Overview

URLappmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/
IP 198.199.109.95 (United States)
ASN#14061 DIGITALOCEAN-ASN
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-01-26 19:17:55 UTC
StatusLoading report..
IDS alerts0
Blocklist alert11
urlquery alerts No alerts detected
Tags None

Domain Summary (10)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-01-26 04:11:33 UTC 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-01-26 04:10:53 UTC 34.117.237.239
cdnjs.cloudflare.com (1) 235 2012-05-23 12:49:49 UTC 2023-01-26 07:40:09 UTC 104.17.24.14
cdn.jsdelivr.net (1) 439 2012-09-30 00:15:09 UTC 2023-01-26 06:14:53 UTC 104.16.85.20
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-01-26 04:10:37 UTC 54.187.31.159
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-01-26 11:05:54 UTC 34.120.237.76
r3.o.lencr.org (8) 344 2020-12-02 08:52:13 UTC 2023-01-26 04:09:12 UTC 23.36.77.32
appmail-stock-epos-lgazo1212826929.codeanyapp.com (19) 0 2023-01-24 11:18:04 UTC 2023-01-26 15:35:46 UTC 198.199.109.95 Unknown ranking
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2023-01-26 10:09:29 UTC 93.184.220.29
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-01-26 04:09:24 UTC 35.241.9.150

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2023-01-26 2 appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/ BNP Paribas

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-01-26 2 appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/ Phishing
2023-01-26 2 appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/assets/js/poppe (...) Phishing
2023-01-26 2 appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/assets/js/jquer (...) Phishing
2023-01-26 2 appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/assets/js/main.js Phishing
2023-01-26 2 appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/common/log.js Phishing
2023-01-26 2 appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/assets/js/boots (...) Phishing
2023-01-26 2 appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/assets/fonts/Do (...) Phishing
2023-01-26 2 appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/assets/fonts/Do (...) Phishing
2023-01-26 2 appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/assets/fonts/Do (...) Phishing
2023-01-26 2 appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/assets/js/fonta (...) Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 198.199.109.95
Date UQ / IDS / BL URL IP
2023-03-13 21:56:55 +0000 41 - 0 - 0 wordpress-purple-zebra-badrth211169518.codean (...) 198.199.109.95
2023-03-13 08:43:12 +0000 0 - 0 - 2 php-brown-bear-admmousat422561.codeanyapp.com (...) 198.199.109.95
2023-03-13 01:57:26 +0000 0 - 0 - 1 php-brown-bear-admmousat422561.codeanyapp.com (...) 198.199.109.95
2023-03-12 19:45:23 +0000 0 - 0 - 1 sparkassen-filiale-bestdesign2025416314.codea (...) 198.199.109.95
2023-03-11 13:21:24 +0000 0 - 0 - 2 port-3000-php-10029-fannysad10637396.codeanya (...) 198.199.109.95


Last 5 reports on ASN: DIGITALOCEAN-ASN
Date UQ / IDS / BL URL IP
2023-03-31 21:53:33 +0000 0 - 0 - 1 cfp3r6575kef49000010tuq1zws4fqyuu.hello-respo (...) 207.154.202.241
2023-03-31 21:45:21 +0000 0 - 0 - 1 omit.live/ 147.182.255.121
2023-03-31 21:39:50 +0000 0 - 0 - 2 www.reportsforcops.com/exchangeInstall.exe 198.199.97.231
2023-03-31 21:39:19 +0000 0 - 0 - 1 reportsforcops.com/exchangeInstall.exe 198.199.97.231
2023-03-31 21:22:45 +0000 0 - 0 - 2 www.appsolutely.sg/wp-content/plugins/formcra (...) 188.166.206.200


Last 5 reports on domain: codeanyapp.com
Date UQ / IDS / BL URL IP
2023-03-25 16:45:32 +0000 0 - 0 - 2 kunden-marissaalda0984695.codeanyapp.com/de/i (...) 45.55.112.74
2023-03-24 08:42:00 +0000 0 - 0 - 1 port-3000-php-purple-dkb-bousim060104269.code (...) 45.55.112.74
2023-03-24 04:47:06 +0000 0 - 0 - 1 kunden-marissaalda0984695.codeanyapp.com/de/q (...) 45.55.112.74
2023-03-23 21:32:49 +0000 0 - 0 - 1 port-3000-php-purple-dkb-bousim060104269.code (...) 45.55.112.74
2023-03-18 11:46:32 +0000 0 - 0 - 1 port-3000-php-purple-dkb-bousim060104269.code (...) 45.55.112.74


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-29 03:35:54 +0000 0 - 0 - 8 edukey.co.za/components/koriba/a3553c11185825 (...) 192.185.194.254
2023-02-17 03:02:39 +0000 0 - 0 - 13 fiber9.iaasdns.com/~banapa12/GRG/ 173.82.65.242
2023-02-17 03:02:17 +0000 0 - 0 - 11 services-verrouillage-enligne-zpipa9696734571 (...) 198.199.109.95
2023-02-01 03:18:45 +0000 0 - 0 - 1 wordpress-931707-3233995.cloudwaysapps.com/BN (...) 159.65.21.71
2023-02-01 02:11:48 +0000 0 - 0 - 1 wordpress-931707-3233995.cloudwaysapps.com/BN (...) 159.65.21.71

JavaScript

Executed Scripts (8)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (41)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "238A2EF5B61D56353D0A5E97EC3092B8F2792CDE7CECF40E1A858F8C129D3A9D"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5563
Expires: Thu, 26 Jan 2023 20:50:28 GMT
Date: Thu, 26 Jan 2023 19:17:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10512
Expires: Thu, 26 Jan 2023 22:12:57 GMT
Date: Thu, 26 Jan 2023 19:17:45 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 26 Jan 2023 18:42:55 GMT
age: 2090
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    dcd75ca6daca51c5e39d431468511793
Sha1:   07f76d3bf23d65c9110d810fa71a994e39e085d3
Sha256: 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5657
Expires: Thu, 26 Jan 2023 20:52:02 GMT
Date: Thu, 26 Jan 2023 19:17:45 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: EEJVcbMVCvzQLliQUKITTedwjXr2sxA1O0yjzwBp3a9Y/5ipK8jQBsSsXFt9SWsJ0gK98yVILSY=
x-amz-request-id: F9TJCQEXJPSW8J9N
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 26 Jan 2023 18:49:06 GMT
age: 1719
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET /PPM/68879/ HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:40 GMT
Content-Length: 3107
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "3514-5f301c00be5cb-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (423), with CRLF line terminators
Size:   3107
Md5:    1186a237b32b249f7323b816e4d93b27
Sha1:   829042e0fac3e29605ebb4e15d7234a7c2296f86
Sha256: 5f60cee82a68561a9e1263c3dcf880d15eb9d0cfe7ff49564b2f85f83f43991d

Alerts:
  Blocklists:
    - openphish: BNP Paribas
    - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 26 Jan 2023 19:17:45 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /ajax/libs/sweetalert/2.1.2/sweetalert.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.17.24.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Thu, 26 Jan 2023 19:17:45 GMT
content-length: 10494
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ff8-9f68"
last-modified: Mon, 04 May 2020 16:16:56 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 72447
expires: Tue, 16 Jan 2024 19:17:45 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gCYrCc9DR%2Fy%2BtO151rJ5MxPB5hWdFgdrhoryEYP6Lgq7W7w0zZDe7Lmh7cQXL3zLP%2FDgLyklcT5vSzCiM3E3lKtnHvi%2Bs5sqIsCFARAcAizX0O%2B30tHc6jMY8VhGaXiLW%2F41RJeH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 78fb972ebcb0b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (40808), with no line terminators
Size:   10494
Md5:    cb97ae392c3fb56f4afc6d5f97da4237
Sha1:   38c35ad19fb9b7bacaff79840bef8638b6f52d85
Sha256: cbff330b47a3850bdc0c1047256d98921de83c11cbdfcdfd42a61d9424b3021d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6363
Cache-Control: 'max-age=158059'
Date: Thu, 26 Jan 2023 19:17:45 GMT
Last-Modified: Thu, 26 Jan 2023 17:31:42 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET /npm/sweetalert2@7.26.11/dist/sweetalert2.all.min.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.16.85.20
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Thu, 26 Jan 2023 19:17:45 GMT
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 7.26.11
x-jsd-version-type: version
etag: W/"f0e9-mwT0+YYEiqCevutFnxfidLvDzeY"
x-served-by: cache-fra19173-FRA, cache-yyz4530-YYZ
x-cache: HIT, MISS
vary: Accept-Encoding
cf-cache-status: HIT
age: 256676
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sM11NraH5DF%2FgoN1LuJy710RlT7b4PC0WK04SrEdQ0dewc6JrjjywUYiDiUja3cR6V5H0Fw4so17bmsOkQTXVNNNWv%2B%2FdhSA5AlKymwVfZg3IUet3%2BfoZCH%2BX0%2ByFNefWK0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78fb972ef983b4e8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (34666)
Size:   15501
Md5:    907db8d982ed6e5c292c377ef17e401e
Sha1:   acdf8903b552dba66cd72e205030bf058c8637f7
Sha256: 554e9febd15171a54484640302014115963af7be5f7856af9d0d6ae3ada1e75d
                                        
                                            GET /PPM/68879/assets/css/helpers.css HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:40 GMT
Content-Length: 4669
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "a318-5f301c00c5ee2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (41750), with CRLF line terminators
Size:   4669
Md5:    c5aeb7ee5d038c04c1b82e5b4e2337b8
Sha1:   50b3320cf173861f8562ea20a2b72b5fe7c340a9
Sha256: 8efa178c7d4276e48094ad066c7dc6a0ee09e3fc5ce6233634ef81ca350374ff
                                        
                                            GET /PPM/68879/assets/css/fonts.css HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:41 GMT
Content-Length: 432
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "e92-5f301c00c62ca-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   432
Md5:    280920c123c4dd986697a4ca1d61d45c
Sha1:   3dab793c7199185147e37013065bf76f754b3c3d
Sha256: e81bf3232badfee62bbb47965abe5ff9687dfc4e7441aec0dcc77af5065a8bf5
                                        
                                            GET /PPM/68879/assets/css/main.css HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:41 GMT
Content-Length: 2147
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "2760-5f301c00c5ee2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (10078), with CRLF line terminators
Size:   2147
Md5:    1f1b0750e2275aa2ee8763318a58d731
Sha1:   02ead40338090dfc23d64bd79ae56fb27aab39cd
Sha256: e88a4f886ae0bb9f2acfb96b2be74b9e26c20c56c879be4c04d8f7e02b2dc47e
                                        
                                            GET /PPM/68879/assets/css/spinner.css HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:41 GMT
Content-Length: 369
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "317-5f301c00c5ee2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   369
Md5:    44324e4cf4e634968c8de6056ade4cc7
Sha1:   c4036b605a3253738b8b60b71dfa8cd24089b38c
Sha256: 90e9ef2b068f2add183163334067832ee8234c37df1dd51b09359482ac3a21bf
                                        
                                            GET /PPM/68879/assets/css/bootstrap.min.css HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:40 GMT
Content-Length: 23238
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "2606e-5f301c00c62ca-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (65324)
Size:   23238
Md5:    3b5537dce96f57098998e410b0202920
Sha1:   7732b57e4e3bbc122d63f67078efa7cf5f975448
Sha256: a1c54426705d6cef00e0ae98f5ad1615735a31a4e200c3a5835b44266a4a3f88
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 26 Jan 2023 18:41:40 GMT
age: 2165
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /PPM/68879/assets/js/popper.min.js HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:41 GMT
Content-Length: 7243
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "4f74-5f301c00c726a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (20164), with CRLF line terminators
Size:   7243
Md5:    826c95f8ce58f52645faade7d3484af5
Sha1:   b8899da5a2f443322884adbd2233fbbdefbe1099
Sha256: 75c715d9dd66e7093d3e2b1e50d52570cae39df9b13c2f6cf31b3386e290b5ef

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /PPM/68879/assets/js/jquery.min.js HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:41 GMT
Content-Length: 30679
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "15851-5f301c00c62ca-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (65450), with CRLF line terminators
Size:   30679
Md5:    053401afa561c4681e6919e5d661f9ae
Sha1:   b32afe139687a84c957e7d41d3d90857c9f8f631
Sha256: de24a2f3f00e81b8dcb284f7faefe661f1d965c177cc8b5f62070f8d0b14039b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9354
Expires: Thu, 26 Jan 2023 21:53:39 GMT
Date: Thu, 26 Jan 2023 19:17:45 GMT
Connection: keep-alive

                                        
                                            GET /PPM/68879/assets/js/main.js HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:41 GMT
Content-Length: 750
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "c97-5f301c00c62ca-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  Algol 68 source text\012- Pascal source, ASCII text, with CRLF line terminators
Size:   750
Md5:    7a5ab5d2be83cf9befbdda28495d0946
Sha1:   790ea29ab001075386efd78cbbeeb21f567d79f8
Sha256: 9ec898cf04cf12b7ef0a040e45e60320c058931468dbf726c949a062076a183f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /PPM/68879/common/log.js HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:41 GMT
Content-Length: 470
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "3e9-5f301c00c7652-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   470
Md5:    946ac6b867396e98154d1848e31a741c
Sha1:   8dc0b56cac87edfca08669d83103122a85d02db3
Sha256: ee43c0fd0ba1fbe893de4098548819ebf5ffa44b7085e6c4cec47245acec309a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /PPM/68879/assets/js/bootstrap.min.js HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:41 GMT
Content-Length: 15383
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "e354-5f301c00c62ca-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (58196), with no line terminators
Size:   15383
Md5:    227b836947c0ebd450ad4fc43cb1754b
Sha1:   d3edc606d824092ecee3a26a5cf6359a8c086982
Sha256: a7d3208c6437326224dbecdbbb04b33e708f92614ef0b8b6ac28243e7d9670cd

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aOMa1lGA70z0THBUlR2K/w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.187.31.159
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 49qmNtHpdjDc+4+GQTX7hm9Hug4=

                                        
                                            GET /PPM/68879/assets/images/logo.png HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:41 GMT
Content-Length: 5067
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "13cb-5f301c00bf56b"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 217 x 45, 8-bit/color RGBA, non-interlaced\012- data
Size:   5067
Md5:    7e705e14698bf5b8aabcb8d26ac0316d
Sha1:   d47fd312ba212cf11b298bb55d546557d7d96f2f
Sha256: 310be02c30e9bdb846328d10d61d43013ccc26304439883f96544fc576c76a6c
                                        
                                            GET /PPM/68879/assets/fonts/Dosis-SemiBold.woff HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/assets/css/fonts.css

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:41 GMT
Content-Length: 47264
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "b8a0-5f301c00bfd3b"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 47264, version 0.0\012- data
Size:   47264
Md5:    5b9c3c29201557c575f59745a3b25f82
Sha1:   52d883ccf879792087c5360cc2ae3c5ea3ec4022
Sha256: 377ed808aa05dd000d5832ef5a72f62d4bf9d504b5c36c588b173c45be928d66

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /PPM/68879/assets/fonts/Dosis-Regular.woff HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/assets/css/fonts.css

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:41 GMT
Content-Length: 47336
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "b8e8-5f301c00c5afa"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 47336, version 0.0\012- data
Size:   47336
Md5:    a00a87150a0ff4c2bc215de5c0907f24
Sha1:   b182f28dd93bee0ab55270fce9aaeb111c111db3
Sha256: 8dd780947b9ca87bf800347c934ae4f2726b6a6e73339e1290e9a3a6e92b0f03

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /PPM/68879/assets/images/idea.png HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:41 GMT
Content-Length: 828
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "33c-5f301c00bf56b"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced\012- data
Size:   828
Md5:    a21301e24158f74a1602e1649038d1d1
Sha1:   3fdbbaca374dcba5f705d585e566f1439a2537ef
Sha256: 06013cb735fdfe4d3deb97fda3710bd89d8b5e9570a5d9ca5d9a6ed8b61c7d55
                                        
                                            GET /PPM/68879/assets/images/service.jpg HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:41 GMT
Content-Length: 3745
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "ea1-5f301c00bf56b"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=PhotoFiltre Studio X, datetime=2019:10:16 00:19:07], baseline, precision 8, 175x34, components 3\012- data
Size:   3745
Md5:    1264575d9ef3dd2bb7243f03aa6079d3
Sha1:   1951d5baf221231682320ac90946035d83960eb0
Sha256: 895124676e79720d4e3286e86e82b1a703dd8cc27d38f9dfd26acc01a16cf09d
                                        
                                            GET /PPM/68879/assets/fonts/Dosis-Bold.woff HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/assets/css/fonts.css

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:41 GMT
Content-Length: 47376
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "b910-5f301c00c10c3"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 47376, version 0.0\012- data
Size:   47376
Md5:    4abf620df273ff5fe4b8e2fb8974b384
Sha1:   57a5674f9597d27b31b4c58197e4f88f69e6607f
Sha256: f8a0fe1123bb5d8a3f465045e852077b3e0560989e86e66f3640a9d85f5078ff

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /PPM/68879/assets/js/fontawesome.min.js HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "10314e-5f301c00c726a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (65347), with CRLF line terminators
Size:   387191
Md5:    1eea8e6dd923dc03e198cf6c7ac6a87c
Sha1:   ccbab76f5efad27850f1a3cf2822622d26b27f4c
Sha256: 026daaa7f88e3654603bea39705c6bc62160755743917f8cd39718591a3a59c8

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /PPM/68879/assets/images/favicon.ico HTTP/1.1 
Host: appmail-stock-epos-lgazo1212826929.codeanyapp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://appmail-stock-epos-lgazo1212826929.codeanyapp.com/PPM/68879/

search
                                         198.199.109.95
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Server: openresty
Date: Thu, 26 Jan 2023 18:59:42 GMT
Content-Length: 1718
Connection: keep-alive
Last-Modified: Tue, 24 Jan 2023 12:35:26 GMT
ETag: "6b6-5f301c00bf56b"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 2 icons, 16x16, 8 bits/pixel, 16x16, 16 colors, 4 bits/pixel\012- data
Size:   1718
Md5:    d9da731ed30480099fd55876cecc697e
Sha1:   72fbeb44d8dab5bd3ecda3c63801208ac30b3696
Sha256: fe0765d1602e351523c2069febfff8fe11e9b7f00c52999a98829ada67f7df95
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5115
Expires: Thu, 26 Jan 2023 20:43:02 GMT
Date: Thu, 26 Jan 2023 19:17:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5115
Expires: Thu, 26 Jan 2023 20:43:02 GMT
Date: Thu, 26 Jan 2023 19:17:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5115
Expires: Thu, 26 Jan 2023 20:43:02 GMT
Date: Thu, 26 Jan 2023 19:17:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5115
Expires: Thu, 26 Jan 2023 20:43:02 GMT
Date: Thu, 26 Jan 2023 19:17:47 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12758
x-amzn-requestid: c3540562-8c62-4957-9528-7ae952daebaa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9gf1E87oAMFpsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c87acb-49fd3f78275937e24d23fca3;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 23:03:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mjK4GJ3UCEuHk4XqmXdZCWHTVvJeX8Z2HFaem2GYzqfqlPSd_h6DfA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:33:59 GMT
age: 42228
etag: "0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12758
Md5:    7458f7a9b2070055df6f1d496794e43e
Sha1:   0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9
Sha256: 373097662c419eef9f4a19ce9f3bcead70f6eafbf0acf44806685eece43ce251
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9595
x-amzn-requestid: c257bfbe-1bd7-4540-bbfa-e4c49a2624a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXwfGigoAMFvBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a002-226c08656eeefbfa3c2dddb6;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k9njnQmggD7UkVJzZqSzo90HJJjTjGK0QIoPU0HWYKrSstjM6s1rOw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:57:18 GMT
age: 76829
etag: "a7ca44d337c43bc5c6145b26778661c71cc50484"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9595
Md5:    f62e9b7bdca82d18c945851912d8fea8
Sha1:   a7ca44d337c43bc5c6145b26778661c71cc50484
Sha256: 5da02cc405c1cada55813ffe376844375f1d6ad222cbb63405348b1f5132a0b1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9285
x-amzn-requestid: 526bd945-31d8-490e-af9d-5e6fc6ea3561
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYT2HzvoAMFYYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0e5-6812fe4354bbdac4472e7e81;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QEH9CmjfV8QZFNxFz_tEk06i_ELUSNC2QjdTF4K3xc3vS651BZ3NlQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:52:28 GMT
age: 77119
etag: "07e48bf3565e00d093d72dd4ada606f5d39a4838"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9285
Md5:    17e1b6f3caa98b0e0972802408dd3f93
Sha1:   07e48bf3565e00d093d72dd4ada606f5d39a4838
Sha256: 7094ef64e04573bea7a81bbcc8ab59d721c5ef433e3fa9203e5861040ced549c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8822
x-amzn-requestid: e16ae781-25f3-4b7d-b62b-85b35d6571c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYRwF2KIAMFjDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0d7-377f24bd18dea32564b148bd;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: n2ULSpeRMRZ9CDjmrwd56ti_gPYh9ApC521naXURI2Bh1eiKwjyHZw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:51:26 GMT
age: 77181
etag: "c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8822
Md5:    13cd008fb3e2739ec7caadadbd427655
Sha1:   c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1
Sha256: a300a4fde1863c8b806d0557d9f0adaed19e1c612989d7e3f79a7bb45e6e74dd
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F302c83f3-fc0d-4aa1-a74b-ca3da86a6193.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11443
x-amzn-requestid: 305a8be0-f495-4c5c-a09e-1129ce9022fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fH9BfF3ZoAMFXKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cca86f-542ef19e000475b61a066bf9;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 03:07:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 66xBs5YKPG_IJqmZLF4LpYoKg40G-q-yEW092BS0OefGY3DIdXs3sA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 06:52:16 GMT
age: 44731
etag: "2ce08b3000a62157a4c39b4857a818dc53841757"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11443
Md5:    6bb86eb4c771d04fbe14536002327ee2
Sha1:   2ce08b3000a62157a4c39b4857a818dc53841757
Sha256: 436ea54ad85871bafde614cbbbdd0b79fe7f583826935190258ff7c26b84e22d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5943
x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXxNF2UIAMFlYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VATQ0SjZfM_btXwR4M5keLmd-EE6717EHEiXrF2zpHNrli93EhN6Rw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:48:42 GMT
age: 77345
etag: "4d825b74865effa4a858ddcad1d0969671facc07"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5943
Md5:    ba0a42dadf6a976df148f652e9cc1844
Sha1:   4d825b74865effa4a858ddcad1d0969671facc07
Sha256: 7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95