Report - chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7

Report Overview

Visited public
2023-08-12 21:12:31
Tags
URL
chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
Finishing URL
chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
IP / ASN
54.83.101.48
#14618 AMAZON-AES
Title
Adobe-PDF Online

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.googletagmanager.com	75	2011-11-11	2013-05-22 04:07:37	2023-08-12 01:43:35	889 B	146 kB	142.250.74.168
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-08-12 02:24:08	1.6 kB	70 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2023-08-12 02:24:07	946 B	20 kB	142.250.74.106
chat.freeshare.link	unknown	2015-07-17	2015-10-30 20:28:15	2023-07-29 05:49:19	5.0 kB	531 kB	54.83.101.48
ocsp.pki.goog	175	2016-06-13	2018-07-01 08:43:07	2023-08-11 18:12:14	2.7 kB	5.6 kB	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-08-12	medium	chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7	Adobe Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	From	Size	First Seen	Last Seen
	www.googletagmanager.com/gtag/js?id=G-JPRZ9JVKLJ&l=dataLayer&cx=c	ScriptElement	221 kB	2023-08-12	2023-08-12
Pretty URL www.googletagmanager.com/gtag/js?id=G-JPRZ9JVKLJ&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-12 23:07 Last Seen2023-08-12 23:21 Times Seen6 Hash 5101abc5ddf09f15c93711c79c766082 a87855e60897a3718a5ceb52da266ac9fa3e1b74 a7686011dab31040d2664c16fd40f7cf27850db58493bbf9fe0a72ba438895e2 Loading...

	chat.freeshare.link/system/content_files/uploads/dae/552/5f-/original/content-data-entry-boilerplate.js	ScriptElement	86 kB	2023-03-08	2025-05-05
Pretty URL chat.freeshare.link/system/content_files/uploads/dae/552/5f-/original/content-data-entry-boilerplate.js IP 54.83.101.48 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:38 Last Seen2025-05-05 18:09 Times Seen270 Hash 2e1aa7374d39fa64778859b1a8cbfbfe e0d91c61c4dd9ae3ca8fb085c53ae15b9eca7968 ec180d2bc1f49cde05d2dd6db4270f5cba1b7011a4b351c3c796bed587ef55b6 Loading...

	chat.freeshare.link/107519/c96de8/sandbox%20eval%20code		147 B	2023-04-11	2025-06-03
Pretty URL chat.freeshare.link/107519/c96de8/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:07 Last Seen2025-06-03 19:14 Times Seen349569 Hash 92b651082ce234f66bb544e678befda3 14c21c55ddce43b6f677caadf51d4ab98c6a3df8 25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded Loading...

	www.google-analytics.com/analytics.js	ScriptElement	4.7 kB	2023-04-11	2025-06-03
Pretty URL www.google-analytics.com/analytics.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:07 Last Seen2025-06-03 19:14 Times Seen348801 Hash f24128d0c9cba7be2916c693427a3483 1b6397d496ea896ebc2018b01b995cee4f166029 58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8 Loading...

	www.googletagmanager.com/gtag/js?id=UA-126808791-4	ScriptElement	184 kB	2023-08-12	2023-08-12
Pretty URL www.googletagmanager.com/gtag/js?id=UA-126808791-4 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-12 23:07 Last Seen2023-08-12 23:22 Times Seen8 Hash 6c8b103a60c96cfe9dc3621fffc41964 ba92dce94118fe37d1420b1c6a494b290883a83f e49326b0c91a6dfeca00015ed3bad16ae5d05dd0f118ecc77bcfcef79c856ebe Loading...

	chat.freeshare.link/system/content_files/uploads/8f2/ed2/42-/original/static-education-l10n.min.js	ScriptElement	6.3 kB	2023-03-08	2025-05-31
Pretty URL chat.freeshare.link/system/content_files/uploads/8f2/ed2/42-/original/static-education-l10n.min.js IP 54.83.101.48 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:38 Last Seen2025-05-31 15:04 Times Seen275 Hash 91fcc38fe563880842e269d2b7647b8b dc5d692fa7dc75b8a4bbcf0732d0978b3890e0c0 648d18f8adcfba7d26b20c51328a2d13dcabb8465d673073cefe45735c80bda3 Loading...

	chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7	ScriptElement	0 B	0001-01-01	2025-06-03
Pretty URL chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7 IP 54.83.101.48 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-06-03 19:27 Times Seen4838909 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7	ScriptElement	0 B	0001-01-01	2025-06-03
Pretty URL chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7 IP 54.83.101.48 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-06-03 19:27 Times Seen4838909 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7	ScriptElement	0 B	0001-01-01	2025-06-03
Pretty URL chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7 IP 54.83.101.48 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-06-03 19:27 Times Seen4838909 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (23)

URL IP Response Size

chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7

54.83.101.48

200 OK

2.7 kB

URL User Request GET HTTP/1.1
chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
IP
54.83.101.48:443
ASN
#14618 AMAZON-AES

Certificate
IssuerLet's Encrypt
Subject*.freeshare.link
Fingerprint91:0F:35:93:02:AF:37:DF:97:C7:6E:BD:E0:43:17:A0:D7:6D:F3:B1
ValidityTue, 13 Jun 2023 05:15:10 GMT - Mon, 11 Sep 2023 05:15:09 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size
2.7 kB (2710 bytes)
Hash
31f4040d523cfe178dc026dbd1df05cf
208b36c635769fc273a070ffae4a6c020e51ec7d
933a09a8e3883224b99a62e29e773bbb781280c73a2e2f4d8ce711004a41600d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Adobe Inc.

HTTP Headers

GET /107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7 HTTP/1.1
Host: chat.freeshare.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
access-control-allow-origin: http://landing.phishme.com
cache-control: no-store
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Sat, 12 Aug 2023 21:12:14 GMT
etag: W/"933a09a8e3883224b99a62e29e773bbb-gzip"
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
server: Apache
set-cookie: _phishme.com_session_id=b51b94648fc45e9305fccb1aced2f148; path=/; HttpOnly
status: 200 OK
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen, noopen
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-request-id: 57ccf74c-0241-4743-b5cf-7dfd7ff98851
x-runtime: 0.043617
x-xss-protection: 1; mode=block
content-length: 2710

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
5f1e05bc8656466ed7f19cbf61ce78e4
f9e5f6eefc197084c31e45173204d63ac5d1d205
b945ab01642936f842281d00a2ab1444d5541585022b74f74229ba9c7e789e9f

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Aug 2023 21:12:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.googletagmanager.com/gtag/js?id=UA-126808791-4

142.250.74.168

200 OK

66 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=UA-126808791-4
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintB8:00:22:F1:F1:80:E5:11:65:10:02:04:DA:9B:FA:C3:3E:F6:7A:70
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT

File type
ASCII text, with very long lines (4289)
Size
66 kB (66472 bytes)
Hash
6c8b103a60c96cfe9dc3621fffc41964
ba92dce94118fe37d1420b1c6a494b290883a83f
e49326b0c91a6dfeca00015ed3bad16ae5d05dd0f118ecc77bcfcef79c856ebe

HTTP Headers

GET /gtag/js?id=UA-126808791-4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chat.freeshare.link/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 12 Aug 2023 21:12:14 GMT
expires: Sat, 12 Aug 2023 21:12:14 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 66472
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

chat.freeshare.link/system/content_files/uploads/26b/ad3/4b-/original/content-data-entry-boilerplate.min.css

54.83.101.48

200 OK

3.3 kB

URL GET HTTP/1.1
chat.freeshare.link/system/content_files/uploads/26b/ad3/4b-/original/content-data-entry-boilerplate.min.css
IP
54.83.101.48:443
ASN
#14618 AMAZON-AES

Requested by
https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
Certificate
IssuerLet's Encrypt
Subject*.freeshare.link
Fingerprint91:0F:35:93:02:AF:37:DF:97:C7:6E:BD:E0:43:17:A0:D7:6D:F3:B1
ValidityTue, 13 Jun 2023 05:15:10 GMT - Mon, 11 Sep 2023 05:15:09 GMT

File type
ASCII text, with very long lines (18290), with no line terminators
Size
3.3 kB (3341 bytes)
Hash
cde1906f54d9ea8c69be1488fad61743
bc35ba9b37e3e293ef57036210f5a71ac0e7001b
51829c6361406bbe6bbc441e575d760fb1ee39891a7729878b7d3304d4c1399c

HTTP Headers

GET /system/content_files/uploads/26b/ad3/4b-/original/content-data-entry-boilerplate.min.css HTTP/1.1
Host: chat.freeshare.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
DNT: 1
Connection: keep-alive
Cookie: _phishme.com_session_id=b51b94648fc45e9305fccb1aced2f148
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
accept-ranges: bytes
access-control-allow-origin: http://landing.phishme.com
cache-control: max-age=0
content-encoding: gzip
content-type: text/css
date: Sat, 12 Aug 2023 21:12:14 GMT
etag: "4772-5dfc2cb005780-gzip"
expires: Sat, 12 Aug 2023 21:12:14 GMT
last-modified: Tue, 24 May 2022 14:30:06 GMT
server: Apache
vary: Accept-Encoding
x-download-options: noopen
content-length: 3341

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
5f1e05bc8656466ed7f19cbf61ce78e4
f9e5f6eefc197084c31e45173204d63ac5d1d205
b945ab01642936f842281d00a2ab1444d5541585022b74f74229ba9c7e789e9f

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Aug 2023 21:12:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
14d3c2e8d9f53b25492999b17379e1ed
8900d1e09f3893561f3029527452dfe8c919261a
c6649b0c59d374e874bebe5a1f7d60507e7120ccd8996f1a59a0b7f043f61c0c

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Aug 2023 21:12:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.googletagmanager.com/gtag/js?id=G-JPRZ9JVKLJ&l=dataLayer&cx=c

142.250.74.168

200 OK

78 kB

URL GET HTTP/3
www.googletagmanager.com/gtag/js?id=G-JPRZ9JVKLJ&l=dataLayer&cx=c
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintB8:00:22:F1:F1:80:E5:11:65:10:02:04:DA:9B:FA:C3:3E:F6:7A:70
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT

File type
ASCII text, with very long lines (5857)
Size
78 kB (78181 bytes)
Hash
5101abc5ddf09f15c93711c79c766082
a87855e60897a3718a5ceb52da266ac9fa3e1b74
a7686011dab31040d2664c16fd40f7cf27850db58493bbf9fe0a72ba438895e2

HTTP Headers

GET /gtag/js?id=G-JPRZ9JVKLJ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chat.freeshare.link/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 12 Aug 2023 21:12:14 GMT
expires: Sat, 12 Aug 2023 21:12:14 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 78181
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

chat.freeshare.link/system/content_files/uploads/dae/552/5f-/original/content-data-entry-boilerplate.js

54.83.101.48

200 OK

18 kB

URL GET HTTP/1.1
chat.freeshare.link/system/content_files/uploads/dae/552/5f-/original/content-data-entry-boilerplate.js
IP
54.83.101.48:443
ASN
#14618 AMAZON-AES

Requested by
https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
Certificate
IssuerLet's Encrypt
Subject*.freeshare.link
Fingerprint91:0F:35:93:02:AF:37:DF:97:C7:6E:BD:E0:43:17:A0:D7:6D:F3:B1
ValidityTue, 13 Jun 2023 05:15:10 GMT - Mon, 11 Sep 2023 05:15:09 GMT

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
18 kB (17552 bytes)
Hash
2e1aa7374d39fa64778859b1a8cbfbfe
e0d91c61c4dd9ae3ca8fb085c53ae15b9eca7968
ec180d2bc1f49cde05d2dd6db4270f5cba1b7011a4b351c3c796bed587ef55b6

HTTP Headers

GET /system/content_files/uploads/dae/552/5f-/original/content-data-entry-boilerplate.js HTTP/1.1
Host: chat.freeshare.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
DNT: 1
Connection: keep-alive
Cookie: _phishme.com_session_id=b51b94648fc45e9305fccb1aced2f148
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
accept-ranges: bytes
access-control-allow-origin: http://landing.phishme.com
cache-control: max-age=0
content-encoding: gzip
content-type: application/javascript
date: Sat, 12 Aug 2023 21:12:14 GMT
etag: "150e9-5de403f6dffc0-gzip"
expires: Sat, 12 Aug 2023 21:12:14 GMT
last-modified: Thu, 05 May 2022 09:20:07 GMT
server: Apache
vary: Accept-Encoding
x-download-options: noopen
content-length: 17552

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
14d3c2e8d9f53b25492999b17379e1ed
8900d1e09f3893561f3029527452dfe8c919261a
c6649b0c59d374e874bebe5a1f7d60507e7120ccd8996f1a59a0b7f043f61c0c

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Aug 2023 21:12:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

chat.freeshare.link/system/content_files/uploads/d5e/4f7/68-/original/adobe-pdf-file-verification-styles.css

54.83.101.48

200 OK

1.5 kB

URL GET HTTP/1.1
chat.freeshare.link/system/content_files/uploads/d5e/4f7/68-/original/adobe-pdf-file-verification-styles.css
IP
54.83.101.48:443
ASN
#14618 AMAZON-AES

Requested by
https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
Certificate
IssuerLet's Encrypt
Subject*.freeshare.link
Fingerprint91:0F:35:93:02:AF:37:DF:97:C7:6E:BD:E0:43:17:A0:D7:6D:F3:B1
ValidityTue, 13 Jun 2023 05:15:10 GMT - Mon, 11 Sep 2023 05:15:09 GMT

File type
ASCII text, with CRLF line terminators
Size
1.5 kB (1498 bytes)
Hash
bc3b3e7680c5d43b6477be5822d43301
5c3f77fdd067c94376f568182adaf7d42159b984
6029d55d7bdf1d85780717a13a0e4ac6268c1da6cfc1b47e9212e2d658139d36

HTTP Headers

GET /system/content_files/uploads/d5e/4f7/68-/original/adobe-pdf-file-verification-styles.css HTTP/1.1
Host: chat.freeshare.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
DNT: 1
Connection: keep-alive
Cookie: _phishme.com_session_id=b51b94648fc45e9305fccb1aced2f148
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
accept-ranges: bytes
access-control-allow-origin: http://landing.phishme.com
cache-control: max-age=0
content-encoding: gzip
content-type: text/css
date: Sat, 12 Aug 2023 21:12:15 GMT
etag: "14ee-5dfc2cb0f99c0-gzip"
expires: Sat, 12 Aug 2023 21:12:15 GMT
last-modified: Tue, 24 May 2022 14:30:07 GMT
server: Apache
vary: Accept-Encoding
x-download-options: noopen
content-length: 1498

chat.freeshare.link/system/content_files/uploads/8f2/ed2/42-/original/static-education-l10n.min.js

54.83.101.48

200 OK

2.0 kB

URL GET HTTP/1.1
chat.freeshare.link/system/content_files/uploads/8f2/ed2/42-/original/static-education-l10n.min.js
IP
54.83.101.48:443
ASN
#14618 AMAZON-AES

Requested by
https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
Certificate
IssuerLet's Encrypt
Subject*.freeshare.link
Fingerprint91:0F:35:93:02:AF:37:DF:97:C7:6E:BD:E0:43:17:A0:D7:6D:F3:B1
ValidityTue, 13 Jun 2023 05:15:10 GMT - Mon, 11 Sep 2023 05:15:09 GMT

File type
ASCII text, with very long lines (6328), with no line terminators
Size
2.0 kB (1960 bytes)
Hash
91fcc38fe563880842e269d2b7647b8b
dc5d692fa7dc75b8a4bbcf0732d0978b3890e0c0
648d18f8adcfba7d26b20c51328a2d13dcabb8465d673073cefe45735c80bda3

HTTP Headers

GET /system/content_files/uploads/8f2/ed2/42-/original/static-education-l10n.min.js HTTP/1.1
Host: chat.freeshare.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
DNT: 1
Connection: keep-alive
Cookie: _phishme.com_session_id=b51b94648fc45e9305fccb1aced2f148
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
accept-ranges: bytes
access-control-allow-origin: http://landing.phishme.com
cache-control: max-age=0
content-encoding: gzip
content-type: application/javascript
date: Sat, 12 Aug 2023 21:12:15 GMT
etag: "18b8-5df59999f7180-gzip"
expires: Sat, 12 Aug 2023 21:12:15 GMT
last-modified: Thu, 19 May 2022 09:00:06 GMT
server: Apache
vary: Accept-Encoding
x-download-options: noopen
content-length: 1960

chat.freeshare.link/system/content_images/uploads/f6d/5c5/90-/original/document-icon.png

54.83.101.48

200 OK

433 B

URL GET HTTP/1.1
chat.freeshare.link/system/content_images/uploads/f6d/5c5/90-/original/document-icon.png
IP
54.83.101.48:443
ASN
#14618 AMAZON-AES

Requested by
https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
Certificate
IssuerLet's Encrypt
Subject*.freeshare.link
Fingerprint91:0F:35:93:02:AF:37:DF:97:C7:6E:BD:E0:43:17:A0:D7:6D:F3:B1
ValidityTue, 13 Jun 2023 05:15:10 GMT - Mon, 11 Sep 2023 05:15:09 GMT

File type
PNG image data, 84 x 100, 8-bit colormap, non-interlaced\012- data
Size
433 B (433 bytes)
Hash
2efaca0d37a5e9975694b035dfcacc59
6bd1cf3a6d34dee7509fbafdb49d08f921ea3eb3
8788e47f94ef44823a24b37013f8322b5f719ba8ce9c280549481f6b72c56eb7

HTTP Headers

GET /system/content_images/uploads/f6d/5c5/90-/original/document-icon.png HTTP/1.1
Host: chat.freeshare.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
DNT: 1
Connection: keep-alive
Cookie: _phishme.com_session_id=b51b94648fc45e9305fccb1aced2f148
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
accept-ranges: bytes
access-control-allow-origin: http://landing.phishme.com
cache-control: max-age=0
content-type: image/png
date: Sat, 12 Aug 2023 21:12:15 GMT
etag: "1b1-5b0aaf67efe80"
expires: Sat, 12 Aug 2023 21:12:15 GMT
last-modified: Fri, 02 Oct 2020 07:20:10 GMT
server: Apache
x-download-options: noopen
content-length: 433

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
581a362d08528e96212d28474b426504
f1b6cbd22e5dd6c52860ed433b1167c3aea0c2b3
8d6be995bdce6dfc00a5d9e11e4ea97089403badcc6a0ee76622d2759bd5b91d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Aug 2023 21:12:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2

216.58.207.227

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14892, version 1.0\012- data
Size
15 kB (14892 bytes)
Hash
9ec6deaf6bada919e20b98f9f7b718b1
501d36403ad8205e4644532600019ecb10f5cb0a
7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762

HTTP Headers

GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://chat.freeshare.link
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Aug 2023 07:39:48 GMT
expires: Thu, 08 Aug 2024 07:39:48 GMT
cache-control: public, max-age=31536000
age: 307947
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
581a362d08528e96212d28474b426504
f1b6cbd22e5dd6c52860ed433b1167c3aea0c2b3
8d6be995bdce6dfc00a5d9e11e4ea97089403badcc6a0ee76622d2759bd5b91d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Aug 2023 21:12:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
581a362d08528e96212d28474b426504
f1b6cbd22e5dd6c52860ed433b1167c3aea0c2b3
8d6be995bdce6dfc00a5d9e11e4ea97089403badcc6a0ee76622d2759bd5b91d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Aug 2023 21:12:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2

216.58.207.227

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14824, version 1.0\012- data
Size
15 kB (14824 bytes)
Hash
48598bad30f08e1c3eb3d0e69b420bd5
28c2cf160273c2062f909a875c4b4c0541ee2f84
ca57b79a870bbf54700730858603a70d79743779c1b059922ec401bfddc5adc9

HTTP Headers

GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://chat.freeshare.link
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Aug 2023 15:13:33 GMT
expires: Fri, 09 Aug 2024 15:13:33 GMT
cache-control: public, max-age=31536000
age: 194322
last-modified: Thu, 01 Jun 2023 22:52:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2

216.58.207.227

200 OK

38 kB

URL GET HTTP/2
fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT

File type
Web Open Font Format (Version 2), TrueType, length 37924, version 1.0\012- data
Size
38 kB (37924 bytes)
Hash
e08be6d5d433944f7ad52902e4d24db5
e2600c1d60d12d397b3ee44411a021231d71e974
450f3ba4e47ee174bd9692b396f264b907d37d2528f53911760f3d0edb785f7e

HTTP Headers

GET /s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://chat.freeshare.link
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37924
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 11 Aug 2023 10:16:08 GMT
expires: Sat, 10 Aug 2024 10:16:08 GMT
cache-control: public, max-age=31536000
age: 125767
last-modified: Mon, 11 Jul 2022 20:54:46 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
581a362d08528e96212d28474b426504
f1b6cbd22e5dd6c52860ed433b1167c3aea0c2b3
8d6be995bdce6dfc00a5d9e11e4ea97089403badcc6a0ee76622d2759bd5b91d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Aug 2023 21:12:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

chat.freeshare.link/system/content_images/uploads/a49/6c2/d7-/original/adobe-favicon.png

54.83.101.48

200 OK

3.4 kB

URL GET HTTP/1.1
chat.freeshare.link/system/content_images/uploads/a49/6c2/d7-/original/adobe-favicon.png
IP
54.83.101.48:443
ASN
#14618 AMAZON-AES

Requested by
https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
Certificate
IssuerLet's Encrypt
Subject*.freeshare.link
Fingerprint91:0F:35:93:02:AF:37:DF:97:C7:6E:BD:E0:43:17:A0:D7:6D:F3:B1
ValidityTue, 13 Jun 2023 05:15:10 GMT - Mon, 11 Sep 2023 05:15:09 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
3.4 kB (3373 bytes)
Hash
a1b24266f7b44ad83e0a53cca975bee9
bc0a9c4ae0a3631c036653f555908c283b837060
8e8cbbe84e3a50457e8398665c24162dcd17c3f3a2f43e464d40ea4ba96f4c37

HTTP Headers

GET /system/content_images/uploads/a49/6c2/d7-/original/adobe-favicon.png HTTP/1.1
Host: chat.freeshare.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
DNT: 1
Connection: keep-alive
Cookie: _phishme.com_session_id=b51b94648fc45e9305fccb1aced2f148; _ga_JPRZ9JVKLJ=GS1.1.1691874731.1.0.1691874731.0.0.0; _ga=GA1.1.114220107.1691874731
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
accept-ranges: bytes
access-control-allow-origin: http://landing.phishme.com
cache-control: max-age=0
content-type: image/png
date: Sat, 12 Aug 2023 21:12:15 GMT
etag: "d2d-5de403fab08c0"
expires: Sat, 12 Aug 2023 21:12:15 GMT
last-modified: Thu, 05 May 2022 09:20:11 GMT
server: Apache
x-download-options: noopen
content-length: 3373

chat.freeshare.link/system/content_images/uploads/aa9/f9c/9b-/original/adobe-bg.png

54.83.101.48

200 OK

497 kB

URL GET HTTP/1.1
chat.freeshare.link/system/content_images/uploads/aa9/f9c/9b-/original/adobe-bg.png
IP
54.83.101.48:443
ASN
#14618 AMAZON-AES

Requested by
https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
Certificate
IssuerLet's Encrypt
Subject*.freeshare.link
Fingerprint91:0F:35:93:02:AF:37:DF:97:C7:6E:BD:E0:43:17:A0:D7:6D:F3:B1
ValidityTue, 13 Jun 2023 05:15:10 GMT - Mon, 11 Sep 2023 05:15:09 GMT

File type
PNG image data, 1600 x 1069, 8-bit colormap, non-interlaced\012- data
Size
497 kB (497022 bytes)
Hash
06774f93cf54dadc9bc565e0644f9059
4efaffafbb538b4d31df2ffc82a941b1c5695a3f
c148cb5e9bb46432e33d71140f95dbb35e4629eff7cfb2cc41387eb8d7633758

HTTP Headers

GET /system/content_images/uploads/aa9/f9c/9b-/original/adobe-bg.png HTTP/1.1
Host: chat.freeshare.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chat.freeshare.link/system/content_files/uploads/d5e/4f7/68-/original/adobe-pdf-file-verification-styles.css
Cookie: _phishme.com_session_id=b51b94648fc45e9305fccb1aced2f148; _ga_JPRZ9JVKLJ=GS1.1.1691874731.1.0.1691874731.0.0.0; _ga=GA1.1.114220107.1691874731
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
accept-ranges: bytes
access-control-allow-origin: http://landing.phishme.com
cache-control: max-age=0
content-type: image/png
date: Sat, 12 Aug 2023 21:12:15 GMT
etag: "7957e-5afd031f8ca80"
expires: Sat, 12 Aug 2023 21:12:15 GMT
last-modified: Mon, 21 Sep 2020 10:20:10 GMT
server: Apache
x-download-options: noopen
content-length: 497022

fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;700&display=swap

142.250.74.106

200 OK

12 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintC1:FC:47:2F:E4:8D:DA:F2:E6:C0:AB:89:40:FB:3F:E4:E0:C5:04:42
ValidityMon, 17 Jul 2023 08:21:35 GMT - Mon, 09 Oct 2023 08:21:34 GMT

File type
ASCII text
Size
12 kB (11770 bytes)
Hash
f5bec9f9d4d4f4469714d5aea3a74fab
aba73fa5e8e2f410c3f3f8e2e0972030162b18f7
aa851b97f83f034ea736d38ebd2a4f182e067571b99a358138909cf877d0bbc3

HTTP Headers

GET /css2?family=Inter:wght@100;200;300;400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chat.freeshare.link/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 12 Aug 2023 21:12:14 GMT
date: Sat, 12 Aug 2023 21:12:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Source+Sans+Pro:wght@300;400;600&display=swap

142.250.74.106

200 OK

7.4 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Source+Sans+Pro:wght@300;400;600&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://chat.freeshare.link/107519/c96de8/22f2880f-bea5-40e4-b104-a01460afc4a7
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintC1:FC:47:2F:E4:8D:DA:F2:E6:C0:AB:89:40:FB:3F:E4:E0:C5:04:42
ValidityMon, 17 Jul 2023 08:21:35 GMT - Mon, 09 Oct 2023 08:21:34 GMT

File type
ASCII text, with very long lines (7601), with no line terminators
Size
7.4 kB (7412 bytes)
Hash
62c26f06ca1eddeab5f73f2bd84485ec
25c402a7e40dacab9514bb8b8b850b4e09e9c48c
db469f03896fb5a14e69b53e4e7491d3378b183860a16837d02bb742f3285a7c

HTTP Headers

GET /css2?family=Source+Sans+Pro:wght@300;400;600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chat.freeshare.link/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 12 Aug 2023 21:12:15 GMT
date: Sat, 12 Aug 2023 21:12:15 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (23)

URL User Request GET HTTP/1.1

IP

ASN