Report - pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html

Report Overview

Submitted URL
pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
IP
104.18.2.35
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-07 17:18:01
Access
public
Website Title
Log In to My Account | American Express US
Final URL
pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/7abfd2ee-76d1-4495-8f1d-acb054cc4008
Tags
american_express financial phishing
urlquery detections
Phishing - American Express

Detections

urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-05-07	437 B	32 kB	151.101.2.137
ajax.aspnetcdn.com	693	2010-10-12	2012-05-24	2024-05-06	389 B	31 kB	152.199.19.160
cdaas.americanexpress.com	36912	1995-06-04	2017-10-27	2024-04-30	1.3 kB	54 kB	139.71.113.91
stylesheet-css.pages.dev	unknown	unknown	No data	No data	387 B	139 kB	172.66.47.113
pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev	unknown	unknown	No data	No data	997 B	726 kB	104.18.2.35
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-05-06	404 B	5.5 kB	104.17.24.14
www.aexp-static.com	12486	2010-10-07	2012-05-24	2024-05-03	6.5 kB	417 kB	104.110.3.84
icm.aexp-static.com	14960	2010-10-07	2014-03-19	2024-04-29	422 B	3.7 kB	104.110.3.84
static.wixstatic.com	5648	2013-04-10	2013-06-07	2024-05-06	434 B	47 kB	143.204.55.40
www.americanexpress.com	13613	1995-06-04	2013-04-24	2024-04-26	395 B	1.9 kB	104.110.22.253
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2024-05-06	422 B	28 kB	104.18.11.207

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-07	medium	pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html	American Express

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js	87 kB	2023-03-07	2024-05-19
Pretty URL ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js IP 152.199.19.160 ASN #15133 EDGECAST Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-05-19 18:18:35 Times Seen114871 Hash a09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js	20 kB	2023-03-07	2024-05-19
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:35 Last Seen2024-05-19 09:12:25 Times Seen3767 Hash 053305c2b293c27c02523cda42962c09 556b0af7346b9e21a8eea1be8b195b563169ecd5 be483938eb34538b970684f72e312f62652e84b42b7ad86953962d1ce2217c44 Loading...

	pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/7abfd2ee-76d1-4495-8f1d-acb054cc4008	4.2 kB	2024-05-07	2024-05-07
Pretty URL pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/7abfd2ee-76d1-4495-8f1d-acb054cc4008 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-07 19:18:07 Last Seen2024-05-07 19:18:07 Times Seen1 Hash 413d6add716a145fa617440240abbb5c a0431ffce92261a5395c197b538324beacab5948 e5d150848c507bd8a86d45041956224564b009780168ce017394e1aa45d9e265 Loading...

	pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/7abfd2ee-76d1-4495-8f1d-acb054cc4008	309 B	2024-05-07	2024-05-18
Pretty URL pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/7abfd2ee-76d1-4495-8f1d-acb054cc4008 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-07 19:18:07 Last Seen2024-05-18 07:16:41 Times Seen2 Hash 5fd8a3eb5e95691c0a81d0890b68971b cc4f5d856175a1a24ed4a79aa8090b90a446ab3c 0fb33905cbef157a5b311b9ea6efcbf86ccbe82072a7eecf47c3ddffb89c5fea Loading...

HTTP Transactions (25)

URL IP Response Size

pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html

104.18.2.35

200 OK

726 kB

URL User Request GET HTTP/1.1
pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
IP
104.18.2.35:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0
ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT

File type
HTML document, ASCII text, with very long lines (65145)
Size
726 kB (725867 bytes)
Hash
8c9ac9de67de559b03b17cd762d25c54
c652787541e367b093f6bf300d60d3ed9550a7e4
e4dd9f11df55bb74e4bc54e0390d9e11febcab4936b1fd9227f827aa1ff5ffb9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - American Express
OpenPhish	phishing	American Express

HTTP Headers

GET /http.html HTTP/1.1
Host: pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:34 GMT
Content-Type: text/html
Content-Length: 725867
Connection: keep-alive
Accept-Ranges: bytes
ETag: "8c9ac9de67de559b03b17cd762d25c54"
Last-Modified: Tue, 07 May 2024 03:18:48 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8802dd3fcc8e712d-OSL

code.jquery.com/jquery-3.6.0.min.js

151.101.2.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.6.0.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
31 kB (30875 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 07 May 2024 17:17:34 GMT
age: 958436
x-served-by: cache-lga21931-LGA, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 3, 518104
x-timer: S1715102255.610635,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2

ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js

152.199.19.160

200 OK

30 kB

URL GET HTTP/2
ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js
IP
152.199.19.160:443
ASN
#15133 EDGECAST

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subject*.vo.msecnd.net
Fingerprint86:E0:37:E4:B1:31:51:81:DD:54:33:82:FF:4D:EB:D1:15:5F:65:C4
ValidityTue, 30 Jan 2024 00:00:00 GMT - Thu, 30 Jan 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
30 kB (30394 bytes)
Hash
a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

HTTP Headers

GET /ajax/jQuery/jquery-3.3.1.min.js HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 3769054
cache-control: public,max-age=31536000
content-type: application/javascript
date: Tue, 07 May 2024 17:17:34 GMT
etag: "80288516b793d31:0"
last-modified: Mon, 22 Jan 2018 19:27:49 GMT
server: ECAcc (ska/F6AE)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 30394
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js

104.17.24.14

200 OK

4.5 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text
Size
4.5 kB (4517 bytes)
Hash
053305c2b293c27c02523cda42962c09
556b0af7346b9e21a8eea1be8b195b563169ecd5
be483938eb34538b970684f72e312f62652e84b42b7ad86953962d1ce2217c44

HTTP Headers

GET /ajax/libs/jquery.mask/1.14.10/jquery.mask.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 17:17:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 4517
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-4e98"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 504642
expires: Sun, 27 Apr 2025 17:17:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZqbPugASqDHr4TAoVNnkkgC6TK07qILYcIbdXPJUYNGqS%2Brv05NmdYXB2386%2Fe4bvEg7E8PtYnff3r3eIC%2BFCdlLTWdfUohkNFNM9%2FrXJNgW8RS437YmWuFCQ5rc54OrAoQzKhYv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8802dd45289a56b4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/styles/dls.min.css

104.110.3.84

200 OK

51 kB

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/styles/dls.min.css
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
51 kB (51294 bytes)
Hash
4bd9811ba7caedefaf1d5b4d348b5402
61de1ffedee8e64b1b383710f42eb9539aa0fe85
3488e209e7ecf29039fda4dfc5a98bfabb7a682c79bdb0d3e848dc5509fdc776

HTTP Headers

GET /cdaas/one/statics/axp-dls/5.11.2/package/dist/styles/dls.min.css HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 10 Oct 2019 22:16:00 GMT
etag: W/"5d9fada0-5655a"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
x-frame-options: DENY
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-security-policy: default-src 'self';
content-encoding: gzip
content-length: 51294
date: Tue, 07 May 2024 17:17:34 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/axp-static-assets/2.14.2/package/dist/img/flags/dls-flag-us.svg

104.110.3.84

200 OK

587 B

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/axp-static-assets/2.14.2/package/dist/img/flags/dls-flag-us.svg
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
587 B (587 bytes)
Hash
56addba553083eb384b100cbb7e8632f
f718526f1ef720e5d361536615595d5bfc3c9688
5e60a20da0f769a6260d4ed755d615da930b87c62436f807a6ff32d000017d18

HTTP Headers

GET /cdaas/one/statics/axp-static-assets/2.14.2/package/dist/img/flags/dls-flag-us.svg HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Fri, 04 Sep 2020 17:15:25 GMT
etag: W/"5f52762d-15f8"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 587
date: Tue, 07 May 2024 17:17:34 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.7.1/package/dist/img/logos/dls-logo-line.svg

104.110.3.84

200 OK

712 B

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.7.1/package/dist/img/logos/dls-logo-line.svg
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
712 B (712 bytes)
Hash
ebbbafae5bdc09d7ded7cef405413ac5
7a635abed6420b798397c62270d2df8b084cd8a8
c39e8554624a4b74e596d2bfa96bdd4d30dbc395532ab32e67591c0e929080e9

HTTP Headers

GET /cdaas/one/statics/axp-static-assets/1.7.1/package/dist/img/logos/dls-logo-line.svg HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Fri, 18 Oct 2019 19:50:49 GMT
etag: W/"5daa1799-693"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 712
date: Tue, 07 May 2024 17:17:34 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-bluebox-solid.svg

104.110.3.84

200 OK

989 B

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-bluebox-solid.svg
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
989 B (989 bytes)
Hash
d97d46fe48d19d2c4f236b9a2cfee5f3
a164f3588bb4b601c472461a24a6eec265bcf8c8
028f643755987211bf2f3add6c62ae1870a888cf2f4fe3040a4fac7dce2543ab

HTTP Headers

GET /cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-bluebox-solid.svg HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 31 Oct 2019 17:37:19 GMT
etag: W/"5dbb1bcf-962"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 989
date: Tue, 07 May 2024 17:17:34 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-stack.svg

104.110.3.84

200 OK

743 B

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-stack.svg
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
743 B (743 bytes)
Hash
78af472d7f07aacd83d8e224c119950a
b04f7889c9277106b40ef90b7b19c1091884d876
fc69234936c0df004440641a5df9ee1e3c3532df5780984f0f636e85e8788519

HTTP Headers

GET /cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-stack.svg HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 31 Oct 2019 17:37:19 GMT
etag: W/"5dbb1bcf-66e"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 743
date: Tue, 07 May 2024 17:17:34 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-stack-white.svg

104.110.3.84

200 OK

742 B

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-stack-white.svg
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
742 B (742 bytes)
Hash
7c6c3493f958764fd6b2a550a98ab676
0d89801ff7089bcfddda2f22ab37da7155948ff7
56b8e90244c34621e294d3357edfef9a1467e501773ed21b25dc6367ab3d7803

HTTP Headers

GET /cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-stack-white.svg HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 31 Oct 2019 17:37:19 GMT
etag: W/"5dbb1bcf-66b"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 742
date: Tue, 07 May 2024 17:17:34 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

icm.aexp-static.com/content/dam/chat/prod/lechat/css/chatFrame.css?70

104.110.3.84

200 OK

3.3 kB

URL GET HTTP/2
icm.aexp-static.com/content/dam/chat/prod/lechat/css/chatFrame.css?70
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
3.3 kB (3257 bytes)
Hash
82650bd01c3776e0a465060e6d6dc506
a600a101a6b11a7cf38c9a0eb60af53f4352e297
43cd810f097c80c86e207e3115cb4bffbda760f9001e7a8e2329afab8985919d

HTTP Headers

GET /content/dam/chat/prod/lechat/css/chatFrame.css?70 HTTP/1.1
Host: icm.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
accept-ranges: bytes
access-control-allow-origin: *
content-encoding: br
etag: "46ec-59725f3079b96-gzip"
last-modified: Sun, 05 May 2024 16:11:39 GMT
server: Akamai Resource Optimizer
strict-transport-security: max-age=63072000; includeSubdomains;
vary: Accept-Encoding
x-content-type-options: nosniff
content-length: 3257
cache-control: public, must-revalidate, max-age=14400
date: Tue, 07 May 2024 17:17:34 GMT
X-Firefox-Spdy: h2

cdaas.americanexpress.com/myca/oce/latest/content/css/oce-min.css

139.71.113.91

200 OK

53 kB

URL GET HTTP/1.1
cdaas.americanexpress.com/myca/oce/latest/content/css/oce-min.css
IP
139.71.113.91:443
ASN
#6307 AMERICAN-EXPRESS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectcdaas.americanexpress.com
Fingerprint85:14:2D:76:FA:1D:AD:6F:B8:10:2B:70:65:AB:0B:16:81:50:E9:BF
ValidityWed, 11 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
53 kB (52739 bytes)
Hash
c8a96f8bbff4bcaf320bd6b053ef727c
9d178afc85a4a0b02c70db494e6546c263958e44
50e7b1a6748965cdf1ef90c53928314c31002b8d81891c5f713b532ba53f8543

HTTP Headers

GET /myca/oce/latest/content/css/oce-min.css HTTP/1.1
Host: cdaas.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 07 May 2024 17:17:35 GMT
Content-Type: text/css
Last-Modified: Tue, 23 Apr 2024 18:22:50 GMT
Connection: keep-alive
ETag: W/"6627fc7a-446e4"
Timing-Allow-Origin: *
Vary: Origin
Cache-Control: max-age=31536000, must-revalidate
Content-Encoding: gzip
Transfer-Encoding: chunked

static.wixstatic.com/media/369c26_b396f2977e5a40839e2fc77a6f9aac2b~mv2.gif

143.204.55.40

200 OK

46 kB

URL GET HTTP/2
static.wixstatic.com/media/369c26_b396f2977e5a40839e2fc77a6f9aac2b~mv2.gif
IP
143.204.55.40:443
ASN
#16509 AMAZON-02

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerSectigo Limited
Subject*.wixstatic.com
FingerprintB2:F9:78:29:9F:1D:8B:05:44:BE:8D:28:55:FF:F7:E1:35:EE:21:C8
ValidityMon, 01 Jan 2024 00:00:00 GMT - Sat, 29 Jun 2024 23:59:59 GMT

File type
GIF image data, version 89a, 231 x 231
Size
46 kB (46309 bytes)
Hash
cb93719526bfbcc31f4cd6a067904c0d
ccc200eb3eac8872f657643d1cfc5efabe77d08b
be09957b988dd42f4fe1655f4869cb79027e5e70a6c211db9a3caa0ac48806ff

HTTP Headers

GET /media/369c26_b396f2977e5a40839e2fc77a6f9aac2b~mv2.gif HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/gif
content-length: 46309
server: openresty/1.21.4.1
date: Mon, 08 Apr 2024 12:14:06 GMT
expires: Mon, 08 Apr 2024 13:14:06 GMT
cache-control: public, max-age=15552000, immutable
last-modified: Sat, 13 Aug 2022 13:49:12 GMT
etag: "cb93719526bfbcc31f4cd6a067904c0d"
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Length
timing-allow-origin: *
x-seen-by: gcp.us-central-1.media-router-6fb99f9c5-nj6wj
via: 1.1 google, 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: q7yyrCHKpftKx-7879hPdxvYDnNyTG7zHbS06AcgVjevWXW6czflPw==
age: 2523809
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/@americanexpress/static-assets/2.27.0/package/dist/fonts/3be50273-0b2e-4aef-ae68-882eacd611f9-3.woff

104.110.3.84

200 OK

37 kB

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/@americanexpress/static-assets/2.27.0/package/dist/fonts/3be50273-0b2e-4aef-ae68-882eacd611f9-3.woff
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 37153, version 1.0
Size
37 kB (37153 bytes)
Hash
c0e3b5653c803f69c05862736a765e4a
4ae2328614d48c62388c8409cbd1d9e7b5d4dfda
48050d8eeb740bb31aaad9eb82bcd4a493b474c9385eeda5fc2ca2ea279cffad

HTTP Headers

GET /cdaas/one/statics/@americanexpress/static-assets/2.27.0/package/dist/fonts/3be50273-0b2e-4aef-ae68-882eacd611f9-3.woff HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://stylesheet-css.pages.dev/
Origin: https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: font/woff
content-length: 37153
last-modified: Mon, 01 Aug 2022 18:53:00 GMT
etag: "62e8210c-9121"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
access-control-allow-origin: *
access-control-allow-methods: GET
accept-ranges: bytes
date: Tue, 07 May 2024 17:17:35 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Medium.woff

104.110.3.84

200 OK

73 kB

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Medium.woff
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 72956, version 0.0
Size
73 kB (72956 bytes)
Hash
ba8101d8a4e5a90bd9d07a05afd8466d
f616f6471fc3c3badb3cb8b693d4329deb2e2d3b
d5d7822393d3103ec421f72f09c7f7c78948c68da112031c0afd1c0b0da92c08

HTTP Headers

GET /cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Medium.woff HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://www.aexp-static.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: font/woff
content-length: 72956
last-modified: Thu, 10 Oct 2019 22:15:47 GMT
etag: "5d9fad93-11cfc"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
access-control-allow-origin: *
access-control-allow-methods: GET
accept-ranges: bytes
date: Tue, 07 May 2024 17:17:35 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/iconfont/dls-icons.woff

104.110.3.84

200 OK

40 kB

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/iconfont/dls-icons.woff
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 40332, version 1.0
Size
40 kB (40332 bytes)
Hash
6d616bd3a5427bc276ed155995b12294
71f3cd6fb8f03d6a56962802058d8a0830122d4c
80239f6b5f0ac5edc4a589c5bba51392f015dddf3c2d7ba9ce922058d63d8ec2

HTTP Headers

GET /cdaas/one/statics/axp-dls/5.11.2/package/dist/iconfont/dls-icons.woff HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://www.aexp-static.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: font/woff
content-length: 40332
last-modified: Thu, 10 Oct 2019 22:15:49 GMT
etag: "5d9fad95-9d8c"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
access-control-allow-origin: *
access-control-allow-methods: GET
accept-ranges: bytes
date: Tue, 07 May 2024 17:17:35 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Light.woff

104.110.3.84

200 OK

74 kB

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Light.woff
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 73604, version 0.0
Size
74 kB (73604 bytes)
Hash
7294a33a9bec0eae9f3adddbcfe009c9
6e2cf6a463aab5c238468b67831a30dbdf430bda
e9f9fab2d479b79aca1d3d3bf0a9fc36131752869363180bef040905a008cc1b

HTTP Headers

GET /cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Light.woff HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://www.aexp-static.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: font/woff
content-length: 73604
last-modified: Thu, 10 Oct 2019 22:15:47 GMT
etag: "5d9fad93-11f84"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
access-control-allow-origin: *
access-control-allow-methods: GET
accept-ranges: bytes
date: Tue, 07 May 2024 17:17:36 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Regular.woff

104.110.3.84

200 OK

77 kB

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Regular.woff
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 76792, version 0.0
Size
77 kB (76792 bytes)
Hash
6824f89aed1f9cea50aeae0f94e590e4
b110bcca0524f8b001826673291c6201fbebd161
7ef974010abfe71fb92dc3f53e3948e1e544cf6821bf9802ea0bf35fa8fe5af6

HTTP Headers

GET /cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Regular.woff HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://www.aexp-static.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: font/woff
content-length: 76792
last-modified: Thu, 10 Oct 2019 22:15:47 GMT
etag: "5d9fad93-12bf8"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
access-control-allow-origin: *
access-control-allow-methods: GET
accept-ranges: bytes
date: Tue, 07 May 2024 17:17:36 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

cdaas.americanexpress.com/myca/oce/latest/content/images/common/cm15-double-card.png

139.71.113.91

404 Not Found

146 B

URL GET HTTP/1.1
cdaas.americanexpress.com/myca/oce/latest/content/images/common/cm15-double-card.png
IP
139.71.113.91:443
ASN
#6307 AMERICAN-EXPRESS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectcdaas.americanexpress.com
Fingerprint85:14:2D:76:FA:1D:AD:6F:B8:10:2B:70:65:AB:0B:16:81:50:E9:BF
ValidityWed, 11 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /myca/oce/latest/content/images/common/cm15-double-card.png HTTP/1.1
Host: cdaas.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Tue, 07 May 2024 17:17:35 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive

www.aexp-static.com/cdaas/one/statics/@americanexpress/static-assets/2.27.0/package/dist/iconfont/dls-icons.woff?v=2.27.0

104.110.3.84

200 OK

57 kB

URL GET HTTP/2
www.aexp-static.com/cdaas/one/statics/@americanexpress/static-assets/2.27.0/package/dist/iconfont/dls-icons.woff?v=2.27.0
IP
104.110.3.84:443
ASN
#16625 AKAMAI-AS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectm.americanexpress.com
Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26
ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 56824, version 1.0
Size
57 kB (56824 bytes)
Hash
0c8ca2c3b2337e728ee9e14246a5d58f
69f859084816f38c2e5531a2b46c4059b71d9f9b
3530f9432334e47cf7e84f8e0ce64f80d45d7329f44f691a3eb30977a4bbf052

HTTP Headers

GET /cdaas/one/statics/@americanexpress/static-assets/2.27.0/package/dist/iconfont/dls-icons.woff?v=2.27.0 HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://stylesheet-css.pages.dev/
Origin: https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: font/woff
content-length: 56824
last-modified: Mon, 01 Aug 2022 18:53:07 GMT
etag: "62e82113-ddf8"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
access-control-allow-origin: *
access-control-allow-methods: GET
accept-ranges: bytes
date: Tue, 07 May 2024 17:17:36 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2

www.americanexpress.com/favicon.ico

104.110.22.253

1.4 kB

URL GET
www.americanexpress.com/favicon.ico
IP
104.110.22.253:0
ASN
#16625 AKAMAI-AS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectwww.americanexpress.com
Fingerprint64:A2:B0:4D:11:47:D0:C0:37:73:B5:62:91:90:F7:0D:1F:42:FA:10
ValidityThu, 03 Aug 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
1.4 kB (1381 bytes)
Hash
974ccc6c4c6e1c7f04606973beb3ba20
0f96f86d488a4b5805744fa067c3cfd57c928406
265d3f591d92fadfe95f4660c382ee64a23538a7353b9880434205a102833de0

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
strict-transport-security: max-age=15552000;
last-modified: Fri, 07 Jun 2019 04:05:21 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1381
x-cnection: close
content-type: image/x-icon
date: Tue, 07 May 2024 17:17:36 GMT
set-cookie: agent-id=6a46ad8f-e220-46c8-bdc4-d22df8f26f35; expires=Wed, 07-May-2025 17:17:36 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2

cdaas.americanexpress.com/myca/oce/latest/content/images/common/cid-double.png

139.71.113.91

404 Not Found

146 B

URL GET HTTP/1.1
cdaas.americanexpress.com/myca/oce/latest/content/images/common/cid-double.png
IP
139.71.113.91:443
ASN
#6307 AMERICAN-EXPRESS

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerDigiCert Inc
Subjectcdaas.americanexpress.com
Fingerprint85:14:2D:76:FA:1D:AD:6F:B8:10:2B:70:65:AB:0B:16:81:50:E9:BF
ValidityWed, 11 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /myca/oce/latest/content/images/common/cid-double.png HTTP/1.1
Host: cdaas.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Tue, 07 May 2024 17:17:36 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive

maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css

104.18.11.207

200 OK

28 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (27303)
Size
28 kB (27466 bytes)
Hash
4fbd15cb6047af93373f4f895639c8bf
12d6861075de8e293265ff6ff03b1f3adcb44c76
ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5

HTTP Headers

GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 17:17:34 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"4fbd15cb6047af93373f4f895639c8bf"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 10/31/2023 18:58:32
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1047
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 9bd489b3b47817325036093612d128df
cdn-cache: HIT
cf-cache-status: HIT
age: 594344
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8802dd44ff817127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

stylesheet-css.pages.dev/css.css

172.66.47.113

200 OK

138 kB

URL GET HTTP/2
stylesheet-css.pages.dev/css.css
IP
172.66.47.113:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerGoogle Trust Services LLC
Subjectstylesheet-css.pages.dev
FingerprintF9:32:86:90:B8:43:79:C3:CD:DE:54:94:A7:3F:B9:2B:94:8A:64:38
ValiditySat, 13 Apr 2024 10:19:23 GMT - Fri, 12 Jul 2024 10:19:22 GMT

File type

Size
138 kB (138192 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /css.css HTTP/1.1
Host: stylesheet-css.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 17:17:34 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"93c9cd8d05eaa51449c369e779be7960"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q1NuxdlhQqvLq%2B3WzBBNwEv88ebIiAn1Vff9569elG2bY2LYkel3Ta30N%2Bx%2BxSwbX0jddGvVaSXZNUdXizqr2Lgn7Eq5oTeoELH8Y%2FTFXuA3j6Sozmy6XHj5k8%2FaBqkoUTZki%2F4oGmdd0zQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8802dd450dcfb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/favicon.ico

0.0.0.0

0 B

URL GET
pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Certificate
IssuerLet's Encrypt
Subject*.r2.dev
Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0
ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - American Express

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-16127978f7cf43f4b4375a52dfd93f3f.r2.dev/http.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (25)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size