Overview

URLamazonawssxidc50iy8oj.13-250-36-0.cprapid.com/?e=REDACTED&k=
IP 13.250.36.0 (Singapore)
ASN#16509 AMAZON-02
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-23 05:48:39 UTC
StatusLoading report..
IDS alerts0
Blocklist alert17
urlquery alerts
2
Phishing - DHL
Tags None

Domain Summary (14)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-23 05:02:25 UTC 35.83.91.138
code.jquery.com (1) 634 2012-05-21 17:28:02 UTC 2022-09-22 04:34:12 UTC 69.16.175.10
r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-09-22 04:32:00 UTC 23.36.76.226
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-23 04:02:41 UTC 143.204.55.49
js-codes.com (1) 0 2017-12-08 11:37:13 UTC 2022-09-23 05:48:30 UTC 172.67.199.99 Unknown ranking
upload.wikimedia.org (1) 2215 2012-05-21 09:39:45 UTC 2022-09-22 09:30:29 UTC 91.198.174.208
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-22 04:34:04 UTC 34.117.237.239
amazonawssxidc50iy8oj.13-250-36-0.cprapid.com (1) 0 2022-09-23 05:48:23 UTC 2022-09-23 05:48:23 UTC 13.250.36.0 Domain (cprapid.com) ranked at: 377998
ocsp.pki.goog (2) 175 2017-06-14 07:23:31 UTC 2022-09-23 04:02:50 UTC 142.250.74.3
ajax.googleapis.com (1) 12905 2014-10-18 20:16:48 UTC 2022-09-23 01:44:36 UTC 142.250.74.42
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-22 20:22:27 UTC 143.204.55.115
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2022-09-23 04:04:38 UTC 93.184.220.29
20-14-91-0.cprapid.com (25) 0 2022-09-22 06:26:04 UTC 2022-09-23 05:48:28 UTC 20.14.91.0 Domain (cprapid.com) ranked at: 377998
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-22 14:28:12 UTC 34.120.237.76

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-23 2 20-14-91-0.cprapid.com/ Phishing
2022-09-23 2 20-14-91-0.cprapid.com/app/index.php Phishing
2022-09-23 2 20-14-91-0.cprapid.com/all/js/jquery.js Phishing
2022-09-23 2 20-14-91-0.cprapid.com/all/js/jquery.ccvalid.js Phishing
2022-09-23 2 20-14-91-0.cprapid.com/all/js/jquery.mask.js Phishing
2022-09-23 2 20-14-91-0.cprapid.com/all/files/doc/js/pay.js Phishing
2022-09-23 2 20-14-91-0.cprapid.com/all/files/doc/js/main.js Phishing
2022-09-23 2 20-14-91-0.cprapid.com/all/files/doc/js/bootstrap.min.js Phishing
2022-09-23 2 20-14-91-0.cprapid.com/all/files/doc/js/validator.js Phishing
2022-09-23 2 20-14-91-0.cprapid.com/all/files/doc/js/jquery.maskedinput.js Phishing
2022-09-23 2 20-14-91-0.cprapid.com/all/files/doc/js/jquery.validate.js Phishing
2022-09-23 2 20-14-91-0.cprapid.com/all/js/jquery.creditCardValidator.js Phishing
2022-09-23 2 20-14-91-0.cprapid.com/all/files/doc/js/jquery-3.js Phishing
2022-09-23 2 20-14-91-0.cprapid.com/workshop/stockers/step3.php Phishing
2022-09-23 2 20-14-91-0.cprapid.com/media/PSDRlight-web.woff Phishing
2022-09-23 2 20-14-91-0.cprapid.com/media/PSDRregular-web.woff Phishing
2022-09-23 2 20-14-91-0.cprapid.com/media/PSDRlight-web.20398ebf.woff Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 13.250.36.0
Date UQ / IDS / BL URL IP
2022-09-23 05:48:39 +0000 2 - 0 - 17 amazonawssxidc50iy8oj.13-250-36-0.cprapid.com (...) 13.250.36.0


Last 5 reports on ASN: AMAZON-02
Date UQ / IDS / BL URL IP
2023-01-29 22:13:00 +0000 0 - 2 - 0 s3.amazonaws.com/games1.gamefools.com/downloa (...) 52.217.228.232
2023-01-29 22:09:44 +0000 0 - 10 - 0 track.partners.trustradius.com/r?i=trustradiu (...) 3.23.106.204
2023-01-29 22:06:23 +0000 0 - 0 - 5 n1sav.bemobtrcks.com/go/76006fbf-8306-4264-af (...) 3.70.16.242
2023-01-29 22:02:05 +0000 0 - 0 - 6 ads.istngo.com/0310f616-7406-458c-9364-80ee63 (...) 18.195.123.247
2023-01-29 22:01:49 +0000 0 - 1 - 0 www.dropboxforum.com/t5/Desktop-client-builds (...) 54.230.111.26


Last 5 reports on domain: cprapid.com
Date UQ / IDS / BL URL IP
2023-01-29 19:14:57 +0000 16 - 1 - 18 mitid-approve.20-203-169-150.cprapid.com/nord (...) 20.203.169.150
2023-01-29 18:36:40 +0000 16 - 1 - 18 mitid-approve.20-203-169-150.cprapid.com/nord (...) 20.203.169.150
2023-01-29 18:34:27 +0000 18 - 1 - 20 login.dokument.certificate.52-14-144-11.cprap (...) 52.14.144.11
2023-01-29 15:34:23 +0000 16 - 1 - 18 mitid-approve.20-203-169-150.cprapid.com/nord (...) 20.203.169.150
2023-01-29 14:06:08 +0000 0 - 0 - 2 blablacar.sber.avito.avito.sber.avito.sberban (...) 3.89.181.9


Last 1 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-09-22 22:51:15 +0000 2 - 0 - 17 20-14-91-0.cprapid.com/ 20.14.91.0

JavaScript

Executed Scripts (19)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (51)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8746
Expires: Fri, 23 Sep 2022 08:14:14 GMT
Date: Fri, 23 Sep 2022 05:48:28 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 23 Sep 2022 05:05:44 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xnQsvHTJmPtmQ-zv-6L_9fvt2QBazVYD6VbbKXs0OCHC3CVs3gzA9A==
Age: 2564


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.49
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: E9b3GS6KJoWjSX6es16QCFhvuv5o9p69or3K7GhTef7J6t7xswwJ9w==
age: 4394
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 23 Sep 2022 05:48:28 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Fri, 23 Sep 2022 05:03:22 GMT
Expires: Fri, 23 Sep 2022 05:16:48 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: MJCBv9PlpTkd2lVtdxhq_sRtTVQGvqfK-yi1rWVeujoUIi_OVuGPgA==
Age: 2706


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /?e=REDACTED&k= HTTP/1.1 
Host: amazonawssxidc50iy8oj.13-250-36-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         13.250.36.0
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 23 Sep 2022 05:48:28 GMT
Server: Apache
Location: https://20-14-91-0.cprapid.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 633
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 05:48:28 GMT
Last-Modified: Fri, 23 Sep 2022 05:37:55 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UFSu2plpUa9rpSNJoED70A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.83.91.138
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0WWc1mv2Wq42R6p6MeDukCM+vBI=

                                        
                                            GET / HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         20.14.91.0
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 23 Sep 2022 05:48:29 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883; path=/
Location: app/index.php
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11582
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 05:48:30 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11582
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 05:48:30 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11582
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 05:48:30 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11582
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 05:48:30 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11582
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 05:48:30 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ec986e3-2bce-4ded-85eb-e88df9893a30.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6505
x-amzn-requestid: bc9cc556-8897-4484-ac07-f18e4f5250ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YvrfiFl4oAMF_Xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63295930-7a627b7d7683919e41ca599b;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 06:09:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UNlx91pOuttpN-IrQs_g-PRI8C_NmZDKdnOpfayCJ719fa6FwnOIGg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 02:01:19 GMT
age: 13631
etag: "265d3e98bcbf5f14f214102279a7911d6fd64048"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6505
Md5:    ff021fa15adb0d3a24158bc00cf0980a
Sha1:   265d3e98bcbf5f14f214102279a7911d6fd64048
Sha256: 211d709fb1851a62f856a78e3b115ef816f78ab9a28f870d48fa3d1912eac16a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0908c18b-cd0b-41cc-beb5-0347df28884c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11059
x-amzn-requestid: 65fe1c05-a158-4ac2-8368-f26da119ef68
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcDTgGV4oAMF0iw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217f49-74fc5c511bee36fd11d6d2eb;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:14:17 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8k-1BHGHnBYSNqKWsRvVt8MpglKJ4eodtFakTTnr7ZzqSpP8iJWqVA==
via: 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:57:54 GMT
age: 24636
etag: "30ccc2dd2597b5b720d66c960ee8bd63c7115630"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11059
Md5:    9e125802119a2737820b343c4e9ecfb6
Sha1:   30ccc2dd2597b5b720d66c960ee8bd63c7115630
Sha256: 90cce372b2b8c89569fffc55de468bfc7cd4b7454ae7c55c48b7a846506b576e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56c6b5fd-d351-45b8-9f62-d5052869881a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10822
x-amzn-requestid: 0cec2f7d-e906-4f5f-baa7-5d8a1a7c6820
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y2P7bEeQoAMFhGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632bf9e2-5bdf18be72eed24028034edb;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 06:00:02 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Pj5hSr5LtIWPRDYjHxp8-K8gVghjf8GlO-FnXDvxscJqdygfZH8hIA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 19:36:01 GMT
age: 36749
etag: "dd94d525ad264856a0fdcb7a4b1faa2d68c3f68b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10822
Md5:    948abf9bedd1bd67010284080ba06d01
Sha1:   dd94d525ad264856a0fdcb7a4b1faa2d68c3f68b
Sha256: 236639cc2279c6f269dd521796a087a40b43b252cb55faf3e4214cbdc8369a62
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8822718-7784-42f7-9be3-17d81593a755.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4999
x-amzn-requestid: 6f7b073e-f199-4bfa-8f9c-6688dbfba15a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn7p7GyRIAMF1EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263fd8-566d8b3c1c25e3fa36259812;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:44:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 67IkCpdOLJbKDPzgrIgyWV4axpopLuln041fPgEQKn0Zc2dvdDHnkA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:54:39 GMT
age: 24831
etag: "e6097275af3204124c48aa0d876eba0d18b26e7e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4999
Md5:    b577444b5b0cf15747fe28a9d7f22d53
Sha1:   e6097275af3204124c48aa0d876eba0d18b26e7e
Sha256: 0f57e130b23b87fa4e1f9c2a2beff54f1ca73d87a244442558209e378befef11
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9892
x-amzn-requestid: f1d435d6-ed01-46b6-8f36-615f07f8cac0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4VpWGamoAMFppA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ccfd5-2c3726b022bd389a156532c4;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:12:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 1RKDNfgarIwNgVps5U8xWLQaDppXNAVxULqMseYJOIOuPF6nCV0aNw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 04:26:54 GMT
age: 4896
etag: "977068c1cfdf8dfb64cbe8fb8d917ebc8e3e970e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9892
Md5:    3056431736af42cc145a77dbc77c45a7
Sha1:   977068c1cfdf8dfb64cbe8fb8d917ebc8e3e970e
Sha256: d299e38c678f4c4548cd2e7cf7ff1b07910b316bfc8b13c492b4fbee0a66b079
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F948809a9-98f3-49af-9568-833cc0cfb149.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5533
x-amzn-requestid: af64386b-45ae-47bb-a6fd-f80e306495df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcCkMGVEIAMFfhg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217e1a-7e417f28422324ed2ddc85da;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:09:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3GibZ-PNm4-d79Q6pfMbGiJ8sdGrbmfZ3M5-GkQUbrEmo9Ug13MydQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:36:12 GMT
age: 25938
etag: "e95d1909750d36a9e426c170778985310cbfc4e4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5533
Md5:    2644bb64610b60b23b7dff21736f7b4d
Sha1:   e95d1909750d36a9e426c170778985310cbfc4e4
Sha256: e668fe1815310914cee8c5853fbcb3d0e48f6f0f8c2d07f7463e627f97153212
                                        
                                            GET /app/index.php HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 23 Sep 2022 05:48:29 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (510)
Size:   2948
Md5:    4cb68d1ea83e8a0414faafdbe624295c
Sha1:   df9a525b0f901e1ac4d00c0132119fd2513b7d86
Sha256: 6582f1fb60311873ab60f98f9a8ad4bfcbede7649c482bb703fe895bffcbcee3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /jquery-3.5.0.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         69.16.175.10
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Fri, 23 Sep 2022 05:48:30 GMT
content-encoding: gzip
content-length: 84374
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-463a1"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1663912110.dop230.sk1.t,1663912110.cds248.sk1.hn,1663912110.cds065.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   84374
Md5:    14ee67dad9098ec1aa179859a587fc8d
Sha1:   4322dbc7d6f4b69c5dbf94bd9c2517b0cd6f2a67
Sha256: 20d269d3d572dcf932991fa3b49e02e8919b865b632de234e3f7df035005842b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 05:48:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ajax/libs/jqueryui/1.12.1/jquery-ui.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.42
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 67948
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 17 Sep 2022 03:38:05 GMT
expires: Sun, 17 Sep 2023 03:38:05 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 526225
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32073)
Size:   67948
Md5:    33411bb179575dfc40cc62c61899664f
Sha1:   d03c06d5893d632e1a7f826a6ffd9768ba885e11
Sha256: 274befc7b39609fed270e69335bc92b3d8251545594636eb408d5d93e0ae1a4f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Sep 2022 05:48:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /media/main.css HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 23 Sep 2022 05:48:30 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Content-Length: 22527
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (22491)
Size:   22527
Md5:    d1002c0ca09e1a2b6b353272ba7a7a70
Sha1:   76c5a383e54fa06d5ae61045f2c7f1f7553a879c
Sha256: c555831c27ebbbbd32dfeb7cd25a605f5c6ffa10e1cd431841f9672e1198f490
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 05:48:30 GMT
Server: ECS (amb/6B90)
Content-Length: 280

                                        
                                            GET /modernizr/2.8.7/modernizr.min.js HTTP/1.1 
Host: js-codes.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.67.199.99
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
date: Fri, 23 Sep 2022 05:48:31 GMT
x-powered-by: Express, Phusion Passenger(R) 6.0.10
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 07:04:24 GMT
etag: W/"edf-15f0a3fa4c0"
status: 200 OK
expires: Wed, 20 Sep 2023 12:30:24 GMT
cf-cache-status: HIT
age: 235087
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mO892AyZuKJu5CSlVQcQdbUTYhKBNtOqc5YJBXbCnhYpbHxsnMv44UN93Ebhnpc9%2FQlBMv%2FQcvDhsiET3brjPGepzFje2XJX35JT3rZrAn4d9KBCRzlJLBP%2F20%2BXqFo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fde62fb40af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (3807), with no line terminators
Size:   2027
Md5:    a18920cb3f1cb8f91753d0a3603d874f
Sha1:   f7d5732626c741aec65f923eaffff380bc3e2454
Sha256: 68d085538a45288cef9b5a63b89c0582cd1109ebca9d1586b1ed9c80eced3baf
                                        
                                            GET /media/e7e6a088.css HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Content-Length: 25591
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (25591), with no line terminators
Size:   25591
Md5:    87064db4c5285b56982c5efed89508e1
Sha1:   2948d2fc7f779e90cb7d53073cf8888cbc1612bb
Sha256: 85ff65edee2ad3a7447aa4a0e5d0b7de548637fb136d1e79a9e27cded95de708
                                        
                                            GET /all/js/jquery.js HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Content-Length: 86841
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   86841
Md5:    af4078402c5e090d3f81d1abd71e2250
Sha1:   9592732de681f4365e9b7016dc5cf76e2a55ee9b
Sha256: 8603b20b548270423fb03c2138c16f5f863ead4c48eb0999167df869e2eef8a6

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /media/foundation-icons.css HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Content-Length: 19575
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   19575
Md5:    16154455eaee5df33143a297a8d8b316
Sha1:   816c2eda36858058a891bddefc66b28354d51bf6
Sha256: 79420a24a94da3d91acc16db9752f651077244931d98aa44ed4044332ff615bc
                                        
                                            GET /media/mapbox-gl.css HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Content-Length: 31601
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (9876)
Size:   31601
Md5:    190b2d4ca8040044e5497f789a7123d8
Sha1:   0d6a1ffdff3b20051edee9787ec7a26cb82cfe48
Sha256: 024a355f20381b217f25a9d12d6be10d2f43334fb75b7a3750419267f44c0322
                                        
                                            GET /media/mapbox-gl-directions.css HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Content-Length: 25885
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1797)
Size:   25885
Md5:    5435d92479e98a64a894804312f2339b
Sha1:   97971a7fb6816b6973a7d035d70bc36053169221
Sha256: 5c20e131a5bd4917791fe658d5bf7987149b71d67d4b19612cb929666a0de613
                                        
                                            GET /all/js/jquery.ccvalid.js HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Content-Length: 7442
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   7442
Md5:    2f24b339e94eb18fdfd5cd5a60e82546
Sha1:   2abf52df7041eac55e0f59bf867053d4cb29891a
Sha256: ca83477931d09aca84c55e779bb2e6ef502b1af1bef668de771b8209a43eb11b

Alerts:
  urlquery:
    - Phishing - DHL
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /all/js/jquery.mask.js HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Content-Length: 8109
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (537)
Size:   8109
Md5:    9d8349c5ae98f1d6591ecce50e54403a
Sha1:   62f6a07fa6a0531ac0f6aae7988356ff28b09d73
Sha256: 38c89b667f0b98ab618ce6eef2947a58b9cac93e4dce667fec781562c34cd66e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /media/app.css HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Content-Length: 168617
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (346)
Size:   168617
Md5:    fccfe688ddd161007d54ebf61f7291c9
Sha1:   437a8f8b243b2da981a49f5f3ea6364e770f2965
Sha256: 3f339318bad6092702b49d6acb1064fcde7524b62f00cf6311fc814ca65a7627
                                        
                                            GET /all/files/doc/js/pay.js HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 3731
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (386), with CRLF line terminators
Size:   3731
Md5:    fce1389e3af48dd909f1d345a610360a
Sha1:   7065a2b6c63545df27574171b857b4ae56507ed8
Sha256: 7f6652a64ffb9d3e12468de903bea0e87d92ca7df49e0cddf01d8d14cd3b3951

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /all/files/doc/js/main.js HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 389
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   389
Md5:    72fc5d75397bf52d156421bb561d0aca
Sha1:   5406739a89f073755b35c6bf16ff4178c2de61c4
Sha256: 04c9f9b35c1eec3f542395cc43b9a13608a490b74f173d242441bc62dffd83c6

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /all/files/doc/js/bootstrap.min.js HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 9765
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32003)
Size:   9765
Md5:    da6fb4b64d1f22f682dcaa0433b4dec7
Sha1:   56493cb828703ebeb1e9fbefc163793613b65e7f
Sha256: 7d59f0296a0b229f7d0ffc0b4f02930d6a7b56070167c7429004d6b1649c9d64

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /all/files/doc/js/validator.js HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 3314
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (1200)
Size:   3314
Md5:    4c4df061d4d71cb9771124ea429a0a2b
Sha1:   0a892c448d4c4dfd1e6658fa588ca7f4972e5a68
Sha256: 186bf5efff6a18976c15509a5f771948edd67f8eb3530ef7062bbf5ebdb13b6c

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /all/files/doc/js/jquery.maskedinput.js HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 2647
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   2647
Md5:    e339508f78ba8133305f3491c6405390
Sha1:   39e22e61c069afb5479c996c646a132977b1abd0
Sha256: eda27913d27f71dc91db40064f25a634189020fbcc4f752f021ba0c2bf202457

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /all/files/doc/js/jquery.validate.js HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 12317
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (511)
Size:   12317
Md5:    b1a878f39f797c58cd0901db187101ed
Sha1:   3dddf0397b87ff3cc21ed701fe1720d789474b73
Sha256: 08fb467b968501f477c044d9c038aaf5e0f04efbd65f37a7630746e0d889d361

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /all/js/jquery.creditCardValidator.js HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Content-Length: 8709
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   8709
Md5:    1019fb560a55d76e632cee5de5b655b5
Sha1:   e85c8b599c0fac90a074b28678cd885b4ca64a35
Sha256: 8338536908dbf97a2eeaf21a1390f707b867571d222dcf7be3d905e0a882b9aa

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /all/files/doc/js/jquery-3.js HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 23 Sep 2022 05:48:31 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 30080
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32030)
Size:   30080
Md5:    731d42f0af3c21189d8591c8a1e9407d
Sha1:   6913b58eac4a6c555403022f0cfa8dff1477a6d7
Sha256: d65d4c60bc96f4fb28221f7f468bd41e786202a6d7c8d6c4e06d3b6d83e92788

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /media/favicon.ico HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Fri, 23 Sep 2022 05:48:32 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Content-Length: 32038
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size:   32038
Md5:    3f0f72ed57a54b97cda500bcf0545efb
Sha1:   2f252619c18e729d98e16b96d37cd7cd567b38eb
Sha256: 67fbe8ef9020e5c776aadf6801a1fef8dc563e2e4dc9ddc740af8010c0c38943
                                        
                                            POST /workshop/stockers/step3.php HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 6
Origin: https://20-14-91-0.cprapid.com
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 23 Sep 2022 05:48:32 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1102)
Size:   13754
Md5:    10db9c4010a29f800d2b3caf7c69c3a5
Sha1:   3dce45b75fa175ffc0562f7d1270473c5ff4b845
Sha256: 4cf382d3f796c37b889f25fefd47b598d7fd63bac6490502a0945ce05183de22

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wikipedia/en/thumb/3/37/United_States_Postal_Service_Logo.svg/220px-United_States_Postal_Service_Logo.svg.png HTTP/1.1 
Host: upload.wikimedia.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         91.198.174.208
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 23 Sep 2022 02:20:35 GMT
content-length: 8751
content-disposition: inline;filename*=UTF-8''United_States_Postal_Service_Logo.svg.png
etag: ed57bacc6cdb62a973d96e2b53230e5b
last-modified: Sun, 23 Jan 2022 10:09:37 GMT
server: ATS/8.0.8
age: 12476
x-cache: cp3051 hit, cp3051 hit/1
x-cache-status: hit-front
server-timing: cache;desc="hit-front", host;desc="cp3051"
strict-transport-security: max-age=106384710; includeSubDomains; preload
report-to: { "group": "wm_nel", "max_age": 86400, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] }
nel: { "report_to": "wm_nel", "max_age": 86400, "failure_fraction": 0.05, "success_fraction": 0.0}
accept-ch: Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version
permissions-policy: interest-cohort=(),ch-ua-arch=(self "intake-analytics.wikimedia.org"),ch-ua-bitness=(self "intake-analytics.wikimedia.org"),ch-ua-full-version-list=(self "intake-analytics.wikimedia.org"),ch-ua-model=(self "intake-analytics.wikimedia.org"),ch-ua-platform-version=(self "intake-analytics.wikimedia.org")
x-client-ip: 91.90.42.154
access-control-allow-origin: *
access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache
timing-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 220 x 42, 8-bit/color RGBA, non-interlaced\012- data
Size:   8751
Md5:    ed57bacc6cdb62a973d96e2b53230e5b
Sha1:   ad6da9d2bc0681e48fa4c097a00c1500334d4c0d
Sha256: 3d780486789e44732b4b0d38b7eb6b62a415c83e35aae4af75a873d9f1a849ba
                                        
                                            GET /media/warning_red.png HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/app/index.php
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 23 Sep 2022 05:48:32 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Content-Length: 2703
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 210 x 210, 8-bit colormap, non-interlaced\012- data
Size:   2703
Md5:    2ded56bf1a275c53de09f7992b3a6d81
Sha1:   9413b8c06099af348b42dba37e4eed7a31223fdd
Sha256: 7a89397dda9a9adbd6a118c432895e46317944ce976d794c895f3788d27b0286
                                        
                                            GET /media/PSDRlight-web.woff HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/media/app.css
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Date: Fri, 23 Sep 2022 05:48:32 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Content-Length: 60781
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 60781, version 1.0\012- data
Size:   60781
Md5:    20398ebf2986259c88014178d7044844
Sha1:   02422f7f86e44268579b2b3694ca72eaaa8a301a
Sha256: 9e462606602d426b676f2b6f9c0b6629b02f91204214898f7d4a56749c4e00d0

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /media/PSDRregular-web.woff HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/media/app.css
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Date: Fri, 23 Sep 2022 05:48:32 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 13:44:18 GMT
Accept-Ranges: bytes
Content-Length: 60042
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 60042, version 1.0\012- data
Size:   60042
Md5:    32319d6149e2659c974fef61dfd5cc42
Sha1:   e2aedccccdbad3f63b14e27941c59e7ba533cc51
Sha256: c99d0b5a290e48d4e4cbb86c29dd12436f465696702a81ded130a411f1e98cd3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /media/PSDRlight-web.20398ebf.woff HTTP/1.1 
Host: 20-14-91-0.cprapid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20-14-91-0.cprapid.com/media/main.css
Cookie: PHPSESSID=77614c6d9f5fd3724060e6bda836d883
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         20.14.91.0
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 23 Sep 2022 05:48:32 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Alerts:
  Blocklists:
    - fortinet: Phishing