Report - fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Report Overview

URL

fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
IP

192.232.223.48

ASN

#46606 UNIFIEDLAYER-AS-1
Submitted

2023-06-10T14:54:46Z

Access

public
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

2
Threat Detection Systems

0

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com (1)	8877	2013-06-10 22:14:26	2023-06-10 10:32:47	507	7451	142.250.74.106
fites.net (1)	unknown	2013-10-25 19:18:33	2023-06-09 15:00:19	655	522	192.232.223.48
www.fites.net (25)	unknown	2013-10-25 19:18:33	2023-06-10 13:39:24	14109	2856575	192.232.223.48
ocsp.pki.goog (5)	175	2018-07-01 08:43:07	2023-06-10 05:09:51	1665	3495	142.250.74.131
s.w.org (1)	748	2017-01-30 05:56:16	2023-06-10 05:12:19	440	979	192.0.77.48
fonts.gstatic.com (2)	unknown	2014-09-09 02:40:21	2023-06-10 11:12:37	1049	46254	142.250.74.35

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-10T14:54:30Z	high	Client IP	192.232.223.48	ET PHISHING Generic Phishkit Activity (GET)
2023-06-10T14:54:33Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.is-into-games .com Domain

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (35)

URL IP Response Size

fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

192.232.223.48

301 Moved Permanently

URL User Request GET HTTP/2

fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
IP

192.232.223.48:443
ASN

#46606 UNIFIEDLAYER-AS-1

Certificate

IssuerLet's Encrypt

Subjectwww.wayback.fites.net

Fingerprint2D:49:6C:A8:A1:3D:44:51:69:2A:54:B9:77:82:36:B8:7C:00:47:73

ValidityMon, 22 May 2023 11:31:58 GMT - Sun, 20 Aug 2023 11:31:57 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6 HTTP/1.1
Host: fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 301 Moved Permanently
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: https://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
date: Sat, 10 Jun 2023 14:54:28 GMT
server: Apache
X-Firefox-Spdy: h2

www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

192.232.223.48

404 Not Found

4052

URL User Request GET HTTP/1.1

www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1746)

Size

4052
Hash

c1ba6711ca8409e13a2d8c56494dd2bf

966dc1ba59935f877432cc24435e23f41e14ddfb

ad270f81946204c8fa9e47c9154a137e2426f431a68bb82cf0204c706b4aee0b

Detections

NIDS	Severity	Alert
suricata	high	ET PHISHING Generic Phishkit Activity (GET)

HTTP Headers

                                        GET /online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.fites.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4052
content-type: text/html; charset=UTF-8
date: Sat, 10 Jun 2023 14:54:29 GMT
server: Apache
X-Firefox-Spdy: h2

192.232.223.48

404 Not Found

4058

URL User Request GET HTTP/1.1

www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1746)

Size

4058
Hash

5171d5a26bc28bfa25bb8b4d5f79cb05

9135530fefaa559887b8fbcf4abb1c0e1bde8d82

27c4e690df485fb7c375d440b10e7f6793bce5c153cefcca6b325f4ce5052d63

Detections

NIDS	Severity	Alert
suricata	high	ET PHISHING Generic Phishkit Activity (GET)

HTTP Headers

                                        GET /online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 404 Not Found
Date: Sat, 10 Jun 2023 14:54:30 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://www.fites.net/wp-json/>; rel="https://api.w.org/"
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 4058
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8

ocsp.pki.goog/gts1c3

142.250.74.131

471

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

039bd5f5536d1b489d46e52d9cd5a21e

88770d7c23bb9aefa7d8fad6262332c0a682a0d3

6195b2c8747988942a35a477b811d323d137e697b23c6670d093a1b10c4879c9

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:54:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.fites.net/wp-includes/css/dist/block-library/style.min.css?ver=5.1.16

192.232.223.48

200 OK

5637

URL GET HTTP/1.1

www.fites.net/wp-includes/css/dist/block-library/style.min.css?ver=5.1.16
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text, with very long lines (25245), with no line terminators

Size

5637
Hash

d0b8525a9eff4173fd149a06f341e531

35013c4712d463aa5020f33d3234c4e90f700515

94f80c87390a84a3761860b1ce0764da77bb81d6f11cb3d059339148589aaf5c

HTTP Headers

                                        GET /wp-includes/css/dist/block-library/style.min.css?ver=5.1.16 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:30 GMT
Server: Apache
Last-Modified: Wed, 19 Oct 2022 17:11:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 5637
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css

ocsp.pki.goog/gts1c3

142.250.74.131

471

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

039bd5f5536d1b489d46e52d9cd5a21e

88770d7c23bb9aefa7d8fad6262332c0a682a0d3

6195b2c8747988942a35a477b811d323d137e697b23c6670d093a1b10c4879c9

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:54:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.fites.net/wp-includes/css/dist/block-library/theme.min.css?ver=5.1.16

192.232.223.48

200 OK

447

URL GET HTTP/1.1

www.fites.net/wp-includes/css/dist/block-library/theme.min.css?ver=5.1.16
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text, with very long lines (1031), with no line terminators

Size

447
Hash

5ca26d4ea597b0f25b8477a5e344c89b

b1087a184b68d11691af54e8695d077bd5b79745

847f1e29e2676e8dfcbfede5d4ffce35178e79a60f66186cc95e85c25b14cb11

HTTP Headers

                                        GET /wp-includes/css/dist/block-library/theme.min.css?ver=5.1.16 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 19 Oct 2022 17:11:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 447
Keep-Alive: timeout=5, max=75
Content-Type: text/css

www.fites.net/wp-content/themes/x-blog/assets/css/responsive.css?ver=1.3.21

192.232.223.48

200 OK

727

URL GET HTTP/1.1

www.fites.net/wp-content/themes/x-blog/assets/css/responsive.css?ver=1.3.21
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text

Size

727
Hash

5579ab0a67bbb991fbaa55fbdfb3f9fd

2cbdf736a10b5d360ddc65149a27fe410d134f98

ef1f2cd3ec2eb539492e9747c9c85531f8dd93c470c4750ebf1d28e7eff7e224

HTTP Headers

                                        GET /wp-content/themes/x-blog/assets/css/responsive.css?ver=1.3.21 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 19 Oct 2022 17:09:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 727
Keep-Alive: timeout=5, max=75
Content-Type: text/css

www.fites.net/wp-content/themes/x-blog/assets/css/custom_script.css?ver=5.1.16

192.232.223.48

200 OK

URL GET HTTP/1.1

www.fites.net/wp-content/themes/x-blog/assets/css/custom_script.css?ver=5.1.16
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text, with CRLF line terminators

Size

31
Hash

63837428305c7608007cc7568150283a

1e65e89e7da303cb2c576b132d2fa427667d0845

df34f69348a9db46af7344f254487dc001ba755342bac153c309906ec82192bc

HTTP Headers

                                        GET /wp-content/themes/x-blog/assets/css/custom_script.css?ver=5.1.16 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Wed, 19 Oct 2022 17:09:49 GMT
Accept-Ranges: bytes
Content-Length: 31
Vary: User-Agent
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css

www.fites.net/wp-content/themes/x-blog/assets/css/block.css?ver=1.3.21

192.232.223.48

200 OK

1262

URL GET HTTP/1.1

www.fites.net/wp-content/themes/x-blog/assets/css/block.css?ver=1.3.21
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text, with CRLF line terminators

Size

1262
Hash

626cf5277508c1a7d0e99b453060c867

69374284b51ff04c5e1fe861b2387e8b4485f7c1

aa6b3f72cbed180ce3179d3270e78eeb02f605521d5f5f7d16cd9578c0bb059b

HTTP Headers

                                        GET /wp-content/themes/x-blog/assets/css/block.css?ver=1.3.21 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 19 Oct 2022 17:09:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1262
Keep-Alive: timeout=5, max=75
Content-Type: text/css

www.fites.net/wp-content/themes/x-blog/assets/css/admin-block.css?ver=1.0

192.232.223.48

200 OK

802

URL GET HTTP/1.1

www.fites.net/wp-content/themes/x-blog/assets/css/admin-block.css?ver=1.0
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text, with CRLF line terminators

Size

802
Hash

dbd367156370556663d026be907a51ef

11f3b01718273e7f1efa169dad12ea330b70d05d

eeaa7f0040e8ea40edfb68ab79125f4b8219865a612986f45b36f1b120ccd7ac

HTTP Headers

                                        GET /wp-content/themes/x-blog/assets/css/admin-block.css?ver=1.0 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 19 Oct 2022 17:09:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 802
Keep-Alive: timeout=5, max=75
Content-Type: text/css

www.fites.net/wp-content/themes/x-blog/style.css?ver=5.1.16

192.232.223.48

200 OK

10918

URL GET HTTP/1.1

www.fites.net/wp-content/themes/x-blog/style.css?ver=5.1.16
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text, with very long lines (499)

Size

10918
Hash

469f13e59b5108534dd8a5da0d2bdeaf

a844caada938841a71c28ae2f7fb48b24b6d573c

9bdb560153df652d471ce0918e166fdb262a9d66df511916d978e79b56708508

HTTP Headers

                                        GET /wp-content/themes/x-blog/style.css?ver=5.1.16 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 19 Oct 2022 17:09:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 10918
Keep-Alive: timeout=5, max=75
Content-Type: text/css

www.fites.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1

192.232.223.48

200 OK

4444

URL GET HTTP/1.1

www.fites.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text, with very long lines (9959)

Size

4444
Hash

7121994eec5320fbe6586463bf9651c2

90532aff6d4121954254cdf04994d834f7ec169b

48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d

HTTP Headers

                                        GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Thu, 24 May 2018 20:36:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 4444
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript

www.fites.net/wp-content/themes/x-blog/assets/js/main.js?ver=1.3.21

192.232.223.48

200 OK

490

URL GET HTTP/1.1

www.fites.net/wp-content/themes/x-blog/assets/js/main.js?ver=1.3.21
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text, with CRLF line terminators

Size

490
Hash

41c0ff021b8c9b0f3adeaa92a165bd3c

da05ff02adbccbff8685689cadc6b4ec5bf2993a

a8c56f7340372eb7ac1c69548e081e075d029a7f731f25249d62a21b8fc55c96

HTTP Headers

                                        GET /wp-content/themes/x-blog/assets/js/main.js?ver=1.3.21 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Wed, 19 Oct 2022 17:09:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 490
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript

www.fites.net/wp-content/themes/x-blog/assets/js/jquery.slicknav.js?ver=20151215

192.232.223.48

200 OK

5799

URL GET HTTP/1.1

www.fites.net/wp-content/themes/x-blog/assets/js/jquery.slicknav.js?ver=20151215
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text

Size

5799
Hash

706b521b4b0df58ba4d5406a1fde17fe

274a4f5ce6fa4219b1e2f140d7cfc32a747a6d97

cbe53415f0a681aa0dff918aa261056649122716050d6b925b37289987855b58

HTTP Headers

                                        GET /wp-content/themes/x-blog/assets/js/jquery.slicknav.js?ver=20151215 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Wed, 19 Oct 2022 17:09:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 5799
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript

www.fites.net/wp-content/themes/x-blog/assets/js/skip-link-focus-fix.js?ver=1.3.21

192.232.223.48

200 OK

417

URL GET HTTP/1.1

www.fites.net/wp-content/themes/x-blog/assets/js/skip-link-focus-fix.js?ver=1.3.21
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text

Size

417
Hash

93d421fd7576b0ca9c359ffe2fa16113

eacce35258f14fcd79bea2bc23f4140d25874322

14af47320898bd93f367026f7833c9956f14e24856976e4f9e10be31155cdcf2

HTTP Headers

                                        GET /wp-content/themes/x-blog/assets/js/skip-link-focus-fix.js?ver=1.3.21 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Wed, 19 Oct 2022 17:09:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 417
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript

www.fites.net/wp-content/themes/x-blog/assets/js/modernizr.js?ver=5.1.16

192.232.223.48

200 OK

2219

URL GET HTTP/1.1

www.fites.net/wp-content/themes/x-blog/assets/js/modernizr.js?ver=5.1.16
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

HTML document, ASCII text, with very long lines (330), with CRLF line terminators

Size

2219
Hash

75bfff61a29bef9a7e9ed8ff9f78f050

349e9e468e8c1ddc5fe33b92c8850ea07ddcbba6

10de36cb7a7cecdfb10faad0f1ced1def2a4eee7d82b7e87b953a0eb041e1dd2

HTTP Headers

                                        GET /wp-content/themes/x-blog/assets/js/modernizr.js?ver=5.1.16 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Wed, 19 Oct 2022 17:09:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2219
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript

www.fites.net/wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.6

192.232.223.48

200 OK

10524

URL GET HTTP/1.1

www.fites.net/wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.6
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

Unicode text, UTF-8 text, with very long lines (24733), with no line terminators

Size

10524
Hash

a1ade95e21102c15d71ee475ac3818f6

13c693d748d12cc673b292261adf54b4ce0c10db

d455ab882af3a742e6c9680578e6a590681bda99e34847f550f1f41a7d167969

HTTP Headers

                                        GET /wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.6 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Thu, 20 Oct 2022 00:33:54 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 10524
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript

www.fites.net/wp-includes/js/jquery/jquery.js?ver=1.12.4

192.232.223.48

200 OK

42766

URL GET HTTP/1.1

www.fites.net/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text, with very long lines (31997)

Size

42766
Hash

49edccea2e7ba985cadc9ba0531cbed1

f8747f8ee704d9af31d0950015e01d3f9635b070

1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df

HTTP Headers

                                        GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Wed, 19 Oct 2022 17:11:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript

www.fites.net/wp-includes/js/wp-emoji-release.min.js?ver=5.1.16

192.232.223.48

200 OK

4634

URL GET HTTP/1.1

www.fites.net/wp-includes/js/wp-emoji-release.min.js?ver=5.1.16
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text, with very long lines (9071)

Size

4634
Hash

33479c6b333bb34fd771bf50df1fefc3

4869e92709eee1d1a42a697a80879e303aea7572

d9160bf5ee2c9435a62c8b1d991b7f419417cab5d5a37eefcee79767a292b4b7

HTTP Headers

                                        GET /wp-includes/js/wp-emoji-release.min.js?ver=5.1.16 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Wed, 19 Oct 2022 17:11:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 4634
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript

www.fites.net/wp-includes/js/wp-embed.min.js?ver=5.1.16

192.232.223.48

200 OK

808

URL GET HTTP/1.1

www.fites.net/wp-includes/js/wp-embed.min.js?ver=5.1.16
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text, with very long lines (1443), with no line terminators

Size

808
Hash

43928880ff5ebadcd513755b011732cd

d0fdb17db490123ed700c2caa5d2d764794cb6d5

37c5f58f12814dd0ecc28f15b7765c6bcd31a9479d330b4ef896e140bf89dc38

HTTP Headers

                                        GET /wp-includes/js/wp-embed.min.js?ver=5.1.16 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Wed, 17 May 2023 02:20:57 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 808
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript

www.fites.net/wp-content/themes/x-blog/assets/css/slicknav.css?ver=1

192.232.223.48

200 OK

1019

URL GET HTTP/1.1

www.fites.net/wp-content/themes/x-blog/assets/css/slicknav.css?ver=1
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text

Size

1019
Hash

8ebf78beff4e7d6016aca352ed9b6f46

c49dbb588e156d8f663e194ec3aa139c74d1a709

034c52a6b87610bee3c5d15af1458f0e493eac4296abcce822b5f69c3ae862f7

HTTP Headers

                                        GET /wp-content/themes/x-blog/assets/css/slicknav.css?ver=1 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Wed, 19 Oct 2022 17:09:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1019
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/css

www.fites.net/wp-content/themes/x-blog/assets/css/all.css?ver=5.13.0

192.232.223.48

200 OK

13067

URL GET HTTP/1.1

www.fites.net/wp-content/themes/x-blog/assets/css/all.css?ver=5.13.0
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

ASCII text

Size

13067
Hash

4b08ad333383bdacae33955042a73f8f

7b6297f9179ad23a946f3b199f0c57a2f6965d24

d928c1e14fb0d6b78a42b85b6c93a24050119005c0e421a8ca4e79f4f25e1b9f

HTTP Headers

                                        GET /wp-content/themes/x-blog/assets/css/all.css?ver=5.13.0 HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Wed, 19 Oct 2022 17:09:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 13067
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css

ocsp.pki.goog/gts1c3

142.250.74.131

471

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

6109dc90074997c867d10212ff8f9a81

4f26dbb187f908c7eb6bc2a550034c85cfe6fc8b

d964eec14e1b68dc5ee99e7b1bc4cbb509255de0c49801ca5034253d4cd16be5

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:54:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

s.w.org/images/core/emoji/11.2.0/svg/1f642.svg

192.0.77.48

200 OK

525

URL GET HTTP/2

s.w.org/images/core/emoji/11.2.0/svg/1f642.svg
IP

192.0.77.48:443
ASN

#2635 AUTOMATTIC

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Certificate

IssuerSectigo Limited

Subject*.w.org

FingerprintB2:4C:20:97:37:FE:82:F3:56:5E:3B:F9:5C:EA:7F:81:14:89:D7:0E

ValidityTue, 06 Dec 2022 00:00:00 GMT - Sat, 06 Jan 2024 23:59:59 GMT

Magic

SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (525), with no line terminators

Size

525
Hash

da3651e59d6006dfa5fa07ec3102d1f3

682e14ed012f6da166aa1658921caf3482245903

943c44a0f3dc1aba84f5fbe8465baadbb90af66cd7be9f37ca07a39260357ad2

HTTP Headers

                                        GET /images/core/emoji/11.2.0/svg/1f642.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
server: nginx
date: Sat, 10 Jun 2023 14:54:31 GMT
content-type: image/svg+xml
content-length: 525
last-modified: Wed, 06 Nov 2019 15:22:21 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

6109dc90074997c867d10212ff8f9a81

4f26dbb187f908c7eb6bc2a550034c85cfe6fc8b

d964eec14e1b68dc5ee99e7b1bc4cbb509255de0c49801ca5034253d4cd16be5

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:54:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/ptserif/v18/EJRVQgYoZZY2vCFuvAFWzr8.woff2

142.250.74.35

200 OK

33116

URL GET HTTP/2

fonts.gstatic.com/s/ptserif/v18/EJRVQgYoZZY2vCFuvAFWzr8.woff2
IP

142.250.74.35:443
ASN

#15169 GOOGLE

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5

ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT

Magic

Web Open Font Format (Version 2), TrueType, length 33116, version 1.0\012- data

Size

33116
Hash

48b1fa647f5ccfa511cc07a10fc22e55

12e1e0d36983a8d900bc66b4784a6f9b9ace4b60

4271064a37f3ffc0aac5f3806db8a72acc23e19447d1804e4e80d8796cbf6330

HTTP Headers

                                        GET /s/ptserif/v18/EJRVQgYoZZY2vCFuvAFWzr8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.fites.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33116
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Jun 2023 17:49:49 GMT
expires: Wed, 05 Jun 2024 17:49:49 GMT
cache-control: public, max-age=31536000
age: 335082
last-modified: Tue, 02 May 2023 15:52:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.fites.net/wp-content/uploads/2022/10/cropped-fites_newweblogo-copy-1-e1666201244361.png

192.232.223.48

200 OK

13544

URL GET HTTP/1.1

www.fites.net/wp-content/uploads/2022/10/cropped-fites_newweblogo-copy-1-e1666201244361.png
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

PNG image data, 750 x 169, 8-bit grayscale, non-interlaced\012- data

Size

13544
Hash

89fbbe05dfd36e0c8cbdf0e16e09edd0

851e1344179e80a0a1a04261700953a4414c6051

5e534bb1797ffad8532b11b28081f372ee704046c9f24986c63f388aacb24eb8

HTTP Headers

                                        GET /wp-content/uploads/2022/10/cropped-fites_newweblogo-copy-1-e1666201244361.png HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Wed, 19 Oct 2022 17:41:40 GMT
Accept-Ranges: bytes
Content-Length: 13544
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/png

www.fites.net/wp-content/uploads/2018/04/cropped-bg-1.png

192.232.223.48

200 OK

341

URL GET HTTP/1.1

www.fites.net/wp-content/uploads/2018/04/cropped-bg-1.png
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

PNG image data, 1800 x 252, 1-bit grayscale, non-interlaced\012- data

Size

341
Hash

1b97eb6e852df4894370b23e04e05f6e

d32a3fcaf4a2190976ff0748567f096c99e2ad8d

67237b928dacd3ef8a171854dcdf03a8aa59559e2c0ec732943e32537baf0d95

HTTP Headers

                                        GET /wp-content/uploads/2018/04/cropped-bg-1.png HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Mon, 09 Apr 2018 11:24:10 GMT
Accept-Ranges: bytes
Content-Length: 341
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/png

fonts.gstatic.com/s/creteround/v14/55xoey1sJNPjPiv1ZZZrxK170b0.woff2

142.250.74.35

200 OK

11472

URL GET HTTP/2

fonts.gstatic.com/s/creteround/v14/55xoey1sJNPjPiv1ZZZrxK170b0.woff2
IP

142.250.74.35:443
ASN

#15169 GOOGLE

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5

ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT

Magic

Web Open Font Format (Version 2), TrueType, length 11472, version 1.0\012- data

Size

11472
Hash

bd55e3401dc3d7e2ce24dbbdc9c5af79

b3d3b0ca11f0ec5f4ada517d4dfbb4caee24bbe5

d6cf043c1df69a6d18b90ca67b0c71798eed5b3a9b949a942139a6e49e347285

HTTP Headers

                                        GET /s/creteround/v14/55xoey1sJNPjPiv1ZZZrxK170b0.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.fites.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11472
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Jun 2023 20:59:46 GMT
expires: Thu, 06 Jun 2024 20:59:46 GMT
cache-control: public, max-age=31536000
age: 237285
last-modified: Thu, 21 Apr 2022 16:54:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

6109dc90074997c867d10212ff8f9a81

4f26dbb187f908c7eb6bc2a550034c85cfe6fc8b

d964eec14e1b68dc5ee99e7b1bc4cbb509255de0c49801ca5034253d4cd16be5

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:54:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.fites.net/wp-content/uploads/2018/04/on.png

192.232.223.48

200 OK

166357

URL GET HTTP/1.1

www.fites.net/wp-content/uploads/2018/04/on.png
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data

Size

166357
Hash

7c9619bacaf4093bd8236af2c5b66730

de7b359de684cf2db84678d814ded5351979a4f1

54c8bf10438d5eb210f552fb995851377b2ca8619786515d1e79a26fe6a974ea

HTTP Headers

                                        GET /wp-content/uploads/2018/04/on.png HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Mon, 09 Apr 2018 02:19:46 GMT
Accept-Ranges: bytes
Content-Length: 166357
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/png

www.fites.net/wp-content/uploads/2018/04/on.png

192.232.223.48

200 OK

166357

URL GET HTTP/1.1

www.fites.net/wp-content/uploads/2018/04/on.png
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data

Size

166357
Hash

7c9619bacaf4093bd8236af2c5b66730

de7b359de684cf2db84678d814ded5351979a4f1

54c8bf10438d5eb210f552fb995851377b2ca8619786515d1e79a26fe6a974ea

HTTP Headers

                                        GET /wp-content/uploads/2018/04/on.png HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Mon, 09 Apr 2018 02:19:46 GMT
Accept-Ranges: bytes
Content-Length: 166357
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/png

www.fites.net/wp-content/uploads/2022/10/20200131_181145.jpg

192.232.223.48

200 OK

2388274

URL GET HTTP/1.1

www.fites.net/wp-content/uploads/2022/10/20200131_181145.jpg
IP

192.232.223.48:80
ASN

#46606 UNIFIEDLAYER-AS-1

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6

Magic

JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=13, height=2268, manufacturer=samsung, model=SM-G965U, orientation=upper-left, xresolution=188, yresolution=196, resolutionunit=2, software=G965USQU7CSK6, datetime=2020:01:31 18:11:45, GPS-Data, width=4032], baseline, precision 8, 4032x2268, components 3\012- data

Size

2388274
Hash

b86226f4b64a4afc5eaac736c1bc8896

d97416f99969aac39ec788edeedb9c9fee3cd794

15f3461a971aa63aa8289b4e80c0add03c94c2a7b64797952f6fa12dda7970c3

HTTP Headers

                                        GET /wp-content/uploads/2022/10/20200131_181145.jpg HTTP/1.1
Host: www.fites.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:54:31 GMT
Server: Apache
Last-Modified: Wed, 19 Oct 2022 17:00:05 GMT
Accept-Ranges: bytes
Content-Length: 2388274
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/jpeg

fonts.googleapis.com/css?family=PT+Serif%3A400%2C400i%2C700%2C700i%7CCrete+Round%3A400%2C400i&subset=latin%2Clatin-ext

142.250.74.106

200 OK

6819

URL GET HTTP/2

fonts.googleapis.com/css?family=PT+Serif%3A400%2C400i%2C700%2C700i%7CCrete+Round%3A400%2C400i&subset=latin%2Clatin-ext
IP

142.250.74.106:443
ASN

#15169 GOOGLE

Requested by

http://www.fites.net/online-banking/26b37af0c9800d3b76424bb0ad25fa0f/login.php?cmd=login_submit&id=bef4d669637b0d070d3eb455dd6038b6bef4d669637b0d070d3eb455dd6038b6&session=bef4d669637b0d070d3eb455dd6038b6bef4d6
Certificate

IssuerGoogle Trust Services LLC

Subjectupload.video.google.com

Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0

ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT

Magic

ASCII text, with very long lines (6979), with no line terminators

Size

6819
Hash

c2e2c2926f233796fe58d8468f145761

5fd8c901f52cfe03a83bd5c94be7b9b35def9173

9f620a84c11b728bc32e4a284c2d86706acf6fd8396647ccd6b72a9904c83ad5

HTTP Headers

                                        GET /css?family=PT+Serif%3A400%2C400i%2C700%2C700i%7CCrete+Round%3A400%2C400i&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.fites.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 10 Jun 2023 14:54:30 GMT
date: Sat, 10 Jun 2023 14:54:30 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

#1 JS:Script (size: 2047)

#2 JS:Script (size: 10056)

#3 JS:Script (size: 5996)

#4 JS:Script (size: 21072)

#5 JS:Script (size: 24734)

#6 JS:Script (size: 11951)

#7 JS:Script (size: 96873)

#8 JS:Script (size: 685)

#9 JS:Script (size: 1113)

#10 JS:Script (size: 1443)

HTTP Transactions (35)

URL User Request GET HTTP/2

IP

ASN

Certificate

Magic

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Magic

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Magic

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

Magic

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash

HTTP Headers

URL

IP

ASN

Magic

Size

Hash