:28 GMT
age: 36560
etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3955
Md5:    4006a9037ab5f28dca62b0aa7a704c41
Sha1:   74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b
Sha256: 556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6385
x-amzn-requestid: 4c2a84f7-f038-4f5a-86c2-5c8ce1a48c6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cI5NVFMAoAMFn7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63803bee-45c6411c2430e2375f530dd8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 03:52:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fj82i9qJmEiUy2DOkkowq8WRyzupMwNyQqu110sJ3o72HEW4yb7bjQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 07:22:46 GMT
age: 17642
etag: "9b8aafcda0e22edcc16d3048f4b88659d3b42419"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6385
Md5:    f6292a2988fb4505d0098553b8e99ddc
Sha1:   9b8aafcda0e22edcc16d3048f4b88659d3b42419
Sha256: 16b7b473229c5e519ab81b385c50277424f3f3b2a5d7647035e84ba58e44f3be
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8006
x-amzn-requestid: 78aab013-df11-464b-a1c7-ee41b7e77b40
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB-AHSrIAMFvKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe38c-4d795f410a57fc2c21d7075d;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: q53jN1uOtSdeThbk2_0UF6Rl3g4_-_TW7uK1_6Z5oDwSTSRk8XRjyQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:35:08 GMT
etag: "5d15fd672e968d59b541e4d5d0d01cd5e69f4075"
age: 52900
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8006
Md5:    8b6ee13d43732f7c764a49500d092865
Sha1:   5d15fd672e968d59b541e4d5d0d01cd5e69f4075
Sha256: fc3623d527147e1c6aab399251ed8d527e6eefdee6ad7183f00df2613498bfe4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11401
x-amzn-requestid: 3bc374eb-7d70-4b95-94a7-2ad06cae4726
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCtHcmoAMFxgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-333793987245ff9e741b9aed;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: K4A6bdVv0gauO3YWTEPWMS6fhuB9CZ6o5dUL-O6G5-NzqOGQRzQLUw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 22:30:31 GMT
age: 49577
etag: "4b131a189db1b615e2519a28cad83d78297ab67f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11401
Md5:    eb94ecb5881a7e49d964e4287d11e7a4
Sha1:   4b131a189db1b615e2519a28cad83d78297ab67f
Sha256: f3693e29eb7b72361093434142e3f18969c1a0b02350fab430fa29c7c127bd1a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11249
x-amzn-requestid: 8f679d7f-2ea5-4e47-b78d-79af59435a62
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFPHYHkAIAMFpBg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec562-26108a785e910dc3355d58f1;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 01:14:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NKwpIdw2RZNZNh69AF5GNvunA_QfRGClvzcRP3zYwn7c8BLBlt097g==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 08:37:15 GMT
age: 13173
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11249
Md5:    481c033b9ffd030ff0de6e35cf788b47
Sha1:   85d3baad9217af2b5d75c019d2ef95dbb919a788
Sha256: 02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7YSXUV-LZpsI7vciFhuqt1EVr6YRkhxcOgMg8z8bxLcOE01_baf6Gg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:47:08 GMT
age: 52180
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7993
Md5:    92c78302bcce1568eb6a5563100b932c
Sha1:   43d1dec7fc06879988c9c3cadd800cc8145df988
Sha256: 0dda9914306c8e3a7ea75eade8e762652d93907dd6c5a8cc81707d6d8098b60a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16a0ed43-823b-41a5-9073-733ac15040d1.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10667
x-amzn-requestid: 985ed1c6-49ed-4851-8a79-f700bbe027c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsGkSIAMFvDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-260dc99256e117e85643b441;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4IljBFVBhiuRmgw_NRV40nKFLqgJyPiEryLFW-oAeihn6Lu5AKYUAA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:58:28 GMT
age: 51506
etag: "10a988580bb7a1be72be5dd50d2aef9789f36b62"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10667
Md5:    f0dfc05d73111c498bb0e844105a02f6
Sha1:   10a988580bb7a1be72be5dd50d2aef9789f36b62
Sha256: 3852f331fe12a0a8e6007409f043da6aabadbb8f2883e87ae72ca8d70d31727f