f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/uZbx-si.png
172.66.44.151200 OK 5.4 kB URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/uZbx-si.png
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type PNG image data, 42 x 702, 8-bit grayscale, non-interlaced\012- data
Hash 51147eb9734c3c0caf22aa77a80d96f0
dc33807cd0c0c35bb98d8e23efe2d625137a43f5
92d8510869b3d581401a93130fa72e4b54c5bf28dc8005994c5248d9afbfc37b
Analyzer Verdict Alert OpenPhish phishing Office365
GET /uZbx-si.png HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: image/png
content-length: 5377
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "34311ed25364f4b689439e7e38940920"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2Bkbpg7tpfBDvy87cKi24PYrwLmggLVapYTan3Zehf6BgxyiQyVVrxGuXWcLs14L9y%2Fki2d0k3t1sWrY4eOrwqWilK2CSePwHN1cG88xHz1SAeV%2BUXBAZtGNkjxmoS%2BkgnnX%2BjMNg6hkZ9L%2FaRe%2BDSgu6BiMrrHoyM2ZQFa7v%2Ba3VHMTRsULWzgeqheYgk0CeoDKY38j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fb8e075685-OSL
alt-svc: h3=":443"; ma=86400
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/bg.png
172.66.44.151200 OK 838 kB URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/bg.png
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size 838 kB (838375 bytes)
Hash 400502ee2726928f1b2314404b53dafa
bda6258ea064b64735ec156340f95ce97fac2df8
ee94f46aecf6fbed409cc7575ec3beca259bc1d8863401fe9325959426e0d270
Analyzer Verdict Alert OpenPhish phishing Office365
GET /bg.png HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: image/png
content-length: 838375
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "853638619e97aa0cc7632f2f296d7409"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rc0VMBSV2V4jBdeSXyCMhHD7U99lKDFtUnZ16YpAQe5PlwDGSTP5KeTuBCRbrQeSLkvBasocKV%2FsnHJZ17TyOukX%2BWI4rZFMvy6OVHq04bqYixYa61iryIYeRha48cGDB%2Bp12s9bSAgREjX1rWPxlYJgUi4tmuNM8GqW3Dc1CHGfftIpHT%2B9864YAcm2%2FDjXIUZsswHl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fb8df75685-OSL
alt-svc: h3=":443"; ma=86400
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/minimize.jpg
172.66.44.151200 OK 17 kB URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/minimize.jpg
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=39, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=180], baseline, precision 8, 180x39, components 3\012- data
Hash 4bf52eb9b3efce840add1a90d83a40e5
6348a7617dfce3165e07af53a48df7892d62ffe1
a85f1e749a829c5c909837844c6b53ce0a9ae2adb7c8eac0e7b96c372c679a0d
Analyzer Verdict Alert OpenPhish phishing Office365
GET /minimize.jpg HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: image/jpeg
content-length: 17173
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "dc90498951704acd42f22e6aa9878703"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DlLSDUTKMiiOAwu9n%2FnlWwo7Flm%2Ba1bhL6fwgdqdSKMSGDjWgRaQhpbF6SlMmfu%2BkGLl9ctpUBF4vN4lWB6TdMEw8bEma7VHHs%2Fg4LWJjgPWQKpaNHaVGjyvdhTREerZIN68nUmDuHIpwkOwYvA6fyB6US8OfjeXg%2BHV%2FYH3mlTaZh9tj4hCUOk3AQ0RcG5blbocIaMS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fb8dfa5685-OSL
alt-svc: h3=":443"; ma=86400
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/microsoft.png
172.66.44.151200 OK 1.0 kB URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/microsoft.png
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash bf2b460590fbb9d8e9611a6e9006b816
561e1dab259d61e798b3ce380527b71b61074ff3
ee4bc5fe81fa7c1e8497d79c9c8a96485df217092d334e9b48fa8840fed11d03
Analyzer Verdict Alert OpenPhish phishing Office365
GET /microsoft.png HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: image/png
content-length: 1045
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "784ab5e987249ef1422816edc26a250f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xV1IFj0jC9kDIXhzGfgeJ6CYKw78%2FjGqeFOzYiWJzi4i7UCjtYgwyj2lU5q39GVWvzAKX1NRyxLQJU%2FgKjttzf5u41%2FXwfY6bDIMFOyruOD1GBRjZMD9B5AU1O5%2FSvxK72IhQ9iTikDqHmH03Fp0nRBN7QnRFgNLraJSsbKlv0SgSoo7uf1E1yBBdtHzzNCWiiiA69UF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fb8dfc5685-OSL
alt-svc: h3=":443"; ma=86400
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/qsbs-firewall.png
172.66.44.151200 OK 920 B URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/qsbs-firewall.png
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type PNG image data, 77 x 63, 8-bit colormap, non-interlaced\012- data
Hash b0495ede4c875843fec037c794e9ff9a
c813aefba255a5cc53aea7811f987ccb551c3128
52b762d47c066e16300675d56cc359b504ffd3239438c96eb973864311bb7b79
Analyzer Verdict Alert OpenPhish phishing Office365
GET /qsbs-firewall.png HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: image/png
content-length: 920
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "5edd37fd65d5b103dcc00caa1332bc56"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MHUufGLA%2FkQZbe8qAcPb%2BqJvx%2BUdvAtCCjy%2F51hneHosV3sqyP5XaUVie61Qd%2FCo7D4MVJTtsgPs8R425glPJdCtmynT8GDshfFR9hunxEng7qzfW0%2BgRKbiU9bs%2BM9HpFZbSJ7iITrHgpQQhTXbNeTlFwS21XmL5GwwasT16fdMPhKnNYiXb4xlDLddB9Wl5XYklqat"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fb8dfd5685-OSL
alt-svc: h3=":443"; ma=86400
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/s-S4-acc.png
172.66.44.151200 OK 813 B URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/s-S4-acc.png
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type PNG image data, 77 x 72, 8-bit colormap, non-interlaced\012- data
Hash d648c1837d01495eccd63e053491f72a
991d8f6c72777239472410d6129fd5f25ed9d134
9edbf56b360080f5d6765dce77353b8130e9f8316ad34c68f6c2792cdc446321
Analyzer Verdict Alert OpenPhish phishing Office365
GET /s-S4-acc.png HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: image/png
content-length: 813
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "e356d1e70818372f773cde41752151cf"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DxBTz5DMnwARDl6mu1mvnAfrqR5vs%2Fw1GWU6DyXypDKwAu8zaOlpLYV0%2B325QtvCXpYZBQ%2BK1OeXe%2B1pOtvvsG6vD4o3JlolqRdwVjTYoFPyiMVuBykvAd72oR7WgTcvkMQ%2FsA0e8MgYBS%2FcZlyXOaOilTJ0A%2FB9hZ9VBYNtDECEDemfTzsZIVMeZDbXqd8Y%2FGPj4%2FYw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fb8dfe5685-OSL
alt-svc: h3=":443"; ma=86400
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/Z5BR-network.png
172.66.44.151200 OK 607 B URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/Z5BR-network.png
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type PNG image data, 63 x 70, 8-bit colormap, non-interlaced\012- data
Hash 2cd03a547f00cad010f9038619df45de
912f919836a77a514c76b990aceaf5e930a24024
c56a8ae4818963e0d71eda4ebf46b4f2cdd3a238537dc8e99711fb690d272a73
Analyzer Verdict Alert OpenPhish phishing Office365
GET /Z5BR-network.png HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: image/png
content-length: 607
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "3d8a46d092e3c9e8378213ac9c4e3810"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q5vPW%2BuyfmBlCKNdAznDh3oEJKiZLSaMrdADAFlJYlhKk4GXtBZjE4H9u2wL1NRw9u88u42ZAKMocv9ky849o30o0G%2BQ6P3sNrMNf2d4wwOYH44JaIVqfm4S1mbjGstFflbuTFXsbAXT9O6BHiYZj7yxMm0UGiQ6w8j630MJmhwRg1uI5ApbxbTEfOcSmQZ8m0hH4566"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fb8e025685-OSL
alt-svc: h3=":443"; ma=86400
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/-EBq-current.png
172.66.44.151200 OK 1.2 kB URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/-EBq-current.png
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type PNG image data, 27 x 28, 8-bit colormap, non-interlaced\012- data
Hash 35629cc2adc804353a548305f1217206
cda6e89c5f6a644683aea6999a5d11e00dc64275
c1d52e31f7fc13cbb3efca8b0ec937ddd97a5ec545c4dad26193429db10d8662
Analyzer Verdict Alert OpenPhish phishing Office365
GET /-EBq-current.png HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: image/png
content-length: 1162
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "33f374d5968d647dae6284f7656c98be"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jmeut4R6L8H0qUgKrgX6mAAGN1M%2F33THeMgdPeYsxxVGdO0eOdFqYulew5oJ30qYheTjB12%2BcCYWuQSc2%2Fm70BCpeARa%2FwcnLCx8rZlzUGWA66uS0qE105ccfCQjgz8lFgMYy%2Bh3H1EjMw1ZqEnF%2FbaGkrKZ4IZmGu4vcU9PzZmxFSd8mZAJlWkddN%2FlpMQM2fGn268f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fb8e085685-OSL
alt-svc: h3=":443"; ma=86400
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/nOxp-sett.png
172.66.44.151200 OK 463 B URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/nOxp-sett.png
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type PNG image data, 33 x 31, 8-bit colormap, non-interlaced\012- data
Hash 905d91c276116928fa306ea732723fa9
092604f6a8786e46a7dee06065d29d2896fcf568
9cffd13c2ce05ebe032709a88fa59504e1218a12b175ec40d5aab280c18be51e
Analyzer Verdict Alert OpenPhish phishing Office365
GET /nOxp-sett.png HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: image/png
content-length: 463
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "28a76365a1404ff63d400b15ca6037d6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h9zG%2BQEoa078DWQn7z8wUEG9x0PrZW8r0M0%2BHK%2B3zwo%2FmHbF0P%2FAgN%2FBXm%2BwYgmSXI7V7AZTAe9orlixcUQyIx20JjfEErm4djSW6Z%2B7JxCbIsDrsuxSmigE37Yt6ui2feGUqDW8N8YClUM1LDHZhVQcjZkcU%2FnaeslIpIrzishd%2BfJa4e3zttMdokyaIh0uYO4xlRs0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fb8e095685-OSL
alt-svc: h3=":443"; ma=86400
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/cross.png
172.66.44.151200 OK 386 kB URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/cross.png
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type PNG image data, 2080 x 2080, 8-bit/color RGBA, non-interlaced\012- data
Size 386 kB (386359 bytes)
Hash be42ad7752720327d28bf52dbdbb64c2
f4cce31b9236319aa9c87fee038638d1de12c07d
c3ad6aa1c03fd108854f008cfec2753ba623e1470a4d61798b5d8c050e474868
Analyzer Verdict Alert OpenPhish phishing Office365
GET /cross.png HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: image/png
content-length: 386359
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "34ae812676688645d812e885837ff9bb"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jbs%2Bsm31ba6r98eeMEkEt%2FIu3C3t2Rng1UKOpjxB44krabpTfDxKsZjb7B9ESyww2ref6SvhRjc1ltLlV4zbngVh%2BkfuxrUHOeyaJ6JyJjdl4xTGY6boBmav0k%2B36K%2FMqxKGqAB2lCcXquo8hAl%2B3DZ2HL14sT1MzydlRg27Rq%2FUnnT5lNqc4zfuRXKxdNbcYbcG33mu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fb9e0c5685-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/googlesans/v16/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
216.58.207.227200 OK 22 kB URL GET HTTP/2 fonts.gstatic.com/s/googlesans/v16/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
IP 216.58.207.227:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 21552, version 1.0\012- data
Hash ea2c3cf1be388bd3fbe9d0cd8afee11c
6647cbaf7bfedd842f806549f5c3433a19eab1ab
1cf04407e728ea1ebf82dc1c6b45d12632cb3202ff8f4556f380b16e57484f27
GET /s/googlesans/v16/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Origin: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 23:25:47 GMT
expires: Fri, 29 Nov 2024 23:25:47 GMT
cache-control: public, max-age=31536000
age: 64224
last-modified: Wed, 04 Dec 2019 18:44:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
216.58.207.227200 OK 22 kB URL GET HTTP/2 fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
IP 216.58.207.227:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 21716, version 1.0\012- data
Hash d4ff90db5da894c833f356f47a16e408
30606044507d81b996c992895ab16b8a8d68be97
f2c761ee3ce27469f940a05b64e38a829a400427727cd0bdbb4e36f1d572afd7
GET /s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Origin: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21716
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 01:18:03 GMT
expires: Fri, 29 Nov 2024 01:18:03 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 04 Dec 2019 18:44:19 GMT
content-type: font/woff2
age: 143888
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/scripts.js
172.66.44.151200 OK 119 kB URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/scripts.js
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
Size 119 kB (118745 bytes)
Hash 355af096f8e51d9c689d8124dd6ddbd2
97a2122f181132f78ad816f2ba81da9421d22d0a
03ca7651cf34b5547fee4460d33c1b33cec3a7f78af5e29c985af90772a2dcac
Analyzer Verdict Alert OpenPhish phishing Office365
GET /scripts.js HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f013125e8c629800cee7a926ff0fdf95"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RAQNZZYkvkSyy6wXVcbZe%2BGBsByjxLfHnAzTqb461IbFHmgtX9sCoHIpKYRhgvElGlCeViy9Q8OA0pZNcBwn7C1kkDwerPD5fekVVenOJHB%2BBHMeFSVy714tXs24NhWHYrwyUxQeHagKsmsJMp31Sp9pgOlloo73OPpya1JOXVuVVabNmpjd7m6YNdXaSO%2BWVmaf20Vc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fb7dee5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/a0ler0tm0s.mp3
172.66.44.151200 OK 89 kB URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/a0ler0tm0s.mp3
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1217)
Hash 34a967a9888ee14b872c829560797531
36ea23e06ee3174b024bdc0fd9157ba161d7dcef
a8994011a3777b219eace62cfe9b46d4b870da87c541a515a9f8c91dc9a1707f
Analyzer Verdict Alert OpenPhish phishing Office365
GET /a0ler0tm0s.mp3 HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: text/html; charset=utf-8
content-length: 88953
access-control-allow-origin: *
etag: "ee4da472a51d2e1187d9165cb087681a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bwC9jdcrwZ3ynyjKWvTA5UeLT7X0feWxFedI%2BlzWaWTP%2BsIX7jr%2B4g4tEXreIcDV5x9orYJjWgSGAoIotU7NdVbW10po4E8cyh2F8XCNzmjJ7EEGoIwPSdxNCX%2FF63t6jMwzmS8QmLr1hKDjT8Ye9HWR6xDQJ%2Bvax9QzpECRev3R8c25PmAJ0n7zS9syDWBnhaQzfs1S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fd983c5685-OSL
alt-svc: h3=":443"; ma=86400
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/favicon.png
172.66.44.151200 OK 9.2 kB URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/favicon.png
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 3926453f029cab219968a7ea3c36b07e
d262e725e2c5ad466472b994bf6f8b511c337eb3
6817c3a913685f70e56f9a9c718175a42b5d12645ed9291733ac66cb125939f6
Analyzer Verdict Alert OpenPhish phishing Office365
GET /favicon.png HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: image/png
content-length: 9248
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "b6f048139514b7ef4800d6b133555981"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bSwvM2oxl7SHa8znF9YE7COKxUgSCSGi61nCBDOcAUadnrUXaVVdYkLaXt%2BFabt0g80nzT14gWT%2BJTlaZyR4jIwStFpUgZ%2B%2F7Ca3O7%2FFXQrCcJCElOWMPDEaA7uCYhkgrmrmJv%2BaXmUT7NoKazu9H6l0AIHvcTHeQDAr3NouA0Qs%2B0Xu8oPvkZbF9eMdp18oO1ND8r63"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fe18bd5685-OSL
alt-svc: h3=":443"; ma=86400
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/bootstrap.min.js
172.66.44.151200 OK 60 kB URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/bootstrap.min.js
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type ASCII text, with very long lines (59765)
Hash 02d223393e00c273efdcb1ade8f4f8b1
0cc93b8421d89c24a889642428b363cb831de78a
79c599dd760cec0c1621a1af49d9a2a49da5d45e1b37d4575bace0a5e0226582
Analyzer Verdict Alert OpenPhish phishing Office365
GET /bootstrap.min.js HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4c5defc217a778d955c27390fb3f9bd5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sh2Jd4QVVIsqEV4eoKUbvEpFpD8zbeyJesnQB4LY4lSduDoUKc4EKOvsJ402V8orprrW%2FdqAETtGFA24Ii2LbUCp%2FCNUMbg8BhfYYElvtQgqnRs6pow0sfmiO9zX63wGT5JwbRlrGRCJpDXw8HW2DEy5cnFGYci4bN%2BoRsjBdEikHxoB2WpICCFqjludIG68S8vOjKy%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fb8df05685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
172.66.44.151200 OK 89 kB URL User Request GET HTTP/2 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
IP 172.66.44.151:443
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Office365
GET / HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"ee4da472a51d2e1187d9165cb087681a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xGClJ%2FO3Pbi3NPU4nW%2FEWyVbR7Opw8LHLNcALNIl0o%2FvYwHDIp5mCIKnfsFx7wMDJYgF7ypKyek%2FEuBoe7IW%2BK5UFvulIxB6S88gu9cFk2RZdgqjtoUKi4HroNXvyVVVrCbwhIqwJkVgieIjfI9m32JDnk0yRtF9Qh90ymOj3%2BJz79uBB4HL8dFN1G7zWnANdfr6Sx9W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9f9befe56c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/jquery.min.js
172.66.44.151200 OK 84 kB URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/jquery.min.js
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type ASCII text, with very long lines (32180)
Hash 7f9fb969ce353c5d77707836391eb28d
62c4042e9ebc691a5372d653b424512a561d1670
2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515
Analyzer Verdict Alert OpenPhish phishing Office365
GET /jquery.min.js HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"5f3608e85e0678b8c2510311cf0b572d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=av%2F%2BSuAGITH0M2az1fJnZUe4J1vXfRKnBLZCmQO1viO9rxC2nuhle%2B%2BHMsotMKvLFSMegp5XTl2uqXoiDMq19luggDJL9SnjahJgjHFiSZl%2FFArKPww5tD4XwCWEE%2FMK%2FFa9ZWNx1OiZIPNVu89hAPdYwMz7Q9R1UTnsCoP9yVR732OsXbqNJGkxkMP5JAvdabNNdSIy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fb8def5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/font-awesome.min.css
172.66.44.151200 OK 28 kB URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/font-awesome.min.css
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type ASCII text, with very long lines (27591)
Hash 835820949e29e350f15768fda86f3df2
aceea7abce057d3e585f57be47bf23d1e1ca7222
c1782a8e7e3ff0043f0b4312520e07f8477299e2ac89a11ec473f847c1bc3dc3
Analyzer Verdict Alert OpenPhish phishing Office365
GET /font-awesome.min.css HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"940c23a36501493f0aef2b2b6ba3b962"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UdSSLPWSaJJYJLQe3fbr2TDO6F5vqpUDlec5QcGn7o85wEPXCx6Wznb8NNYGZGIRDEpHdnLdRzixfhWlsPpb4Xkt3W0pkMpbDmv5kh5QMe%2BaK5lz6P85MzBtjzGo3qfHOqa8ANYWFnJDjg8gtg6fioUdwwG97vbte0yZkHcAREye7h1%2FkPrnnZrM8DXGS1oezvg4OzB%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fb8df25685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/styles.css
172.66.44.151200 OK 8.2 kB URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/styles.css
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type ASCII text, with very long lines (8576), with no line terminators
Hash d66e1ba2464807babf3d22b5559b3696
64a20eedd00b907bc633ba9b68c11ef37bdf95e6
2da9eb1f73228f3b5fd4b38d362bdaaaf07a8dc022057cb1f3c2d81259cf9ea9
Analyzer Verdict Alert OpenPhish phishing Office365
GET /styles.css HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"0e7556c424e41b6c2c769ed164860f46"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cyxM3n1oMvBcEWzHhRrlWf08Xj2BPn3u28zX3%2BMlc4r0qY%2FxxDVsoy1P7wLg4Kn0zRVdbDjnwx2DbkRF3tHUX9Scqwpz8dw%2BarDZ0%2BT0LF0%2B9a4FvjT3dPQvkIMRXEUkVQYSJgMG%2B1uWDVDKF3fYz8PVUoZ90C52StkXC0qewskbOhwcYtXChmSCLn4r0%2Bo0P358wCfu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fb7ded5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css2?family=Google+Sans+Text:wght@400;500;700&display=swap
142.250.74.106200 OK 5.7 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Google+Sans+Text:wght@400;500;700&display=swap
IP 142.250.74.106:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (5802), with no line terminators
Hash 2176761effdfe39ec8a93bd12dd66488
3533c627bd9a346345b4f1d24bef3bc013f2e958
da9ae5c52479a66d482b0b29a5363490f0754d7df495439de22a5e80183cd0eb
GET /css2?family=Google+Sans+Text:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 01 Dec 2023 17:16:11 GMT
date: Fri, 01 Dec 2023 17:16:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/_Fm7-alert.mp3
172.66.44.151200 OK 118 kB URL GET HTTP/3 f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/_Fm7-alert.mp3
IP 172.66.44.151:443
Requested by https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subject
FingerprintC0:E6:F2:F2:53:CA:BC:15:1A:E3:10:2A:48:F4:A5:76:95:A7:34:DF
ValidityThu, 30 Nov 2023 06:38:27 GMT - Wed, 28 Feb 2024 06:38:26 GMT
File type Audio file with ID3 version 2.4.0, contains:\012- MPEG ADTS, layer III, v2, 48 kbps, 22.05 kHz, Monaural\012- data
Size 118 kB (117909 bytes)
Hash 5778f1031085e27c225f378f4520264b
040eee984a5baa21340085c9664869f57cb79e27
c7909719c9e69c0c67aa14e1fbc5b90c11d2dca93461be72d89d66454ae399d2
Analyzer Verdict Alert OpenPhish phishing Office365
GET /_Fm7-alert.mp3 HTTP/1.1
Host: f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Referer: https://f7gd6fgdfgh7ef6gh7erhg7erhgee6rhg86ehgrehgreg8reg7er6g7re.pages.dev/
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:16:11 GMT
content-type: audio/mpeg
content-length: 117909
access-control-allow-origin: *
etag: "a27bbba34925c58498869f8c79d5f59c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IYH2ueBHjV%2FLPjYpthALIOlgxiTTjs7YNnlYr%2Fb3pmqctCremdkbwOMpUFvuHaVNwCAjoD9qNDRZAAEP%2BHbUPT1eXuBmDMOSLzzAQsHBT%2BGTRoicSdFvTXDYpymJJOwpIRbtT0eRDN8LsNi%2B%2B28kIwAf5CFCIguP%2FI6zG%2BnS5iN%2F28V5Qwzzy8jDPGmxc%2BjP82owNj%2F2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ecf9fd98395685-OSL
alt-svc: h3=":443"; ma=86400