Report - icsa.org.in/public/4V0DKQfUjNF8kEhpnaWOBa9yZW9YZFo6

Report Overview

Submitted URL
icsa.org.in/public/4V0DKQfUjNF8kEhpnaWOBa9yZW9YZFo6
IP
67.222.136.231
ASN
#30277 DFW-DATACENTER
Submitted
2023-01-02 22:25:29
Access
Website Title
Final URL
Tags
dhl logistics phishing
urlquery detections
Phishing - DHL

Detections

urlquery
17
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
icsa.org.in	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	20 kB	2.2 MB	67.222.136.231
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	343 B	700 B	142.250.74.131
code.jquery.com	634	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	366 B	35 kB	69.16.175.42
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	215 kB	34.120.237.76
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	6.1 kB	23.33.119.27
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	2.6 kB	93.184.220.29
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	52.42.234.253
cdn.s-pass.org	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	493 B	5.8 kB	104.26.10.170
dispatching-centre.lasamericascargo.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	405 B	4.1 kB	135.181.58.223
ws-mt1.pusher.com	8253	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.1 kB	372 B	54.205.146.176
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (17)

	URL	Size	First Seen	Last Seen
	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.1/js/all.min.js	1.1 MB	2023-03-07	2024-04-06
Pretty URL cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.1/js/all.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:50:19 Last Seen2024-04-06 06:20:40 Times Seen12884 Hash 61008443488f4e7f60d5a5055483187e b56375acc5e062f79280440459d0d7b0f10a290b 1d3f596f76f53d53ef7cb1ffeffd6f791b54bd639b42e4f23e7f2d7b36f91c48 Loading...

	icsa.org.in/public/dinzab/app.js	920 kB	2023-03-08	2024-04-06
Pretty URL icsa.org.in/public/dinzab/app.js IP 67.222.136.231 ASN #30277 DFW-DATACENTER Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:25 Last Seen2024-04-06 06:20:41 Times Seen11793 Hash 508afd6ff9ab52ce8f480d35568038d1 b5d9891100e0dce59cee59b75a098a1ae64c779b 8af18273c1833477cf810c4e3a76f483b6a6064571d25ea7742d8708378c8f09 Loading...

	icsa.org.in/public/dinzab/mine.js	1.6 kB	2023-03-08	2024-04-06
Pretty URL icsa.org.in/public/dinzab/mine.js IP 67.222.136.231 ASN #30277 DFW-DATACENTER Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:25 Last Seen2024-04-06 06:20:41 Times Seen8003 Hash f11ee1ccf373dd137b7ad18e4ee2f69e 26baf7db3e340be99ece82b37d294b80c373fd12 71b8a934f8936288d42fe9fd426ff18cbc1fe54070617fd62420025da56b662e Loading...

	icsa.org.in/public/dinzab/card.js	59 kB	2023-03-07	2024-04-06
Pretty URL icsa.org.in/public/dinzab/card.js IP 67.222.136.231 ASN #30277 DFW-DATACENTER Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:24:57 Last Seen2024-04-06 06:20:40 Times Seen12198 Hash 30e93a747ba8285615cfbc3643dc1a62 3a55f9d6ac708f519d351ea0b69083457778ec9d 18c4b9b4c27233b541a47300a4ee98239e1f8dec4bbcd9fabb6bdad12ca82025 Loading...

	icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW	247 B	2023-03-11	2023-03-12
Pretty URL icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW IP 67.222.136.231 ASN #30277 DFW-DATACENTER Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 11:50:11 Last Seen2023-03-12 13:01:30 Times Seen1 Hash 3226461f0c258cbdf243863ac83587a5 b4f5e5d3c67768f1997220ba4c272f7741bec2c9 4eb9ed118236646551e305c9b1a039683b17f2382a1b5fcf4fd805966e48aadd Loading...

	icsa.org.in/public/	207 B	2023-03-11	2023-03-12
Pretty URL icsa.org.in/public/ IP 67.222.136.231 ASN #30277 DFW-DATACENTER Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 11:50:11 Last Seen2023-03-12 13:01:30 Times Seen1 Hash 21b5cede3a02b5694a6a85407ba3954b 2873cf70f7e132802799e05fe18b58742d9f802b 959597d0a8b57a9d47b776760e7983d7c24a04a8b25d6dbd4e6c9b7369b3f158 Loading...

	cdnjs.cloudflare.com/ajax/libs/imask/3.4.0/imask.min.js	46 kB	2023-03-07	2024-04-24
Pretty URL cdnjs.cloudflare.com/ajax/libs/imask/3.4.0/imask.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:12 Last Seen2024-04-24 06:07:17 Times Seen13267 Hash 79c82646b886e08184f7b9fff25e64ff 804b4b0f8f3443ff05833e33fb5b76780ffafe25 8b76b3502583edddf22df0b9c6ee640053a2cdfeaa113ceff3ea9b61d1f6410d Loading...

	icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW	86 B	2023-03-12	2023-03-12
Pretty URL icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW IP 67.222.136.231 ASN #30277 DFW-DATACENTER Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 13:00:59 Last Seen2023-03-12 13:00:59 Times Seen1 Hash 120fd2af779da9ab480dd81d397492d1 ef865d23afef52c9334ddc26b8798129fb06cd66 97e6609b76a6767b803a4bb09d745d6627d1277a2c487aa1169a55d33c98086d Loading...

	icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW	1.8 kB	2023-03-11	2023-03-12
Pretty URL icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW IP 67.222.136.231 ASN #30277 DFW-DATACENTER Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:35:44 Last Seen2023-03-12 13:01:30 Times Seen1 Hash 28b0ed988614474781508fd89896e250 39bccaa4048fff5ac291d9e9fdbf5803b6fd26e6 9d394dc51b6af0ec09114b8de9620fa32dce51649dfdf21a32175724c2ab994c Loading...

	icsa.org.in/public/dinzab/intlTelInput.js	89 kB	2023-03-08	2024-04-22
Pretty URL icsa.org.in/public/dinzab/intlTelInput.js IP 67.222.136.231 ASN #30277 DFW-DATACENTER Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:25 Last Seen2024-04-22 01:26:12 Times Seen12057 Hash 9146aa46d1f409004183b86f202c4607 717a6d53527fe31ec1c4eef9022b06e5d4d6f6a5 b188900aaff98a87fc69519ab04437aa735708b4b92f2adcab6937d2a1d42e37 Loading...

	cdn.lr-in.com/logger-1.min.js	810 kB	2023-03-12	2023-03-12
Pretty URL cdn.lr-in.com/logger-1.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 10:56:10 Last Seen2023-03-12 13:16:58 Times Seen1 Hash 064519f5142277326b34a6738c4515a7 4babfbc467f4e9c5969c55e4a78fae5821610131 9f8d1feb1c4cc42dc3cf24a3fbb9659ba8980cf3e35f4e4ecc357d042fa372ef Loading...

	icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW	870 B	2023-03-08	2024-03-22
Pretty URL icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW IP 67.222.136.231 ASN #30277 DFW-DATACENTER Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:28 Last Seen2024-03-22 11:31:08 Times Seen2251 Hash 16b834354afee921f6b6076fae2538e6 f6dabd330ad9d949eae272607fbfed334039fc92 592a0a09e027a692d9e227177ea5964ad9a7d027a7f19bb01fd0bcdf42a9fe35 Loading...

	cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js	2.7 kB	2023-03-07	2024-04-06
Pretty URL cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:54:49 Last Seen2024-04-06 06:20:41 Times Seen447 Hash a652ab92584024571b6ea0f3255eb380 9266ee9ab680b63d7205d6bc65b9767513d162a5 a8831773f69697c641e349c519d162ad5afe58cc583703d96f98a79d29087ef1 Loading...

	icsa.org.in/public/	135 B	2023-03-12	2023-03-12
Pretty URL icsa.org.in/public/ IP 67.222.136.231 ASN #30277 DFW-DATACENTER Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 13:00:59 Last Seen2023-03-12 13:00:59 Times Seen1 Hash a66d33cea29d17aa37ebec6715728bfe 46192b644e5da60ef8579da59daa1f0a30b579c5 e07c6e2cc62a64b63a56ce9d33afc977f38860dd2a986cd8091aacbe0def4868 Loading...

	code.jquery.com/jquery-1.12.4.min.js	97 kB	2023-03-07	2024-04-25
Pretty URL code.jquery.com/jquery-1.12.4.min.js IP 69.16.175.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-25 02:53:38 Times Seen118687 Hash 4f252523d4af0b478c810c2547a63e19 5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb 668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404 Loading...

	icsa.org.in/public/dinzab/data.js	12 kB	2023-03-08	2024-04-06
Pretty URL icsa.org.in/public/dinzab/data.js IP 67.222.136.231 ASN #30277 DFW-DATACENTER Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:25 Last Seen2024-04-06 06:20:40 Times Seen12169 Hash a2b78e86240966cda00a463614e4f3dd a2606f30f77bb9f235746059db16b0ee8b585c31 55e47db856701715f613de8674bd0c67604cc304514b791bed402866d18c8557 Loading...

	icsa.org.in/public/dinzab/countrySelect.js	37 kB	2023-03-08	2024-04-06
Pretty URL icsa.org.in/public/dinzab/countrySelect.js IP 67.222.136.231 ASN #30277 DFW-DATACENTER Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:25 Last Seen2024-04-06 06:20:41 Times Seen12188 Hash ee3d5d4880b5dac09d9ca3c23cdd28da f95728f89723a079442d67ed6aa38abf8ecab4fd 657baddf2724ae4570fa40c00dddefa3379b5709ac06ceb536f6177a1bfc394f Loading...

HTTP Transactions (46)

URL IP Response Size

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8afcbdfc50b3ac9488d629a1a4923b81
933fe7b84c2fbd931da70e92c86fa89110e7cfe7
9857b3b813177c23f90a7e53c7ec1f878362b1da27bc19493bebffc358a4b852

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9857B3B813177C23F90A7E53C7EC1F878362B1DA27BC19493BEBFFC358A4B852"
Last-Modified: Sun, 01 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10480
Expires: Tue, 03 Jan 2023 01:19:58 GMT
Date: Mon, 02 Jan 2023 22:25:18 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
16803ffa29e10ee999c43eb4e4acfe92
a5ede865a388fa440f20994b43c417d403e9a493
08de8f6abb622e84d2cb6e88dee8fc7c408147ac43da9c24d4cde510ed36b53a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08DE8F6ABB622E84D2CB6E88DEE8FC7C408147AC43DA9C24D4CDE510ED36B53A"
Last-Modified: Mon, 02 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7823
Expires: Tue, 03 Jan 2023 00:35:41 GMT
Date: Mon, 02 Jan 2023 22:25:18 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 02 Jan 2023 21:47:29 GMT
content-type: application/json
age: 2269
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3b0a4b7e28ad3a91135d52c7457790b5
075f22ab45d169766252467ae44903250e480f9b
312744aeb6fcc4296025205bc70c40316dd3c8a4b626669ac43e32c33104473a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "312744AEB6FCC4296025205BC70C40316DD3C8A4B626669AC43E32C33104473A"
Last-Modified: Sat, 31 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20921
Expires: Tue, 03 Jan 2023 04:13:59 GMT
Date: Mon, 02 Jan 2023 22:25:18 GMT
Connection: keep-alive

icsa.org.in/public/4V0DKQfUjNF8kEhpnaWOBa9yZW9YZFo6

67.222.136.231

302 Found

346 B

URL HTTP/1.1
icsa.org.in/public/4V0DKQfUjNF8kEhpnaWOBa9yZW9YZFo6
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
346 B (346 bytes)
Hash
ace0c4c8750275d948eaab8cc3991e87
463d80283d5f620ba96c263c7022cd9744c2b2e0
9a855be9a4c3c4379814b43686697dd4d7222726e19e7b8ca179c205727b1416

HTTP Headers

GET /public/4V0DKQfUjNF8kEhpnaWOBa9yZW9YZFo6 HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6ImJiSWE2cnFTNVdGZmdGS1V0NDZxd2c9PSIsInZhbHVlIjoiOTJJZ0lRK2FWR0kwV281bG9XU3JiN2pQQ1BobzBJTXhDbXovSEhaeStnZ3BHZWVPcGpWVUFsK0l1Znc4K3hmNWMxbUh3YmhLcDY4MWNDUWFoaFZyQWw0bEZ6d3NIZDNmWDJDMXZVNUpBQmFncVJKNjRlei9ROGRxRm1BWldqb3IiLCJtYWMiOiIyZWRkZmE4ZTM2ZTkzMDA0NWZlZmM2N2QwNzhhZThiZDQzY2FmM2ZiMTFjZGQ2MDNhY2UwOGZjNDk2YTE2MmFmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijd4SlRjVlVzU0Z0T0JoWTdDZ0o5TGc9PSIsInZhbHVlIjoibzE5dkpsK2ljem5PTUpEUFhWNE1TSjE4L2M3NTVoMVBXWHl3OHNyT3h4enNrcklBMXJJU3Q5dFVwS3hNUi92MEFQSnErZTIrb1g1WXdxUjZhOHp6UXlmb0FWeHNjdk5vOVBUeXRmWmJ5ODFxZEY2TzBiWEZrcjdpQjg3UnNQS1QiLCJtYWMiOiJiMzE0YWNkNDMwOTc0MTgwNGYxMTVjNWQxOTBhYzYyZDRkMWE4MjljYTA4NDc1NmU3NDY5MjBiZjMwODM1NzVjIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
Server: nginx
Date: Mon, 02 Jan 2023 22:25:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjBzTS92c3JEQ0RZNWdpVkNjVlVyUmc9PSIsInZhbHVlIjoiUGFMNlVsT01SN0huNTRlNm1sL2EzY0tLSi9HZGtXdlRGOFhqQUE1SU9xWkgxVFRpQzJtVXdsMCtHOUVOY2w5aHZQOHM3WksyeEhxRDFEd3NFU2ZiME10TGRQYnVqcGtFcE1hYTRManZkSUlGRUVuYXBTTGpaYzhtUGZ0UnZaQ3MiLCJtYWMiOiIwOTdmMWE3MDAxMDAyN2I0NjkyMjM4Y2EwZjA5ZTkxYWE5ZjBkZmZlYjBkMTUwNjRmZTI2NmEwM2Q1ODUzZWU4IiwidGFnIjoiIn0%3D; expires=Tue, 03-Jan-2023 00:25:18 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6Ii8xc1M5ejVrbVF6U1RkUldSZXluTVE9PSIsInZhbHVlIjoiRjJ1b1FaU3Q2T29heGNNdit4ak8zcG9JNHMrVklyUzVXRFlhS21BazkyMTFMdEUrR2dpcm0yVlNvWTE3WDIxM3NmcW9Cck5NUGErdXkzZDlxRklONWg2OXpYbGFzR1pmNm9vaHZIVnppRHlwOVc0KytvOThlb0g0WVVMVlpQZ1giLCJtYWMiOiJhZTk5MmU3MmY1YzVkYTEzNzM5OWNhYzM1Nzg2OTYxMDU3MzQ3OGNkYTcxNjkyYjkwOGJhNGFkNzZhOWNhOTAwIiwidGFnIjoiIn0%3D; expires=Tue, 03-Jan-2023 00:25:18 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Location: http://icsa.org.in/public

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: q//iI+HTseIAQy9FhRPeUPsUhKn2mGt4mIUpIOrCSMNeeLet+i6S2CFu9KBdVT29E2FT6z4pg00=
x-amz-request-id: AZ32VNWC0VN4VYVF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 02 Jan 2023 22:00:38 GMT
age: 1480
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 02 Jan 2023 22:25:18 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

icsa.org.in/public

67.222.136.231

301 Moved Permanently

234 B

URL HTTP/1.1
icsa.org.in/public
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
234 B (234 bytes)
Hash
7963433f1bdf6d146d445f4acbb707bd
7a0b7685fb7c453e8d392adbe77f828b9541377c
1349aef0530bc8848542de4b264a4978ad2479c7012a22ff50e36fbdfd53990f

HTTP Headers

GET /public HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjBzTS92c3JEQ0RZNWdpVkNjVlVyUmc9PSIsInZhbHVlIjoiUGFMNlVsT01SN0huNTRlNm1sL2EzY0tLSi9HZGtXdlRGOFhqQUE1SU9xWkgxVFRpQzJtVXdsMCtHOUVOY2w5aHZQOHM3WksyeEhxRDFEd3NFU2ZiME10TGRQYnVqcGtFcE1hYTRManZkSUlGRUVuYXBTTGpaYzhtUGZ0UnZaQ3MiLCJtYWMiOiIwOTdmMWE3MDAxMDAyN2I0NjkyMjM4Y2EwZjA5ZTkxYWE5ZjBkZmZlYjBkMTUwNjRmZTI2NmEwM2Q1ODUzZWU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii8xc1M5ejVrbVF6U1RkUldSZXluTVE9PSIsInZhbHVlIjoiRjJ1b1FaU3Q2T29heGNNdit4ak8zcG9JNHMrVklyUzVXRFlhS21BazkyMTFMdEUrR2dpcm0yVlNvWTE3WDIxM3NmcW9Cck5NUGErdXkzZDlxRklONWg2OXpYbGFzR1pmNm9vaHZIVnppRHlwOVc0KytvOThlb0g0WVVMVlpQZ1giLCJtYWMiOiJhZTk5MmU3MmY1YzVkYTEzNzM5OWNhYzM1Nzg2OTYxMDU3MzQ3OGNkYTcxNjkyYjkwOGJhNGFkNzZhOWNhOTAwIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 02 Jan 2023 22:25:18 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 234
Location: http://icsa.org.in/public/

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Alert, ETag, Content-Type, Last-Modified, Cache-Control, Expires, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 02 Jan 2023 22:08:11 GMT
age: 1027
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
949e1488247f88de92a236c833157150
742a3f40ac2806fda515365bfb8683aa66b8f7b0
7d7cecfbae5143277933d1e1abdb6f5295b595edfe2fc83068a8a3eca8d797bf

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5493
Cache-Control: max-age=130393
Content-Type: application/ocsp-response
Date: Mon, 02 Jan 2023 22:25:18 GMT
Etag: "63b29eb2-1d7"
Expires: Wed, 04 Jan 2023 10:38:31 GMT
Last-Modified: Mon, 02 Jan 2023 09:06:58 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

icsa.org.in/public/

67.222.136.231

200 OK

543 B

URL HTTP/1.1
icsa.org.in/public/
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
543 B (543 bytes)
Hash
31e1ef0089038f71b82799ec56f67b3f
a04d5341a1bbea3def410f71e8b928f194071cec
f39e7db3cc669d5570dfab8d4e4a7c120ffb3346130824a6960ebf57b4ec7288

HTTP Headers

GET /public/ HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjBzTS92c3JEQ0RZNWdpVkNjVlVyUmc9PSIsInZhbHVlIjoiUGFMNlVsT01SN0huNTRlNm1sL2EzY0tLSi9HZGtXdlRGOFhqQUE1SU9xWkgxVFRpQzJtVXdsMCtHOUVOY2w5aHZQOHM3WksyeEhxRDFEd3NFU2ZiME10TGRQYnVqcGtFcE1hYTRManZkSUlGRUVuYXBTTGpaYzhtUGZ0UnZaQ3MiLCJtYWMiOiIwOTdmMWE3MDAxMDAyN2I0NjkyMjM4Y2EwZjA5ZTkxYWE5ZjBkZmZlYjBkMTUwNjRmZTI2NmEwM2Q1ODUzZWU4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii8xc1M5ejVrbVF6U1RkUldSZXluTVE9PSIsInZhbHVlIjoiRjJ1b1FaU3Q2T29heGNNdit4ak8zcG9JNHMrVklyUzVXRFlhS21BazkyMTFMdEUrR2dpcm0yVlNvWTE3WDIxM3NmcW9Cck5NUGErdXkzZDlxRklONWg2OXpYbGFzR1pmNm9vaHZIVnppRHlwOVc0KytvOThlb0g0WVVMVlpQZ1giLCJtYWMiOiJhZTk5MmU3MmY1YzVkYTEzNzM5OWNhYzM1Nzg2OTYxMDU3MzQ3OGNkYTcxNjkyYjkwOGJhNGFkNzZhOWNhOTAwIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImpTdnY4VnlFU2ZXR08rVGNxenpMaFE9PSIsInZhbHVlIjoiaVNMZEFYRklSd2Z3QjRhbXF0MkhzWk4yUUpZbnc1eVVmMzkvU2sxZVJIN0pvTU1CYzdRY2lpMUZ5czNSNVcrWFVuK1lZRU4wN3lQMUthWVRjRE5ualpuVWdQTGVwb0JiaDJ3T2Eyd3IrU2NhekdUU0REZURpMW1yUy9haXZPTGoiLCJtYWMiOiJlYWNjNTJjNzdiM2RlZTdhNzdhZmU4NmM1ZDgyOWM5OWRmZTE1ZmM2YTdmZTQyNGFjOGIzMWJhYTJiYzkyYzcwIiwidGFnIjoiIn0%3D; expires=Tue, 03-Jan-2023 00:25:18 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IkpLYXM2RUlTOFpSOHR4S3FNbk10dWc9PSIsInZhbHVlIjoiY0xkb01sdnJzU3p1T1V4MVp6YmE0KytHd2h4MjFMZ0Ryc2N0NTlXTGtOWTFqN2ZHZzJseXVwMVJvVytyOE05WldGYjJqMGlEMDJVdVVoSVE3c3FRUlRDdGQ1dis4cWhaNUhGY2NSVUxmMVo4bHJsUDRNcEd6TXJkY3QvdlFnc0MiLCJtYWMiOiJjNTU1ZTRiOTVjYjg2YjA0NjBhYjFiMDIzYzljMzY5NTlkYWNjZGRmMzE3ZDg2OWQ1ZTkzOTkzMTgyMzNmYmZhIiwidGFnIjoiIn0%3D; expires=Tue, 03-Jan-2023 00:25:18 GMT; Max-Age=7200; path=/; httponly; samesite=lax

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
86bbf6a7c9a9bd2546228ed4c246fa28
55fc7a32cfe9b2988c2e1dd2ddb2bac8a90ed75d
16e8245ca241fb2a0fc1b7583d2c8edcc5b39e7a7eedff59cc51b72a78c83740

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4050
Cache-Control: max-age=159173
Content-Type: application/ocsp-response
Date: Mon, 02 Jan 2023 22:25:18 GMT
Etag: "63b314c1-116"
Expires: Wed, 04 Jan 2023 18:38:11 GMT
Last-Modified: Mon, 02 Jan 2023 17:30:41 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 278

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
46c549440fdeae68e3b18719c2f5ba50
99992537df4a2517284e3efeba262bc48e5e5fa4
04bd706c666a01f0ebc52d97ac6ce523a4eee48cc6ab9824de245bebc8a7980c

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4856
Cache-Control: max-age=131893
Content-Type: application/ocsp-response
Date: Mon, 02 Jan 2023 22:25:18 GMT
Etag: "63b2a70b-117"
Expires: Wed, 04 Jan 2023 11:03:31 GMT
Last-Modified: Mon, 02 Jan 2023 09:42:35 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279

icsa.org.in/CHJPOQFC52OnspsccSSL33AhcpMxGxxW/

67.222.136.231

301 Moved Permanently

266 B

URL HTTP/1.1
icsa.org.in/CHJPOQFC52OnspsccSSL33AhcpMxGxxW/
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
266 B (266 bytes)
Hash
2fa913b645dd18ecd27fb913ea1b1422
5e618ad924116ac6c7b678dd152b4898f110802d
9745937955eab012a59d827f70db542c9054dd62d22d1f10108b67a2c356429c

HTTP Headers

GET /CHJPOQFC52OnspsccSSL33AhcpMxGxxW/ HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://icsa.org.in/public/
Cookie: XSRF-TOKEN=eyJpdiI6ImpTdnY4VnlFU2ZXR08rVGNxenpMaFE9PSIsInZhbHVlIjoiaVNMZEFYRklSd2Z3QjRhbXF0MkhzWk4yUUpZbnc1eVVmMzkvU2sxZVJIN0pvTU1CYzdRY2lpMUZ5czNSNVcrWFVuK1lZRU4wN3lQMUthWVRjRE5ualpuVWdQTGVwb0JiaDJ3T2Eyd3IrU2NhekdUU0REZURpMW1yUy9haXZPTGoiLCJtYWMiOiJlYWNjNTJjNzdiM2RlZTdhNzdhZmU4NmM1ZDgyOWM5OWRmZTE1ZmM2YTdmZTQyNGFjOGIzMWJhYTJiYzkyYzcwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpLYXM2RUlTOFpSOHR4S3FNbk10dWc9PSIsInZhbHVlIjoiY0xkb01sdnJzU3p1T1V4MVp6YmE0KytHd2h4MjFMZ0Ryc2N0NTlXTGtOWTFqN2ZHZzJseXVwMVJvVytyOE05WldGYjJqMGlEMDJVdVVoSVE3c3FRUlRDdGQ1dis4cWhaNUhGY2NSVUxmMVo4bHJsUDRNcEd6TXJkY3QvdlFnc0MiLCJtYWMiOiJjNTU1ZTRiOTVjYjg2YjA0NjBhYjFiMDIzYzljMzY5NTlkYWNjZGRmMzE3ZDg2OWQ1ZTkzOTkzMTgyMzNmYmZhIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 02 Jan 2023 22:25:18 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 266
Location: http://icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW

push.services.mozilla.com/

52.42.234.253

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.42.234.253:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: G/K2FRupleiqyorLSkhDpA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ZV+zUo8NdK21yym7P0CBsd5rWgE=

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
85c34f819864515ac038ac056404e0a4
6f30d673a4d04440d935a096082a4a7875e29bfa
64bc6b38dca430c3054f4e63919c3767f5808bd5251e1da8b4c8f9cd31c12542

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1121
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 02 Jan 2023 22:25:19 GMT
Etag: "63b1ec30-117"
Last-Modified: Mon, 02 Jan 2023 22:06:38 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279

cdn.s-pass.org/SPASSDATA/media/cache/portail_vignette_xl/SPASSDATA/attachments/2022_02/17/114223-serencontrer-messages-solid.png

104.26.10.170

200 OK

5.0 kB

URL HTTP/2
cdn.s-pass.org/SPASSDATA/media/cache/portail_vignette_xl/SPASSDATA/attachments/2022_02/17/114223-serencontrer-messages-solid.png
IP
104.26.10.170:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 640 x 512, 8-bit colormap, non-interlaced\012- data
Size
5.0 kB (4984 bytes)
Hash
faa2a37bbdf6a4d7eb92f4df1396e1bc
b63e5a7323f771d2294a58b3251bb6036ae33fce
cff8856b01d09b6e68b3d6b75172ea259363b4268be55229a963e86edc77e627

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /SPASSDATA/media/cache/portail_vignette_xl/SPASSDATA/attachments/2022_02/17/114223-serencontrer-messages-solid.png HTTP/1.1
Host: cdn.s-pass.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://icsa.org.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 02 Jan 2023 22:25:19 GMT
content-type: image/png
content-length: 4984
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1313415
etag: "620e522e-140a87"
last-modified: Thu, 17 Feb 2022 13:48:30 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 403
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FR%2FFM4ne1GxdtGX4SL94KiuBf5Q9PkokPiY%2FlXbrGC3YgIcvc5qOBlzvvMAK7rFHfd1dH260eqZMJXmlQbJuuRegZB3iv3JtrXE46%2FGsYyv4kuJqU9oEq4BOZBcpvxd4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7836e8f17d58b503-OSL
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
af87a168c3b6a9d13a3cb0b7dd69d133
8115a8ab0ca3368bebf8b0ef1e725dbb4ae4e7d3
92d4c3b4f7b48fb867417ece0082936020d71cbfe421a3b19d0b6d9c291c21de

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Jan 2023 22:25:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW

67.222.136.231

200 OK

22 kB

URL HTTP/1.1
icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
22 kB (21971 bytes)
Hash
79d409f84378c1e90b24d0880ba16a92
a068e7c8ed9dfdfb74afae374482e2fd2aa8c528
e402d8178fa5b8a16caec2e1590e8b19826af5a73a6bdc028b7aede731e49bea

HTTP Headers

GET /public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://icsa.org.in/public/
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6ImpTdnY4VnlFU2ZXR08rVGNxenpMaFE9PSIsInZhbHVlIjoiaVNMZEFYRklSd2Z3QjRhbXF0MkhzWk4yUUpZbnc1eVVmMzkvU2sxZVJIN0pvTU1CYzdRY2lpMUZ5czNSNVcrWFVuK1lZRU4wN3lQMUthWVRjRE5ualpuVWdQTGVwb0JiaDJ3T2Eyd3IrU2NhekdUU0REZURpMW1yUy9haXZPTGoiLCJtYWMiOiJlYWNjNTJjNzdiM2RlZTdhNzdhZmU4NmM1ZDgyOWM5OWRmZTE1ZmM2YTdmZTQyNGFjOGIzMWJhYTJiYzkyYzcwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkpLYXM2RUlTOFpSOHR4S3FNbk10dWc9PSIsInZhbHVlIjoiY0xkb01sdnJzU3p1T1V4MVp6YmE0KytHd2h4MjFMZ0Ryc2N0NTlXTGtOWTFqN2ZHZzJseXVwMVJvVytyOE05WldGYjJqMGlEMDJVdVVoSVE3c3FRUlRDdGQ1dis4cWhaNUhGY2NSVUxmMVo4bHJsUDRNcEd6TXJkY3QvdlFnc0MiLCJtYWMiOiJjNTU1ZTRiOTVjYjg2YjA0NjBhYjFiMDIzYzljMzY5NTlkYWNjZGRmMzE3ZDg2OWQ1ZTkzOTkzMTgyMzNmYmZhIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkpETm1NZGZJV3cwM3U0eWZjRVdCNkE9PSIsInZhbHVlIjoiNWRxb21xVFJDT0c4Sy9LclhZTFB1bytvN01UdFZtWDMyLzU3Q0dEL1hEWGZHM0FGZzN3TWM4MDRQMXVtNGRnTzVQNTlVZ3lMWm8za1VQWnh5V1lraDNnTzAxVjRhcWpadEV5RlRFYU1WRVJQRVJCdCs3MmJMWEttMEo4S1YwMlgiLCJtYWMiOiI3MjdmMWJkYzNlOWZhZWJmYmYwODBkNWE3N2EwZGEwZmE4M2VmYTIyNDFjMzdlMjNmNWM4OTlkMmVjMWMyY2I3IiwidGFnIjoiIn0%3D; expires=Tue, 03-Jan-2023 00:25:19 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IlpmeFVlR0JTZ1JVNjk0QU54QWJvRlE9PSIsInZhbHVlIjoieE81YmRpckQ0YTRHMDFtUjBxMmtRUllHZzQvZHdzQXptdi9NdkJRLy82bnBrbTVPY2J6bWVBUTRiQlFLdHkwRWVtU1JtZDZ3THZHRXVuNlZDaE0zaC9pRUpzVTgzK1RSMnhDSVVTdHQvdmQ5QXo1NDdNaUpIU0pjRldpWDBaUGQiLCJtYWMiOiIwYzQ1MjBhYzJmMDliM2RmMjI3YzdjMGNhY2QwMDJkZGI5NTZhMjc5ZGIzZTdkZTU0MjIxZTg5OWJiYzVkNGMxIiwidGFnIjoiIn0%3D; expires=Tue, 03-Jan-2023 00:25:19 GMT; Max-Age=7200; path=/; httponly; samesite=lax

code.jquery.com/jquery-1.12.4.min.js

69.16.175.42

200 OK

34 kB

URL HTTP/2
code.jquery.com/jquery-1.12.4.min.js
IP
69.16.175.42:0
ASN
#20446 STACKPATH-CDN

File type
ASCII text, with very long lines (32077)
Size
34 kB (33738 bytes)
Hash
fc7624613c4e25843694cdb7fa956f05
7765bb4016ae929e22be579ccde505b94c2a63c1
49c97d70ef48bfdc1d7b96271b5613bb099b2c040ebdf5624962aea92ff428ae

HTTP Headers

GET /jquery-1.12.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://icsa.org.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 02 Jan 2023 22:25:19 GMT
content-encoding: gzip
content-length: 33738
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-17b8b"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-sp-metadata: HS256.CN/PzZ0GEoYBCiQ3ZWFhYjRlMC04YmUzLTRkZTMtOGM0ZC02OTM2NzBjNDBhMDYQ+OiCoKvU+wIaBgjPs82dBiIMOTEuOTAuNDIuMTU0KPIkMAM4BEIWVExTX0FFU18xMjhfR0NNX1NIQTI1NlogYzdkMmI0YzQ4NGE0MTNlMTkxZGU2YWNmZjJkYjIwMDkaLAgBEiQ0N2MwOTg0Mi1mN2U0LTQ3MjEtYjZiYy02YmY5N2M0ZTZiOTcYyocCIhgIAhIUY2RzMjUxLnNrMS5od2Nkbi5uZXQ=.H80n1OiO4gopbmZqsIO58XSaCcmCt0FbcxAn6fr37Mg=
x-hw: 1672698319.dop012.sk1.t,1672698319.cds002.sk1.hn,1672698319.cds251.sk1.c
X-Firefox-Spdy: h2

icsa.org.in/public/dinzab/data.js

67.222.136.231

200 OK

12 kB

URL HTTP/1.1
icsa.org.in/public/dinzab/data.js
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
Unicode text, UTF-8 text, with very long lines (9881)
Size
12 kB (12100 bytes)
Hash
a2b78e86240966cda00a463614e4f3dd
a2606f30f77bb9f235746059db16b0ee8b585c31
55e47db856701715f613de8674bd0c67604cc304514b791bed402866d18c8557

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/data.js HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW
Cookie: XSRF-TOKEN=eyJpdiI6IkpETm1NZGZJV3cwM3U0eWZjRVdCNkE9PSIsInZhbHVlIjoiNWRxb21xVFJDT0c4Sy9LclhZTFB1bytvN01UdFZtWDMyLzU3Q0dEL1hEWGZHM0FGZzN3TWM4MDRQMXVtNGRnTzVQNTlVZ3lMWm8za1VQWnh5V1lraDNnTzAxVjRhcWpadEV5RlRFYU1WRVJQRVJCdCs3MmJMWEttMEo4S1YwMlgiLCJtYWMiOiI3MjdmMWJkYzNlOWZhZWJmYmYwODBkNWE3N2EwZGEwZmE4M2VmYTIyNDFjMzdlMjNmNWM4OTlkMmVjMWMyY2I3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpmeFVlR0JTZ1JVNjk0QU54QWJvRlE9PSIsInZhbHVlIjoieE81YmRpckQ0YTRHMDFtUjBxMmtRUllHZzQvZHdzQXptdi9NdkJRLy82bnBrbTVPY2J6bWVBUTRiQlFLdHkwRWVtU1JtZDZ3THZHRXVuNlZDaE0zaC9pRUpzVTgzK1RSMnhDSVVTdHQvdmQ5QXo1NDdNaUpIU0pjRldpWDBaUGQiLCJtYWMiOiIwYzQ1MjBhYzJmMDliM2RmMjI3YzdjMGNhY2QwMDJkZGI5NTZhMjc5ZGIzZTdkZTU0MjIxZTg5OWJiYzVkNGMxIiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:19 GMT
Content-Type: application/javascript
Content-Length: 12100
Last-Modified: Tue, 31 May 2022 06:35:50 GMT
Accept-Ranges: bytes

icsa.org.in/public/dinzab/newcc.css

67.222.136.231

200 OK

5.2 kB

URL HTTP/1.1
icsa.org.in/public/dinzab/newcc.css
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
ASCII text
Size
5.2 kB (5211 bytes)
Hash
a8802c7108e75bd512824b11af10a5e7
0af53e81447c67be4d787fea0f6ef8c82008e4ea
6c37a32274d58b55fc113546582236826b279eb6d667ecbf86e73823713da4f9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/newcc.css HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW
Cookie: XSRF-TOKEN=eyJpdiI6IkpETm1NZGZJV3cwM3U0eWZjRVdCNkE9PSIsInZhbHVlIjoiNWRxb21xVFJDT0c4Sy9LclhZTFB1bytvN01UdFZtWDMyLzU3Q0dEL1hEWGZHM0FGZzN3TWM4MDRQMXVtNGRnTzVQNTlVZ3lMWm8za1VQWnh5V1lraDNnTzAxVjRhcWpadEV5RlRFYU1WRVJQRVJCdCs3MmJMWEttMEo4S1YwMlgiLCJtYWMiOiI3MjdmMWJkYzNlOWZhZWJmYmYwODBkNWE3N2EwZGEwZmE4M2VmYTIyNDFjMzdlMjNmNWM4OTlkMmVjMWMyY2I3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpmeFVlR0JTZ1JVNjk0QU54QWJvRlE9PSIsInZhbHVlIjoieE81YmRpckQ0YTRHMDFtUjBxMmtRUllHZzQvZHdzQXptdi9NdkJRLy82bnBrbTVPY2J6bWVBUTRiQlFLdHkwRWVtU1JtZDZ3THZHRXVuNlZDaE0zaC9pRUpzVTgzK1RSMnhDSVVTdHQvdmQ5QXo1NDdNaUpIU0pjRldpWDBaUGQiLCJtYWMiOiIwYzQ1MjBhYzJmMDliM2RmMjI3YzdjMGNhY2QwMDJkZGI5NTZhMjc5ZGIzZTdkZTU0MjIxZTg5OWJiYzVkNGMxIiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:19 GMT
Content-Type: text/css
Content-Length: 5211
Last-Modified: Thu, 02 Jun 2022 12:11:52 GMT
Accept-Ranges: bytes

icsa.org.in/public/dinzab/mine.js

67.222.136.231

200 OK

1.6 kB

URL HTTP/1.1
icsa.org.in/public/dinzab/mine.js
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
Unicode text, UTF-8 text
Size
1.6 kB (1604 bytes)
Hash
f11ee1ccf373dd137b7ad18e4ee2f69e
26baf7db3e340be99ece82b37d294b80c373fd12
71b8a934f8936288d42fe9fd426ff18cbc1fe54070617fd62420025da56b662e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/mine.js HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW
Cookie: XSRF-TOKEN=eyJpdiI6IkpETm1NZGZJV3cwM3U0eWZjRVdCNkE9PSIsInZhbHVlIjoiNWRxb21xVFJDT0c4Sy9LclhZTFB1bytvN01UdFZtWDMyLzU3Q0dEL1hEWGZHM0FGZzN3TWM4MDRQMXVtNGRnTzVQNTlVZ3lMWm8za1VQWnh5V1lraDNnTzAxVjRhcWpadEV5RlRFYU1WRVJQRVJCdCs3MmJMWEttMEo4S1YwMlgiLCJtYWMiOiI3MjdmMWJkYzNlOWZhZWJmYmYwODBkNWE3N2EwZGEwZmE4M2VmYTIyNDFjMzdlMjNmNWM4OTlkMmVjMWMyY2I3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpmeFVlR0JTZ1JVNjk0QU54QWJvRlE9PSIsInZhbHVlIjoieE81YmRpckQ0YTRHMDFtUjBxMmtRUllHZzQvZHdzQXptdi9NdkJRLy82bnBrbTVPY2J6bWVBUTRiQlFLdHkwRWVtU1JtZDZ3THZHRXVuNlZDaE0zaC9pRUpzVTgzK1RSMnhDSVVTdHQvdmQ5QXo1NDdNaUpIU0pjRldpWDBaUGQiLCJtYWMiOiIwYzQ1MjBhYzJmMDliM2RmMjI3YzdjMGNhY2QwMDJkZGI5NTZhMjc5ZGIzZTdkZTU0MjIxZTg5OWJiYzVkNGMxIiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:19 GMT
Content-Type: application/javascript
Content-Length: 1604
Last-Modified: Mon, 17 Oct 2022 08:18:22 GMT
Accept-Ranges: bytes

icsa.org.in/public/dinzab/font-awesome.min.css

67.222.136.231

200 OK

31 kB

URL HTTP/1.1
icsa.org.in/public/dinzab/font-awesome.min.css
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
ASCII text, with very long lines (30837)
Size
31 kB (31000 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/font-awesome.min.css HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW
Cookie: XSRF-TOKEN=eyJpdiI6IkpETm1NZGZJV3cwM3U0eWZjRVdCNkE9PSIsInZhbHVlIjoiNWRxb21xVFJDT0c4Sy9LclhZTFB1bytvN01UdFZtWDMyLzU3Q0dEL1hEWGZHM0FGZzN3TWM4MDRQMXVtNGRnTzVQNTlVZ3lMWm8za1VQWnh5V1lraDNnTzAxVjRhcWpadEV5RlRFYU1WRVJQRVJCdCs3MmJMWEttMEo4S1YwMlgiLCJtYWMiOiI3MjdmMWJkYzNlOWZhZWJmYmYwODBkNWE3N2EwZGEwZmE4M2VmYTIyNDFjMzdlMjNmNWM4OTlkMmVjMWMyY2I3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpmeFVlR0JTZ1JVNjk0QU54QWJvRlE9PSIsInZhbHVlIjoieE81YmRpckQ0YTRHMDFtUjBxMmtRUllHZzQvZHdzQXptdi9NdkJRLy82bnBrbTVPY2J6bWVBUTRiQlFLdHkwRWVtU1JtZDZ3THZHRXVuNlZDaE0zaC9pRUpzVTgzK1RSMnhDSVVTdHQvdmQ5QXo1NDdNaUpIU0pjRldpWDBaUGQiLCJtYWMiOiIwYzQ1MjBhYzJmMDliM2RmMjI3YzdjMGNhY2QwMDJkZGI5NTZhMjc5ZGIzZTdkZTU0MjIxZTg5OWJiYzVkNGMxIiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:19 GMT
Content-Type: text/css
Content-Length: 31000
Last-Modified: Tue, 31 May 2022 06:35:50 GMT
Accept-Ranges: bytes

icsa.org.in/public/dinzab/intlTelInput.css

67.222.136.231

200 OK

25 kB

URL HTTP/1.1
icsa.org.in/public/dinzab/intlTelInput.css
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
ASCII text
Size
25 kB (24631 bytes)
Hash
bd1fe63547e380ddfdd79c4cea97cc1e
d5546e0d88b001b6ceb1a06fbf6a47e31214e9de
51198a6581f3fdd8b035268f775b1a6f519ee61b3e2a22da4a6fe2b2647b145b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/intlTelInput.css HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW
Cookie: XSRF-TOKEN=eyJpdiI6IkpETm1NZGZJV3cwM3U0eWZjRVdCNkE9PSIsInZhbHVlIjoiNWRxb21xVFJDT0c4Sy9LclhZTFB1bytvN01UdFZtWDMyLzU3Q0dEL1hEWGZHM0FGZzN3TWM4MDRQMXVtNGRnTzVQNTlVZ3lMWm8za1VQWnh5V1lraDNnTzAxVjRhcWpadEV5RlRFYU1WRVJQRVJCdCs3MmJMWEttMEo4S1YwMlgiLCJtYWMiOiI3MjdmMWJkYzNlOWZhZWJmYmYwODBkNWE3N2EwZGEwZmE4M2VmYTIyNDFjMzdlMjNmNWM4OTlkMmVjMWMyY2I3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpmeFVlR0JTZ1JVNjk0QU54QWJvRlE9PSIsInZhbHVlIjoieE81YmRpckQ0YTRHMDFtUjBxMmtRUllHZzQvZHdzQXptdi9NdkJRLy82bnBrbTVPY2J6bWVBUTRiQlFLdHkwRWVtU1JtZDZ3THZHRXVuNlZDaE0zaC9pRUpzVTgzK1RSMnhDSVVTdHQvdmQ5QXo1NDdNaUpIU0pjRldpWDBaUGQiLCJtYWMiOiIwYzQ1MjBhYzJmMDliM2RmMjI3YzdjMGNhY2QwMDJkZGI5NTZhMjc5ZGIzZTdkZTU0MjIxZTg5OWJiYzVkNGMxIiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:19 GMT
Content-Type: text/css
Content-Length: 24631
Last-Modified: Tue, 31 May 2022 06:35:50 GMT
Accept-Ranges: bytes

icsa.org.in/public/dinzab/card.js

67.222.136.231

200 OK

59 kB

URL HTTP/1.1
icsa.org.in/public/dinzab/card.js
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
Unicode text, UTF-8 text, with very long lines (51786)
Size
59 kB (58666 bytes)
Hash
30e93a747ba8285615cfbc3643dc1a62
3a55f9d6ac708f519d351ea0b69083457778ec9d
18c4b9b4c27233b541a47300a4ee98239e1f8dec4bbcd9fabb6bdad12ca82025

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/card.js HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW
Cookie: XSRF-TOKEN=eyJpdiI6IkpETm1NZGZJV3cwM3U0eWZjRVdCNkE9PSIsInZhbHVlIjoiNWRxb21xVFJDT0c4Sy9LclhZTFB1bytvN01UdFZtWDMyLzU3Q0dEL1hEWGZHM0FGZzN3TWM4MDRQMXVtNGRnTzVQNTlVZ3lMWm8za1VQWnh5V1lraDNnTzAxVjRhcWpadEV5RlRFYU1WRVJQRVJCdCs3MmJMWEttMEo4S1YwMlgiLCJtYWMiOiI3MjdmMWJkYzNlOWZhZWJmYmYwODBkNWE3N2EwZGEwZmE4M2VmYTIyNDFjMzdlMjNmNWM4OTlkMmVjMWMyY2I3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpmeFVlR0JTZ1JVNjk0QU54QWJvRlE9PSIsInZhbHVlIjoieE81YmRpckQ0YTRHMDFtUjBxMmtRUllHZzQvZHdzQXptdi9NdkJRLy82bnBrbTVPY2J6bWVBUTRiQlFLdHkwRWVtU1JtZDZ3THZHRXVuNlZDaE0zaC9pRUpzVTgzK1RSMnhDSVVTdHQvdmQ5QXo1NDdNaUpIU0pjRldpWDBaUGQiLCJtYWMiOiIwYzQ1MjBhYzJmMDliM2RmMjI3YzdjMGNhY2QwMDJkZGI5NTZhMjc5ZGIzZTdkZTU0MjIxZTg5OWJiYzVkNGMxIiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:19 GMT
Content-Type: application/javascript
Content-Length: 58666
Last-Modified: Tue, 31 May 2022 06:35:50 GMT
Accept-Ranges: bytes

icsa.org.in/public/dinzab/countrySelect.js

67.222.136.231

200 OK

37 kB

URL HTTP/1.1
icsa.org.in/public/dinzab/countrySelect.js
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
Unicode text, UTF-8 text, with very long lines (347)
Size
37 kB (36634 bytes)
Hash
ee3d5d4880b5dac09d9ca3c23cdd28da
f95728f89723a079442d67ed6aa38abf8ecab4fd
657baddf2724ae4570fa40c00dddefa3379b5709ac06ceb536f6177a1bfc394f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/countrySelect.js HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW
Cookie: XSRF-TOKEN=eyJpdiI6IkpETm1NZGZJV3cwM3U0eWZjRVdCNkE9PSIsInZhbHVlIjoiNWRxb21xVFJDT0c4Sy9LclhZTFB1bytvN01UdFZtWDMyLzU3Q0dEL1hEWGZHM0FGZzN3TWM4MDRQMXVtNGRnTzVQNTlVZ3lMWm8za1VQWnh5V1lraDNnTzAxVjRhcWpadEV5RlRFYU1WRVJQRVJCdCs3MmJMWEttMEo4S1YwMlgiLCJtYWMiOiI3MjdmMWJkYzNlOWZhZWJmYmYwODBkNWE3N2EwZGEwZmE4M2VmYTIyNDFjMzdlMjNmNWM4OTlkMmVjMWMyY2I3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpmeFVlR0JTZ1JVNjk0QU54QWJvRlE9PSIsInZhbHVlIjoieE81YmRpckQ0YTRHMDFtUjBxMmtRUllHZzQvZHdzQXptdi9NdkJRLy82bnBrbTVPY2J6bWVBUTRiQlFLdHkwRWVtU1JtZDZ3THZHRXVuNlZDaE0zaC9pRUpzVTgzK1RSMnhDSVVTdHQvdmQ5QXo1NDdNaUpIU0pjRldpWDBaUGQiLCJtYWMiOiIwYzQ1MjBhYzJmMDliM2RmMjI3YzdjMGNhY2QwMDJkZGI5NTZhMjc5ZGIzZTdkZTU0MjIxZTg5OWJiYzVkNGMxIiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:20 GMT
Content-Type: application/javascript
Content-Length: 36634
Last-Modified: Tue, 31 May 2022 06:35:50 GMT
Accept-Ranges: bytes

r3.o.lencr.org/

23.33.119.27

200 OK

1.3 kB

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
gzip compressed data, max compression\012- data
Size
1.3 kB (1269 bytes)
Hash
02530b497f793ab820841eff6baab871
282cc2017ca70c0550ea9feb964c86bfa784748b
47ae72f7574fb207ab2750b7a43f009ee1cb3917206ecbd4158aa916434aa6eb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8682EE9E025254EE9CD1D9C663A40707CB170C141A328A7DE07DED8DE06F787"
Last-Modified: Sun, 01 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7791
Expires: Tue, 03 Jan 2023 00:35:11 GMT
Date: Mon, 02 Jan 2023 22:25:20 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c4719f10b16aa492c5dbdb8a1bfc20af
21831c11bfc9679c9f0ebc1f6a39284a5d16be56
c8682ee9e025254ee9cd1d9c663a40707cb170c141a328a7de07ded8de06f787

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8682EE9E025254EE9CD1D9C663A40707CB170C141A328A7DE07DED8DE06F787"
Last-Modified: Sun, 01 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7791
Expires: Tue, 03 Jan 2023 00:35:11 GMT
Date: Mon, 02 Jan 2023 22:25:20 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c4719f10b16aa492c5dbdb8a1bfc20af
21831c11bfc9679c9f0ebc1f6a39284a5d16be56
c8682ee9e025254ee9cd1d9c663a40707cb170c141a328a7de07ded8de06f787

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8682EE9E025254EE9CD1D9C663A40707CB170C141A328A7DE07DED8DE06F787"
Last-Modified: Sun, 01 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7791
Expires: Tue, 03 Jan 2023 00:35:11 GMT
Date: Mon, 02 Jan 2023 22:25:20 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b277398-f4fa-4af1-a6f3-47dc5a33ccf3.jpeg

34.120.237.76

200 OK

6.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b277398-f4fa-4af1-a6f3-47dc5a33ccf3.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.5 kB (6459 bytes)
Hash
c0452f1ad1a7813d06adf22e178c5284
615a0072aa450329f48fbf30c921cdb6670b249a
72b733f965c7438896bcd95aac4c9bb10a83a2c35f1c459be488b6751dc1b311

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b277398-f4fa-4af1-a6f3-47dc5a33ccf3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6459
x-amzn-requestid: b972726f-8a3e-4078-a11d-ea03474aed50
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7a2EGwJIAMFvSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae0b59-183339ab019f2cbe168c8744;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:49:13 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 3eTPwSH1LtuBH47UZ-6QsH1oqpN8vt4aC0i7sF5C9qlYDuqHFPqqKw==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 2c6b5dd77f1abe60653ce0454f344b64.cloudfront.net (CloudFront), 1.1 google
date: Mon, 02 Jan 2023 22:21:57 GMT
age: 203
etag: "615a0072aa450329f48fbf30c921cdb6670b249a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3f5efb8-d662-4b58-9319-e024ddd04331.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.8 kB (7755 bytes)
Hash
f863eb68713f937898561731454ef32e
b0ca943b8ca57da9cf2c69384e5c598bdfb48d33
4af7b5228d39d0e47a159422483fa6ccf683920241a50e4c6348d176a2783a6c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3f5efb8-d662-4b58-9319-e024ddd04331.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7755
x-amzn-requestid: 8a52ee34-c50c-4a05-9fa3-17770c3d61ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFSNAFbJoAMFu8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b1fd86-09de8074042bc69045896070;Sampled=0
x-amzn-remapped-date: Sun, 01 Jan 2023 21:39:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9ez9H5R9CFd9WT16zLi6dfKSQ7WSbzdbwgKWJ40QGqEcQiAV-uKnRQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Mon, 02 Jan 2023 21:58:53 GMT
age: 1587
etag: "b0ca943b8ca57da9cf2c69384e5c598bdfb48d33"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6390ab-134c-4c14-ae9e-9591400607a3.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10426 bytes)
Hash
2a92938ba6a58bd49a9938a24e404cba
2adeb5279f5a130a4ddc05199bc7b0b197a3cabc
1779831cec3a72aa82e2dab789c043da6a7fa432ff75a644733b0ee5f81b965b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6390ab-134c-4c14-ae9e-9591400607a3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10426
x-amzn-requestid: b6ad4eac-168a-477b-9883-f77fffc6468f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d5ZfRG7XIAMF7zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ad3c61-7766d0293ca12d6e2436ac66;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 07:06:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: fbLIBt1nYKjHIB6qMh22u5A92HgG0_f84qqlf5rqpwl4brcU5UB8eQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 02 Jan 2023 12:48:40 GMT
age: 34600
etag: "2adeb5279f5a130a4ddc05199bc7b0b197a3cabc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fb1a6c7-1739-4b4c-ae46-a2d718fb6c34.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.7 kB (5684 bytes)
Hash
e628ac1e25757ac0177f4a392d6b7ddb
d457e65190f24dce30af852e07b2d55f1fe5d808
b51790825ceb10ba7d5ec69081c098b7c82e72e4128dc1c23fa4f45495fbfa65

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fb1a6c7-1739-4b4c-ae46-a2d718fb6c34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5684
x-amzn-requestid: a8295357-6fcf-436d-8884-cbc529f3cba4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dxSEVGMcIAMFdXQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a9fd4e-3067d9957e1e512174ab34bc;Sampled=0
x-amzn-remapped-date: Mon, 26 Dec 2022 20:00:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q_lmKQecidAIpR-iDb_c9BHbyBBKWq4Pk0BOhSAQlqiYiOfJUs77HQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 02 Jan 2023 22:13:07 GMT
age: 733
etag: "d457e65190f24dce30af852e07b2d55f1fe5d808"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa20aba0-739b-4b21-8651-376503398453.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.2 kB (5150 bytes)
Hash
2eac6cb10f73a9133b10b29991d36d28
50dbba1b337a139007815016c1e1d91309a3ac0e
8f8783c086623f20451d3e5321e2ca2ca64d559370e94b0c2aeb8dfe3c95207d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa20aba0-739b-4b21-8651-376503398453.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5150
x-amzn-requestid: ebece8b2-8256-42b6-8ae3-3654d2b7b319
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d6ZBEFUZoAMF2OQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ada206-10bdc2ae5ee1d4494ebcdaad;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 14:19:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: M-erf0gwboJTnX5LWgKYpEjsq5bHuAShdResjK97rTMV1bQNDUof6w==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 02 Jan 2023 07:41:12 GMT
age: 53048
etag: "50dbba1b337a139007815016c1e1d91309a3ac0e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

173 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb9e048a-d832-4c9c-bbf4-523cf2df949e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
data
Size
173 kB (173332 bytes)
Hash
8c505578c8f51a28de650d31aee1550d
158601d96fa91e120c1110a971e61cb59bce6bb1
f8f53be7055f5d4463c375fd02977a3937487d2d8d6edb5af37b07d686b249f1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb9e048a-d832-4c9c-bbf4-523cf2df949e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10904
x-amzn-requestid: e672bb95-0521-41e2-b44d-18d108768f0c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFRyVGO0IAMFfsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b1fcdb-2e2b0c1e73840de93343ce08;Sampled=0
x-amzn-remapped-date: Sun, 01 Jan 2023 21:36:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3UtuICYoj0GBpoV6BMVX-CFd5qz_6GwWVkawcAeXa3LAt8HfwDUYVQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 02 Jan 2023 21:58:53 GMT
age: 1587
etag: "d23fda523cd1581a497c1e8d93b6a3a65bbbd05d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

icsa.org.in/public/dinzab/intlTelInput.js

67.222.136.231

200 OK

89 kB

URL HTTP/1.1
icsa.org.in/public/dinzab/intlTelInput.js
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
Unicode text, UTF-8 text, with very long lines (9885)
Size
89 kB (89336 bytes)
Hash
9146aa46d1f409004183b86f202c4607
717a6d53527fe31ec1c4eef9022b06e5d4d6f6a5
b188900aaff98a87fc69519ab04437aa735708b4b92f2adcab6937d2a1d42e37

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/intlTelInput.js HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW
Cookie: XSRF-TOKEN=eyJpdiI6IkpETm1NZGZJV3cwM3U0eWZjRVdCNkE9PSIsInZhbHVlIjoiNWRxb21xVFJDT0c4Sy9LclhZTFB1bytvN01UdFZtWDMyLzU3Q0dEL1hEWGZHM0FGZzN3TWM4MDRQMXVtNGRnTzVQNTlVZ3lMWm8za1VQWnh5V1lraDNnTzAxVjRhcWpadEV5RlRFYU1WRVJQRVJCdCs3MmJMWEttMEo4S1YwMlgiLCJtYWMiOiI3MjdmMWJkYzNlOWZhZWJmYmYwODBkNWE3N2EwZGEwZmE4M2VmYTIyNDFjMzdlMjNmNWM4OTlkMmVjMWMyY2I3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpmeFVlR0JTZ1JVNjk0QU54QWJvRlE9PSIsInZhbHVlIjoieE81YmRpckQ0YTRHMDFtUjBxMmtRUllHZzQvZHdzQXptdi9NdkJRLy82bnBrbTVPY2J6bWVBUTRiQlFLdHkwRWVtU1JtZDZ3THZHRXVuNlZDaE0zaC9pRUpzVTgzK1RSMnhDSVVTdHQvdmQ5QXo1NDdNaUpIU0pjRldpWDBaUGQiLCJtYWMiOiIwYzQ1MjBhYzJmMDliM2RmMjI3YzdjMGNhY2QwMDJkZGI5NTZhMjc5ZGIzZTdkZTU0MjIxZTg5OWJiYzVkNGMxIiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:20 GMT
Content-Type: application/javascript
Content-Length: 89336
Last-Modified: Tue, 31 May 2022 06:35:50 GMT
Accept-Ranges: bytes

icsa.org.in/public/dinzab/app.css

67.222.136.231

200 OK

914 kB

URL HTTP/1.1
icsa.org.in/public/dinzab/app.css
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
assembler source, ASCII text
Size
914 kB (913520 bytes)
Hash
74d0401d2b753a90be1d872aaa6e94b4
386f08a79bdc853e8a81585efcfc35ca90a49687
0762226aa4722b7c5349c825388089b0e3f8cdde6dd5dbb5f002d4fb014f568f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/app.css HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW
Cookie: XSRF-TOKEN=eyJpdiI6IkpETm1NZGZJV3cwM3U0eWZjRVdCNkE9PSIsInZhbHVlIjoiNWRxb21xVFJDT0c4Sy9LclhZTFB1bytvN01UdFZtWDMyLzU3Q0dEL1hEWGZHM0FGZzN3TWM4MDRQMXVtNGRnTzVQNTlVZ3lMWm8za1VQWnh5V1lraDNnTzAxVjRhcWpadEV5RlRFYU1WRVJQRVJCdCs3MmJMWEttMEo4S1YwMlgiLCJtYWMiOiI3MjdmMWJkYzNlOWZhZWJmYmYwODBkNWE3N2EwZGEwZmE4M2VmYTIyNDFjMzdlMjNmNWM4OTlkMmVjMWMyY2I3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpmeFVlR0JTZ1JVNjk0QU54QWJvRlE9PSIsInZhbHVlIjoieE81YmRpckQ0YTRHMDFtUjBxMmtRUllHZzQvZHdzQXptdi9NdkJRLy82bnBrbTVPY2J6bWVBUTRiQlFLdHkwRWVtU1JtZDZ3THZHRXVuNlZDaE0zaC9pRUpzVTgzK1RSMnhDSVVTdHQvdmQ5QXo1NDdNaUpIU0pjRldpWDBaUGQiLCJtYWMiOiIwYzQ1MjBhYzJmMDliM2RmMjI3YzdjMGNhY2QwMDJkZGI5NTZhMjc5ZGIzZTdkZTU0MjIxZTg5OWJiYzVkNGMxIiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:19 GMT
Content-Type: text/css
Content-Length: 913520
Last-Modified: Thu, 02 Jun 2022 16:34:20 GMT
Accept-Ranges: bytes

dispatching-centre.lasamericascargo.com/images/foo.png

135.181.58.223

200 OK

3.9 kB

URL HTTP/1.1
dispatching-centre.lasamericascargo.com/images/foo.png
IP
135.181.58.223:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 187 x 18, 8-bit/color RGBA, non-interlaced\012- data
Size
3.9 kB (3878 bytes)
Hash
11ff7152775863d8bf58eb585a3cfa46
25127f0e304d9145ef8a824a8be504664a799b7f
5c4b801e60c49235941cfc562ed465a951c937c668db31e3c1ba152513c672d3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /images/foo.png HTTP/1.1
Host: dispatching-centre.lasamericascargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://icsa.org.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Mon, 02 Jan 2023 22:25:11 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 04:36:32 GMT
Accept-Ranges: bytes
Content-Length: 3878
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
Content-Type: image/png

icsa.org.in/public/dinzab/logo.png

67.222.136.231

200 OK

2.0 kB

URL HTTP/1.1
icsa.org.in/public/dinzab/logo.png
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
PNG image data, 214 x 20, 8-bit/color RGBA, non-interlaced\012- data
Size
2.0 kB (1998 bytes)
Hash
5d14ab93691604e826e1319d53599eb9
78724360e9d25da584445b851e37bca05abe6b85
3f0c62b5ccdcdbf3b3ae3885f1e6959e2d937eba9b29dea9a6bdb98788041756

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/logo.png HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW
Cookie: XSRF-TOKEN=eyJpdiI6IkpETm1NZGZJV3cwM3U0eWZjRVdCNkE9PSIsInZhbHVlIjoiNWRxb21xVFJDT0c4Sy9LclhZTFB1bytvN01UdFZtWDMyLzU3Q0dEL1hEWGZHM0FGZzN3TWM4MDRQMXVtNGRnTzVQNTlVZ3lMWm8za1VQWnh5V1lraDNnTzAxVjRhcWpadEV5RlRFYU1WRVJQRVJCdCs3MmJMWEttMEo4S1YwMlgiLCJtYWMiOiI3MjdmMWJkYzNlOWZhZWJmYmYwODBkNWE3N2EwZGEwZmE4M2VmYTIyNDFjMzdlMjNmNWM4OTlkMmVjMWMyY2I3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpmeFVlR0JTZ1JVNjk0QU54QWJvRlE9PSIsInZhbHVlIjoieE81YmRpckQ0YTRHMDFtUjBxMmtRUllHZzQvZHdzQXptdi9NdkJRLy82bnBrbTVPY2J6bWVBUTRiQlFLdHkwRWVtU1JtZDZ3THZHRXVuNlZDaE0zaC9pRUpzVTgzK1RSMnhDSVVTdHQvdmQ5QXo1NDdNaUpIU0pjRldpWDBaUGQiLCJtYWMiOiIwYzQ1MjBhYzJmMDliM2RmMjI3YzdjMGNhY2QwMDJkZGI5NTZhMjc5ZGIzZTdkZTU0MjIxZTg5OWJiYzVkNGMxIiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:20 GMT
Content-Type: image/png
Content-Length: 1998
Last-Modified: Tue, 31 May 2022 06:35:50 GMT
Accept-Ranges: bytes

icsa.org.in/public/dinzab/app.js

67.222.136.231

200 OK

920 kB

URL HTTP/1.1
icsa.org.in/public/dinzab/app.js
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
Unicode text, UTF-8 text, with very long lines (7706), with CRLF line terminators
Size
920 kB (920095 bytes)
Hash
508afd6ff9ab52ce8f480d35568038d1
b5d9891100e0dce59cee59b75a098a1ae64c779b
8af18273c1833477cf810c4e3a76f483b6a6064571d25ea7742d8708378c8f09

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/app.js HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW
Cookie: XSRF-TOKEN=eyJpdiI6IkpETm1NZGZJV3cwM3U0eWZjRVdCNkE9PSIsInZhbHVlIjoiNWRxb21xVFJDT0c4Sy9LclhZTFB1bytvN01UdFZtWDMyLzU3Q0dEL1hEWGZHM0FGZzN3TWM4MDRQMXVtNGRnTzVQNTlVZ3lMWm8za1VQWnh5V1lraDNnTzAxVjRhcWpadEV5RlRFYU1WRVJQRVJCdCs3MmJMWEttMEo4S1YwMlgiLCJtYWMiOiI3MjdmMWJkYzNlOWZhZWJmYmYwODBkNWE3N2EwZGEwZmE4M2VmYTIyNDFjMzdlMjNmNWM4OTlkMmVjMWMyY2I3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpmeFVlR0JTZ1JVNjk0QU54QWJvRlE9PSIsInZhbHVlIjoieE81YmRpckQ0YTRHMDFtUjBxMmtRUllHZzQvZHdzQXptdi9NdkJRLy82bnBrbTVPY2J6bWVBUTRiQlFLdHkwRWVtU1JtZDZ3THZHRXVuNlZDaE0zaC9pRUpzVTgzK1RSMnhDSVVTdHQvdmQ5QXo1NDdNaUpIU0pjRldpWDBaUGQiLCJtYWMiOiIwYzQ1MjBhYzJmMDliM2RmMjI3YzdjMGNhY2QwMDJkZGI5NTZhMjc5ZGIzZTdkZTU0MjIxZTg5OWJiYzVkNGMxIiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:19 GMT
Content-Type: application/javascript
Content-Length: 920095
Last-Modified: Tue, 31 May 2022 06:35:50 GMT
Accept-Ranges: bytes

icsa.org.in/public/dinzab/flagscountry.png

67.222.136.231

200 OK

66 kB

URL HTTP/1.1
icsa.org.in/public/dinzab/flagscountry.png
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
PNG image data, 5630 x 15, 8-bit/color RGBA, non-interlaced\012- data
Size
66 kB (65960 bytes)
Hash
ae33acae404631e997ef8d91dae08ccd
19fae9a6aa4bb419eba378b0d0573906dc1be38a
38025784bedeb5e4cae496b131c85cabbd95ae0b1c0a3c9d9cb474d7262db04b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/flagscountry.png HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW
Cookie: XSRF-TOKEN=eyJpdiI6IkpETm1NZGZJV3cwM3U0eWZjRVdCNkE9PSIsInZhbHVlIjoiNWRxb21xVFJDT0c4Sy9LclhZTFB1bytvN01UdFZtWDMyLzU3Q0dEL1hEWGZHM0FGZzN3TWM4MDRQMXVtNGRnTzVQNTlVZ3lMWm8za1VQWnh5V1lraDNnTzAxVjRhcWpadEV5RlRFYU1WRVJQRVJCdCs3MmJMWEttMEo4S1YwMlgiLCJtYWMiOiI3MjdmMWJkYzNlOWZhZWJmYmYwODBkNWE3N2EwZGEwZmE4M2VmYTIyNDFjMzdlMjNmNWM4OTlkMmVjMWMyY2I3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpmeFVlR0JTZ1JVNjk0QU54QWJvRlE9PSIsInZhbHVlIjoieE81YmRpckQ0YTRHMDFtUjBxMmtRUllHZzQvZHdzQXptdi9NdkJRLy82bnBrbTVPY2J6bWVBUTRiQlFLdHkwRWVtU1JtZDZ3THZHRXVuNlZDaE0zaC9pRUpzVTgzK1RSMnhDSVVTdHQvdmQ5QXo1NDdNaUpIU0pjRldpWDBaUGQiLCJtYWMiOiIwYzQ1MjBhYzJmMDliM2RmMjI3YzdjMGNhY2QwMDJkZGI5NTZhMjc5ZGIzZTdkZTU0MjIxZTg5OWJiYzVkNGMxIiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:21 GMT
Content-Type: image/png
Content-Length: 65960
Last-Modified: Wed, 22 Sep 2021 15:36:48 GMT
Accept-Ranges: bytes

ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false

54.205.146.176

101 Switching Protocols

0 B

URL HTTP/1.1
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
IP
54.205.146.176:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false HTTP/1.1
Host: ws-mt1.pusher.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Sec-WebSocket-Version: 13
Origin: http://icsa.org.in
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4v55Y73bNO+pbk6V0CskIw==
Connection: keep-alive, Upgrade
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Date: Mon, 02 Jan 2023 22:25:21 GMT
Connection: upgrade
Server: nginx/1.17.7
Upgrade: websocket
Sec-WebSocket-Accept: uJ8cZLS5f9V+e7qBA7wF9yTrBzg=

icsa.org.in/public/dinzab/loading.gif

67.222.136.231

200 OK

18 kB

URL HTTP/1.1
icsa.org.in/public/dinzab/loading.gif
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
GIF image data, version 89a, 200 x 103\012- data
Size
18 kB (17585 bytes)
Hash
f3ffb13cf88b13ec557e6149371b361d
3c72f0855b4bd6e3b45675a5e8b08c8fb7a98f49
ce6a239fde88d8fb01c7a10d6f7b27d1bc23f5462d02f5ebb4927479fa32a302

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/loading.gif HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW
Cookie: XSRF-TOKEN=eyJpdiI6IkpETm1NZGZJV3cwM3U0eWZjRVdCNkE9PSIsInZhbHVlIjoiNWRxb21xVFJDT0c4Sy9LclhZTFB1bytvN01UdFZtWDMyLzU3Q0dEL1hEWGZHM0FGZzN3TWM4MDRQMXVtNGRnTzVQNTlVZ3lMWm8za1VQWnh5V1lraDNnTzAxVjRhcWpadEV5RlRFYU1WRVJQRVJCdCs3MmJMWEttMEo4S1YwMlgiLCJtYWMiOiI3MjdmMWJkYzNlOWZhZWJmYmYwODBkNWE3N2EwZGEwZmE4M2VmYTIyNDFjMzdlMjNmNWM4OTlkMmVjMWMyY2I3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpmeFVlR0JTZ1JVNjk0QU54QWJvRlE9PSIsInZhbHVlIjoieE81YmRpckQ0YTRHMDFtUjBxMmtRUllHZzQvZHdzQXptdi9NdkJRLy82bnBrbTVPY2J6bWVBUTRiQlFLdHkwRWVtU1JtZDZ3THZHRXVuNlZDaE0zaC9pRUpzVTgzK1RSMnhDSVVTdHQvdmQ5QXo1NDdNaUpIU0pjRldpWDBaUGQiLCJtYWMiOiIwYzQ1MjBhYzJmMDliM2RmMjI3YzdjMGNhY2QwMDJkZGI5NTZhMjc5ZGIzZTdkZTU0MjIxZTg5OWJiYzVkNGMxIiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:21 GMT
Content-Type: image/gif
Content-Length: 17585
Last-Modified: Tue, 31 May 2022 06:35:50 GMT
Accept-Ranges: bytes

ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false

34.232.128.159

101 Switching Protocols

0 B

URL HTTP/1.1
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
IP
34.232.128.159:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false HTTP/1.1
Host: ws-mt1.pusher.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Sec-WebSocket-Version: 13
Origin: http://icsa.org.in
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cs7dlOMdPxqHiPsHOvOo8A==
Connection: keep-alive, Upgrade
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Date: Mon, 02 Jan 2023 22:25:21 GMT
Connection: upgrade
Server: nginx/1.17.7
Upgrade: websocket
Sec-WebSocket-Accept: 7KwgCl9Y82eAd6dTqSIk7fy3BzA=

icsa.org.in/public/dinzab/favicon.gif

67.222.136.231

200 OK

2.2 kB

URL HTTP/1.1
icsa.org.in/public/dinzab/favicon.gif
IP
67.222.136.231:0
ASN
#30277 DFW-DATACENTER

File type
MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel\012- data
Size
2.2 kB (2238 bytes)
Hash
a6f1af8e79a11829ba9a66474b06bb97
d99e3ec7747c865033a8dfad43c9f49634404bc1
b0dbd00f3650fa6b931e678a9d8f79a405d23c7adf111ab91b1a01a0e7109807

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/favicon.gif HTTP/1.1
Host: icsa.org.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://icsa.org.in/public/CHJPOQFC52OnspsccSSL33AhcpMxGxxW
Cookie: XSRF-TOKEN=eyJpdiI6IkpETm1NZGZJV3cwM3U0eWZjRVdCNkE9PSIsInZhbHVlIjoiNWRxb21xVFJDT0c4Sy9LclhZTFB1bytvN01UdFZtWDMyLzU3Q0dEL1hEWGZHM0FGZzN3TWM4MDRQMXVtNGRnTzVQNTlVZ3lMWm8za1VQWnh5V1lraDNnTzAxVjRhcWpadEV5RlRFYU1WRVJQRVJCdCs3MmJMWEttMEo4S1YwMlgiLCJtYWMiOiI3MjdmMWJkYzNlOWZhZWJmYmYwODBkNWE3N2EwZGEwZmE4M2VmYTIyNDFjMzdlMjNmNWM4OTlkMmVjMWMyY2I3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpmeFVlR0JTZ1JVNjk0QU54QWJvRlE9PSIsInZhbHVlIjoieE81YmRpckQ0YTRHMDFtUjBxMmtRUllHZzQvZHdzQXptdi9NdkJRLy82bnBrbTVPY2J6bWVBUTRiQlFLdHkwRWVtU1JtZDZ3THZHRXVuNlZDaE0zaC9pRUpzVTgzK1RSMnhDSVVTdHQvdmQ5QXo1NDdNaUpIU0pjRldpWDBaUGQiLCJtYWMiOiIwYzQ1MjBhYzJmMDliM2RmMjI3YzdjMGNhY2QwMDJkZGI5NTZhMjc5ZGIzZTdkZTU0MjIxZTg5OWJiYzVkNGMxIiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Jan 2023 22:25:21 GMT
Content-Type: image/gif
Content-Length: 2238
Last-Modified: Tue, 31 May 2022 06:35:50 GMT
Accept-Ranges: bytes

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (17)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations