Report - cn.mcafee-service.us.com/

Report Overview

Submitted URL
cn.mcafee-service.us.com/
IP
45.56.79.23
ASN
#63949 Linode, LLC
Submitted
2023-02-07 21:29:57
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
22

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-13T05:09:47Z	686 B	1.4 kB	142.250.74.163
img1.wsimg.com	9893	2012-06-20T16:42:31Z	2023-03-13T07:07:00Z	1.2 kB	200 kB
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	61 kB	34.120.237.76
www.google.com	7	2015-05-10T13:11:19Z	2023-03-13T06:40:43Z	386 B	784 B	216.58.207.228
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
cn.mcafee-service.us.com	unknown	2021-03-02T04:11:50Z	2023-01-19T22:01:58Z	34 kB	266 kB	45.56.79.23
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	3.0 kB	8.0 kB	23.36.77.32
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	52.43.179.154

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-07	medium	cn.mcafee-service.us.com/	Phishing
2023-02-07	medium	cn.mcafee-service.us.com/	Phishing
2023-02-07	medium	cn.mcafee-service.us.com/	Phishing
2023-02-07	medium	cn.mcafee-service.us.com/	Phishing
2023-02-07	medium	cn.mcafee-service.us.com/	Phishing
2023-02-07	medium	cn.mcafee-service.us.com/	Phishing
2023-02-07	medium	cn.mcafee-service.us.com/	Phishing
2023-02-07	medium	cn.mcafee-service.us.com/	Phishing
2023-02-07	medium	cn.mcafee-service.us.com/	Phishing
2023-02-07	medium	cn.mcafee-service.us.com/	Phishing
2023-02-07	medium	cn.mcafee-service.us.com/	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (20)

	URL	Size	First Seen	Last Seen
	cn.mcafee-service.us.com/	295 B	2023-03-12	2023-04-17
Pretty URL cn.mcafee-service.us.com/ IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 20:33:38 Last Seen2023-04-17 10:54:20 Times Seen995 Hash 55d924c46ca242980c8747a74666a082 6b4b5690848f934e34660ae22e61699ca0baf731 cb76393cfbb49fafe6d4bab97eca2cdfc435132b387247d2eb972e8acb5d8803 Loading...

	cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1	25 B	2023-03-07	2023-04-05
Pretty URL cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1 IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2023-04-05 02:09:32 Times Seen1220 Hash 396983b43a97ac40197e7d22399b707b 9c54ff4c30658fd6a7e94eaaae5072b3ed2ec1dc de4e0ef840a4a74223bb4637d128d0fd8894ac9f95bf604576e8c5280c768442 Loading...

	cn.mcafee-service.us.com/	554 B	2023-03-13	2023-03-13
Pretty URL cn.mcafee-service.us.com/ IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 19:16:14 Last Seen2023-03-13 19:16:14 Times Seen1 Hash 8c249fdb2fac434c0754632c6c362b65 b6b0215cf063a546b8d39d1c3dba5fc0b6720ef8 bed856759caff2f547e85933f227d60495f6184bc0c34e344e33aae7c0d2acfe Loading...

	cn.mcafee-service.us.com/	554 B	2023-03-13	2023-03-13
Pretty URL cn.mcafee-service.us.com/ IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 19:16:14 Last Seen2023-03-13 19:16:14 Times Seen1 Hash 7279a4fefeea0caff6ba438f669d5a1d e8c72108a4a5f6a6fa099683109addd61d16946f 937effb1a17d50d7ec025d67ccad2f6822e70fc17735a4a4ec1628510f69c242 Loading...

	cn.mcafee-service.us.com/	554 B	2023-03-13	2023-03-13
Pretty URL cn.mcafee-service.us.com/ IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 19:16:14 Last Seen2023-03-13 19:16:14 Times Seen1 Hash e7e3560b4001deeadcd3ce763fd0b3c7 218b1f36553a7e1e7d89f74b6b3ea687a853a97a c16f783ad3d48d836f3af64a080d1131d38511ade6a71de112632108ffdf16c8 Loading...

	cn.mcafee-service.us.com/	54 kB	2023-03-13	2023-03-14
Pretty URL cn.mcafee-service.us.com/ IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:39:57 Last Seen2023-03-14 00:56:22 Times Seen1 Hash 1d630f3591d9c2ce11f499097cd5f82a 8464179972e3a7114d92bd156c8f76689dd128a6 b8108e97000cf4c92a43a01620dbc5a28d9f1033ef44f19c5c9b2f3f04e755df Loading...

	unknown	0 B	2023-03-07	2024-05-11
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-11 04:01:14 Times Seen37534440 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.google.com/adsense/domains/caf.js?abp=1	148 kB	2023-03-13	2023-03-13
Pretty URL www.google.com/adsense/domains/caf.js?abp=1 IP 216.58.207.228 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 13:33:32 Last Seen2023-03-13 20:45:18 Times Seen1 Hash 554f01016739625db54b5816717731a7 bc13701c66c1a986cd400cc9f49a63821b7d3a4a 41b19eefc427057a1b8bbe3974af5f50038f82207377b26c81c39dc5992c6b2a Loading...

	cn.mcafee-service.us.com/	554 B	2023-03-13	2023-03-13
Pretty URL cn.mcafee-service.us.com/ IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 19:16:14 Last Seen2023-03-13 19:16:14 Times Seen1 Hash e5114f6f18064a859c782291a65164f5 175bc8ba46132f09ab16480a5b02ad40932aecfe 62fa23f61e108a5f572e5b864991b27bb129956e66af59dca2cc138224f52fc8 Loading...

	cn.mcafee-service.us.com/	370 B	2023-03-13	2023-03-13
Pretty URL cn.mcafee-service.us.com/ IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 19:16:14 Last Seen2023-03-13 19:16:14 Times Seen1 Hash f51d9feb069ac8cc82cc003c07b587c5 ce784674494d88f0108ba68738d8c2731baae1f9 c49dbd7e7063548383938778271ea7d8e35928d694d439de3d9644022e4d8611 Loading...

	cn.mcafee-service.us.com/px.js?ch=1&abp=1	157 B	2023-03-07	2023-11-20
Pretty URL cn.mcafee-service.us.com/px.js?ch=1&abp=1 IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09:00 Last Seen2023-11-20 17:20:34 Times Seen134 Hash 67e216a27dda24bdcb086c2385b0cb99 17141c80f5d32bec3691c5ab24741d8b7dd5f0c6 9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7 Loading...

	cn.mcafee-service.us.com/	554 B	2023-03-13	2023-03-13
Pretty URL cn.mcafee-service.us.com/ IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 19:16:14 Last Seen2023-03-13 19:16:14 Times Seen1 Hash 7a9d27fc1b31fc7e59f6ff05c9d0602b 7b1d23678b7dca82993a92c40699160f33a4c11f 16ef9585a2bd777a133e800de4379807df625dacc75cfcbfd48631600361cdcd Loading...

	cn.mcafee-service.us.com/	295 B	2023-03-12	2023-04-02
Pretty URL cn.mcafee-service.us.com/ IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 21:13:15 Last Seen2023-04-02 21:30:51 Times Seen22 Hash 7cee333d08c64f2d36fab1cfe219ce0b beae31f8f458d80ef3b8355ebca2d5492dbc866e 2bc97ed1194283d1f38471d3187c6c67e735e7d75e4f906a7ca9643635d1a59d Loading...

	cn.mcafee-service.us.com/	554 B	2023-03-13	2023-03-13
Pretty URL cn.mcafee-service.us.com/ IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 19:16:14 Last Seen2023-03-13 19:16:14 Times Seen1 Hash f8e86b3ce0df238e2e6dadaa10e3c887 53a590efab6e9cf926abbd37077d588db4db6f09 5305f2433d619793b2e7e354ba68d788201521fa4831e837ea279f78425aae1f Loading...

	cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1	10 B	2023-03-13	2023-03-13
Pretty URL cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1 IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 06:28:57 Last Seen2023-03-13 23:00:29 Times Seen1 Hash 7be719d3cd305eadcdfaff6a4f7fef6e 6b7ec3a34a632e43bc7f8aeb4c5ab3ca811393be ae9c0f8816b13e4c2b1cd8d22922e0a153ddfeb78a36cd71656e1e88e67b331f Loading...

	img1.wsimg.com/parking-lander/static/js/1.6a538326.chunk.js	270 kB	2023-03-13	2023-03-13
Pretty URL img1.wsimg.com/parking-lander/static/js/1.6a538326.chunk.js IP 95.101.10.131 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 06:28:58 Last Seen2023-03-13 23:00:29 Times Seen1 Hash 871d9210303f0f15e72c8a1b9fd089ab 27f135b372d0a614e23a7f97bc5c66ce3ca37ca7 dc89a39fff334398a23c90702ea4c6188c106d8446484ea9a6d7d83f58460e20 Loading...

	cn.mcafee-service.us.com/	554 B	2023-03-13	2023-03-13
Pretty URL cn.mcafee-service.us.com/ IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 19:16:14 Last Seen2023-03-13 19:16:14 Times Seen1 Hash a1f2fd5b4b253706b0ea001ac0201dc5 1a0bf39c2c5676a8d0683d3b77c3f925501dd2f7 b934fe0e4ca3800284af56ec23fdec3be5a61f0e01be1daf04fbb61a7b0c8310 Loading...

	cn.mcafee-service.us.com/	554 B	2023-03-13	2023-03-13
Pretty URL cn.mcafee-service.us.com/ IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 19:16:14 Last Seen2023-03-13 19:16:14 Times Seen1 Hash a95bcbf239519566c87f0bbcdfec9baf 57338a5ae16407b6de678c5a6b5f3fc7dbf012c5 8f426dd58160d833f4c5f94dc854e7ff78b9814cdde6e25572899250c0cbe40e Loading...

	cn.mcafee-service.us.com/	554 B	2023-03-13	2023-03-13
Pretty URL cn.mcafee-service.us.com/ IP 45.56.79.23 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 19:16:14 Last Seen2023-03-13 19:16:14 Times Seen1 Hash fec8d487f6634dcc30dc7bbd90674c9f 9b28226938bf38e9dc463df7a9f7c25a1588aeb0 6ceb5a863106cb8925cb7f083d883345c04a6e98ac1997ce57cbff1b5c1023cc Loading...

	img1.wsimg.com/parking-lander/static/js/0.dad49e9e.chunk.js	440 kB	2023-03-13	2023-03-13
Pretty URL img1.wsimg.com/parking-lander/static/js/0.dad49e9e.chunk.js IP 95.101.10.131 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 06:28:57 Last Seen2023-03-13 23:00:29 Times Seen1 Hash b548826cf1f8bde8a13b7dc2f665d23a 9392f44c2411f4e5ccc707d9e9dc15fb8419a457 e946c1d5893d090b384eddec1e9988a9c191697b72d75e13c112a2a3ff659096 Loading...

HTTP Transactions (59)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dca68db7aea32f6683ce8d542c078f04
19c495238df74fca680e21f18627ff94de5dd2e5
35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9344
Expires: Wed, 08 Feb 2023 00:05:30 GMT
Date: Tue, 07 Feb 2023 21:29:46 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11338
Expires: Wed, 08 Feb 2023 00:38:44 GMT
Date: Tue, 07 Feb 2023 21:29:46 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Feb 2023 20:34:09 GMT
content-type: application/json
age: 3337
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

cn.mcafee-service.us.com/

45.56.79.23

200 OK

22 kB

URL HTTP/1.1
cn.mcafee-service.us.com/
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (54539)
Size
22 kB (21536 bytes)
Hash
ebe72bae49de8e901c9ea440ab7ac90b
29efa5857d5e931661a1bc608937a3cfe4a4f8c7
4f9fc91c87b1f606790bbcd10c85d202cb278f2c3e7408373f6c120d78906842

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:46 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5918
Expires: Tue, 07 Feb 2023 23:08:24 GMT
Date: Tue, 07 Feb 2023 21:29:46 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: SjWcl7ZG07UE1bze8j6sfOSHQdxX3gXWaj30gz6nPtli8T4sRf/AJI+sDm2BNBexi0+9Z3meFao=
x-amz-request-id: FN0XKV83KZ5AHM7S
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Feb 2023 20:45:42 GMT
age: 2644
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 21:29:46 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805386.0077271025&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9

45.56.79.23

302 Found

0 B

URL HTTP/1.1
cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805386.0077271025&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?gp=1&js=1&uuid=1675805386.0077271025&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:46 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
referrer-policy: no-referrer
x-mtm-path: 0
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDEsIjE2NzU4MDUzODYuMDM4OTY2MDAwMCIsNDMxLG51bGwsbnVsbF0:1pPVX8:oOgAowqfJJygoTRmCxE310avneo; expires=Tue, 07-Feb-2023 22:29:46 GMT; Max-Age=3600; Path=/
connection: close

cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1

45.56.79.23

200 OK

2.8 kB

URL HTTP/1.1
cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2826), with no line terminators
Size
2.8 kB (2826 bytes)
Hash
bc186b2285de2ff9290e70a0abc0d540
f3e78e6109df41d7bc5c763f25ed63904aaebf63
d3e8ebda72162d441bb37d6b69041d0734497fe3efbf4dcb2f4694a31bdc0f99

HTTP Headers

GET /?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDEsIjE2NzU4MDUzODYuMDM4OTY2MDAwMCIsNDMxLG51bGwsbnVsbF0:1pPVX8:oOgAowqfJJygoTRmCxE310avneo
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
date: Tue, 07 Feb 2023 21:29:47 GMT
content-type: text/html
content-length: 2826
server: openresty
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_UuBQJjOnkydpJ8TeylP8y+FCEcxp7ymkvV1rjIOdoXFxkBgFSYn/A9D6j8PisgPSE0wY2gbbaC6i/V9rr0XxKg
cache-control: no-cache
x-content-type-options: nosniff
accept-ranges: bytes
via: 1.1 google
vary: Accept-Language
content-language: en
set-cookie: caf_ipaddr=45.56.127.133; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:47 GMT; Max-Age=86400; Path=/
city="\"Dallas\""; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:47 GMT; Max-Age=86400; Path=/
country=US; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:47 GMT; Max-Age=86400; Path=/
expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:47 GMT; Max-Age=86400; Path=/
connection: close

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 07 Feb 2023 20:51:19 GMT
age: 2308
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9046
Expires: Wed, 08 Feb 2023 00:00:33 GMT
Date: Tue, 07 Feb 2023 21:29:47 GMT
Connection: keep-alive

ocsp.pki.goog/gts1c3

142.250.74.163

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
5bcb9125c18e4ed3562ceb950dc6eaad
a6c6944804b772de3a487723e3e866c0219de230
94947430d745a6648a2e87f163bf474b4fd4513519360bf4bfecfabc141e5ff1

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 21:29:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

img1.wsimg.com/parking-lander/static/js/main.7c9b522c.chunk.js

1.8 kB

URL
img1.wsimg.com/parking-lander/static/js/main.7c9b522c.chunk.js
IP
:0
ASN
#0

File type
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Size
1.8 kB (1824 bytes)
Hash
e24f4a3734eb1b55b35a1835bbf2032f
78485e34505734d71d0dc7286d40fc1a8d4bf3c2
001cbe3c14998d5899b2c56058bef4623d1e02f1446a9f3501427e2c90562543

HTTP Headers

GET /parking-lander/static/js/main.7c9b522c.chunk.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

img1.wsimg.com/parking-lander/static/js/0.dad49e9e.chunk.js

95.101.10.131

200 OK

140 kB

URL HTTP/2
img1.wsimg.com/parking-lander/static/js/0.dad49e9e.chunk.js
IP
95.101.10.131:0
ASN
#20940 Akamai International B.V.

File type
ASCII text, with very long lines (65462)
Size
140 kB (139535 bytes)
Hash
399c4617a2fb4fec769beebcaf14c532
9483d771f981f70bc1bbfd6696c44406d2b92e53
0f3f70529ebc37aabfead9e2bae7ddd3b7360a3cd8ed12fa10398465808af7eb

HTTP Headers

GET /parking-lander/static/js/0.dad49e9e.chunk.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 3D/b0EUrOrjwG2rK/PI5rdfBoY4HE0WPNakrCfsNHDMY8V/xACUGKC/kIkZZuecxV5YPHErOb2V3fXqp6kNuMg==
x-amz-request-id: MJ6W3PQV73SYZ3BA
last-modified: Tue, 24 Jan 2023 00:19:10 GMT
etag: "b548826cf1f8bde8a13b7dc2f665d23a"
x-amz-server-side-encryption: AES256
x-amz-version-id: i1rcWTKoDnZILkTuRppCHBho_MwFySSf
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Wed, 07 Feb 2024 21:29:47 GMT
date: Tue, 07 Feb 2023 21:29:47 GMT
content-length: 139535
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

img1.wsimg.com/parking-lander/static/js/1.6a538326.chunk.js

95.101.10.131

200 OK

57 kB

URL HTTP/2
img1.wsimg.com/parking-lander/static/js/1.6a538326.chunk.js
IP
95.101.10.131:0
ASN
#20940 Akamai International B.V.

File type
ASCII text, with very long lines (65536), with no line terminators
Size
57 kB (57150 bytes)
Hash
b12d20b4b026c2e41cb764e38eb61090
eff353fb8e65bfec8431c47985acabe5e05e8298
6c672f41d3498885b42efcea4c5c3f8107277d6649e68fb67d5e2809cc569e9e

HTTP Headers

GET /parking-lander/static/js/1.6a538326.chunk.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 5vHVMJ79Fr9MEsGvHb3Mttyx9j5gA8a1BaTrQRGjlLJ0zivyYdzp3Ld6oEVXgp3YUAmmwL5J6Ow=
x-amz-request-id: 83GRKQQV2EPZXP35
last-modified: Mon, 23 Jan 2023 23:53:47 GMT
etag: "871d9210303f0f15e72c8a1b9fd089ab"
x-amz-server-side-encryption: AES256
x-amz-version-id: XA_pzX6ymk5DVUrormbfdBm8p8_bnZyt
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Wed, 07 Feb 2024 21:29:47 GMT
date: Tue, 07 Feb 2023 21:29:47 GMT
content-length: 57150
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.163

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
ed3f32fef9b843f5511bb882c0a38358
a1a60921f7cb6ab14b645c77bb7d77c20b8201ef
9a4b9e269aa66258c1d9b10fb1af899a3e669de3e244dcfd843a0bce87646f8e

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 21:29:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

cn.mcafee-service.us.com/px.js?ch=1&abp=1

45.56.79.23

200 OK

157 B

URL HTTP/1.1
cn.mcafee-service.us.com/px.js?ch=1&abp=1
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
ASCII text
Size
157 B (157 bytes)
Hash
67e216a27dda24bdcb086c2385b0cb99
17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7

HTTP Headers

GET /px.js?ch=1&abp=1 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDEsIjE2NzU4MDUzODYuMDM4OTY2MDAwMCIsNDMxLG51bGwsbnVsbF0:1pPVX8:oOgAowqfJJygoTRmCxE310avneo; caf_ipaddr=45.56.127.133; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:47 GMT
content-type: application/javascript
content-length: 157
last-modified: Mon, 09 Jan 2023 20:56:33 GMT
etag: "63bc7f81-9d"
accept-ranges: bytes
connection: close

cn.mcafee-service.us.com/px.js?ch=2&abp=1

45.56.79.23

200 OK

157 B

URL HTTP/1.1
cn.mcafee-service.us.com/px.js?ch=2&abp=1
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
ASCII text
Size
157 B (157 bytes)
Hash
67e216a27dda24bdcb086c2385b0cb99
17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7

HTTP Headers

GET /px.js?ch=2&abp=1 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDEsIjE2NzU4MDUzODYuMDM4OTY2MDAwMCIsNDMxLG51bGwsbnVsbF0:1pPVX8:oOgAowqfJJygoTRmCxE310avneo; caf_ipaddr=45.56.127.133; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:47 GMT
content-type: application/javascript
content-length: 157
last-modified: Wed, 07 Mar 2018 18:30:37 GMT
etag: "5aa02fcd-9d"
accept-ranges: bytes
connection: close

push.services.mozilla.com/

52.43.179.154

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.43.179.154:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pmy2ClvjPQd8mrLZIN0PRw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8w6dmUqKv2Y9P7qTVywIMdXS1Vo=

cn.mcafee-service.us.com/

45.56.79.23

200 OK

22 kB

URL HTTP/1.1
cn.mcafee-service.us.com/
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (54539)
Size
22 kB (21693 bytes)
Hash
febcedd9189311da320cae9e48ff09b7
283da325100e8257473f53920717f6455a2ad26d
52db974b3a240a25abcc8fb1faf1960373c2a08653a74e579fc88492c130bc62

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDEsIjE2NzU4MDUzODYuMDM4OTY2MDAwMCIsNDMxLG51bGwsbnVsbF0:1pPVX8:oOgAowqfJJygoTRmCxE310avneo; caf_ipaddr=45.56.127.133; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:47 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close

cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805387.0046142456&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9

45.56.79.23

302 Found

0 B

URL HTTP/1.1
cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805387.0046142456&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?gp=1&js=1&uuid=1675805387.0046142456&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDEsIjE2NzU4MDUzODYuMDM4OTY2MDAwMCIsNDMxLG51bGwsbnVsbF0:1pPVX8:oOgAowqfJJygoTRmCxE310avneo; caf_ipaddr=45.56.127.133; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:48 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
referrer-policy: no-referrer
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDIsIjE2NzU4MDUzODYuMDM4OTY2MTEwOCIsNDMxLG51bGwsbnVsbF0:1pPVXA:Pz6JAC5dwy12Dg7LIytD-KpTPuY; expires=Tue, 07-Feb-2023 22:29:48 GMT; Max-Age=3600; Path=/
connection: close

cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1

45.56.79.23

200 OK

2.8 kB

URL HTTP/1.1
cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2826), with no line terminators
Size
2.8 kB (2826 bytes)
Hash
bc186b2285de2ff9290e70a0abc0d540
f3e78e6109df41d7bc5c763f25ed63904aaebf63
d3e8ebda72162d441bb37d6b69041d0734497fe3efbf4dcb2f4694a31bdc0f99

HTTP Headers

GET /?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDIsIjE2NzU4MDUzODYuMDM4OTY2MTEwOCIsNDMxLG51bGwsbnVsbF0:1pPVXA:Pz6JAC5dwy12Dg7LIytD-KpTPuY; caf_ipaddr=45.56.127.133; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
date: Tue, 07 Feb 2023 21:29:48 GMT
content-type: text/html
content-length: 2826
server: openresty
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_UuBQJjOnkydpJ8TeylP8y+FCEcxp7ymkvV1rjIOdoXFxkBgFSYn/A9D6j8PisgPSE0wY2gbbaC6i/V9rr0XxKg
cache-control: no-cache
x-content-type-options: nosniff
accept-ranges: bytes
via: 1.1 google
vary: Accept-Language
content-language: en
set-cookie: caf_ipaddr=45.56.76.96; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:48 GMT; Max-Age=86400; Path=/
city="\"Dallas\""; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:48 GMT; Max-Age=86400; Path=/
country=US; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:48 GMT; Max-Age=86400; Path=/
expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:48 GMT; Max-Age=86400; Path=/
connection: close

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12592
Expires: Wed, 08 Feb 2023 00:59:40 GMT
Date: Tue, 07 Feb 2023 21:29:48 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12592
Expires: Wed, 08 Feb 2023 00:59:40 GMT
Date: Tue, 07 Feb 2023 21:29:48 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12592
Expires: Wed, 08 Feb 2023 00:59:40 GMT
Date: Tue, 07 Feb 2023 21:29:48 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12592
Expires: Wed, 08 Feb 2023 00:59:40 GMT
Date: Tue, 07 Feb 2023 21:29:48 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12592
Expires: Wed, 08 Feb 2023 00:59:40 GMT
Date: Tue, 07 Feb 2023 21:29:48 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg

34.120.237.76

200 OK

4.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.2 kB (4227 bytes)
Hash
eedb4de12585c70ddb5b8f94fe6a59e2
83c9437e71a0a03b3e8ff652155a85eafa76cdda
d4493a30f62e9ad224b3595ba3af8a322e2d4a3d9238a1847973f962bdcc0c82

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4227
x-amzn-requestid: b45f2ab7-0102-4542-9514-54fb93a0e27f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77sTH4jIAMFnsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1731b-4a24bcb1102e58543cd81343;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: V_4NzIAVBOZMjf_YIM3bowFdlP1y4peI5JI-jO105s3NVjmyYnC0Tg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:48:48 GMT
age: 85260
etag: "83c9437e71a0a03b3e8ff652155a85eafa76cdda"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (13390 bytes)
Hash
75b0935816ca54d5d20a9fffa5531e0d
bd8374980c16b7d5a28e55b8bef2215713b1ebb2
4ab6f49d22d029681754b617001f93467d63035acdaf12905c2314cab77991af

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13390
x-amzn-requestid: e7653b49-3160-42e3-8292-8ae32604f775
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpc8KEoPoAMFrUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da0eb4-68fd76a95ffa656318bedff6;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 07:03:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KaitXsesZ9mJducJ54ChzQGfb-2-hEN4W_QojGMKXYEji4xsjNdWCA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 18:44:41 GMT
age: 9907
etag: "bd8374980c16b7d5a28e55b8bef2215713b1ebb2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c86a61b-07c3-45f6-b564-e556eb788d04.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (12682 bytes)
Hash
59419fb1cf4689bed183d0e9a6aed782
47d4a4bb26fafff0c6aebfe3dc7ddfa4970f8e9a
e6009407bd61bee1ae16ec30ea5914be77c56ee65dfb30595b10a1cedc6798c9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c86a61b-07c3-45f6-b564-e556eb788d04.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12682
x-amzn-requestid: d858d90a-b1ca-401c-8e00-8ccd9c0a7504
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f78mUEsfIAMFreg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1748e-2783de3e3de9c520246bf06e;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:43:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: eq8Kle9uYWJ3vmaJD50r-oaTb_O2ObQgLNlTcYn9XQoHCyAO3isqyQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:44:49 GMT
age: 85499
etag: "47d4a4bb26fafff0c6aebfe3dc7ddfa4970f8e9a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09b3928-4257-4aee-9978-7c13c20b5a23.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.2 kB (7183 bytes)
Hash
92008e687831334af1cdbf4b8a57579f
e6ff750f12836637adf5b253d64c2102fdf3c180
39af3e630e0271b54139849c1b596efbdc69a23ce943e5330341d49f77798c7c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09b3928-4257-4aee-9978-7c13c20b5a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7183
x-amzn-requestid: 02695a8d-2ab8-4d77-bfbe-f99418d8ef00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f78YOGsyoAMF5wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e17434-2614cef4059e7fd5009cb46d;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:42:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5wy_7Z30HRIcZufSPCTKu9UoJD1o_NDlhuyL5bvidDwbqC_3p99yYA==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:44:57 GMT
age: 85491
etag: "e6ff750f12836637adf5b253d64c2102fdf3c180"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe56753b9-ced9-4038-88f6-9ea3a7bc9f04.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11205 bytes)
Hash
aa6c416b3a87ded887c9dcf7c51e5dd0
45f4ef9e68591c00669043abe96959bead8f17ae
9e10394b387916e40c44d4e02fbc1ea72214d870df189ce16d24015de00682bf

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe56753b9-ced9-4038-88f6-9ea3a7bc9f04.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11205
x-amzn-requestid: abdf9c40-a2b7-49ae-bea1-ff5abfcea781
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fvszZFOZoAMFkNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc8e7b-6e508da05ff6f33e691de130;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 04:33:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hLrbI5Acy2RBlg7VqGE2b83zuqgt-bx0kD0nlH8uYaJ8tii2FqMLfw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 14:35:27 GMT
age: 24861
etag: "45f4ef9e68591c00669043abe96959bead8f17ae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09bdaec3-9afd-4cea-87ec-6adabc28a3e8.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.4 kB (6384 bytes)
Hash
88178e0f623494e30ece4da4eed04d60
7f016d87157a577e4ad4e4cf6c854a0489f8571a
e5658ac599ca37e797637a596ca9b65c80c1053b2ce5dacc667ae3b8b1ce54a3

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09bdaec3-9afd-4cea-87ec-6adabc28a3e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6384
x-amzn-requestid: 5f91a438-31d9-42ca-96b4-71344cc736c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77IcE2-oAMFbZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e17235-1ce1ebfa4e9ae6053434c48d;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:33:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ee3lrCu0ZcpPQ-tQiF3j59bjY0W_zFOKl2H__y_twSGGESxmir3JHg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:46:30 GMT
age: 85398
etag: "7f016d87157a577e4ad4e4cf6c854a0489f8571a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

cn.mcafee-service.us.com/

45.56.79.23

200 OK

22 kB

URL HTTP/1.1
cn.mcafee-service.us.com/
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (54539)
Size
22 kB (21691 bytes)
Hash
aad501f2fe9ef76e33740a716379db35
0f43f1be1ea0abae9fbbc18ea566d9b3d0c72c62
d42186ef822368b3f71b8695e18510768396584aceccf40a681481fee6aa4820

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDIsIjE2NzU4MDUzODYuMDM4OTY2MTEwOCIsNDMxLG51bGwsbnVsbF0:1pPVXA:Pz6JAC5dwy12Dg7LIytD-KpTPuY; caf_ipaddr=45.56.76.96; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:48 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close

cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805388.0002561154&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9

45.56.79.23

302 Found

0 B

URL HTTP/1.1
cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805388.0002561154&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?gp=1&js=1&uuid=1675805388.0002561154&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDIsIjE2NzU4MDUzODYuMDM4OTY2MTEwOCIsNDMxLG51bGwsbnVsbF0:1pPVXA:Pz6JAC5dwy12Dg7LIytD-KpTPuY; caf_ipaddr=45.56.76.96; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:49 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
referrer-policy: no-referrer
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDMsIjE2NzU4MDUzODYuMDM4OTY2NjM3NyIsNDMxLG51bGwsbnVsbF0:1pPVXB:ihU-ATX54R7Gdk9KGT8G54thgd0; expires=Tue, 07-Feb-2023 22:29:49 GMT; Max-Age=3600; Path=/
connection: close

cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1

45.56.79.23

200 OK

2.8 kB

URL HTTP/1.1
cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2826), with no line terminators
Size
2.8 kB (2826 bytes)
Hash
bc186b2285de2ff9290e70a0abc0d540
f3e78e6109df41d7bc5c763f25ed63904aaebf63
d3e8ebda72162d441bb37d6b69041d0734497fe3efbf4dcb2f4694a31bdc0f99

HTTP Headers

GET /?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDMsIjE2NzU4MDUzODYuMDM4OTY2NjM3NyIsNDMxLG51bGwsbnVsbF0:1pPVXB:ihU-ATX54R7Gdk9KGT8G54thgd0; caf_ipaddr=45.56.76.96; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
date: Tue, 07 Feb 2023 21:29:49 GMT
content-type: text/html
content-length: 2826
server: openresty
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_UuBQJjOnkydpJ8TeylP8y+FCEcxp7ymkvV1rjIOdoXFxkBgFSYn/A9D6j8PisgPSE0wY2gbbaC6i/V9rr0XxKg
cache-control: no-cache
x-content-type-options: nosniff
accept-ranges: bytes
via: 1.1 google
vary: Accept-Language
content-language: en
set-cookie: caf_ipaddr=45.56.76.96; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:49 GMT; Max-Age=86400; Path=/
city="\"Dallas\""; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:49 GMT; Max-Age=86400; Path=/
country=US; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:49 GMT; Max-Age=86400; Path=/
expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:49 GMT; Max-Age=86400; Path=/
connection: close

cn.mcafee-service.us.com/

45.56.79.23

200 OK

22 kB

URL HTTP/1.1
cn.mcafee-service.us.com/
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (54539)
Size
22 kB (21692 bytes)
Hash
9ec9eea5d1353e96f50d2d8d9c0055cb
8dfed375e0098456fd22720734aec456a3d1c9fa
9105cdface1d9891ec2edf0409afade88bd58f98fe324658966b2fd4c24c70f6

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDMsIjE2NzU4MDUzODYuMDM4OTY2NjM3NyIsNDMxLG51bGwsbnVsbF0:1pPVXB:ihU-ATX54R7Gdk9KGT8G54thgd0; caf_ipaddr=45.56.76.96; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:49 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close

cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805389.0036060858&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9

45.56.79.23

302 Found

0 B

URL HTTP/1.1
cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805389.0036060858&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?gp=1&js=1&uuid=1675805389.0036060858&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDMsIjE2NzU4MDUzODYuMDM4OTY2NjM3NyIsNDMxLG51bGwsbnVsbF0:1pPVXB:ihU-ATX54R7Gdk9KGT8G54thgd0; caf_ipaddr=45.56.76.96; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:49 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
referrer-policy: no-referrer
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDQsIjE2NzU4MDUzODYuMDM4OTY2ODIyMiIsNDMxLG51bGwsbnVsbF0:1pPVXB:DrmcWN4HvxobeZp4NPMGvb7OEDo; expires=Tue, 07-Feb-2023 22:29:49 GMT; Max-Age=3600; Path=/
connection: close

cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1

45.56.79.23

200 OK

2.8 kB

URL HTTP/1.1
cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2826), with no line terminators
Size
2.8 kB (2826 bytes)
Hash
bc186b2285de2ff9290e70a0abc0d540
f3e78e6109df41d7bc5c763f25ed63904aaebf63
d3e8ebda72162d441bb37d6b69041d0734497fe3efbf4dcb2f4694a31bdc0f99

HTTP Headers

GET /?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDQsIjE2NzU4MDUzODYuMDM4OTY2ODIyMiIsNDMxLG51bGwsbnVsbF0:1pPVXB:DrmcWN4HvxobeZp4NPMGvb7OEDo; caf_ipaddr=45.56.76.96; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
date: Tue, 07 Feb 2023 21:29:50 GMT
content-type: text/html
content-length: 2826
server: openresty
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_UuBQJjOnkydpJ8TeylP8y+FCEcxp7ymkvV1rjIOdoXFxkBgFSYn/A9D6j8PisgPSE0wY2gbbaC6i/V9rr0XxKg
cache-control: no-cache
x-content-type-options: nosniff
accept-ranges: bytes
via: 1.1 google
vary: Accept-Language
content-language: en
set-cookie: caf_ipaddr=23.239.27.195; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:50 GMT; Max-Age=86400; Path=/
city="\"Dallas\""; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:50 GMT; Max-Age=86400; Path=/
country=US; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:50 GMT; Max-Age=86400; Path=/
expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:50 GMT; Max-Age=86400; Path=/
connection: close

cn.mcafee-service.us.com/

45.56.79.23

200 OK

22 kB

URL HTTP/1.1
cn.mcafee-service.us.com/
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (54539)
Size
22 kB (21694 bytes)
Hash
a709714a217011d196611399004ac8ef
3029b3e203fbe3ae476670ed129a8dc4d0dd55c2
866aeaf449ddf52d23b2b6745d18cbba09336cc500aa6735d7c71feb4af8e685

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDQsIjE2NzU4MDUzODYuMDM4OTY2ODIyMiIsNDMxLG51bGwsbnVsbF0:1pPVXB:DrmcWN4HvxobeZp4NPMGvb7OEDo; caf_ipaddr=23.239.27.195; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:50 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close

cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805390.0036860188&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9

45.56.79.23

302 Found

0 B

URL HTTP/1.1
cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805390.0036860188&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?gp=1&js=1&uuid=1675805390.0036860188&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDQsIjE2NzU4MDUzODYuMDM4OTY2ODIyMiIsNDMxLG51bGwsbnVsbF0:1pPVXB:DrmcWN4HvxobeZp4NPMGvb7OEDo; caf_ipaddr=23.239.27.195; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:50 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
referrer-policy: no-referrer
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDUsIjE2NzU4MDUzODYuMDM4OTY2MTQ4MCIsNDMxLG51bGwsbnVsbF0:1pPVXC:gHwCQdjS8WQ3cLNGF6zJ_PM-YzQ; expires=Tue, 07-Feb-2023 22:29:50 GMT; Max-Age=3600; Path=/
connection: close

cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1

45.56.79.23

200 OK

2.8 kB

URL HTTP/1.1
cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2826), with no line terminators
Size
2.8 kB (2826 bytes)
Hash
bc186b2285de2ff9290e70a0abc0d540
f3e78e6109df41d7bc5c763f25ed63904aaebf63
d3e8ebda72162d441bb37d6b69041d0734497fe3efbf4dcb2f4694a31bdc0f99

HTTP Headers

GET /?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDUsIjE2NzU4MDUzODYuMDM4OTY2MTQ4MCIsNDMxLG51bGwsbnVsbF0:1pPVXC:gHwCQdjS8WQ3cLNGF6zJ_PM-YzQ; caf_ipaddr=23.239.27.195; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
date: Tue, 07 Feb 2023 21:29:50 GMT
content-type: text/html
content-length: 2826
server: openresty
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_UuBQJjOnkydpJ8TeylP8y+FCEcxp7ymkvV1rjIOdoXFxkBgFSYn/A9D6j8PisgPSE0wY2gbbaC6i/V9rr0XxKg
cache-control: no-cache
x-content-type-options: nosniff
accept-ranges: bytes
via: 1.1 google
vary: Accept-Language
content-language: en
set-cookie: caf_ipaddr=23.239.27.195; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:50 GMT; Max-Age=86400; Path=/
city="\"Dallas\""; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:50 GMT; Max-Age=86400; Path=/
country=US; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:50 GMT; Max-Age=86400; Path=/
expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:50 GMT; Max-Age=86400; Path=/
connection: close

cn.mcafee-service.us.com/

45.56.79.23

200 OK

22 kB

URL HTTP/1.1
cn.mcafee-service.us.com/
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (54539)
Size
22 kB (21692 bytes)
Hash
9f9454e50f19ffb38debbb4b16e01f42
cb9ba7a388fe9ebb1c6ede4623b10a1c79423912
ea05956b83f014e4ce2a53d32e76232639841e038d9c63afe9e20a8e4537c4a7

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDUsIjE2NzU4MDUzODYuMDM4OTY2MTQ4MCIsNDMxLG51bGwsbnVsbF0:1pPVXC:gHwCQdjS8WQ3cLNGF6zJ_PM-YzQ; caf_ipaddr=23.239.27.195; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:51 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close

cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805391.0071935518&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9

45.56.79.23

302 Found

0 B

URL HTTP/1.1
cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805391.0071935518&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?gp=1&js=1&uuid=1675805391.0071935518&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDUsIjE2NzU4MDUzODYuMDM4OTY2MTQ4MCIsNDMxLG51bGwsbnVsbF0:1pPVXC:gHwCQdjS8WQ3cLNGF6zJ_PM-YzQ; caf_ipaddr=23.239.27.195; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:51 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
referrer-policy: no-referrer
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDYsIjE2NzU4MDUzODYuMDM4OTY2Mzc5MSIsNDMxLG51bGwsbnVsbF0:1pPVXD:Xm2ANz2INTi_pCwZV3X4Xe6WK3s; expires=Tue, 07-Feb-2023 22:29:51 GMT; Max-Age=3600; Path=/
connection: close

cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1

45.56.79.23

200 OK

2.8 kB

URL HTTP/1.1
cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2826), with no line terminators
Size
2.8 kB (2826 bytes)
Hash
bc186b2285de2ff9290e70a0abc0d540
f3e78e6109df41d7bc5c763f25ed63904aaebf63
d3e8ebda72162d441bb37d6b69041d0734497fe3efbf4dcb2f4694a31bdc0f99

HTTP Headers

GET /?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDYsIjE2NzU4MDUzODYuMDM4OTY2Mzc5MSIsNDMxLG51bGwsbnVsbF0:1pPVXD:Xm2ANz2INTi_pCwZV3X4Xe6WK3s; caf_ipaddr=23.239.27.195; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
date: Tue, 07 Feb 2023 21:29:51 GMT
content-type: text/html
content-length: 2826
server: openresty
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_UuBQJjOnkydpJ8TeylP8y+FCEcxp7ymkvV1rjIOdoXFxkBgFSYn/A9D6j8PisgPSE0wY2gbbaC6i/V9rr0XxKg
cache-control: no-cache
x-content-type-options: nosniff
accept-ranges: bytes
via: 1.1 google
vary: Accept-Language
content-language: en
set-cookie: caf_ipaddr=23.239.27.195; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:51 GMT; Max-Age=86400; Path=/
city="\"Dallas\""; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:51 GMT; Max-Age=86400; Path=/
country=US; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:51 GMT; Max-Age=86400; Path=/
expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:51 GMT; Max-Age=86400; Path=/
connection: close

cn.mcafee-service.us.com/

45.56.79.23

200 OK

22 kB

URL HTTP/1.1
cn.mcafee-service.us.com/
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (54539)
Size
22 kB (21691 bytes)
Hash
bc4a096f15419dda2a418619f9e8f55f
a15ace34790fe3bc3bdbfad8a8ef9524bfb43a3c
f34fd25836146b6b55d2d3f8ee64fcef00c7b93927aa0f056f2f7663f0b22d04

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDYsIjE2NzU4MDUzODYuMDM4OTY2Mzc5MSIsNDMxLG51bGwsbnVsbF0:1pPVXD:Xm2ANz2INTi_pCwZV3X4Xe6WK3s; caf_ipaddr=23.239.27.195; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:51 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close

cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805391.0089112983&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9

45.56.79.23

302 Found

0 B

URL HTTP/1.1
cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805391.0089112983&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?gp=1&js=1&uuid=1675805391.0089112983&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDYsIjE2NzU4MDUzODYuMDM4OTY2Mzc5MSIsNDMxLG51bGwsbnVsbF0:1pPVXD:Xm2ANz2INTi_pCwZV3X4Xe6WK3s; caf_ipaddr=23.239.27.195; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:52 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
referrer-policy: no-referrer
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDcsIjE2NzU4MDUzODYuMDM4OTY2MDAzNCIsNDMxLG51bGwsbnVsbF0:1pPVXE:enQyyHknpcC7jS86-7bJR6r4WqE; expires=Tue, 07-Feb-2023 22:29:52 GMT; Max-Age=3600; Path=/
connection: close

cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1

45.56.79.23

200 OK

2.8 kB

URL HTTP/1.1
cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2826), with no line terminators
Size
2.8 kB (2826 bytes)
Hash
bc186b2285de2ff9290e70a0abc0d540
f3e78e6109df41d7bc5c763f25ed63904aaebf63
d3e8ebda72162d441bb37d6b69041d0734497fe3efbf4dcb2f4694a31bdc0f99

HTTP Headers

GET /?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDcsIjE2NzU4MDUzODYuMDM4OTY2MDAzNCIsNDMxLG51bGwsbnVsbF0:1pPVXE:enQyyHknpcC7jS86-7bJR6r4WqE; caf_ipaddr=23.239.27.195; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
date: Tue, 07 Feb 2023 21:29:52 GMT
content-type: text/html
content-length: 2826
server: openresty
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_UuBQJjOnkydpJ8TeylP8y+FCEcxp7ymkvV1rjIOdoXFxkBgFSYn/A9D6j8PisgPSE0wY2gbbaC6i/V9rr0XxKg
cache-control: no-cache
x-content-type-options: nosniff
accept-ranges: bytes
via: 1.1 google
vary: Accept-Language
content-language: en
set-cookie: caf_ipaddr=72.14.179.77; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:52 GMT; Max-Age=86400; Path=/
city="\"Dallas\""; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:52 GMT; Max-Age=86400; Path=/
country=US; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:52 GMT; Max-Age=86400; Path=/
expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:52 GMT; Max-Age=86400; Path=/
connection: close

cn.mcafee-service.us.com/

45.56.79.23

200 OK

22 kB

URL HTTP/1.1
cn.mcafee-service.us.com/
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (54539)
Size
22 kB (21691 bytes)
Hash
d478a82d91e7140761ddae77f9cc7098
2a6458d3d857d01ba3b7569755b929ecd0c3e431
6a751a646e1cf9183047dbf356e96472395da897026a62b3e842ce7d1cbff863

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDcsIjE2NzU4MDUzODYuMDM4OTY2MDAzNCIsNDMxLG51bGwsbnVsbF0:1pPVXE:enQyyHknpcC7jS86-7bJR6r4WqE; caf_ipaddr=72.14.179.77; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:52 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close

cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805392.0089227082&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9

45.56.79.23

302 Found

0 B

URL HTTP/1.1
cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805392.0089227082&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?gp=1&js=1&uuid=1675805392.0089227082&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDcsIjE2NzU4MDUzODYuMDM4OTY2MDAzNCIsNDMxLG51bGwsbnVsbF0:1pPVXE:enQyyHknpcC7jS86-7bJR6r4WqE; caf_ipaddr=72.14.179.77; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:53 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
referrer-policy: no-referrer
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDgsIjE2NzU4MDUzODYuMDM4OTY2NTQ0MiIsNDMxLG51bGwsbnVsbF0:1pPVXF:LuAj2GdKz7-XAs6HZPSAHQqHnw8; expires=Tue, 07-Feb-2023 22:29:53 GMT; Max-Age=3600; Path=/
connection: close

cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1

45.56.79.23

200 OK

2.8 kB

URL HTTP/1.1
cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2826), with no line terminators
Size
2.8 kB (2826 bytes)
Hash
bc186b2285de2ff9290e70a0abc0d540
f3e78e6109df41d7bc5c763f25ed63904aaebf63
d3e8ebda72162d441bb37d6b69041d0734497fe3efbf4dcb2f4694a31bdc0f99

HTTP Headers

GET /?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDgsIjE2NzU4MDUzODYuMDM4OTY2NTQ0MiIsNDMxLG51bGwsbnVsbF0:1pPVXF:LuAj2GdKz7-XAs6HZPSAHQqHnw8; caf_ipaddr=72.14.179.77; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
date: Tue, 07 Feb 2023 21:29:53 GMT
content-type: text/html
content-length: 2826
server: openresty
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_UuBQJjOnkydpJ8TeylP8y+FCEcxp7ymkvV1rjIOdoXFxkBgFSYn/A9D6j8PisgPSE0wY2gbbaC6i/V9rr0XxKg
cache-control: no-cache
x-content-type-options: nosniff
accept-ranges: bytes
via: 1.1 google
vary: Accept-Language
content-language: en
set-cookie: caf_ipaddr=72.14.179.77; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:53 GMT; Max-Age=86400; Path=/
city="\"Dallas\""; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:53 GMT; Max-Age=86400; Path=/
country=US; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:53 GMT; Max-Age=86400; Path=/
expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:53 GMT; Max-Age=86400; Path=/
connection: close

cn.mcafee-service.us.com/

45.56.79.23

200 OK

22 kB

URL HTTP/1.1
cn.mcafee-service.us.com/
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (54539)
Size
22 kB (21692 bytes)
Hash
848d016cb13dcb13c19f5425217fa791
0da71f0d3661f7146aa77fb65a7be7e100b1d5e8
8504da3fa5c7d630349e083d9138a2542f25978564fed87ed2dbc0d52c076212

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDgsIjE2NzU4MDUzODYuMDM4OTY2NTQ0MiIsNDMxLG51bGwsbnVsbF0:1pPVXF:LuAj2GdKz7-XAs6HZPSAHQqHnw8; caf_ipaddr=72.14.179.77; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:53 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close

cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805393.0084922739&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9

45.56.79.23

302 Found

0 B

URL HTTP/1.1
cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805393.0084922739&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?gp=1&js=1&uuid=1675805393.0084922739&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDgsIjE2NzU4MDUzODYuMDM4OTY2NTQ0MiIsNDMxLG51bGwsbnVsbF0:1pPVXF:LuAj2GdKz7-XAs6HZPSAHQqHnw8; caf_ipaddr=72.14.179.77; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:53 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
referrer-policy: no-referrer
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDksIjE2NzU4MDUzODYuMDM4OTY2NzIwMyIsNDMxLG51bGwsbnVsbF0:1pPVXF:KZ8HG3yrhC6HvUosmdy1px3hQbU; expires=Tue, 07-Feb-2023 22:29:53 GMT; Max-Age=3600; Path=/
connection: close

cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1

45.56.79.23

200 OK

2.8 kB

URL HTTP/1.1
cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2826), with no line terminators
Size
2.8 kB (2826 bytes)
Hash
bc186b2285de2ff9290e70a0abc0d540
f3e78e6109df41d7bc5c763f25ed63904aaebf63
d3e8ebda72162d441bb37d6b69041d0734497fe3efbf4dcb2f4694a31bdc0f99

HTTP Headers

GET /?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDksIjE2NzU4MDUzODYuMDM4OTY2NzIwMyIsNDMxLG51bGwsbnVsbF0:1pPVXF:KZ8HG3yrhC6HvUosmdy1px3hQbU; caf_ipaddr=72.14.179.77; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
date: Tue, 07 Feb 2023 21:29:54 GMT
content-type: text/html
content-length: 2826
server: openresty
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_UuBQJjOnkydpJ8TeylP8y+FCEcxp7ymkvV1rjIOdoXFxkBgFSYn/A9D6j8PisgPSE0wY2gbbaC6i/V9rr0XxKg
cache-control: no-cache
x-content-type-options: nosniff
accept-ranges: bytes
via: 1.1 google
vary: Accept-Language
content-language: en
set-cookie: caf_ipaddr=45.56.76.96; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:54 GMT; Max-Age=86400; Path=/
city="\"Dallas\""; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:54 GMT; Max-Age=86400; Path=/
country=US; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:54 GMT; Max-Age=86400; Path=/
expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:54 GMT; Max-Age=86400; Path=/
connection: close

cn.mcafee-service.us.com/

45.56.79.23

200 OK

22 kB

URL HTTP/1.1
cn.mcafee-service.us.com/
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (54539)
Size
22 kB (21692 bytes)
Hash
92e03a0b750f6fdc29e8c4c1df4494c5
cfaec8ae70ee1ba186aae20fa803b4385ed15a70
1529850dbbb51571b9020b41a2d4e1e018d8900bb5246684a990d551e2f7572e

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDksIjE2NzU4MDUzODYuMDM4OTY2NzIwMyIsNDMxLG51bGwsbnVsbF0:1pPVXF:KZ8HG3yrhC6HvUosmdy1px3hQbU; caf_ipaddr=45.56.76.96; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:54 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close

cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805394.0098420367&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9

45.56.79.23

302 Found

0 B

URL HTTP/1.1
cn.mcafee-service.us.com/?gp=1&js=1&uuid=1675805394.0098420367&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?gp=1&js=1&uuid=1675805394.0098420367&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jbi5tY2FmZWUtc2VydmljZS51cy5jb20vP3RlbXBsYXRlPUFSUk9XXzMmdGRmcz0wJnNfdG9rZW49MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnV1aWQ9MTY3NTgwNTM4Ni4wMzg5NjYwMDAwJnNlYXJjaGJveD0xJnNob3dEb21haW49MSIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDksIjE2NzU4MDUzODYuMDM4OTY2NzIwMyIsNDMxLG51bGwsbnVsbF0:1pPVXF:KZ8HG3yrhC6HvUosmdy1px3hQbU; caf_ipaddr=45.56.76.96; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:54 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
referrer-policy: no-referrer
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDEwLCIxNjc1ODA1Mzg2LjAzODk2NjkyMzIiLDQzMSxudWxsLG51bGxd:1pPVXG:aa37ew4zGzFBvNtqdThrXXOy4hI; expires=Tue, 07-Feb-2023 22:29:54 GMT; Max-Age=3600; Path=/
connection: close

cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1

45.56.79.23

200 OK

2.8 kB

URL HTTP/1.1
cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2826), with no line terminators
Size
2.8 kB (2826 bytes)
Hash
bc186b2285de2ff9290e70a0abc0d540
f3e78e6109df41d7bc5c763f25ed63904aaebf63
d3e8ebda72162d441bb37d6b69041d0734497fe3efbf4dcb2f4694a31bdc0f99

HTTP Headers

GET /?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1 HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDEwLCIxNjc1ODA1Mzg2LjAzODk2NjkyMzIiLDQzMSxudWxsLG51bGxd:1pPVXG:aa37ew4zGzFBvNtqdThrXXOy4hI; caf_ipaddr=45.56.76.96; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
date: Tue, 07 Feb 2023 21:29:54 GMT
content-type: text/html
content-length: 2826
server: openresty
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_UuBQJjOnkydpJ8TeylP8y+FCEcxp7ymkvV1rjIOdoXFxkBgFSYn/A9D6j8PisgPSE0wY2gbbaC6i/V9rr0XxKg
cache-control: no-cache
x-content-type-options: nosniff
accept-ranges: bytes
via: 1.1 google
vary: Accept-Language
content-language: en
set-cookie: caf_ipaddr=23.239.27.195; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:54 GMT; Max-Age=86400; Path=/
city="\"Dallas\""; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:54 GMT; Max-Age=86400; Path=/
country=US; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:54 GMT; Max-Age=86400; Path=/
expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00; Domain=cn.mcafee-service.us.com; expires=Wed, 08-Feb-2023 21:29:54 GMT; Max-Age=86400; Path=/
connection: close

www.google.com/adsense/domains/caf.js?abp=1

216.58.207.228

200 OK

0 B

URL HTTP/2
www.google.com/adsense/domains/caf.js?abp=1
IP
216.58.207.228:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Tue, 07 Feb 2023 21:29:47 GMT
expires: Tue, 07 Feb 2023 21:29:47 GMT
cache-control: private, max-age=3600
etag: "5281542890561340985"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cn.mcafee-service.us.com/

45.56.79.23

200 OK

0 B

URL HTTP/1.1
cn.mcafee-service.us.com/
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: cn.mcafee-service.us.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cn.mcafee-service.us.com/?template=ARROW_3&tdfs=0&s_token=1675805386.0389660000&uuid=1675805386.0389660000&searchbox=1&showDomain=1
Cookie: mtm_delivered=WyJjbi5tY2FmZWUtc2VydmljZS51cy5jb20iLCJodHRwOi8vY24ubWNhZmVlLXNlcnZpY2UudXMuY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZ1dWlkPTE2NzU4MDUzODYuMDM4OTY2MDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDItMDcgMjE6Mjk6NDYiLDEwLCIxNjc1ODA1Mzg2LjAzODk2NjkyMzIiLDQzMSxudWxsLG51bGxd:1pPVXG:aa37ew4zGzFBvNtqdThrXXOy4hI; caf_ipaddr=23.239.27.195; city="\"Dallas\""; country=US; expiry_partner=ambros.DEFAULT.4324CBC2-2416-4A71-AC76-9DB2F030BA00
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Tue, 07 Feb 2023 21:29:55 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (20)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL