ocsp.usertrust.com/
104.18.14.101 471 B IP 104.18.14.101:0
Hash e346e92cb241ee5d7fb50b1afd83bcfb
0c5ec573c730517ed50b972987c9ec6b6209521d
0ce383aa3a28509ee46cf7d2cc3ee2dc235911c0cf59c852c48e764a56604a0e
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 16 Aug 2023 03:31:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 13 Aug 2023 19:12:07 GMT
Expires: Sun, 20 Aug 2023 19:12:06 GMT
Etag: "0c5ec573c730517ed50b972987c9ec6b6209521d"
Cache-Control: max-age=533202,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7f769a4f6b8dfab4-OSL
t.email.roccofortehotels.com/r/?id=hea11a2e,e54a0e3,e54a2c2&p1=adveteran.sa.com/new/auth/QlYq////Y2h1Y2suZGVsYW5leUBmcmVnLmNvbQ==
99.80.74.236302 Found 17 B URL User Request GET HTTP/2 t.email.roccofortehotels.com/r/?id=hea11a2e,e54a0e3,e54a2c2&p1=adveteran.sa.com/new/auth/QlYq////Y2h1Y2suZGVsYW5leUBmcmVnLmNvbQ==
IP 99.80.74.236:443
Certificate IssuerCorporation Service Company
Subjectemail.roccofortehotels.com
Fingerprint2A:4C:C3:B9:C3:0D:FA:77:2F:96:C6:6E:C9:60:FE:9E:29:45:4F:DA
ValidityTue, 24 Jan 2023 00:00:00 GMT - Wed, 24 Jan 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash edf537e37d4549950774190c58f93b76
4e2078632eccec8993f151be9338bbcb88ce6f58
afff9c63cfeacd26e5d4000edf576f1386d6729dca783eb45004f484a73a3514
GET /r/?id=hea11a2e,e54a0e3,e54a2c2&p1=adveteran.sa.com/new/auth/QlYq////Y2h1Y2suZGVsYW5leUBmcmVnLmNvbQ== HTTP/1.1
Host: t.email.roccofortehotels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 16 Aug 2023 03:31:09 GMT
content-type: text/plain; charset=utf-8
content-length: 17
location: https://adveteran.sa.com/new/auth/QlYq////Y2h1Y2suZGVsYW5leUBmcmVnLmNvbQ==
server: Apache
x-robots-tag: noindex
p3p: CP="CAO DSP COR CURa DEVa TAIa OUR BUS IND UNI COM NAV"
set-cookie: AMCV_A5A8284A5B59C7380A495EF8%40AdobeOrg=MCMID%7C37436039961121914874449485787142029311; Domain=roccofortehotels.com; Path=/; Expires=Mon, 09-Sep-2024 03:31:09 GMT
nlid=ea11a2e|e54a0e3; Domain=roccofortehotels.com; Path=/
nllastdelid=e54a0e3; Domain=roccofortehotels.com; Path=/; Expires=Mon, 09-Sep-2024 03:31:09 GMT
X-Firefox-Spdy: h2
adveteran.sa.com/new/auth/QlYq////Y2h1Y2suZGVsYW5leUBmcmVnLmNvbQ==
69.49.230.170200 OK 0 B URL User Request GET HTTP/1.1 adveteran.sa.com/new/auth/QlYq////Y2h1Y2suZGVsYW5leUBmcmVnLmNvbQ==
IP 69.49.230.170:443
ASN #46606 UNIFIEDLAYER-AS-1
Certificate IssuerLet's Encrypt
Subjectadveteran.sa.com
Fingerprint2D:4D:76:21:DF:09:A9:51:E1:1C:40:86:F7:38:2C:A6:59:0D:5E:C5
ValidityMon, 07 Aug 2023 05:03:41 GMT - Sun, 05 Nov 2023 05:03:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /new/auth/QlYq////Y2h1Y2suZGVsYW5leUBmcmVnLmNvbQ== HTTP/1.1
Host: adveteran.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 16 Aug 2023 03:31:09 GMT
Server: Apache
refresh: 0;url=https://securedocfille.com/Mchuck.delaney@freg.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=7f769a588d6bb4fd
104.17.3.184 291 kB URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=7f769a588d6bb4fd
IP 104.17.3.184:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 291 kB (291016 bytes)
Hash c8c26ba4c7d0b12936af88f7f6c850b6
f0e56d0884c095ae685b2bb0fdb42f145ec0a865
4247ee23cbf671bd9f8efea649b04e79c321cf58e24297a2acdcb836a6e78d56
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=7f769a588d6bb4fd HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/yfnpl/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 16 Aug 2023 03:31:10 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 7f769a590db7b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aadcdn.msauthimages.net/dbd5a2dd-gugmw0oav-sepgfotvcmuvmcq-vya1dhd81wezembgw/logintenantbranding/0/bannerlogo?ts=637152368162440595
152.199.23.72200 OK 3.3 kB URL GET HTTP/2 aadcdn.msauthimages.net/dbd5a2dd-gugmw0oav-sepgfotvcmuvmcq-vya1dhd81wezembgw/logintenantbranding/0/bannerlogo?ts=637152368162440595
IP 152.199.23.72:443
Requested by https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Certificate IssuerMicrosoft Corporation
Subjectaadcdn.msauthimages.net
Fingerprint6B:EB:AC:06:FC:06:82:11:17:1C:6B:72:7D:B5:95:2D:CF:E7:A3:5D
ValidityWed, 08 Mar 2023 11:16:34 GMT - Sat, 02 Mar 2024 11:16:34 GMT
File type PNG image data, 280 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash f6554a2d02d613c011d14fba29bbd861
3701be1e06cdd03c7ddff394d20325ba43e8ca0b
a64911bb7e5cae73aba8ac0c0f10fc1565ba6fd46c143e01ccce172932090607
GET /dbd5a2dd-gugmw0oav-sepgfotvcmuvmcq-vya1dhd81wezembgw/logintenantbranding/0/bannerlogo?ts=637152368162440595 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securedocfille.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=86400
content-md5: 9lVKLQLWE8AR0U+6KbvYYQ==
content-type: image/*
date: Wed, 16 Aug 2023 03:31:15 GMT
etag: 0x8D79EB3FC6C1D0F
last-modified: Tue, 21 Jan 2020 20:53:36 GMT
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
vary: Origin
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 47c94543-101e-0000-0df2-cf43e2000000
x-ms-version: 2009-09-19
content-length: 3276
X-Firefox-Spdy: h2
securedocfille.com/e/7e0d643f1326b26d361846cbd96e0f5d64dc4300e54b0
188.114.97.1200 OK 513 B URL GET HTTP/3 securedocfille.com/e/7e0d643f1326b26d361846cbd96e0f5d64dc4300e54b0
IP 188.114.97.1:443
Requested by https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Certificate IssuerGoogle Trust Services LLC
Subjectsecuredocfille.com
Fingerprint72:F0:E4:EC:37:F6:54:E1:99:AD:CE:47:B7:32:03:A2:D9:17:91:D3
ValiditySun, 23 Jul 2023 08:10:30 GMT - Sat, 21 Oct 2023 08:10:29 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (529), with no line terminators
Hash adc405f5fd089662209870ca5d2106f7
3a8b776df84bf251afc6ddd802cc5bbeddfb0e36
e7bacc97751689afaae192e103fe9851664365c57c7d783560860ad456db7e49
GET /e/7e0d643f1326b26d361846cbd96e0f5d64dc4300e54b0 HTTP/1.1
Host: securedocfille.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Cookie: cf_clearance=xsKnuEkTH0uGxrW1E4bS5_efKYBCA_quQ1Egd0HHopw-1692156670-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=2d17648779ad7436c19d07cc3687e01d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 03:31:14 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800
expires: Wed, 23 Aug 2023 03:31:12 GMT
last-modified: Mon, 24 Jul 2023 15:42:24 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E%2BhAtmaBI9Wcy%2FhvQ%2BdeUGNCAtKQh9kifYDYYiVILZlBrEA6LloB%2BVtTSc6TI8w1%2FUFZwRDl7soHfPkkHN2KldQ%2FHMU6P4HNb5LD9Ch9re0Aj28mFozrC%2Bmc2TNIr%2FHcEXuJcjU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f769a6cdb78b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
securedocfille.com/o/7e0d643f1326b26d361846cbd96e0f5d64dc4300e54a4
188.114.97.1200 OK 3.7 kB URL GET HTTP/3 securedocfille.com/o/7e0d643f1326b26d361846cbd96e0f5d64dc4300e54a4
IP 188.114.97.1:443
Requested by https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Certificate IssuerGoogle Trust Services LLC
Subjectsecuredocfille.com
Fingerprint72:F0:E4:EC:37:F6:54:E1:99:AD:CE:47:B7:32:03:A2:D9:17:91:D3
ValiditySun, 23 Jul 2023 08:10:30 GMT - Sat, 21 Oct 2023 08:10:29 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3695), with no line terminators
Hash d633a913e6f3b1f45774b9874dfc85e0
5ba1344048578062c93cfddfdf8458477eaca476
c1fbfbd9a81fc4d9c9539a65bdfb4c6738926b8d4681b0346706196413e92714
GET /o/7e0d643f1326b26d361846cbd96e0f5d64dc4300e54a4 HTTP/1.1
Host: securedocfille.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Cookie: cf_clearance=xsKnuEkTH0uGxrW1E4bS5_efKYBCA_quQ1Egd0HHopw-1692156670-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=2d17648779ad7436c19d07cc3687e01d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 03:31:14 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800
expires: Wed, 23 Aug 2023 03:31:12 GMT
last-modified: Mon, 24 Jul 2023 15:42:24 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aT1c0qUC0BdXoN308DoyeA2RtSYQWC8HaY2gFc10alQAoPKyuJ8A6%2FxoxDCIw%2B%2FX92i9eLHTUpbOwTNwqu%2FRLfrjFGEc1ICnm4iMle03i%2FRO%2B%2BA4vkXNFUqu6JGiTPMZk6F6v0c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f769a6cdb77b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
188.114.97.1200 OK 23 kB URL User Request GET HTTP/3 securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectsecuredocfille.com
Fingerprint72:F0:E4:EC:37:F6:54:E1:99:AD:CE:47:B7:32:03:A2:D9:17:91:D3
ValiditySun, 23 Jul 2023 08:10:30 GMT - Sat, 21 Oct 2023 08:10:29 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (22448)
Hash f86b95630741d03089da87afc28812b9
bf004e840bd5c3c476551da1dc380c841ffbe3b2
383f2019502dcbc34ca788e317e6cff91c4387ba0e0d0c8821ad5e4769622f0e
GET /d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569 HTTP/1.1
Host: securedocfille.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://securedocfille.com/Mchuck.delaney@freg.com?__cf_chl_tk=Mc9TWTZzNerO.wVtzvnpy7h6w4CjvPodar6gJ4pLP0k-1692156670-0-gaNycGzNDbs
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=xsKnuEkTH0uGxrW1E4bS5_efKYBCA_quQ1Egd0HHopw-1692156670-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=2d17648779ad7436c19d07cc3687e01d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 03:31:13 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n8ifUqgsqljRcCouPjInLihudIA5VMtcAGuDsB79wNbsLVSpHhuYLbOlstzKjsX0nOC3tXwKLm9vwqZCKwnxHVIFFufSP6dQ%2F93zxjrtH%2Fw3MuyZUHM4rwpyAAL8Hm1VcXsuVWM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f769a69c9e1b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
securedocfille.com/jq/7e0d643f1326b26d361846cbd96e0f5d64dc430079e7b
188.114.97.1200 OK 86 kB URL GET HTTP/3 securedocfille.com/jq/7e0d643f1326b26d361846cbd96e0f5d64dc430079e7b
IP 188.114.97.1:443
Requested by https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Certificate IssuerGoogle Trust Services LLC
Subjectsecuredocfille.com
Fingerprint72:F0:E4:EC:37:F6:54:E1:99:AD:CE:47:B7:32:03:A2:D9:17:91:D3
ValiditySun, 23 Jul 2023 08:10:30 GMT - Sat, 21 Oct 2023 08:10:29 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /jq/7e0d643f1326b26d361846cbd96e0f5d64dc430079e7b HTTP/1.1
Host: securedocfille.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Cookie: cf_clearance=xsKnuEkTH0uGxrW1E4bS5_efKYBCA_quQ1Egd0HHopw-1692156670-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=2d17648779ad7436c19d07cc3687e01d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 03:31:13 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Wed, 23 Aug 2023 03:31:12 GMT
last-modified: Mon, 24 Jul 2023 15:42:24 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VJ3dY%2F42HfKonQp1vzMUj4s1HIEmPkh9Tt7ZPVj87%2FiBVXrWnZIYjLodL305Mvoqi2ap9jeh3IFkvqTH11pH2v2Zl77YZ0ZwC0jGqu0GTFJJgSh0Jf1uwjSSJmbc3k%2Bu6KHYzeU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f769a6aca84b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
securedocfille.com/boot/7e0d643f1326b26d361846cbd96e0f5d64dc430079e7f
188.114.97.1200 OK 51 kB URL GET HTTP/3 securedocfille.com/boot/7e0d643f1326b26d361846cbd96e0f5d64dc430079e7f
IP 188.114.97.1:443
Requested by https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Certificate IssuerGoogle Trust Services LLC
Subjectsecuredocfille.com
Fingerprint72:F0:E4:EC:37:F6:54:E1:99:AD:CE:47:B7:32:03:A2:D9:17:91:D3
ValiditySun, 23 Jul 2023 08:10:30 GMT - Sat, 21 Oct 2023 08:10:29 GMT
File type ASCII text, with very long lines (50758)
Hash 67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /boot/7e0d643f1326b26d361846cbd96e0f5d64dc430079e7f HTTP/1.1
Host: securedocfille.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Cookie: cf_clearance=xsKnuEkTH0uGxrW1E4bS5_efKYBCA_quQ1Egd0HHopw-1692156670-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=2d17648779ad7436c19d07cc3687e01d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 03:31:13 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Wed, 23 Aug 2023 03:31:12 GMT
last-modified: Mon, 24 Jul 2023 15:42:24 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xDVSygZwgN3za3n2NSXStOpT%2BhFCVHavtjI%2FHgUZWtt2y0LbHHiQdi%2BG%2BpmTo5ZBopfJV0AHprTq%2BSrGDVWkyeHvhSe0TOsnEuITx7Y%2FA6Uape3qsTAZr7jBifzyWPvjAXiYG0g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f769a6aca85b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
unpkg.com/axios/dist/axios.min.js
104.16.124.175302 Found 32 kB URL GET HTTP/2 unpkg.com/axios/dist/axios.min.js
IP 104.16.124.175:443
Requested by https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /axios/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securedocfille.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 16 Aug 2023 03:31:13 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.4.0/dist/axios.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01H7Y5VWNEM2NKYZQSHX7543V4-fra
cf-cache-status: HIT
age: 511
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7f769a6b1a5ab4f4-OSL
X-Firefox-Spdy: h2
securedocfille.com/favicon.ico
188.114.97.1404 Not Found 1.2 kB URL GET HTTP/3 securedocfille.com/favicon.ico
IP 188.114.97.1:443
Requested by https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Certificate IssuerGoogle Trust Services LLC
Subjectsecuredocfille.com
Fingerprint72:F0:E4:EC:37:F6:54:E1:99:AD:CE:47:B7:32:03:A2:D9:17:91:D3
ValiditySun, 23 Jul 2023 08:10:30 GMT - Sat, 21 Oct 2023 08:10:29 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1276), with no line terminators
Hash 24b426fea67958554911ff4c943fdfe4
b92889146d4c1bbddccabe58ca15c814ea066f72
335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c
GET /favicon.ico HTTP/1.1
Host: securedocfille.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Cookie: cf_clearance=xsKnuEkTH0uGxrW1E4bS5_efKYBCA_quQ1Egd0HHopw-1692156670-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=2d17648779ad7436c19d07cc3687e01d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 16 Aug 2023 03:31:14 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r9c%2FCma1jv1qpwFrmQmQ0u41CAnZW35NpE%2BYPqHOnLdwuQv2OYMlz1xd6L8nVcMlJcNSMCF%2BkGCEL6SaJMR%2Bd8pAvCV02Js%2B8nqSjGHrUIUdkW6DtLbpMMhRbZL3CM5oc%2B43QBc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f769a6ccb6db4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
unpkg.com/axios@1.4.0/dist/axios.min.js
104.16.124.175200 OK 32 kB URL GET HTTP/2 unpkg.com/axios@1.4.0/dist/axios.min.js
IP 104.16.124.175:443
Requested by https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (31803)
Hash 6470a918ba1fd4b8d0882df0269ddb82
97814fdab64aa7d1b30f082f9eb272d4b1ce18a2
fd4ce12a87594281afcee9c73a40fe7acc282bcc9e764fbb3afa1481a96a091e
GET /axios@1.4.0/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://securedocfille.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 16 Aug 2023 03:31:13 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"7c62-l4FP2rZKp9GzDwgvnrJy1LHOGKI"
via: 1.1 fly.io
fly-request-id: 01GZP8TZEXW4PFCT61FHX2WRTS-fra
cf-cache-status: HIT
age: 8855765
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7f769a6b3a6cb4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
securedocfille.com/api-as1f?email=chuck.delaney@freg.com&data=logo
188.114.97.1200 OK 168 B URL GET HTTP/3 securedocfille.com/api-as1f?email=chuck.delaney@freg.com&data=logo
IP 188.114.97.1:443
Requested by https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Certificate IssuerGoogle Trust Services LLC
Subjectsecuredocfille.com
Fingerprint72:F0:E4:EC:37:F6:54:E1:99:AD:CE:47:B7:32:03:A2:D9:17:91:D3
ValiditySun, 23 Jul 2023 08:10:30 GMT - Sat, 21 Oct 2023 08:10:29 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash a12156c16341628e83108b65d5ca445e
f996969dcb578d46850a44fffa866934fed676c0
1eacf1573bbe4a794340e67f256b960fce61a23d7917f403ffc567448e454a0d
GET /api-as1f?email=chuck.delaney@freg.com&data=logo HTTP/1.1
Host: securedocfille.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Cookie: cf_clearance=xsKnuEkTH0uGxrW1E4bS5_efKYBCA_quQ1Egd0HHopw-1692156670-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=2d17648779ad7436c19d07cc3687e01d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 03:31:15 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rcuy5yEb7XAWB8oRi%2FeveA8XFRVPQy%2BLbBWQK26UTSofgCxIR8oEMjt%2FOMcIeLkwxer98qo%2FxPFL5ZbeiQbFO9iTjk15XVFBGLNDswO46jima8o10s7HEuZmrv0V1wLGEELcMug%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f769a6cdb7db4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
securedocfille.com/APP-EZFAKD/7e0d643f1326b26d361846cbd96e0f5d64dc4300e547b
188.114.97.1200 OK 105 kB URL GET HTTP/3 securedocfille.com/APP-EZFAKD/7e0d643f1326b26d361846cbd96e0f5d64dc4300e547b
IP 188.114.97.1:443
Requested by https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Certificate IssuerGoogle Trust Services LLC
Subjectsecuredocfille.com
Fingerprint72:F0:E4:EC:37:F6:54:E1:99:AD:CE:47:B7:32:03:A2:D9:17:91:D3
ValiditySun, 23 Jul 2023 08:10:30 GMT - Sat, 21 Oct 2023 08:10:29 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 105 kB (105369 bytes)
Hash 8e6b0f88563f9c33f78bce65cf287df7
ef7765cd2a7d64ed27dd7344702597aff6f8c397
a7057bebfff43e7281ca31da00d40bd88c8d02d1576b9c45891dd56a3853269a
GET /APP-EZFAKD/7e0d643f1326b26d361846cbd96e0f5d64dc4300e547b HTTP/1.1
Host: securedocfille.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Cookie: cf_clearance=xsKnuEkTH0uGxrW1E4bS5_efKYBCA_quQ1Egd0HHopw-1692156670-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=2d17648779ad7436c19d07cc3687e01d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 03:31:14 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 23 Aug 2023 03:31:13 GMT
last-modified: Mon, 24 Jul 2023 15:42:24 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qo08utX1gkts7jVr7eEc8pVk0EwDDMiZvUbL7oseR7fwf7t7Pme0C0mHfaS1slU8%2B6tyq%2Bcsn%2BtQcRIxiQeK8C%2F0jwIv0m4%2F5yVXGyXgBiHERdzrPKcTl1zcm2BmgNLtJH38WgE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f769a6ceb80b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aadcdn.msauthimages.net/dbd5a2dd-gugmw0oav-sepgfotvcmuvmcq-vya1dhd81wezembgw/logintenantbranding/0/illustration?ts=635993120384027058
152.199.23.72200 OK 234 kB URL GET HTTP/2 aadcdn.msauthimages.net/dbd5a2dd-gugmw0oav-sepgfotvcmuvmcq-vya1dhd81wezembgw/logintenantbranding/0/illustration?ts=635993120384027058
IP 152.199.23.72:443
Requested by https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Certificate IssuerMicrosoft Corporation
Subjectaadcdn.msauthimages.net
Fingerprint6B:EB:AC:06:FC:06:82:11:17:1C:6B:72:7D:B5:95:2D:CF:E7:A3:5D
ValidityWed, 08 Mar 2023 11:16:34 GMT - Sat, 02 Mar 2024 11:16:34 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, PhotometricIntepretation=RGB, manufacturer=NIKON CORPORATION, model=NIKON D3100, orientation=upper-left, xresolution=164, yresolution=172, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2015:03:19 08:16:54], baseline, precision 8, 1420x947, components 3\012- data
Size 234 kB (233463 bytes)
Hash 67d0898c983f45103ec5e94fb2fc8aff
cbeab113aee8cac9efc03afb6786ab3b029d418f
73e2497fc99f4ea1301731b01ae97a08f5cf38fe985f14f64483cbeaa7c65521
GET /dbd5a2dd-gugmw0oav-sepgfotvcmuvmcq-vya1dhd81wezembgw/logintenantbranding/0/illustration?ts=635993120384027058 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securedocfille.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=86400
content-md5: Z9CJjJg/RRA+xelPsvyK/w==
content-type: image/jpeg
date: Wed, 16 Aug 2023 03:31:14 GMT
etag: 0x8D3805F94BC9F4C
last-modified: Fri, 20 May 2016 03:33:59 GMT
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
vary: Origin
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: b8eb70ee-e01e-0066-04f2-cf0cc2000000
x-ms-version: 2009-09-19
content-length: 233463
X-Firefox-Spdy: h2
securedocfille.com/Mchuck.delaney@freg.com
188.114.97.1302 Found 23 kB URL User Request POST HTTP/3 securedocfille.com/Mchuck.delaney@freg.com
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectsecuredocfille.com
Fingerprint72:F0:E4:EC:37:F6:54:E1:99:AD:CE:47:B7:32:03:A2:D9:17:91:D3
ValiditySun, 23 Jul 2023 08:10:30 GMT - Sat, 21 Oct 2023 08:10:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
POST /Mchuck.delaney@freg.com HTTP/1.1
Host: securedocfille.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://securedocfille.com/Mchuck.delaney@freg.com?__cf_chl_tk=Mc9TWTZzNerO.wVtzvnpy7h6w4CjvPodar6gJ4pLP0k-1692156670-0-gaNycGzNDbs
Content-Type: application/x-www-form-urlencoded
Content-Length: 3681
Origin: https://securedocfille.com
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Wed, 16 Aug 2023 03:31:13 GMT
content-type: text/html; charset=UTF-8
location: ./d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
set-cookie: cf_clearance=xsKnuEkTH0uGxrW1E4bS5_efKYBCA_quQ1Egd0HHopw-1692156670-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; path=/; expires=Thu, 15-Aug-24 03:31:13 GMT; domain=.securedocfille.com; HttpOnly; Secure; SameSite=None
PHPSESSID=2d17648779ad7436c19d07cc3687e01d; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uNfp6wxRIRw7Ut4Q5pvM8XljAq3VldvZAW16oPH9eLYtFmqZioxGTFOwEEvZfZ9s%2BIyJfomaq%2BfNm8lJ3y%2F9FhHzipVK4R3LmMugwAD5CaNTMlAecvhh5WfVC2kKyqQN%2Bvw1K9E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f769a6788b5b4ed-OSL
alt-svc: h3=":443"; ma=86400
securedocfille.com/jm/7e0d643f1326b26d361846cbd96e0f5d64dc430079e80
188.114.97.1200 OK 6.1 kB URL GET HTTP/3 securedocfille.com/jm/7e0d643f1326b26d361846cbd96e0f5d64dc430079e80
IP 188.114.97.1:443
Requested by https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Certificate IssuerGoogle Trust Services LLC
Subjectsecuredocfille.com
Fingerprint72:F0:E4:EC:37:F6:54:E1:99:AD:CE:47:B7:32:03:A2:D9:17:91:D3
ValiditySun, 23 Jul 2023 08:10:30 GMT - Sat, 21 Oct 2023 08:10:29 GMT
File type ASCII text, with very long lines (6175), with no line terminators
Hash 0b3cd9bfcbe6444742df90b00f63efc3
0c978b0541c9659215908034b6299f78135c935c
2065edfabc7924bff8e65b4b4ade30bb341d70ab350518bfbad98e1d4f35266f
GET /jm/7e0d643f1326b26d361846cbd96e0f5d64dc430079e80 HTTP/1.1
Host: securedocfille.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Cookie: cf_clearance=xsKnuEkTH0uGxrW1E4bS5_efKYBCA_quQ1Egd0HHopw-1692156670-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=2d17648779ad7436c19d07cc3687e01d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 03:31:13 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Wed, 23 Aug 2023 03:31:12 GMT
last-modified: Mon, 24 Jul 2023 15:42:24 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=84EBkfrq4PYe%2FNb866ewjj6gTw4dWtbkz8JlYovIZ9faFlLUNFIdtpDeNcxkL%2FOHvhgIe9NlL%2Fvt%2BQeD5iPXs%2BiXEYrppzOuQCnPonE0jFQkKI4en6jLnEqCcRYkOK4htWybASI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f769a6aca87b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
securedocfille.com/Mchuck.delaney@freg.com
188.114.97.1403 Forbidden 6.7 kB URL User Request GET HTTP/2 securedocfille.com/Mchuck.delaney@freg.com
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectsecuredocfille.com
Fingerprint72:F0:E4:EC:37:F6:54:E1:99:AD:CE:47:B7:32:03:A2:D9:17:91:D3
ValiditySun, 23 Jul 2023 08:10:30 GMT - Sat, 21 Oct 2023 08:10:29 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6730), with no line terminators
Hash 37f3e76248f1c1856176aa512d49e119
8fa889de7eb7f78a870456a17df0817bd667b15b
2d399697519b019920264a0e5c5d8021e242d9c3b03c5184f615756581e92eae
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /Mchuck.delaney@freg.com HTTP/1.1
Host: securedocfille.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Wed, 16 Aug 2023 03:31:10 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OIgNLJ7z7pZPRlw1M9o9s3noDP8BRy%2FpzBX9L%2BbyRkDyWuGG1%2FZsmPznaO3auOsqsCdg7Z6e3MWh08cn8MxfJh7IH1jregsDNoI8O3VauwdaBE6zQRozYfHftTlwDNMk%2B%2FT0G58%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7f769a560d120b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
securedocfille.com/api-as1f?email=chuck.delaney@freg.com&data=background
188.114.97.1200 OK 176 B URL GET HTTP/3 securedocfille.com/api-as1f?email=chuck.delaney@freg.com&data=background
IP 188.114.97.1:443
Requested by https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Certificate IssuerGoogle Trust Services LLC
Subjectsecuredocfille.com
Fingerprint72:F0:E4:EC:37:F6:54:E1:99:AD:CE:47:B7:32:03:A2:D9:17:91:D3
ValiditySun, 23 Jul 2023 08:10:30 GMT - Sat, 21 Oct 2023 08:10:29 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 0e60af88f422d0c20cc488b15e656180
fa0cff871645d27808f97b6ef8ca482dba84dff3
5c3b9263c09d61dba029b24c48ca476a6907ec62e69b98f14aad7f63642565fd
GET /api-as1f?email=chuck.delaney@freg.com&data=background HTTP/1.1
Host: securedocfille.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Cookie: cf_clearance=xsKnuEkTH0uGxrW1E4bS5_efKYBCA_quQ1Egd0HHopw-1692156670-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=2d17648779ad7436c19d07cc3687e01d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 03:31:14 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3SNd1Rtae9Oq62NJnQSIyaBZZY7bD57%2FQEZtO%2BIxa1AxM09DnOxAV9320d3cLI7FqnUaooXihz%2FoPd08kYzF7d683tgC42i5rpO%2FE3ovG3Mx7zw4R8ehoiGCu%2FF4fjb%2FsUaRq2g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f769a6cdb7eb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
securedocfille.com/ic/7e0d643f1326b26d361846cbd96e0f5d64dc4300e5476
188.114.97.1200 OK 17 kB URL GET HTTP/3 securedocfille.com/ic/7e0d643f1326b26d361846cbd96e0f5d64dc4300e5476
IP 188.114.97.1:443
Requested by https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Certificate IssuerGoogle Trust Services LLC
Subjectsecuredocfille.com
Fingerprint72:F0:E4:EC:37:F6:54:E1:99:AD:CE:47:B7:32:03:A2:D9:17:91:D3
ValiditySun, 23 Jul 2023 08:10:30 GMT - Sat, 21 Oct 2023 08:10:29 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /ic/7e0d643f1326b26d361846cbd96e0f5d64dc4300e5476 HTTP/1.1
Host: securedocfille.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Cookie: cf_clearance=xsKnuEkTH0uGxrW1E4bS5_efKYBCA_quQ1Egd0HHopw-1692156670-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=2d17648779ad7436c19d07cc3687e01d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 03:31:14 GMT
content-type: image/x-icon
cache-control: public, max-age=604800
expires: Wed, 23 Aug 2023 03:31:13 GMT
last-modified: Mon, 24 Jul 2023 15:42:24 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i8YctV%2Bs8KF57NgNuGzohBvwjH%2BkXpqnfcnvk6NsecmSKnkeWqV11qFiERMmJimcDKI1mG%2BYKyXV3AzG7byb1vhQHTuUCpHr7RXUK%2F0Cy%2FOdOunJVaG0FVKgvLPc3%2FDjbjiGHxU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f769a6f6cceb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
securedocfille.com/2
188.114.97.1200 OK 37 kB IP 188.114.97.1:443
Requested by https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Certificate IssuerGoogle Trust Services LLC
Subjectsecuredocfille.com
Fingerprint72:F0:E4:EC:37:F6:54:E1:99:AD:CE:47:B7:32:03:A2:D9:17:91:D3
ValiditySun, 23 Jul 2023 08:10:30 GMT - Sat, 21 Oct 2023 08:10:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2 HTTP/1.1
Host: securedocfille.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securedocfille.com/d41d8cd98f00b204e9800998ecf8427e64dc43006e566PASd41d8cd98f00b204e9800998ecf8427e64dc43006e569
Cookie: cf_clearance=xsKnuEkTH0uGxrW1E4bS5_efKYBCA_quQ1Egd0HHopw-1692156670-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=2d17648779ad7436c19d07cc3687e01d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 03:31:14 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ia7D68%2BXuwfJQilxR1qDf%2BUkA23JLkUYXL5QHEn5PJ65YrnOP6YMLNDimjkJ3DeIGyeEzT0uWVEq4XlMEa%2BCfN%2FOoxjJnjbq0N6SjY42I727b2zhbmR7UvfNxyaNxAGdG%2B3yxU8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f769a6c8b3cb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400