Report - seal-app-6b4gc.ondigitalocean.app/

Report Overview

Submitted URL
seal-app-6b4gc.ondigitalocean.app/
IP
104.16.244.78
ASN
#13335 CLOUDFLARENET
Submitted
2022-10-12 04:35:27
Access
Website Title
Final URL
Tags
None
urlquery detections
Scam / Cryptowall detected
Scam / Fake AntiVirus

Detections

urlquery
15
Network Intrusion Detection
0
Threat Detection Systems
16

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	63 kB	34.120.237.76
maxcdn.bootstrapcdn.com	724	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	935 B	68 kB	104.18.11.207
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	662 B	1.4 kB	142.250.74.3
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.3 kB	6.2 kB	23.36.77.32
ocsp.globalsign.com	2075	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	356 B	1.9 kB	104.18.20.226
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	52.13.69.101
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	34.160.144.191
cdnjs.cloudflare.com	235	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	802 B	33 kB	104.17.25.14
cdn.jsdelivr.net	439	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	923 B	48 kB	151.101.85.229
www.googletagmanager.com	75	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	392 B	43 kB	142.250.74.168
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	329 B	797 B	93.184.220.29
www.google-analytics.com	40	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.2 kB	21 kB	142.250.74.174
seal-app-6b4gc.ondigitalocean.app	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	9.4 kB	217 kB	104.16.243.78
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	54.230.111.7

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-10-12	medium	seal-app-6b4gc.ondigitalocean.app/	Phishing
2022-10-12	medium	seal-app-6b4gc.ondigitalocean.app/werrx01/0wa0rni0ng0.mp3	Phishing
2022-10-12	medium	seal-app-6b4gc.ondigitalocean.app/werrx01/main.js	Phishing
2022-10-12	medium	seal-app-6b4gc.ondigitalocean.app/werrx01/before.js	Phishing
2022-10-12	medium	seal-app-6b4gc.ondigitalocean.app/werrx01/light.js	Phishing
2022-10-12	medium	seal-app-6b4gc.ondigitalocean.app/	Phishing
2022-10-12	medium	seal-app-6b4gc.ondigitalocean.app/werrx01/alertmicrosoft.mp3	Phishing
2022-10-12	medium	seal-app-6b4gc.ondigitalocean.app/werrx01/fullscreen.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (26)

	URL	Size	First Seen	Last Seen
	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js	84 kB	2023-03-07	2024-04-23
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:40 Last Seen2024-04-23 20:11:24 Times Seen10837 Hash 7f9fb969ce353c5d77707836391eb28d 62c4042e9ebc691a5372d653b424512a561d1670 2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515 Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/before.js	366 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/before.js IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:37 Last Seen2024-04-23 01:48:07 Times Seen1635 Hash 87c2dc3aeb373ca8445f7410ef387689 688f4be3cfb8688b4441f382724495a7b82b3f62 31681779c6f394370dad146169896e9ec2b8f7c716c4b1db78c459033e48bf95 Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&	285 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+& IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:40 Last Seen2024-04-23 01:48:07 Times Seen419 Hash 72a576f86bc0b4b6d512d56e973439d5 c1aa81af8fc290eb884eea0f62a8cbf1016364a1 539f6d9aa71defa04e3dac1209071a8c8edf9360e5194252cd803a02b28facf2 Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&	755 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+& IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:37 Last Seen2024-04-23 01:48:07 Times Seen690 Hash 4e2f05b574fedaf91f2512387645cc58 ea0cf59a0337bae5fab7ef33718cb5743475b774 a72cb2c772959b2af05bb5fa7aa8c44fb1c3fb2645180874f6758b761307890a Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&	411 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+& IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:37 Last Seen2024-04-23 01:48:07 Times Seen448 Hash f0377b86e2049f89993a85c91de05c2b 49061b39e1dac235a40838d6e1cc4ee7d6bd493a acd76ae4519d08297507ed2928fb33f9b7a93a01f1e2ff2ddfaecd8117307eca Loading...

	www.googletagmanager.com/gtag/js?id=UA-217279329-51	109 kB	2023-03-08	2023-03-08
Pretty URL www.googletagmanager.com/gtag/js?id=UA-217279329-51 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 13:20:57 Last Seen2023-03-08 13:20:57 Times Seen1 Hash 0cc92620d0443874b581c0045f63cbe8 8764a9069851a8380b66ac8220c246d4cbc2720c 7cb7a0e73ebe03db0ebb51c2d53ab3010b99120cb023aa4aa856819ee6e2accd Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&	440 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+& IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:38 Last Seen2024-04-23 01:48:07 Times Seen559 Hash 00fadc8947f0dbbdeae061e8fd0b1921 d8969451c66ff82ad37e7cc56a9da4d63259df8e b5c7cb0438303e8d088cc38f3a241829f76813cc14e0fcfb2c797a0c62e1ca24 Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&	3.9 kB	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+& IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:37 Last Seen2024-04-23 01:48:07 Times Seen688 Hash 3139f7d4c337fc7ea46b9a9730008e52 4938996f8712f57facebb2d5ed622a49c0ea95f0 4c66d3873787387414ffa9fe6a26555cfcf4e8dc271f32c8291390d10bc35974 Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&	268 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+& IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:38 Last Seen2024-04-23 01:48:07 Times Seen1122 Hash f79dd5e30c3ffc1f47cb576925817390 f1e0088b7aaed01974807ca980dc7310bc73bee2 c091a178652a39bea6ffed82b2517edf4046b3fbf84cf1a754b29861d95af80f Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&	132 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+& IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:38 Last Seen2024-04-23 01:48:07 Times Seen484 Hash 097ad91a9137e5860c2e3597c7edd18f e70d3167dcdb773950b2afa18946651dd9699753 bd64b18546b48624030136387aaa882ec621662537e1f5b21ce1016961350701 Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&	146 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+& IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:38 Last Seen2024-04-23 01:48:07 Times Seen1145 Hash 01c7c3ae0abdb0272bf7bd209dbb84b2 bf44fb29c253e6790a29c47d3aba9e316a35b8b2 b63a8c8faf6e973bdbe4b87efdaf0bdb4fac88eebd573eba529d75467e4e0a0c Loading...

	seal-app-6b4gc.ondigitalocean.app/	2.3 kB	2023-03-07	2023-04-05
Pretty URL seal-app-6b4gc.ondigitalocean.app/ IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:18:46 Last Seen2023-04-05 02:05:37 Times Seen12 Hash a033c794faa04b21a9555b2dfafd3df5 cb40ac9d7003f5eeb4b4305915b3fb2fb07868db 6766313fd69ac24065afb012e7932d0ddf5377d74ca1373c75be4e9bc1402b4f Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&	156 B	2023-03-07	2023-03-08
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+& IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:08:58 Last Seen2023-03-08 13:20:57 Times Seen1 Hash 14b174abcb9b1690e1b009b016d85bd0 90b1d9e355ca34f31cec186bc5ab7e9a34bf5805 0dfc80172d526817de39e5cf20557355e212a314364bc0d335edc95137dadcbb Loading...

	cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js	11 kB	2023-03-07	2024-04-23
Pretty URL cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:46 Last Seen2024-04-23 23:38:46 Times Seen4263 Hash 65f1d21d5fcc9d21da758adababd0c3c e0661d07d64c00008bc9d013d16eec0a0f156dc7 d2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&	54 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+& IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:38 Last Seen2024-04-23 01:48:07 Times Seen356 Hash 15955c75985a4a65b2bc41de83d416e3 fa66029c48a0d474f5535e7c800b1eb2eb7d8cc7 26e46ced18ba88b850dc03c75a66706bd11e09586be175b62dc3598bbb683fb0 Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&	55 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+& IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:15:57 Last Seen2024-04-23 01:48:07 Times Seen148 Hash 53e0cff7c9a0370a461a5cf0dae23ded 123d9a75824b66f00e30d07c2bf5769f8446993b 7dcadc60cbc5ff77cc97f42eb20421c901be52ce176926782ea1d05871c710ca Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&	21 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+& IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:59 Last Seen2024-04-23 01:48:07 Times Seen1244 Hash 011a84e54de113cd8bee0e17ae8aa515 e84b14b6ec396b1ab045b7e667f90536cd5c6083 13fcca4523b328c51789df37af5275739fd57abf684e5d3658e7d69210f9ec53 Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/light.js	503 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/light.js IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:37 Last Seen2024-04-23 01:48:07 Times Seen2617 Hash cd6c33fbc221d0271c910af910e6ebed 9b52f24d6f10b885bb19db1c4b531469f96d2914 318698ae5e67c32550d6b40ac09848d598f6317f51a8f09638ba925f6e7cc479 Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&	137 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+& IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:40 Last Seen2024-04-23 01:48:07 Times Seen564 Hash 50fc2b790c3447a81317ac8e2f9d37a8 690a275ed76f9ab5a56c1318bd97cb616796a37c edbebe1cab5254d6b88e54eef2b62e1eeab3b2cf05b9d6fe99b24996f8744efd Loading...

	www.google-analytics.com/analytics.js	50 kB	2023-03-08	2024-04-20
Pretty URL www.google-analytics.com/analytics.js IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 05:22:31 Last Seen2024-04-20 17:36:09 Times Seen1522 Hash fda30e8a22c9bcd954fd8d0fadd0e77c ae47cd34cbde081a48d7f92fc80aaf06a1381193 b42e4a056cb5b80c5a315040826866445ec9332f0749e184509ab2d9d3b86719 Loading...

	cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js	84 kB	2023-03-07	2024-04-24
Pretty URL cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js IP 151.101.85.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-04-24 00:05:00 Times Seen5278 Hash f81d0a1705048649befc8b595e455a94 aec551e4d573463088fca7d14fb644eb389f1839 b0212543cc5a4a0a31c1b5a9d1e8973261992116b4cfde3e7dfcf33b4e81a97b Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&	947 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+& IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:38 Last Seen2024-04-23 01:48:07 Times Seen1127 Hash bdef85124f57f822d19cfa00f81b963b a3340b3288e6c3544fd013ed4a664b85f53d88d2 26f081811536ae9cf31db110acd4a319f399de9bad0e354ce20299685b3561cf Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/fullscreen.js	245 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/fullscreen.js IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:37 Last Seen2024-04-23 01:48:07 Times Seen1628 Hash 62f519fe72808a3ec681392b7ff47417 2ee16112e35feb9d6d48ae0f4e66187514dec811 43703d37b8fe2769cb2e12db7aa281dbcca175124d05ff4b0cc3d152534698a4 Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/main.js	1.4 kB	2023-03-07	2024-04-14
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/main.js IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:15:57 Last Seen2024-04-14 08:06:16 Times Seen198 Hash 03a0d33064ded7e6d9ed4641af712113 15e8a1c40cd8e916b0ee183117a0caa86939a215 4b0dd953b93f4de776f755240671639620bbf6bd2012a9262cffc24d414c84d7 Loading...

	seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&	86 B	2023-03-07	2024-04-23
Pretty URL seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+& IP 104.16.243.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:37 Last Seen2024-04-23 01:48:07 Times Seen616 Hash c29ebcb02d59af397a5eec3b649acf42 900496a5912defe85a3a8fcf77bb4526f9bec22c 56bc284830b8a74f516c857972a0b2d2c8d288b29e9871e5df3c7fe421f3ef0d Loading...

		Size	First Seen	Last Seen
	#1 Write - 26b17225b626fb9238849fd60eabdf60	1 B	2023-03-07	2024-04-21
Pretty Observations First Seen2023-03-07 01:18:46 Last Seen2024-04-21 01:51:10 Times Seen286 Hash 26b17225b626fb9238849fd60eabdf60 a979ef10cc6f6a36df6b8a323307ee3bb2e2db9c a318c24216defe206feeb73ef5be00033fa9c4a74d0b967f6532a26ca5906d3b Loading...

HTTP Transactions (52)

URL IP Response Size

seal-app-6b4gc.ondigitalocean.app/

104.16.243.78

301 Moved Permanently

0 B

URL HTTP/1.1
seal-app-6b4gc.ondigitalocean.app/
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Wed, 12 Oct 2022 04:35:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 12 Oct 2022 05:35:16 GMT
Location: https://seal-app-6b4gc.ondigitalocean.app/
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 758d20b95810fac0-OSL

firefox.settings.services.mozilla.com/v1/

54.230.111.7

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
54.230.111.7:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 12 Oct 2022 03:49:12 GMT
Expires: Wed, 12 Oct 2022 04:33:01 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: D8yegeoB1GaTDZQDW0sw57QC9rVs7_Fmic3Dv044EZqEf6wNWGJfPg==
Age: 2764

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e0602913f3d432ffbfaa654440972ee1
e5aaf31749e65875fd840091f9a3bba641de413d
5495ad212166703dcd1d17d7aa6ff4d1c40e73dfad703d24f00f60f35bc7d56c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5495AD212166703DCD1D17D7AA6FF4D1C40E73DFAD703D24F00F60F35BC7D56C"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5246
Expires: Wed, 12 Oct 2022 06:02:42 GMT
Date: Wed, 12 Oct 2022 04:35:16 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ceb45134349ef6afcb5b4bb730678041
15dc3ecb18e30e77cd7c694dd237bff9be583e7a
a39e0827fa31257562bb681e312ec2944a862e9ad4e568a803f6e09e994a6018

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A39E0827FA31257562BB681E312EC2944A862E9AD4E568A803F6E09E994A6018"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5138
Expires: Wed, 12 Oct 2022 06:00:54 GMT
Date: Wed, 12 Oct 2022 04:35:16 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: tAVvXJ/bX6Bmsb3jjtkPpPyrICW/dKcRI2qCrSw7FKbT4toBF+6V+wfUXVa2FdN5M+joJtpnPaE=
x-amz-request-id: 6C17N1VGD5V0HFCV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 12 Oct 2022 04:01:08 GMT
age: 2048
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 12 Oct 2022 04:35:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

54.230.111.7

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
54.230.111.7:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Wed, 12 Oct 2022 04:29:41 GMT
Expires: Wed, 12 Oct 2022 04:43:20 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ZC7b3tNIwM4ndzX812R6tIT-O9pDFFdkNkoqK2iEZiWCau2tkLYB2Q==
Age: 336

cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js

104.17.25.14

200 OK

27 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP
104.17.25.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (32180)
Size
27 kB (26660 bytes)
Hash
b1e4b2a99336201b37fb8cea5d57abb9
d57980f0d0eaaf57ec33ddc9ed027274cfa86027
c805bfd991983f57b5b7878b998f7529e9b7e2df4bc2d39ba493934e23ba3f8a

HTTP Headers

GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: application/javascript; charset=utf-8
content-length: 26660
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-14983"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 10996105
expires: Mon, 02 Oct 2023 04:35:17 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v1sRO4BBPlyunhLkBs0pFcvdjyxDtI8Z%2FeNguJ8iCqV2s6gz9NnOBA1on1gpdOfvrHJ2fOLayQL7vPg8Ooqrbhz%2B%2FF9R2qpls8PRb4kEal6jtxP2L3uELDhZTihom8HgUp%2FoH38d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 758d20c03bbbb52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js

104.17.25.14

200 OK

4.0 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js
IP
104.17.25.14:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (11084), with no line terminators
Size
4.0 kB (3980 bytes)
Hash
a5775b673c18ffa903cd1a6129ce5f87
ee2569b285a7dbc4ccc95b01a16f06943fade768
ab8ad2f07d5214be2ade4edcd295d5fb8f8aa60971b3ec1348063a8a19659fc9

HTTP Headers

GET /ajax/libs/modernizr/2.8.3/modernizr.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: application/javascript; charset=utf-8
content-length: 3980
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f26-2b4c"
last-modified: Mon, 04 May 2020 16:13:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1661684
expires: Mon, 02 Oct 2023 04:35:17 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IUv301Ry%2Fi4c63H432b%2FIyiGo0lzAOIcdImpQ%2F7AVOol%2ByxEy0FzSs%2FJNCAvJuA7LItnyeO6XDP3oHV5cNqBSlnEtmzCX%2Bu2E9CRy23sqD8XFkC1xRFyvLax8Pal9e3q3MQ3LBFv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 758d20c03bbdb52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css

151.101.85.229

200 OK

24 kB

URL HTTP/2
cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
IP
151.101.85.229:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (65326)
Size
24 kB (24100 bytes)
Hash
849f3e827da80e4e4c6a8c49689f057d
035d81aaaf6da3ffa5ce241179a9e14d533e7a3b
9546dbb82c3facf833e4adb713ce7e57a34dd53f6b55697ef1e1877bdbd8bb73

HTTP Headers

GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seal-app-6b4gc.ondigitalocean.app
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"27681-LKxK/BIJg5IUESlr1Oj9ipS6I34"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 12 Oct 2022 04:35:17 GMT
age: 2006092
x-served-by: cache-fra19147-FRA, cache-bma1625-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24100
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js

151.101.85.229

200 OK

22 kB

URL HTTP/2
cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js
IP
151.101.85.229:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (65299)
Size
22 kB (21830 bytes)
Hash
a5cbb97cf034dd181106adecdafe3035
5fca1af6c76dd3e609f7f92841e564df1281927a
5ae018daf5df2cd903f80162efbaa3e138e0ed47ff90a315f2e2c497dc88a890

HTTP Headers

GET /npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seal-app-6b4gc.ondigitalocean.app
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"1499a-rsVR5NVzRjCI/KfRT7ZE6zifGDk"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 12 Oct 2022 04:35:17 GMT
age: 11237960
x-served-by: cache-fra19162-FRA, cache-bma1625-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 21830
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
befa75dbbe9d5dfa501f9c1f03b7cdfa
73814c47bdcd6bebffc963b71d0a20fb361fad50
76b8f843416709a64e030343fbea3e04b9ee9faf2872ddba29f7c8ea28041e28

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 04:35:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&

104.16.243.78

200 OK

6.9 kB

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size
6.9 kB (6858 bytes)
Hash
58dd7e11aa5e7a4ebed367fb1a337ed3
9715cd272a3577adf7e1413ea13b4d2733ce85e4
b7c54328c79966cc2a0492f63659310709d5f40cd2c9315158c85a34da3e4719

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Cryptowall detected

HTTP Headers

GET /werrx01/?phone=+& HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:16 GMT
content-type: text/html
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20be5adb0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/werrx01/minimize.jpg

104.16.243.78

200 OK

2.2 kB

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/minimize.jpg
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x39, components 3\012- data
Size
2.2 kB (2247 bytes)
Hash
1ba392dce74f8987dca48bf65d817c8f
db0b8444c46125105b52f272bd422a7f52da1f72
a05245b6f7fd752af4a7b0131bbdfdf3eaee6c5a25a81cb498e0f0759189473c

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Fake AntiVirus

HTTP Headers

GET /werrx01/minimize.jpg HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: image/jpeg
content-length: 2247
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: "8c7-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20bffc010b69-OSL
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/werrx01/def.png

104.16.243.78

200 OK

3.8 kB

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/def.png
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size
3.8 kB (3834 bytes)
Hash
77a2ffc5545f87551d74781201de9b3b
c9c3798afd2ae95aa3bba3c428335d49c8255b06
316e6a6737bd296ab30aca2ef7fa36f119d15786a2432d01e31fdc130272f15c

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Fake AntiVirus

HTTP Headers

GET /werrx01/def.png HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: image/png
content-length: 3834
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: "efa-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20bffc100b69-OSL
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/werrx01/virus-images.jpg

104.16.243.78

200 OK

8.2 kB

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/virus-images.jpg
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 254x71, components 3\012- data
Size
8.2 kB (8196 bytes)
Hash
5fc559a242f0ea0a023f10830887d2af
9d744c2f3a6bf5b715496350c8de7124cdd7ddc8
3b531d403dc8ce7cbb0efb1a0c307cfb2bbaaf21feaff9f3546f13bebda71887

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Fake AntiVirus

HTTP Headers

GET /werrx01/virus-images.jpg HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: image/jpeg
content-length: 8196
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: "2004-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20c00c150b69-OSL
X-Firefox-Spdy: h2

ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1

104.18.20.226

200 OK

1.5 kB

URL HTTP/1.1
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.5 kB (1462 bytes)
Hash
0aa49a71deca92c0f112fe3717720797
032a2953ddb585f297bf045c780790f72b1a909b
37ef3f81cb35664b60fb1deb86cf51105c3078c0600de7f07b95ecd117726adc

HTTP Headers

POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 12 Oct 2022 04:35:17 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "54FE484FA0659B7D4315C6821AC143DDAA41B75C"
Expires: Wed, 12 Oct 2022 15:00:00 GMT
Last-Modified: Wed, 12 Oct 2022 03:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1312
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 758d20c0ceb2fac4-OSL

seal-app-6b4gc.ondigitalocean.app/werrx01/microsoft.png

104.16.243.78

200 OK

1.0 kB

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/microsoft.png
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced\012- data
Size
1.0 kB (1045 bytes)
Hash
bf2b460590fbb9d8e9611a6e9006b816
561e1dab259d61e798b3ce380527b71b61074ff3
ee4bc5fe81fa7c1e8497d79c9c8a96485df217092d334e9b48fa8840fed11d03

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Fake AntiVirus

HTTP Headers

GET /werrx01/microsoft.png HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: image/png
content-length: 1045
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: "415-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20bffc090b69-OSL
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/werrx01/bell.png

104.16.243.78

200 OK

1.1 kB

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/bell.png
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced\012- data
Size
1.1 kB (1108 bytes)
Hash
a3555871399f1f67bfacaf437974b03a
b6337de87cd7a75a73cd804774651d14c83fe76a
2e48fef820929c21295e13444901f60e3aed61ba6f8c773ff1466e6843e76b49

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Fake AntiVirus

HTTP Headers

GET /werrx01/bell.png HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: image/png
content-length: 1108
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: "454-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20bffc0e0b69-OSL
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/werrx01/pc.png

104.16.243.78

200 OK

4.9 kB

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/pc.png
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 166 x 92, 8-bit/color RGBA, non-interlaced\012- data
Size
4.9 kB (4949 bytes)
Hash
cc5132b56ba46b03dd998aa1fe220106
403e007a0b17d76a9945fa5ec46a9d01733b3040
598699133be5eef63e3b9b5540609ec0dc91d7af9c7f70a3b890e57491a70ae0

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Fake AntiVirus

HTTP Headers

GET /werrx01/pc.png HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: image/png
content-length: 4949
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: "1355-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20bffc0f0b69-OSL
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/werrx01/virus-scan.png

104.16.243.78

200 OK

26 kB

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/virus-scan.png
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size
26 kB (25871 bytes)
Hash
2c497dfff84bd8c5af9254c9d6278ce1
667e72e7ba6f00a54629e28133317022d4b59af6
b2dc4153ee7019c70a1095d5d1304d540e3bba045d99e141f63e5b13362e5a4e

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Fake AntiVirus

HTTP Headers

GET /werrx01/virus-scan.png HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: image/png
content-length: 25871
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: "650f-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20bffc0c0b69-OSL
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/werrx01/setting.png

104.16.243.78

200 OK

364 B

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/setting.png
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Size
364 B (364 bytes)
Hash
e144c3378090087c8ce129a30cb6cb4e
59da5466551de941d0215e45c54aa2ceaf436be1
b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Fake AntiVirus

HTTP Headers

GET /werrx01/setting.png HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: image/png
content-length: 364
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: "16c-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20bffc0a0b69-OSL
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=UA-217279329-51

142.250.74.168

200 OK

42 kB

URL HTTP/2
www.googletagmanager.com/gtag/js?id=UA-217279329-51
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1962)
Size
42 kB (42391 bytes)
Hash
283fa1e04959d31b2db39f537a8c7371
3568b34e740864d23f5e4dbcccadee9593d4d245
790eb3729d28b5339bda3687c26f93b504b40c5d2dc861ffce69489d49a8f75e

HTTP Headers

GET /gtag/js?id=UA-217279329-51 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 12 Oct 2022 04:35:17 GMT
expires: Wed, 12 Oct 2022 04:35:17 GMT
cache-control: private, max-age=900
last-modified: Wed, 12 Oct 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42391
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
34c15fee665f03aab24038618bb2d9a7
6b90ea5a496581b83daf1764938d1db1a5a32bb4
93e99055eb4a94f808eed2fac338d6c480047c30a56498b2a65036a7d5bdea04

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2712
Cache-Control: max-age=101805
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 04:35:17 GMT
Etag: "6345241a-1d7"
Expires: Thu, 13 Oct 2022 08:52:02 GMT
Last-Modified: Tue, 11 Oct 2022 08:06:50 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471

seal-app-6b4gc.ondigitalocean.app/werrx01/cross.png

104.16.243.78

200 OK

44 kB

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/cross.png
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 2080 x 2080, 8-bit/color RGBA, non-interlaced\012- data
Size
44 kB (44098 bytes)
Hash
4487a588bf2a07e3d1936d705c5ceefd
db193b3e2ab9fbee6eae99ced2366b1ef5f16971
3821ef20f5904fdb993e34d87ff8fb9c5786a382efb0eeee8b4f00c91428b701

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Fake AntiVirus

HTTP Headers

GET /werrx01/cross.png HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: image/png
content-length: 44098
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: "ac42-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20c00c140b69-OSL
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
befa75dbbe9d5dfa501f9c1f03b7cdfa
73814c47bdcd6bebffc963b71d0a20fb361fad50
76b8f843416709a64e030343fbea3e04b9ee9faf2872ddba29f7c8ea28041e28

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 04:35:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

seal-app-6b4gc.ondigitalocean.app/werrx01/bg2.jpg

104.16.243.78

200 OK

101 kB

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/bg2.jpg
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x1080, components 3\012- data
Size
101 kB (101218 bytes)
Hash
21e2ac3edb976d4b8c2018eff70f084d
8891207a1729c77c4be38ee3dae75bb240c8a92b
d442ddd2a4f0354eff40d09b4e54d0fa27580e9cbe17afffa8c70a5f496cd92a

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Fake AntiVirus

HTTP Headers

GET /werrx01/bg2.jpg HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: image/jpeg
content-length: 101218
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: "18b62-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20bffc000b69-OSL
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/werrx01/0wa0rni0ng0.mp3

104.16.243.78

206 Partial Content

8.4 kB

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/0wa0rni0ng0.mp3
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type
Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 56 kbps, 44.1 kHz, Monaural\012- data
Size
8.4 kB (8405 bytes)
Hash
8618fbb0911e3b8fc96725dee8bfd81f
1bbcb78922946d0cf18fbf3a9e092e36453eb767
0589be7715d2320e559eae6bd26f3528e97450c70293da2e1e8ce45f77f99ab1

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Fake AntiVirus
fortinet	Phishing

HTTP Headers

GET /werrx01/0wa0rni0ng0.mp3 HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 206 Partial Content
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: audio/mpeg
content-length: 8405
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: "20d5-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
content-range: bytes 0-8404/8405
server: cloudflare
cf-ray: 758d20c1bcf70b69-OSL
X-Firefox-Spdy: h2

push.services.mozilla.com/

52.13.69.101

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.13.69.101:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qLdubhmtJG1sIA1ccr9SKg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: RQN8iZiTxK1+eONCBG8mW92Xx1Q=

www.google-analytics.com/analytics.js

142.250.74.174

200 OK

20 kB

URL HTTP/2
www.google-analytics.com/analytics.js
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1325)
Size
20 kB (20039 bytes)
Hash
47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e

HTTP Headers

GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 12 Oct 2022 02:41:09 GMT
expires: Wed, 12 Oct 2022 04:41:09 GMT
cache-control: public, max-age=7200
age: 6848
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/favicon.ico

104.16.243.78

404 Not Found

192 B

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/favicon.ico
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
192 B (192 bytes)
Hash
7288ba09edf0f6bed3ae589e5b20d1b6
8678f103b0295f8880b689700dc3d397a3f4d9e4
5bdfe9e7c4e8e0bde2d8f4c3fc161541010486d65f34ca534d97e26ef2972d94

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: text/html; charset=iso-8859-1
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 404
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20c32d970b69-OSL
content-encoding: br
X-Firefox-Spdy: h2

www.google-analytics.com/j/collect?v=1&_v=j98&a=1061131675&t=pageview&_s=1&dl=https%3A%2F%2Fseal-app-6b4gc.ondigitalocean.app%2Fwerrx01%2F%3Fphone%3D%2B%26&ul=en-us&de=UTF-8&dt=Security%20Center%20Code0x268d3%20Services&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1417175707&gjid=1547358120&cid=752102591.1665549318&tid=UA-217279329-51&_gid=759435703.1665549318&_r=1&gtm=2ouaa0&z=1668427994

142.250.74.174

200 OK

1 B

URL HTTP/2
www.google-analytics.com/j/collect?v=1&_v=j98&a=1061131675&t=pageview&_s=1&dl=https%3A%2F%2Fseal-app-6b4gc.ondigitalocean.app%2Fwerrx01%2F%3Fphone%3D%2B%26&ul=en-us&de=UTF-8&dt=Security%20Center%20Code0x268d3%20Services&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1417175707&gjid=1547358120&cid=752102591.1665549318&tid=UA-217279329-51&_gid=759435703.1665549318&_r=1&gtm=2ouaa0&z=1668427994
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

HTTP Headers

POST /j/collect?v=1&_v=j98&a=1061131675&t=pageview&_s=1&dl=https%3A%2F%2Fseal-app-6b4gc.ondigitalocean.app%2Fwerrx01%2F%3Fphone%3D%2B%26&ul=en-us&de=UTF-8&dt=Security%20Center%20Code0x268d3%20Services&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1417175707&gjid=1547358120&cid=752102591.1665549318&tid=UA-217279329-51&_gid=759435703.1665549318&_r=1&gtm=2ouaa0&z=1668427994 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://seal-app-6b4gc.ondigitalocean.app
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: https://seal-app-6b4gc.ondigitalocean.app
date: Wed, 12 Oct 2022 04:35:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
372301cc3e0ad3b9318a13a6ec327d30
9d34de85f08bf496e76a3577e0b23af5a2e06548
b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5348
Expires: Wed, 12 Oct 2022 06:04:26 GMT
Date: Wed, 12 Oct 2022 04:35:18 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
372301cc3e0ad3b9318a13a6ec327d30
9d34de85f08bf496e76a3577e0b23af5a2e06548
b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5348
Expires: Wed, 12 Oct 2022 06:04:26 GMT
Date: Wed, 12 Oct 2022 04:35:18 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
372301cc3e0ad3b9318a13a6ec327d30
9d34de85f08bf496e76a3577e0b23af5a2e06548
b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5348
Expires: Wed, 12 Oct 2022 06:04:26 GMT
Date: Wed, 12 Oct 2022 04:35:18 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
372301cc3e0ad3b9318a13a6ec327d30
9d34de85f08bf496e76a3577e0b23af5a2e06548
b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5348
Expires: Wed, 12 Oct 2022 06:04:26 GMT
Date: Wed, 12 Oct 2022 04:35:18 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
372301cc3e0ad3b9318a13a6ec327d30
9d34de85f08bf496e76a3577e0b23af5a2e06548
b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5348
Expires: Wed, 12 Oct 2022 06:04:26 GMT
Date: Wed, 12 Oct 2022 04:35:18 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a6de788-8d97-4f94-bc1e-5e186ab0f084.webp

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a6de788-8d97-4f94-bc1e-5e186ab0f084.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10735 bytes)
Hash
5935f664339bfd6b3a680e0293a85206
6939666e52ea22d84546b37908a05205a7e86114
6afabffe02d71e1cdad6868d9c372627c6248511d4320f6dd1ad984e2212d162

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a6de788-8d97-4f94-bc1e-5e186ab0f084.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10735
x-amzn-requestid: 5c584c89-219f-49a8-8a3a-ce572550d7a6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3BPMEqmIAMFf1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e261-557d611664d69d6a678a40da;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: nMtQeCV6lx8Y_JbrATc2akklt26o-CXjXwx-aNtmhuBhlNGlkfvVQw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 22:11:28 GMT
age: 23030
etag: "6939666e52ea22d84546b37908a05205a7e86114"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29343d49-0496-4fa8-a9fd-57bc7c016c4b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11471 bytes)
Hash
cd4d75488f43e3043ff2128ced92afbf
c6f3d4e851fcd59b7b30b57cd2b2a3b3be167903
200daa637b122cd4f8dcefadfe70172ad849981aeae9b90016b4ac624df61ef5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29343d49-0496-4fa8-a9fd-57bc7c016c4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11471
x-amzn-requestid: 07e93e6b-2340-4706-8867-d17d620528a0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3AkhFwRoAMFQ6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e14f-0dbff9d342d48af57e10f854;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:34:07 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dQYZ7O6E63ro5mVgvJVFMDKGFDmWtGdossBb-uU5urs-1fAwbD3V4w==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 22:07:08 GMT
age: 23290
etag: "c6f3d4e851fcd59b7b30b57cd2b2a3b3be167903"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0583d755-2f5b-458f-86f0-774b9909eb6f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11800 bytes)
Hash
6e9aa9808428e5fd81ac9d61d6f7c708
3a8d76badce50dd98938885082dcb6e30363ae88
d8f7c48a1cbe04af2f7e0455d1ef7af9b63506b9ae343ebf14ece8689bb06bf6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0583d755-2f5b-458f-86f0-774b9909eb6f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11800
x-amzn-requestid: 5f2ce4dd-0df8-4df7-a12d-e6fffd622752
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZnTQHGADIAMFXfg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f98cd-5044665325e5d64975c1ff0c;Sampled=0
x-amzn-remapped-date: Fri, 07 Oct 2022 03:11:09 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZKsi1hYgZdJQNWpphaMVLfpg69dC93J575Y2RsOzFV3ZzBb6x-nrew==
via: 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 22:22:17 GMT
age: 22381
etag: "3a8d76badce50dd98938885082dcb6e30363ae88"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d2e6a3-fdda-4fcf-8005-616606887def.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.7 kB (9712 bytes)
Hash
0cb1cec13e512112d85f494c2207dad9
b90edfbd7f9f5ee0a4d11597c8a9f79f75ff0efb
78f7e4cc530967e019ba13b85b5ae9350c80d138a5f3727be81a4b72e5e00491

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d2e6a3-fdda-4fcf-8005-616606887def.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9712
x-amzn-requestid: c47fefde-d06c-4c1e-ab92-189808a9b67e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3BLOEEsoAMFRyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e247-1dde77920432dd6d0f0736f2;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:38:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: F4dbsXMh5TBVqS2os9ShcFB6ZXBwooVDbBEp0xAm-DT-5hEgwU36HQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 21:56:43 GMT
etag: "b90edfbd7f9f5ee0a4d11597c8a9f79f75ff0efb"
content-type: image/jpeg
age: 23915
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd952f4-819b-4d3c-91a1-0f9020bae81c.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.3 kB (9325 bytes)
Hash
d31330d47548d966e50813d7e2253551
ec0a371cca2d4e43f3375dd6b699478c5af62884
309f2cf9ccd62d5c2fd8713836b602317875f4273ef560f3bf3d681aa868b9d6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd952f4-819b-4d3c-91a1-0f9020bae81c.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9325
x-amzn-requestid: 6a0388e5-97d6-42f4-b54d-a3f4826f2293
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZxMaDE2JoAMFieg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63438dd9-76ff69230ce03c033b35a4c4;Sampled=0
x-amzn-remapped-date: Mon, 10 Oct 2022 03:13:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: oUdj3LVRzke7i9j4pQRCGqss6LC-l1Qf4gvtAnrM9ZH1Bzu6Adezuw==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 12 Oct 2022 04:00:51 GMT
age: 2067
etag: "ec0a371cca2d4e43f3375dd6b699478c5af62884"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

3.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5779fe51-33e5-4fb8-bc05-322378177e5b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
3.6 kB (3589 bytes)
Hash
47a434192848178f165f71e8a5c45de5
77db96cde6571f709e5f4247fb745d3e07b3391d
471d6ccae6a208b2e9ce60db6d3ca4f31def2b37daa9c3a6321dc2b1b0b411b7

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5779fe51-33e5-4fb8-bc05-322378177e5b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 3589
x-amzn-requestid: 60e035ed-55a4-4bf6-ae28-0b725ba47b90
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3B7eGmwoAMFYTQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e37c-6ebe45e718388a2c2a236ac2;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:43:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: g0ijWFIbMZkolTrDTdLNmGikjS4xUZSjT0EsVuVZ_HaSYJsrXrrZrg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 21:55:24 GMT
age: 23994
etag: "77db96cde6571f709e5f4247fb745d3e07b3391d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0

104.18.11.207

200 OK

67 kB

URL HTTP/2
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
IP
104.18.11.207:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format (Version 2), TrueType, length 66624, version 4.262\012- data
Size
67 kB (66624 bytes)
Hash
db812d8a70a4e88e888744c1c9a27e89
638c652d623280a58144f93e7b552c66d1667a11
ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995

HTTP Headers

GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://seal-app-6b4gc.ondigitalocean.app
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:19 GMT
content-type: font/woff2
content-length: 66624
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "db812d8a70a4e88e888744c1c9a27e89"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 08/15/2022 13:52:58
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 1b4a1a7ce1ab4a314843f1f95867f011
cdn-cache: HIT
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 758d20d17e4db503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/werrx01/main.js

104.16.243.78

200 OK

0 B

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/main.js
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /werrx01/main.js HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: application/javascript
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"563-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20c01c1b0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/werrx01/before.js

104.16.243.78

200 OK

0 B

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/before.js
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /werrx01/before.js HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: application/javascript
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"16e-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20c01c1a0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/werrx01/light.js

104.16.243.78

200 OK

0 B

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/light.js
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /werrx01/light.js HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: application/javascript
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"1f7-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20c01c1c0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/

104.16.243.78

200 OK

0 B

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:16 GMT
content-type: text/html; charset=UTF-8
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
last-modified: Wed, 12 Oct 2022 04:35:16 GMT
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20bb39550b69-OSL
content-encoding: br
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css

104.18.11.207

200 OK

0 B

URL HTTP/2
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
IP
104.18.11.207:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 565, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 2021-06-08 19:04:20
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: e9a84d03a1f7c6aa17012c712a6e5dd5
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 10993565
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 758d20c03ec7b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/werrx01/main.css

104.16.243.78

200 OK

0 B

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/main.css
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /werrx01/main.css HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: text/css
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"2f41-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20bfebfd0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/werrx01/alertmicrosoft.mp3

104.16.243.78

206 Partial Content

0 B

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/alertmicrosoft.mp3
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /werrx01/alertmicrosoft.mp3 HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 206 Partial Content
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: audio/mpeg
content-length: 200832
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: "31080-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
content-range: bytes 0-200831/200832
server: cloudflare
cf-ray: 758d20c1ccfa0b69-OSL
X-Firefox-Spdy: h2

seal-app-6b4gc.ondigitalocean.app/werrx01/fullscreen.js

104.16.243.78

200 OK

0 B

URL HTTP/2
seal-app-6b4gc.ondigitalocean.app/werrx01/fullscreen.js
IP
104.16.243.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /werrx01/fullscreen.js HTTP/1.1
Host: seal-app-6b4gc.ondigitalocean.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seal-app-6b4gc.ondigitalocean.app/werrx01/?phone=+&
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 12 Oct 2022 04:35:17 GMT
content-type: application/javascript
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"f5-11ef9b484c240"
x-do-app-origin: aaddd4b5-1366-4f4e-aa42-d7bcd6d18dbc
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 758d20c01c170b69-OSL
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (26)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations