Report - delivery.udsbrasil.com.br/public/EyBLmlWM6zMB77M11uCuXdVoynZTxP4l

Report Overview

Submitted URL
delivery.udsbrasil.com.br/public/EyBLmlWM6zMB77M11uCuXdVoynZTxP4l
IP
38.105.209.111
ASN
#40021 CONTABO
Submitted
2023-02-06 03:00:05
Access
Website Title
Final URL
Tags
dhl logistics phishing
urlquery detections
Phishing - DHL

Detections

urlquery
31
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-13T06:00:13Z	2.7 kB	4.6 kB	93.184.220.29
cdnjs.cloudflare.com	235	2015-04-17T22:46:33Z	2023-03-13T05:09:21Z	801 B	351 kB	104.17.24.14
cdn.s-pass.org	unknown	2022-06-08T13:11:38Z	2023-03-13T03:31:55Z	507 B	5.8 kB	104.26.11.170
ws-mt1.pusher.com	8253	2018-09-20T13:30:02Z	2023-03-13T07:20:47Z	1.1 kB	372 B	3.227.115.115
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2.7 kB	7.1 kB	23.36.76.226
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
delivery.udsbrasil.com.br	unknown	2023-02-05T08:30:03Z	2023-02-11T19:35:52Z	21 kB	2.2 MB	38.105.209.111
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	35.166.82.242
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	70 kB	34.120.237.76
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-13T05:09:47Z	686 B	1.4 kB	142.250.74.163
cdn.lr-in.com	13237	2021-07-19T16:36:56Z	2023-03-13T05:28:06Z	373 B	1.0 kB	104.21.234.145
code.jquery.com	634	2012-05-21T19:28:02Z	2023-03-13T05:09:57Z	380 B	34 kB	69.16.175.42
cdn.jsdelivr.net	439	2012-09-30T02:15:09Z	2023-03-13T06:17:54Z	410 B	1.1 kB	104.16.87.20

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (18)

	URL	Size	First Seen	Last Seen
	cdnjs.cloudflare.com/ajax/libs/imask/3.4.0/imask.min.js	46 kB	2023-03-07	2024-04-17
Pretty URL cdnjs.cloudflare.com/ajax/libs/imask/3.4.0/imask.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:12 Last Seen2024-04-17 21:55:35 Times Seen13265 Hash 79c82646b886e08184f7b9fff25e64ff 804b4b0f8f3443ff05833e33fb5b76780ffafe25 8b76b3502583edddf22df0b9c6ee640053a2cdfeaa113ceff3ea9b61d1f6410d Loading...

	cdn.lr-in.com/logger-1.min.js	824 kB	2023-03-13	2023-03-13
Pretty URL cdn.lr-in.com/logger-1.min.js IP 104.21.234.145 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 16:09:24 Last Seen2023-03-13 18:28:49 Times Seen1 Hash 4ab24f79463918fc556092d46d44a22d a1c47bd7bc6eeb3dd131d17917eef36252f64d33 ed7d64d190ab6483f6ea5573e101cd3fe7b75e066d8619a3552457debb6a3d93 Loading...

	delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx	870 B	2023-03-08	2024-03-22
Pretty URL delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx IP 38.105.209.111 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:28 Last Seen2024-03-22 11:31:08 Times Seen2251 Hash 16b834354afee921f6b6076fae2538e6 f6dabd330ad9d949eae272607fbfed334039fc92 592a0a09e027a692d9e227177ea5964ad9a7d027a7f19bb01fd0bcdf42a9fe35 Loading...

	code.jquery.com/jquery-1.12.4.min.js	97 kB	2023-03-07	2024-04-19
Pretty URL code.jquery.com/jquery-1.12.4.min.js IP 69.16.175.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-19 19:14:44 Times Seen118542 Hash 4f252523d4af0b478c810c2547a63e19 5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb 668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404 Loading...

	delivery.udsbrasil.com.br/public/dinzab/countrySelect.js	37 kB	2023-03-08	2024-04-06
Pretty URL delivery.udsbrasil.com.br/public/dinzab/countrySelect.js IP 38.105.209.111 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:25 Last Seen2024-04-06 06:20:41 Times Seen12188 Hash ee3d5d4880b5dac09d9ca3c23cdd28da f95728f89723a079442d67ed6aa38abf8ecab4fd 657baddf2724ae4570fa40c00dddefa3379b5709ac06ceb536f6177a1bfc394f Loading...

	delivery.udsbrasil.com.br/public/dinzab/card.js	59 kB	2023-03-07	2024-04-06
Pretty URL delivery.udsbrasil.com.br/public/dinzab/card.js IP 38.105.209.111 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:24:57 Last Seen2024-04-06 06:20:40 Times Seen12198 Hash 30e93a747ba8285615cfbc3643dc1a62 3a55f9d6ac708f519d351ea0b69083457778ec9d 18c4b9b4c27233b541a47300a4ee98239e1f8dec4bbcd9fabb6bdad12ca82025 Loading...

	delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx	1.8 kB	2023-03-13	2023-03-13
Pretty URL delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx IP 38.105.209.111 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 17:37:25 Last Seen2023-03-13 21:44:32 Times Seen1 Hash 6aca9fdc74542075e45fcb30f8421392 082b812067f3a8be0d9bee5a467c66fc9cfaa855 3be2d2f4ff188059bf7cfd3d18b7c726e980fae9c7ce0fa5c39f72bb1f5b0a73 Loading...

	delivery.udsbrasil.com.br/public/dinzab/app.js	920 kB	2023-03-08	2024-04-06
Pretty URL delivery.udsbrasil.com.br/public/dinzab/app.js IP 38.105.209.111 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:25 Last Seen2024-04-06 06:20:41 Times Seen11793 Hash 508afd6ff9ab52ce8f480d35568038d1 b5d9891100e0dce59cee59b75a098a1ae64c779b 8af18273c1833477cf810c4e3a76f483b6a6064571d25ea7742d8708378c8f09 Loading...

	cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js	2.7 kB	2023-03-07	2024-04-06
Pretty URL cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js IP 104.16.87.20 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:54:49 Last Seen2024-04-06 06:20:41 Times Seen447 Hash a652ab92584024571b6ea0f3255eb380 9266ee9ab680b63d7205d6bc65b9767513d162a5 a8831773f69697c641e349c519d162ad5afe58cc583703d96f98a79d29087ef1 Loading...

	delivery.udsbrasil.com.br/public/	135 B	2023-03-13	2023-03-13
Pretty URL delivery.udsbrasil.com.br/public/ IP 38.105.209.111 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 18:08:11 Last Seen2023-03-13 18:08:11 Times Seen1 Hash 4db671a55cc25bad6dec2c501f94f6fb 40eb3198cf9e156465775a1e5d33c041fe006d9b 4f3c61801f3ddcf02aa030ef16007aa00615a302e33615eb12885596c893a83e Loading...

	unknown	0 B	2023-03-07	2024-04-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-20 01:16:02 Times Seen36969170 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx	86 B	2023-03-13	2023-03-13
Pretty URL delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx IP 38.105.209.111 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 18:08:11 Last Seen2023-03-13 18:08:11 Times Seen1 Hash 55be2dfad4d98bebdfee7469518f6381 ccf8fb0ccfa76e8317edba3b83e3b81902dc2461 29af5dd637f4cfde81faa0e582e26cdcfeaa13283bfe6221df52aff810ca7118 Loading...

	delivery.udsbrasil.com.br/public/dinzab/mine.js	1.6 kB	2023-03-08	2024-04-06
Pretty URL delivery.udsbrasil.com.br/public/dinzab/mine.js IP 38.105.209.111 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:25 Last Seen2024-04-06 06:20:41 Times Seen8003 Hash f11ee1ccf373dd137b7ad18e4ee2f69e 26baf7db3e340be99ece82b37d294b80c373fd12 71b8a934f8936288d42fe9fd426ff18cbc1fe54070617fd62420025da56b662e Loading...

	delivery.udsbrasil.com.br/public/	208 B	2023-03-13	2023-04-05
Pretty URL delivery.udsbrasil.com.br/public/ IP 38.105.209.111 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 17:37:24 Last Seen2023-04-05 02:10:38 Times Seen11 Hash 143a257361cf78d2cd2fe2427088147e 5979a7fed8d03036366f7241b133794beebbac3c e7254452a00d0d2d0c44c9de756ee090544ee8e5cf1dfc3f81bc2075dbf725a9 Loading...

	delivery.udsbrasil.com.br/public/dinzab/data.js	12 kB	2023-03-08	2024-04-06
Pretty URL delivery.udsbrasil.com.br/public/dinzab/data.js IP 38.105.209.111 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:25 Last Seen2024-04-06 06:20:40 Times Seen12169 Hash a2b78e86240966cda00a463614e4f3dd a2606f30f77bb9f235746059db16b0ee8b585c31 55e47db856701715f613de8674bd0c67604cc304514b791bed402866d18c8557 Loading...

	delivery.udsbrasil.com.br/public/dinzab/intlTelInput.js	89 kB	2023-03-08	2024-04-18
Pretty URL delivery.udsbrasil.com.br/public/dinzab/intlTelInput.js IP 38.105.209.111 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:25 Last Seen2024-04-18 15:46:05 Times Seen12041 Hash 9146aa46d1f409004183b86f202c4607 717a6d53527fe31ec1c4eef9022b06e5d4d6f6a5 b188900aaff98a87fc69519ab04437aa735708b4b92f2adcab6937d2a1d42e37 Loading...

	delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx	248 B	2023-03-13	2024-03-22
Pretty URL delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx IP 38.105.209.111 ASN #40021 CONTABO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 17:37:25 Last Seen2024-03-22 11:31:08 Times Seen2845 Hash 4650ef73be9884bdea100c5f58eb3ce0 0604200a9b4548990be2b6bddd564b755f41853d ea625b24a834457af4291263a5886ef3b7967ddd661aa1b111aefe454a948ab8 Loading...

	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.1/js/all.min.js	1.1 MB	2023-03-07	2024-04-06
Pretty URL cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.1/js/all.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:50:19 Last Seen2024-04-06 06:20:40 Times Seen12884 Hash 61008443488f4e7f60d5a5055483187e b56375acc5e062f79280440459d0d7b0f10a290b 1d3f596f76f53d53ef7cb1ffeffd6f791b54bd639b42e4f23e7f2d7b36f91c48 Loading...

HTTP Transactions (56)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
507011ccb9124dcd57e84a90a0965cc4
1a6575d0ac979c7184490cc9836ac4812ad2afd1
01626c18e1e68507aa33ef7448dbc3311901ab6f29adc2f51d449409b0680dce

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01626C18E1E68507AA33EF7448DBC3311901AB6F29ADC2F51D449409B0680DCE"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11927
Expires: Mon, 06 Feb 2023 06:18:41 GMT
Date: Mon, 06 Feb 2023 02:59:54 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15128
Expires: Mon, 06 Feb 2023 07:12:02 GMT
Date: Mon, 06 Feb 2023 02:59:54 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3260
Expires: Mon, 06 Feb 2023 03:54:14 GMT
Date: Mon, 06 Feb 2023 02:59:54 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 06 Feb 2023 02:34:01 GMT
content-type: application/json
age: 1553
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: zTVz6XDenjBozs6KkK0YMMFf4HHfUxZAruKO4xqRPeLyTJDN9sne9j2tTQqX0FLibV76D5nvSD0=
x-amz-request-id: WK1Y0EB1M2MB766M
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 06 Feb 2023 02:24:46 GMT
age: 2108
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 02:59:54 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 06 Feb 2023 02:07:20 GMT
age: 3154
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5752
Expires: Mon, 06 Feb 2023 04:35:47 GMT
Date: Mon, 06 Feb 2023 02:59:55 GMT
Connection: keep-alive

push.services.mozilla.com/

35.166.82.242

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.166.82.242:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DSmBiFzTSIKCX+wm0vp/CQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hpC0YEPhQWcZf+OU1k08qJ1XKhE=

delivery.udsbrasil.com.br/public/EyBLmlWM6zMB77M11uCuXdVoynZTxP4l

38.105.209.111

302 Found

402 B

URL HTTP/1.1
delivery.udsbrasil.com.br/public/EyBLmlWM6zMB77M11uCuXdVoynZTxP4l
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
402 B (402 bytes)
Hash
53b315ea0cf09ce815fbb5a185e7c7a7
c843bbff0d9a036164bdd619a7c78d34b8e0f9b0
7fe654c565aa2cabe13f871515ea60ca000e261996717d26eebded021742a6fe

HTTP Headers

GET /public/EyBLmlWM6zMB77M11uCuXdVoynZTxP4l HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ikc4R285SzdGbEtGNFJWVmV0UG1yMVE9PSIsInZhbHVlIjoiaW9Ud2VFeGtRakg0MGpreTFNVnkvTkNMUUVOUzN2ajYvengwcGxFbm8xSUhUVnltQzlZRkZOV1NSczRQZ1U2TGVOSWYvOStEQWRjTEU3ejVmdzJqQzNHamowT1VrQkd4cWRFT1B0YW45cnFzNG9td0l6RlRFaWNwZVZ1WnNWQkUiLCJtYWMiOiI3MjA3NmNiYTUxMWI0ZTc2NTRhODQ4YjQ3MjA3ODAwYmZiOWQ0ZWY0MDIyMzkyY2VlMGJjNWM1Yjc4ZWE5YWViIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjZRSGR3d005d2RWTE5NQkpQNmc0Z0E9PSIsInZhbHVlIjoiMXZaZytJb3hXbVB6d2VYMkZtK0VCa1JyOFhmemtVY050Slc4VC80QUxHbzFQN1V3Q252VnZOL211K3J4b01CR1B4aUpOUVpYZWN6UHloMlRhVlhlVkxvSzhzTmxEdmdXRnJsY1NmUm02bkxZNmtac1ZVUmtRRHdYWXRnRmQ2YmsiLCJtYWMiOiJmMjQyMDc4ODMyNTUzNTEyMTcyM2RhNzFlNTQ5YjkwNGEzZjA1MWM3MmIwNzMyMTM4MTg3YzRiOGY5MDY3ZWMxIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
Date: Mon, 06 Feb 2023 02:59:54 GMT
Server: Apache
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6IlpQK3d1RnlxV25CaVQ3aDBmY3dpbWc9PSIsInZhbHVlIjoiQjhOTDVqbW50MHdEUWNoTXE1NnJGREZ1N04xbURYTW4weUU2Y3pDUVJydDRyTlB0TzgwUTZoTTJsWlZ6Rk1ialV3aWJsdzQzQ1dMaVY3MmZvcmRXNlMvSzBiTnIrQWhVU3FzZDNuK0pONzJUTWV1K2xEbitDODNnOThVMng0T1giLCJtYWMiOiJiNTIxMDVmYWM5MmZkZDVlYWEwZGZlYWMyZjZhNTliODBmMWRhZjUwNzc5YjQ5NmY4NmYxZWEzZjU3MzZhNDQ1IiwidGFnIjoiIn0%3D; expires=Mon, 06-Feb-2023 04:59:55 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IlR0Ullsd2FOS2ZrbkptWTZsMWdkY3c9PSIsInZhbHVlIjoiaFBLL2llNmZ2S2lsaFVGT3lzWXhkVkp1SktLd3ovMTVPY2M5MEdjN3NNSXk0U1lBL1RaL2lvaW1ldWVaYkFpT3dmNXdwNzJWSzRUU2RWOGVNY2VLUnNGbXZJb1gydWJHcTcxWlhzTHNwakgzNjM1Nzlpdks5SlZuN1NVYzZkUGkiLCJtYWMiOiJhMDBhMzJiZTA3MjE5MTFiNWEyODYwYTYyN2YwZGVhMjY2NDcxNmE1M2Q0OTA4OTUyNmFkOGJhYmMxZGRmMmUyIiwidGFnIjoiIn0%3D; expires=Mon, 06-Feb-2023 04:59:55 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: http://delivery.udsbrasil.com.br/public
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

delivery.udsbrasil.com.br/public

38.105.209.111

301 Moved Permanently

248 B

URL HTTP/1.1
delivery.udsbrasil.com.br/public
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
248 B (248 bytes)
Hash
c09746f729b704495ce760d5ce7fadeb
eceacc767f6ef7a617709f048c407654d87a930a
d451bc55032cd80d190adb769f38ea83d21a2eee08c4b5d6db153d0245cf3db4

HTTP Headers

GET /public HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlpQK3d1RnlxV25CaVQ3aDBmY3dpbWc9PSIsInZhbHVlIjoiQjhOTDVqbW50MHdEUWNoTXE1NnJGREZ1N04xbURYTW4weUU2Y3pDUVJydDRyTlB0TzgwUTZoTTJsWlZ6Rk1ialV3aWJsdzQzQ1dMaVY3MmZvcmRXNlMvSzBiTnIrQWhVU3FzZDNuK0pONzJUTWV1K2xEbitDODNnOThVMng0T1giLCJtYWMiOiJiNTIxMDVmYWM5MmZkZDVlYWEwZGZlYWMyZjZhNTliODBmMWRhZjUwNzc5YjQ5NmY4NmYxZWEzZjU3MzZhNDQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR0Ullsd2FOS2ZrbkptWTZsMWdkY3c9PSIsInZhbHVlIjoiaFBLL2llNmZ2S2lsaFVGT3lzWXhkVkp1SktLd3ovMTVPY2M5MEdjN3NNSXk0U1lBL1RaL2lvaW1ldWVaYkFpT3dmNXdwNzJWSzRUU2RWOGVNY2VLUnNGbXZJb1gydWJHcTcxWlhzTHNwakgzNjM1Nzlpdks5SlZuN1NVYzZkUGkiLCJtYWMiOiJhMDBhMzJiZTA3MjE5MTFiNWEyODYwYTYyN2YwZGVhMjY2NDcxNmE1M2Q0OTA4OTUyNmFkOGJhYmMxZGRmMmUyIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Mon, 06 Feb 2023 02:59:55 GMT
Server: Apache
Location: http://delivery.udsbrasil.com.br/public/
Content-Length: 248
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

delivery.udsbrasil.com.br/public/

38.105.209.111

200 OK

544 B

URL HTTP/1.1
delivery.udsbrasil.com.br/public/
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
544 B (544 bytes)
Hash
c69a1f02c9ab779da12c3b0eb20255e4
85505de9afc8c755c13aeb997649834ddf7ba2d1
e43a74340dc005366fe95b05a65175c04bc74d3394ac8fdcfee2ce3dad40a25b

HTTP Headers

GET /public/ HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlpQK3d1RnlxV25CaVQ3aDBmY3dpbWc9PSIsInZhbHVlIjoiQjhOTDVqbW50MHdEUWNoTXE1NnJGREZ1N04xbURYTW4weUU2Y3pDUVJydDRyTlB0TzgwUTZoTTJsWlZ6Rk1ialV3aWJsdzQzQ1dMaVY3MmZvcmRXNlMvSzBiTnIrQWhVU3FzZDNuK0pONzJUTWV1K2xEbitDODNnOThVMng0T1giLCJtYWMiOiJiNTIxMDVmYWM5MmZkZDVlYWEwZGZlYWMyZjZhNTliODBmMWRhZjUwNzc5YjQ5NmY4NmYxZWEzZjU3MzZhNDQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR0Ullsd2FOS2ZrbkptWTZsMWdkY3c9PSIsInZhbHVlIjoiaFBLL2llNmZ2S2lsaFVGT3lzWXhkVkp1SktLd3ovMTVPY2M5MEdjN3NNSXk0U1lBL1RaL2lvaW1ldWVaYkFpT3dmNXdwNzJWSzRUU2RWOGVNY2VLUnNGbXZJb1gydWJHcTcxWlhzTHNwakgzNjM1Nzlpdks5SlZuN1NVYzZkUGkiLCJtYWMiOiJhMDBhMzJiZTA3MjE5MTFiNWEyODYwYTYyN2YwZGVhMjY2NDcxNmE1M2Q0OTA4OTUyNmFkOGJhYmMxZGRmMmUyIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:59:55 GMT
Server: Apache
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6IlNnV3hWdkcwZ2xvejJIcUNKcjZsUmc9PSIsInZhbHVlIjoidktPaWFuRnR3aFdOOFJaMDZUaGRld0JrMGNzelM5eXh1WStNbjNhYW8wOUp4VFo3enFTTFRMakpHbGthdUlnWjBjRkxjTDBsbE5aTTZXWXMvWXkwQThFZ2ZmTXpIb0tOYmNnMlNzbmkvSUVxZXRBbUVTUk9kWTlsNTdrOUkwV1IiLCJtYWMiOiJlZTdiNjY4ZGY5ZTE3N2ZiZmI4NmI5MTFjYWM2ZDZkNDIwZjljNmVkZTEwOTYwNjZlYzFkYWRlMzljYmJlN2UwIiwidGFnIjoiIn0%3D; expires=Mon, 06-Feb-2023 04:59:56 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6InhSdGlmTzIrUUZ2U3hkdlJXZGpXN0E9PSIsInZhbHVlIjoibTdZVHNIOTRzV0VjRkwxQmhITTRHL1B4UGJKNkUvdC9uYnZIaHlHV0puWEIwUWtCb005NWF1L3VKNDVGWkErUzJHeGY1clJmenVQKzFaSEJ6YVpkQTF2ZWlXYjd4V21mNEsvKzRCZ2tDOUlDK1dBb1gzK1VwS2ZSUk45eVZLTHciLCJtYWMiOiJlYzZmNTA3ZWVhNWI1NzI3ZDQwMDRkZWFlYzIwZDZlM2FjNjljODMwOTgyZTIzMDJiNDE0ODllOWU4MjJmMjUxIiwidGFnIjoiIn0%3D; expires=Mon, 06-Feb-2023 04:59:56 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6476
Expires: Mon, 06 Feb 2023 04:47:52 GMT
Date: Mon, 06 Feb 2023 02:59:56 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
578c4423e94bae9d4193c2af2a989b6d
f679f9298a787cde1b50e1933193689ecd66d151
407c2b4320633a13744f870607ad4b00ffef704cf5f408f8fe1d3ca18d36bb05

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4680
Cache-Control: max-age=143325
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 02:59:56 GMT
Etag: "63dfe7c1-117"
Expires: Tue, 07 Feb 2023 18:48:41 GMT
Last-Modified: Sun, 05 Feb 2023 17:30:41 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6476
Expires: Mon, 06 Feb 2023 04:47:52 GMT
Date: Mon, 06 Feb 2023 02:59:56 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6476
Expires: Mon, 06 Feb 2023 04:47:52 GMT
Date: Mon, 06 Feb 2023 02:59:56 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6476
Expires: Mon, 06 Feb 2023 04:47:52 GMT
Date: Mon, 06 Feb 2023 02:59:56 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10514 bytes)
Hash
9046d887fd45a0940e31a74173d17798
1ff698b9cf660165e846dfc4770f29852aedce45
0c7b0e1250aa7718b7b35b80a1442f62e94ace1fb578fb781ec8204ee96386d0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10514
x-amzn-requestid: ac2a383b-833d-4dae-9bd9-43dc3d9e373d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiPEIyoAMFqUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-436bb6816b269ce45b9f8600;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RYNzle5-l5dOMPWb2Bmu_T5aIJw9NX2FKuJsej8hzpYZcgD6coH9SA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:09 GMT
age: 18587
etag: "1ff698b9cf660165e846dfc4770f29852aedce45"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (13230 bytes)
Hash
a24cf7b2db6d65c3fe5daf78b3309ced
a3653a9a7baea412808dd91572ff21e1a505c26f
f55ee98bab5ce53d6acc1cac7f54f089b42d5f2ffbe750d869c4f4a7bc26f715

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13230
x-amzn-requestid: 8171829a-cf6d-4c33-99a1-f3cef7cd4475
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiTH8GoAMFYLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-1597a0f06ef3db2534a101aa;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Nvfp0sEYw5bxnFHisq80WCXh6T-LdFlPqs95tyX2epjMfhM_hjUj0A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:03 GMT
age: 18593
etag: "a3653a9a7baea412808dd91572ff21e1a505c26f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F24980299-b46f-4879-99f8-3d6a5bcd2153.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12459 bytes)
Hash
b2e321721a636309ac45c6722f71a5d5
8f4224824571577109bf32b1fa7646dbfb88e818
a52611068a9694594dec4dddb1bd29afdbba897a2e1f61dcf3ceb81e262912e8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F24980299-b46f-4879-99f8-3d6a5bcd2153.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12459
x-amzn-requestid: 5dd251ba-30e6-47aa-846a-9cefa9aa4928
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiPHlWIAMFnZw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-402585d71ebd0ebf75af210d;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dMwyfVFayhAjpMMOiE96N2N5TwdvJ52UvscJ6miuz4W3qNKXVS9jaA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:11:06 GMT
age: 17330
etag: "8f4224824571577109bf32b1fa7646dbfb88e818"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.6 kB (8649 bytes)
Hash
ad2298793399bf73c51c7d60952065c1
816bd4c36ceea2c46489ae72fde0b4a94c7c4bef
dc540d64e5e0835c7007e89ca3b5dd620b43a87e13309f323f3843a5f908a199

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8649
x-amzn-requestid: f85f3c9d-95c1-4db6-af5f-595070fe46c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiRHzboAMFQCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-6eed72bf20887cac6dc1a56a;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z7HTSLYJmhfIGlCjeG2EeN3q2Cd9vKlq71nqo3iIuhwkgwlEAlRPmQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:51:02 GMT
age: 18534
etag: "816bd4c36ceea2c46489ae72fde0b4a94c7c4bef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0b68c1a-7013-4183-b5b4-d006c6f9e7a7.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10582 bytes)
Hash
000cb25b2cb4fa30ce745582dafbab99
a5227f79e64bcab8d8f03822e6d408400a03a23e
7f6a2a99bff95672d34b41489d0dd1132ab8654b745e728e15ed95e987b7ed62

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0b68c1a-7013-4183-b5b4-d006c6f9e7a7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10582
x-amzn-requestid: e18bacd8-6d0e-4957-93ab-97def7442f8c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4okSFKKIAMFlUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0214e-05486d9b283cedc008cba781;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: p1ToWLG__PFWEMRxlPZcouvOTijPoUcMr7ubDCNcy2wMwgusbBjGPA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:13:34 GMT
etag: "a5227f79e64bcab8d8f03822e6d408400a03a23e"
content-type: image/jpeg
age: 17182
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.9 kB (7851 bytes)
Hash
13572f84ad268caedcc897f2ad7b9baf
afb91ab43953e8915a2169618d2ab5e330cde0a1
0fb8b09608dc293b2084953b948cc7d8a7aa7bcb525090a7e44d5cb2a725fab3

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7851
x-amzn-requestid: 11d3fe95-844b-4e5d-b31c-f99e96e2b608
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiRHeEIAMFjjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-602b91422dff88a750b8e3e9;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: F-bdQPU-zYhIlXtxcW_TiqE8ifPg3i0cg8gFuvJSfwoMDTe-Hqy1jg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:02:47 GMT
age: 17829
etag: "afb91ab43953e8915a2169618d2ab5e330cde0a1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
578c4423e94bae9d4193c2af2a989b6d
f679f9298a787cde1b50e1933193689ecd66d151
407c2b4320633a13744f870607ad4b00ffef704cf5f408f8fe1d3ca18d36bb05

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4680
Cache-Control: max-age=143325
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 02:59:56 GMT
Etag: "63dfe7c1-117"
Expires: Tue, 07 Feb 2023 18:48:41 GMT
Last-Modified: Sun, 05 Feb 2023 17:30:41 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279

delivery.udsbrasil.com.br/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx/

38.105.209.111

301 Moved Permanently

280 B

URL HTTP/1.1
delivery.udsbrasil.com.br/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx/
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
280 B (280 bytes)
Hash
9ba42628d75ff573110ab649e61b4686
b755518014b7829bdbaf80fb1ab6255e3331b315
bb69cc8e6dab71d33ab8ae927e4dcc8b99694623469a49ef791fc9d67a79a822

HTTP Headers

GET /nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx/ HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/public/
Cookie: XSRF-TOKEN=eyJpdiI6IlNnV3hWdkcwZ2xvejJIcUNKcjZsUmc9PSIsInZhbHVlIjoidktPaWFuRnR3aFdOOFJaMDZUaGRld0JrMGNzelM5eXh1WStNbjNhYW8wOUp4VFo3enFTTFRMakpHbGthdUlnWjBjRkxjTDBsbE5aTTZXWXMvWXkwQThFZ2ZmTXpIb0tOYmNnMlNzbmkvSUVxZXRBbUVTUk9kWTlsNTdrOUkwV1IiLCJtYWMiOiJlZTdiNjY4ZGY5ZTE3N2ZiZmI4NmI5MTFjYWM2ZDZkNDIwZjljNmVkZTEwOTYwNjZlYzFkYWRlMzljYmJlN2UwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InhSdGlmTzIrUUZ2U3hkdlJXZGpXN0E9PSIsInZhbHVlIjoibTdZVHNIOTRzV0VjRkwxQmhITTRHL1B4UGJKNkUvdC9uYnZIaHlHV0puWEIwUWtCb005NWF1L3VKNDVGWkErUzJHeGY1clJmenVQKzFaSEJ6YVpkQTF2ZWlXYjd4V21mNEsvKzRCZ2tDOUlDK1dBb1gzK1VwS2ZSUk45eVZLTHciLCJtYWMiOiJlYzZmNTA3ZWVhNWI1NzI3ZDQwMDRkZWFlYzIwZDZlM2FjNjljODMwOTgyZTIzMDJiNDE0ODllOWU4MjJmMjUxIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Mon, 06 Feb 2023 02:59:56 GMT
Server: Apache
Location: http://delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
Content-Length: 280
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
370e74ead61664d84985db7a9087c0e4
7c55daf6c9231e1586a0c9d48375766e7f02405f
ddc18509904868cb8e31ad5cbbd27245fc163eaac44d40a7e95fb795c6e248db

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4817
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 02:59:59 GMT
Last-Modified: Mon, 06 Feb 2023 01:39:42 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279

cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.1/js/all.min.js

104.17.24.14

200 OK

338 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.1/js/all.min.js
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65351)
Size
338 kB (338270 bytes)
Hash
5d535c43dade573c71fe3351d29ef3b6
a3ef7cd761afd9f454bd645ae4cfd79e9b6013b1
54d0f4ed17492419c5afdf9b8205c34b98db43c91dbdc342a27ce31f4970b7df

HTTP Headers

GET /ajax/libs/font-awesome/5.8.1/js/all.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://delivery.udsbrasil.com.br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 06 Feb 2023 02:59:59 GMT
content-type: application/javascript; charset=utf-8
content-length: 338270
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e60-1125c9"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 165293
expires: Sat, 27 Jan 2024 02:59:59 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1zlU8VgMnMibS2Gy6fOK5QXY7W9RKYKmc7IRpbGNkihn%2F6l7ynnapK2XMxVz0m8TUYwaOAuOqKaNEslgIdBHyzC5bErrJMqiuaowZqFndbCUsTzMEu0dsTPpcUta1Kya%2BibFooTt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7950a20a3ff6b517-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx

38.105.209.111

200 OK

22 kB

URL HTTP/1.1
delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
22 kB (22327 bytes)
Hash
2619b92f8d0eb2a281fe5b1ae1a95c27
7bdcb17b2945c0588ce7d9d2a45845c176c457d4
d7fcaaf4b0ecd36b9d070266b146c32c93b3195d868f81bd31f90f93e2e9c48e

HTTP Headers

GET /public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://delivery.udsbrasil.com.br/public/
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlNnV3hWdkcwZ2xvejJIcUNKcjZsUmc9PSIsInZhbHVlIjoidktPaWFuRnR3aFdOOFJaMDZUaGRld0JrMGNzelM5eXh1WStNbjNhYW8wOUp4VFo3enFTTFRMakpHbGthdUlnWjBjRkxjTDBsbE5aTTZXWXMvWXkwQThFZ2ZmTXpIb0tOYmNnMlNzbmkvSUVxZXRBbUVTUk9kWTlsNTdrOUkwV1IiLCJtYWMiOiJlZTdiNjY4ZGY5ZTE3N2ZiZmI4NmI5MTFjYWM2ZDZkNDIwZjljNmVkZTEwOTYwNjZlYzFkYWRlMzljYmJlN2UwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InhSdGlmTzIrUUZ2U3hkdlJXZGpXN0E9PSIsInZhbHVlIjoibTdZVHNIOTRzV0VjRkwxQmhITTRHL1B4UGJKNkUvdC9uYnZIaHlHV0puWEIwUWtCb005NWF1L3VKNDVGWkErUzJHeGY1clJmenVQKzFaSEJ6YVpkQTF2ZWlXYjd4V21mNEsvKzRCZ2tDOUlDK1dBb1gzK1VwS2ZSUk45eVZLTHciLCJtYWMiOiJlYzZmNTA3ZWVhNWI1NzI3ZDQwMDRkZWFlYzIwZDZlM2FjNjljODMwOTgyZTIzMDJiNDE0ODllOWU4MjJmMjUxIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:59:56 GMT
Server: Apache
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6InVMekZDYkFTMHpTdnN0SWwrUmlUSkE9PSIsInZhbHVlIjoiUXZjYndRam5ySEdYYWRwTDJQSTJESEVCUkxXMEd2Q1JMY2h6b1Bwa1U2TG1aaGhrT0t5ckVpcThFWU4rcTh3OUg2K3dVaVk0ZnREQ01wTENCRHhWalRKc3Z6TkJ3ekFCa1doRlUwejcvWkhPVTRXbjdMM3gwYjY4RURlV1ZXa28iLCJtYWMiOiJmOGMyZmJmNjMyMjk2MTljYjU1MWQxZjA4MDIxNWFiZmE5ZGRmM2NlZjlmMzA0MGU2OGEwZDM0OTNhYTM3ZDhiIiwidGFnIjoiIn0%3D; expires=Mon, 06-Feb-2023 04:59:59 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6InRnY20yM2JWR20wazliRldrQThwRVE9PSIsInZhbHVlIjoiQWNxdXRWNE14dUJ3bHB1NGVkNHZsaUxXUlk2TVEyYkJjOUVyWjVqV1krcVhvRkZWWURIRG8zWjg1eS8yYnR1Z2ZhczM4Vkx2ZVdDTk9jVTN5S3hEV0NreEJ1R2YzWjRONVZRQ3BUVUZVODM2Z21JNGRJdEJkL3NQMUdaWk9DWHgiLCJtYWMiOiJhNzdiOTRjMDk1YWUxMmU3MTRlMTczOGEzY2NhNjJlY2YzNWE5MmUyZjA2M2M3YzBhMzBhNTc2YmU5NzdjOTQ1IiwidGFnIjoiIn0%3D; expires=Mon, 06-Feb-2023 04:59:59 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
370e74ead61664d84985db7a9087c0e4
7c55daf6c9231e1586a0c9d48375766e7f02405f
ddc18509904868cb8e31ad5cbbd27245fc163eaac44d40a7e95fb795c6e248db

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4817
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 02:59:59 GMT
Last-Modified: Mon, 06 Feb 2023 01:39:42 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279

code.jquery.com/jquery-1.12.4.min.js

69.16.175.42

200 OK

34 kB

URL HTTP/2
code.jquery.com/jquery-1.12.4.min.js
IP
69.16.175.42:0
ASN
#20446 STACKPATH-CDN

File type
ASCII text, with very long lines (32077)
Size
34 kB (33738 bytes)
Hash
fc7624613c4e25843694cdb7fa956f05
7765bb4016ae929e22be579ccde505b94c2a63c1
49c97d70ef48bfdc1d7b96271b5613bb099b2c040ebdf5624962aea92ff428ae

HTTP Headers

GET /jquery-1.12.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 06 Feb 2023 02:59:59 GMT
content-encoding: gzip
content-length: 33738
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-17b8b"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1675652399.dop205.sk1.t,1675652399.cds003.sk1.hn,1675652399.cds251.sk1.c
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.163

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
26a15a1b880ec1026360b696b1c27074
fd35f80a1cf599da2a8e68a44477465a580440a5
a6d5caec988319523c120bc435a4ff0200b7ead114db10db19a09caeace978f7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 02:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
370e74ead61664d84985db7a9087c0e4
7c55daf6c9231e1586a0c9d48375766e7f02405f
ddc18509904868cb8e31ad5cbbd27245fc163eaac44d40a7e95fb795c6e248db

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4817
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 02:59:59 GMT
Last-Modified: Mon, 06 Feb 2023 01:39:42 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
99f09e9d3e730ba025536ff862bd62cd
5715183395d30b51932e0a8d525ecb318b8b1bb4
5d32f0f722122f8d6f198eab93bb96d13687af3f6401f7d43f17d3c789b9961a

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2805
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 02:59:59 GMT
Etag: "63dec900-116"
Last-Modified: Mon, 06 Feb 2023 02:13:14 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 278

cdnjs.cloudflare.com/ajax/libs/imask/3.4.0/imask.min.js

104.17.24.14

200 OK

11 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/imask/3.4.0/imask.min.js
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (45552)
Size
11 kB (10899 bytes)
Hash
6dd93e13c5bb3b67dadd0de250ffea2f
961bf5bb7cc4aa32bcd66b9ac34461f7e02d96d3
1238c95de9a6c90c1992853fd140b31d2ec8854a09deaa0d4a2d3136281af5e9

HTTP Headers

GET /ajax/libs/imask/3.4.0/imask.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 06 Feb 2023 02:59:59 GMT
content-type: application/javascript; charset=utf-8
content-length: 10899
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e9f-b217"
last-modified: Mon, 04 May 2020 16:11:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1497600
expires: Sat, 27 Jan 2024 02:59:59 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SkkKOIVEwMbmzGt1%2BblRW86tLZ6f%2BezGT5hT9r03QcPLOKl%2B8qf9IBMD%2BspqD53Q0jG9mqYzMhvUZ7p7ibin3Tt8x%2BWQnWHRjRuA2psXqe9WT7zMDUxSV9AeHh6FAIyEn1UK2h05"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7950a20ade6db505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.163

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
26a15a1b880ec1026360b696b1c27074
fd35f80a1cf599da2a8e68a44477465a580440a5
a6d5caec988319523c120bc435a4ff0200b7ead114db10db19a09caeace978f7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 02:59:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

cdn.s-pass.org/SPASSDATA/media/cache/portail_vignette_xl/SPASSDATA/attachments/2022_02/17/114223-serencontrer-messages-solid.png

104.26.11.170

200 OK

5.0 kB

URL HTTP/2
cdn.s-pass.org/SPASSDATA/media/cache/portail_vignette_xl/SPASSDATA/attachments/2022_02/17/114223-serencontrer-messages-solid.png
IP
104.26.11.170:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 640 x 512, 8-bit colormap, non-interlaced\012- data
Size
5.0 kB (4984 bytes)
Hash
faa2a37bbdf6a4d7eb92f4df1396e1bc
b63e5a7323f771d2294a58b3251bb6036ae33fce
cff8856b01d09b6e68b3d6b75172ea259363b4268be55229a963e86edc77e627

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /SPASSDATA/media/cache/portail_vignette_xl/SPASSDATA/attachments/2022_02/17/114223-serencontrer-messages-solid.png HTTP/1.1
Host: cdn.s-pass.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 06 Feb 2023 02:59:59 GMT
content-type: image/png
content-length: 4984
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1313415
etag: "620e522e-140a87"
last-modified: Thu, 17 Feb 2022 13:48:30 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 2845
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cisMolzEakTWUPrPqbvF76QON3wWyD%2B9wjA2UVXdFclc7d9fkaCXBL9IzYL6UeaNBFRPkZ8YCkM7CzS6f%2F407M8vvIjVHOBdZbKNfyBC9rOa9ZLTA0bwgz51BiIfPRr%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7950a20afdd5b4ee-OSL
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
98d6ea6deb8af722f7618d298ef7b408
c8005a6d25b38f3c3af2776495d74ee7d2dbba0f
9f42f5aa67c0a274c3dc4f2a8add9ce44e302e9b7c7a67ccfdc531df97ecfd0d

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 164
Cache-Control: max-age=125856
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 02:59:59 GMT
Etag: "63dfb52b-117"
Expires: Tue, 07 Feb 2023 13:57:35 GMT
Last-Modified: Sun, 05 Feb 2023 13:54:51 GMT
Server: ECS (amb/6BC0)
X-Cache: HIT
Content-Length: 279

delivery.udsbrasil.com.br/public/dinzab/mine.js

38.105.209.111

200 OK

1.6 kB

URL HTTP/1.1
delivery.udsbrasil.com.br/public/dinzab/mine.js
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
Unicode text, UTF-8 text
Size
1.6 kB (1604 bytes)
Hash
f11ee1ccf373dd137b7ad18e4ee2f69e
26baf7db3e340be99ece82b37d294b80c373fd12
71b8a934f8936288d42fe9fd426ff18cbc1fe54070617fd62420025da56b662e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/mine.js HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
Cookie: XSRF-TOKEN=eyJpdiI6InVMekZDYkFTMHpTdnN0SWwrUmlUSkE9PSIsInZhbHVlIjoiUXZjYndRam5ySEdYYWRwTDJQSTJESEVCUkxXMEd2Q1JMY2h6b1Bwa1U2TG1aaGhrT0t5ckVpcThFWU4rcTh3OUg2K3dVaVk0ZnREQ01wTENCRHhWalRKc3Z6TkJ3ekFCa1doRlUwejcvWkhPVTRXbjdMM3gwYjY4RURlV1ZXa28iLCJtYWMiOiJmOGMyZmJmNjMyMjk2MTljYjU1MWQxZjA4MDIxNWFiZmE5ZGRmM2NlZjlmMzA0MGU2OGEwZDM0OTNhYTM3ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRnY20yM2JWR20wazliRldrQThwRVE9PSIsInZhbHVlIjoiQWNxdXRWNE14dUJ3bHB1NGVkNHZsaUxXUlk2TVEyYkJjOUVyWjVqV1krcVhvRkZWWURIRG8zWjg1eS8yYnR1Z2ZhczM4Vkx2ZVdDTk9jVTN5S3hEV0NreEJ1R2YzWjRONVZRQ3BUVUZVODM2Z21JNGRJdEJkL3NQMUdaWk9DWHgiLCJtYWMiOiJhNzdiOTRjMDk1YWUxMmU3MTRlMTczOGEzY2NhNjJlY2YzNWE5MmUyZjA2M2M3YzBhMzBhNTc2YmU5NzdjOTQ1IiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:59:59 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 17 Oct 2022 16:48:22 GMT
Accept-Ranges: bytes
Content-Length: 1604
Keep-Alive: timeout=5, max=100
Content-Type: application/javascript

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
98d6ea6deb8af722f7618d298ef7b408
c8005a6d25b38f3c3af2776495d74ee7d2dbba0f
9f42f5aa67c0a274c3dc4f2a8add9ce44e302e9b7c7a67ccfdc531df97ecfd0d

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 164
Cache-Control: max-age=125856
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 02:59:59 GMT
Etag: "63dfb52b-117"
Expires: Tue, 07 Feb 2023 13:57:35 GMT
Last-Modified: Sun, 05 Feb 2023 13:54:51 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279

delivery.udsbrasil.com.br/public/dinzab/data.js

38.105.209.111

200 OK

12 kB

URL HTTP/1.1
delivery.udsbrasil.com.br/public/dinzab/data.js
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
Unicode text, UTF-8 text, with very long lines (9881)
Size
12 kB (12100 bytes)
Hash
a2b78e86240966cda00a463614e4f3dd
a2606f30f77bb9f235746059db16b0ee8b585c31
55e47db856701715f613de8674bd0c67604cc304514b791bed402866d18c8557

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/data.js HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
Cookie: XSRF-TOKEN=eyJpdiI6InVMekZDYkFTMHpTdnN0SWwrUmlUSkE9PSIsInZhbHVlIjoiUXZjYndRam5ySEdYYWRwTDJQSTJESEVCUkxXMEd2Q1JMY2h6b1Bwa1U2TG1aaGhrT0t5ckVpcThFWU4rcTh3OUg2K3dVaVk0ZnREQ01wTENCRHhWalRKc3Z6TkJ3ekFCa1doRlUwejcvWkhPVTRXbjdMM3gwYjY4RURlV1ZXa28iLCJtYWMiOiJmOGMyZmJmNjMyMjk2MTljYjU1MWQxZjA4MDIxNWFiZmE5ZGRmM2NlZjlmMzA0MGU2OGEwZDM0OTNhYTM3ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRnY20yM2JWR20wazliRldrQThwRVE9PSIsInZhbHVlIjoiQWNxdXRWNE14dUJ3bHB1NGVkNHZsaUxXUlk2TVEyYkJjOUVyWjVqV1krcVhvRkZWWURIRG8zWjg1eS8yYnR1Z2ZhczM4Vkx2ZVdDTk9jVTN5S3hEV0NreEJ1R2YzWjRONVZRQ3BUVUZVODM2Z21JNGRJdEJkL3NQMUdaWk9DWHgiLCJtYWMiOiJhNzdiOTRjMDk1YWUxMmU3MTRlMTczOGEzY2NhNjJlY2YzNWE5MmUyZjA2M2M3YzBhMzBhNTc2YmU5NzdjOTQ1IiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:59:59 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 15:05:50 GMT
Accept-Ranges: bytes
Content-Length: 12100
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript

delivery.udsbrasil.com.br/public/dinzab/newcc.css

38.105.209.111

200 OK

5.2 kB

URL HTTP/1.1
delivery.udsbrasil.com.br/public/dinzab/newcc.css
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
ASCII text
Size
5.2 kB (5211 bytes)
Hash
a8802c7108e75bd512824b11af10a5e7
0af53e81447c67be4d787fea0f6ef8c82008e4ea
6c37a32274d58b55fc113546582236826b279eb6d667ecbf86e73823713da4f9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/newcc.css HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
Cookie: XSRF-TOKEN=eyJpdiI6InVMekZDYkFTMHpTdnN0SWwrUmlUSkE9PSIsInZhbHVlIjoiUXZjYndRam5ySEdYYWRwTDJQSTJESEVCUkxXMEd2Q1JMY2h6b1Bwa1U2TG1aaGhrT0t5ckVpcThFWU4rcTh3OUg2K3dVaVk0ZnREQ01wTENCRHhWalRKc3Z6TkJ3ekFCa1doRlUwejcvWkhPVTRXbjdMM3gwYjY4RURlV1ZXa28iLCJtYWMiOiJmOGMyZmJmNjMyMjk2MTljYjU1MWQxZjA4MDIxNWFiZmE5ZGRmM2NlZjlmMzA0MGU2OGEwZDM0OTNhYTM3ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRnY20yM2JWR20wazliRldrQThwRVE9PSIsInZhbHVlIjoiQWNxdXRWNE14dUJ3bHB1NGVkNHZsaUxXUlk2TVEyYkJjOUVyWjVqV1krcVhvRkZWWURIRG8zWjg1eS8yYnR1Z2ZhczM4Vkx2ZVdDTk9jVTN5S3hEV0NreEJ1R2YzWjRONVZRQ3BUVUZVODM2Z21JNGRJdEJkL3NQMUdaWk9DWHgiLCJtYWMiOiJhNzdiOTRjMDk1YWUxMmU3MTRlMTczOGEzY2NhNjJlY2YzNWE5MmUyZjA2M2M3YzBhMzBhNTc2YmU5NzdjOTQ1IiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:59:59 GMT
Server: Apache
Last-Modified: Thu, 02 Jun 2022 20:41:52 GMT
Accept-Ranges: bytes
Content-Length: 5211
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css

delivery.udsbrasil.com.br/public/dinzab/countrySelect.js

38.105.209.111

200 OK

37 kB

URL HTTP/1.1
delivery.udsbrasil.com.br/public/dinzab/countrySelect.js
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
Unicode text, UTF-8 text, with very long lines (347)
Size
37 kB (36634 bytes)
Hash
ee3d5d4880b5dac09d9ca3c23cdd28da
f95728f89723a079442d67ed6aa38abf8ecab4fd
657baddf2724ae4570fa40c00dddefa3379b5709ac06ceb536f6177a1bfc394f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/countrySelect.js HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
Cookie: XSRF-TOKEN=eyJpdiI6InVMekZDYkFTMHpTdnN0SWwrUmlUSkE9PSIsInZhbHVlIjoiUXZjYndRam5ySEdYYWRwTDJQSTJESEVCUkxXMEd2Q1JMY2h6b1Bwa1U2TG1aaGhrT0t5ckVpcThFWU4rcTh3OUg2K3dVaVk0ZnREQ01wTENCRHhWalRKc3Z6TkJ3ekFCa1doRlUwejcvWkhPVTRXbjdMM3gwYjY4RURlV1ZXa28iLCJtYWMiOiJmOGMyZmJmNjMyMjk2MTljYjU1MWQxZjA4MDIxNWFiZmE5ZGRmM2NlZjlmMzA0MGU2OGEwZDM0OTNhYTM3ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRnY20yM2JWR20wazliRldrQThwRVE9PSIsInZhbHVlIjoiQWNxdXRWNE14dUJ3bHB1NGVkNHZsaUxXUlk2TVEyYkJjOUVyWjVqV1krcVhvRkZWWURIRG8zWjg1eS8yYnR1Z2ZhczM4Vkx2ZVdDTk9jVTN5S3hEV0NreEJ1R2YzWjRONVZRQ3BUVUZVODM2Z21JNGRJdEJkL3NQMUdaWk9DWHgiLCJtYWMiOiJhNzdiOTRjMDk1YWUxMmU3MTRlMTczOGEzY2NhNjJlY2YzNWE5MmUyZjA2M2M3YzBhMzBhNTc2YmU5NzdjOTQ1IiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:59:59 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 15:05:50 GMT
Accept-Ranges: bytes
Content-Length: 36634
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

delivery.udsbrasil.com.br/public/dinzab/card.js

38.105.209.111

200 OK

59 kB

URL HTTP/1.1
delivery.udsbrasil.com.br/public/dinzab/card.js
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
Unicode text, UTF-8 text, with very long lines (51786)
Size
59 kB (58666 bytes)
Hash
30e93a747ba8285615cfbc3643dc1a62
3a55f9d6ac708f519d351ea0b69083457778ec9d
18c4b9b4c27233b541a47300a4ee98239e1f8dec4bbcd9fabb6bdad12ca82025

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/card.js HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
Cookie: XSRF-TOKEN=eyJpdiI6InVMekZDYkFTMHpTdnN0SWwrUmlUSkE9PSIsInZhbHVlIjoiUXZjYndRam5ySEdYYWRwTDJQSTJESEVCUkxXMEd2Q1JMY2h6b1Bwa1U2TG1aaGhrT0t5ckVpcThFWU4rcTh3OUg2K3dVaVk0ZnREQ01wTENCRHhWalRKc3Z6TkJ3ekFCa1doRlUwejcvWkhPVTRXbjdMM3gwYjY4RURlV1ZXa28iLCJtYWMiOiJmOGMyZmJmNjMyMjk2MTljYjU1MWQxZjA4MDIxNWFiZmE5ZGRmM2NlZjlmMzA0MGU2OGEwZDM0OTNhYTM3ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRnY20yM2JWR20wazliRldrQThwRVE9PSIsInZhbHVlIjoiQWNxdXRWNE14dUJ3bHB1NGVkNHZsaUxXUlk2TVEyYkJjOUVyWjVqV1krcVhvRkZWWURIRG8zWjg1eS8yYnR1Z2ZhczM4Vkx2ZVdDTk9jVTN5S3hEV0NreEJ1R2YzWjRONVZRQ3BUVUZVODM2Z21JNGRJdEJkL3NQMUdaWk9DWHgiLCJtYWMiOiJhNzdiOTRjMDk1YWUxMmU3MTRlMTczOGEzY2NhNjJlY2YzNWE5MmUyZjA2M2M3YzBhMzBhNTc2YmU5NzdjOTQ1IiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:59:59 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 31 May 2022 15:05:50 GMT
Accept-Ranges: bytes
Content-Length: 58666
Keep-Alive: timeout=5, max=100
Content-Type: application/javascript

delivery.udsbrasil.com.br/public/dinzab/intlTelInput.js

38.105.209.111

200 OK

89 kB

URL HTTP/1.1
delivery.udsbrasil.com.br/public/dinzab/intlTelInput.js
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
Unicode text, UTF-8 text, with very long lines (9885)
Size
89 kB (89336 bytes)
Hash
9146aa46d1f409004183b86f202c4607
717a6d53527fe31ec1c4eef9022b06e5d4d6f6a5
b188900aaff98a87fc69519ab04437aa735708b4b92f2adcab6937d2a1d42e37

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/intlTelInput.js HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
Cookie: XSRF-TOKEN=eyJpdiI6InVMekZDYkFTMHpTdnN0SWwrUmlUSkE9PSIsInZhbHVlIjoiUXZjYndRam5ySEdYYWRwTDJQSTJESEVCUkxXMEd2Q1JMY2h6b1Bwa1U2TG1aaGhrT0t5ckVpcThFWU4rcTh3OUg2K3dVaVk0ZnREQ01wTENCRHhWalRKc3Z6TkJ3ekFCa1doRlUwejcvWkhPVTRXbjdMM3gwYjY4RURlV1ZXa28iLCJtYWMiOiJmOGMyZmJmNjMyMjk2MTljYjU1MWQxZjA4MDIxNWFiZmE5ZGRmM2NlZjlmMzA0MGU2OGEwZDM0OTNhYTM3ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRnY20yM2JWR20wazliRldrQThwRVE9PSIsInZhbHVlIjoiQWNxdXRWNE14dUJ3bHB1NGVkNHZsaUxXUlk2TVEyYkJjOUVyWjVqV1krcVhvRkZWWURIRG8zWjg1eS8yYnR1Z2ZhczM4Vkx2ZVdDTk9jVTN5S3hEV0NreEJ1R2YzWjRONVZRQ3BUVUZVODM2Z21JNGRJdEJkL3NQMUdaWk9DWHgiLCJtYWMiOiJhNzdiOTRjMDk1YWUxMmU3MTRlMTczOGEzY2NhNjJlY2YzNWE5MmUyZjA2M2M3YzBhMzBhNTc2YmU5NzdjOTQ1IiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:59:59 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 31 May 2022 15:05:50 GMT
Accept-Ranges: bytes
Content-Length: 89336
Keep-Alive: timeout=5, max=100
Content-Type: application/javascript

delivery.udsbrasil.com.br/public/dinzab/font-awesome.min.css

38.105.209.111

200 OK

31 kB

URL HTTP/1.1
delivery.udsbrasil.com.br/public/dinzab/font-awesome.min.css
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
ASCII text, with very long lines (30837)
Size
31 kB (31000 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/font-awesome.min.css HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
Cookie: XSRF-TOKEN=eyJpdiI6InVMekZDYkFTMHpTdnN0SWwrUmlUSkE9PSIsInZhbHVlIjoiUXZjYndRam5ySEdYYWRwTDJQSTJESEVCUkxXMEd2Q1JMY2h6b1Bwa1U2TG1aaGhrT0t5ckVpcThFWU4rcTh3OUg2K3dVaVk0ZnREQ01wTENCRHhWalRKc3Z6TkJ3ekFCa1doRlUwejcvWkhPVTRXbjdMM3gwYjY4RURlV1ZXa28iLCJtYWMiOiJmOGMyZmJmNjMyMjk2MTljYjU1MWQxZjA4MDIxNWFiZmE5ZGRmM2NlZjlmMzA0MGU2OGEwZDM0OTNhYTM3ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRnY20yM2JWR20wazliRldrQThwRVE9PSIsInZhbHVlIjoiQWNxdXRWNE14dUJ3bHB1NGVkNHZsaUxXUlk2TVEyYkJjOUVyWjVqV1krcVhvRkZWWURIRG8zWjg1eS8yYnR1Z2ZhczM4Vkx2ZVdDTk9jVTN5S3hEV0NreEJ1R2YzWjRONVZRQ3BUVUZVODM2Z21JNGRJdEJkL3NQMUdaWk9DWHgiLCJtYWMiOiJhNzdiOTRjMDk1YWUxMmU3MTRlMTczOGEzY2NhNjJlY2YzNWE5MmUyZjA2M2M3YzBhMzBhNTc2YmU5NzdjOTQ1IiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 03:00:00 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 15:05:50 GMT
Accept-Ranges: bytes
Content-Length: 31000
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/css

delivery.udsbrasil.com.br/public/dinzab/intlTelInput.css

38.105.209.111

200 OK

25 kB

URL HTTP/1.1
delivery.udsbrasil.com.br/public/dinzab/intlTelInput.css
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
ASCII text
Size
25 kB (24631 bytes)
Hash
bd1fe63547e380ddfdd79c4cea97cc1e
d5546e0d88b001b6ceb1a06fbf6a47e31214e9de
51198a6581f3fdd8b035268f775b1a6f519ee61b3e2a22da4a6fe2b2647b145b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/intlTelInput.css HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
Cookie: XSRF-TOKEN=eyJpdiI6InVMekZDYkFTMHpTdnN0SWwrUmlUSkE9PSIsInZhbHVlIjoiUXZjYndRam5ySEdYYWRwTDJQSTJESEVCUkxXMEd2Q1JMY2h6b1Bwa1U2TG1aaGhrT0t5ckVpcThFWU4rcTh3OUg2K3dVaVk0ZnREQ01wTENCRHhWalRKc3Z6TkJ3ekFCa1doRlUwejcvWkhPVTRXbjdMM3gwYjY4RURlV1ZXa28iLCJtYWMiOiJmOGMyZmJmNjMyMjk2MTljYjU1MWQxZjA4MDIxNWFiZmE5ZGRmM2NlZjlmMzA0MGU2OGEwZDM0OTNhYTM3ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRnY20yM2JWR20wazliRldrQThwRVE9PSIsInZhbHVlIjoiQWNxdXRWNE14dUJ3bHB1NGVkNHZsaUxXUlk2TVEyYkJjOUVyWjVqV1krcVhvRkZWWURIRG8zWjg1eS8yYnR1Z2ZhczM4Vkx2ZVdDTk9jVTN5S3hEV0NreEJ1R2YzWjRONVZRQ3BUVUZVODM2Z21JNGRJdEJkL3NQMUdaWk9DWHgiLCJtYWMiOiJhNzdiOTRjMDk1YWUxMmU3MTRlMTczOGEzY2NhNjJlY2YzNWE5MmUyZjA2M2M3YzBhMzBhNTc2YmU5NzdjOTQ1IiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 03:00:00 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 15:05:50 GMT
Accept-Ranges: bytes
Content-Length: 24631
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

delivery.udsbrasil.com.br/public/dinzab/app.js

38.105.209.111

200 OK

920 kB

URL HTTP/1.1
delivery.udsbrasil.com.br/public/dinzab/app.js
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
Unicode text, UTF-8 text, with very long lines (7706), with CRLF line terminators
Size
920 kB (920095 bytes)
Hash
508afd6ff9ab52ce8f480d35568038d1
b5d9891100e0dce59cee59b75a098a1ae64c779b
8af18273c1833477cf810c4e3a76f483b6a6064571d25ea7742d8708378c8f09

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/app.js HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
Cookie: XSRF-TOKEN=eyJpdiI6InVMekZDYkFTMHpTdnN0SWwrUmlUSkE9PSIsInZhbHVlIjoiUXZjYndRam5ySEdYYWRwTDJQSTJESEVCUkxXMEd2Q1JMY2h6b1Bwa1U2TG1aaGhrT0t5ckVpcThFWU4rcTh3OUg2K3dVaVk0ZnREQ01wTENCRHhWalRKc3Z6TkJ3ekFCa1doRlUwejcvWkhPVTRXbjdMM3gwYjY4RURlV1ZXa28iLCJtYWMiOiJmOGMyZmJmNjMyMjk2MTljYjU1MWQxZjA4MDIxNWFiZmE5ZGRmM2NlZjlmMzA0MGU2OGEwZDM0OTNhYTM3ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRnY20yM2JWR20wazliRldrQThwRVE9PSIsInZhbHVlIjoiQWNxdXRWNE14dUJ3bHB1NGVkNHZsaUxXUlk2TVEyYkJjOUVyWjVqV1krcVhvRkZWWURIRG8zWjg1eS8yYnR1Z2ZhczM4Vkx2ZVdDTk9jVTN5S3hEV0NreEJ1R2YzWjRONVZRQ3BUVUZVODM2Z21JNGRJdEJkL3NQMUdaWk9DWHgiLCJtYWMiOiJhNzdiOTRjMDk1YWUxMmU3MTRlMTczOGEzY2NhNjJlY2YzNWE5MmUyZjA2M2M3YzBhMzBhNTc2YmU5NzdjOTQ1IiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:59:59 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 31 May 2022 15:05:50 GMT
Accept-Ranges: bytes
Content-Length: 920095
Keep-Alive: timeout=5, max=100
Content-Type: application/javascript

delivery.udsbrasil.com.br/public/dinzab/app.css

38.105.209.111

200 OK

914 kB

URL HTTP/1.1
delivery.udsbrasil.com.br/public/dinzab/app.css
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
assembler source, ASCII text
Size
914 kB (913520 bytes)
Hash
74d0401d2b753a90be1d872aaa6e94b4
386f08a79bdc853e8a81585efcfc35ca90a49687
0762226aa4722b7c5349c825388089b0e3f8cdde6dd5dbb5f002d4fb014f568f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/app.css HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
Cookie: XSRF-TOKEN=eyJpdiI6InVMekZDYkFTMHpTdnN0SWwrUmlUSkE9PSIsInZhbHVlIjoiUXZjYndRam5ySEdYYWRwTDJQSTJESEVCUkxXMEd2Q1JMY2h6b1Bwa1U2TG1aaGhrT0t5ckVpcThFWU4rcTh3OUg2K3dVaVk0ZnREQ01wTENCRHhWalRKc3Z6TkJ3ekFCa1doRlUwejcvWkhPVTRXbjdMM3gwYjY4RURlV1ZXa28iLCJtYWMiOiJmOGMyZmJmNjMyMjk2MTljYjU1MWQxZjA4MDIxNWFiZmE5ZGRmM2NlZjlmMzA0MGU2OGEwZDM0OTNhYTM3ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRnY20yM2JWR20wazliRldrQThwRVE9PSIsInZhbHVlIjoiQWNxdXRWNE14dUJ3bHB1NGVkNHZsaUxXUlk2TVEyYkJjOUVyWjVqV1krcVhvRkZWWURIRG8zWjg1eS8yYnR1Z2ZhczM4Vkx2ZVdDTk9jVTN5S3hEV0NreEJ1R2YzWjRONVZRQ3BUVUZVODM2Z21JNGRJdEJkL3NQMUdaWk9DWHgiLCJtYWMiOiJhNzdiOTRjMDk1YWUxMmU3MTRlMTczOGEzY2NhNjJlY2YzNWE5MmUyZjA2M2M3YzBhMzBhNTc2YmU5NzdjOTQ1IiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 02:59:59 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 03 Jun 2022 01:04:20 GMT
Accept-Ranges: bytes
Content-Length: 913520
Keep-Alive: timeout=5, max=100
Content-Type: text/css

delivery.udsbrasil.com.br/public/dinzab/logo.png

38.105.209.111

200 OK

2.0 kB

URL HTTP/1.1
delivery.udsbrasil.com.br/public/dinzab/logo.png
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
PNG image data, 214 x 20, 8-bit/color RGBA, non-interlaced\012- data
Size
2.0 kB (1998 bytes)
Hash
5d14ab93691604e826e1319d53599eb9
78724360e9d25da584445b851e37bca05abe6b85
3f0c62b5ccdcdbf3b3ae3885f1e6959e2d937eba9b29dea9a6bdb98788041756

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/logo.png HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
Cookie: XSRF-TOKEN=eyJpdiI6InVMekZDYkFTMHpTdnN0SWwrUmlUSkE9PSIsInZhbHVlIjoiUXZjYndRam5ySEdYYWRwTDJQSTJESEVCUkxXMEd2Q1JMY2h6b1Bwa1U2TG1aaGhrT0t5ckVpcThFWU4rcTh3OUg2K3dVaVk0ZnREQ01wTENCRHhWalRKc3Z6TkJ3ekFCa1doRlUwejcvWkhPVTRXbjdMM3gwYjY4RURlV1ZXa28iLCJtYWMiOiJmOGMyZmJmNjMyMjk2MTljYjU1MWQxZjA4MDIxNWFiZmE5ZGRmM2NlZjlmMzA0MGU2OGEwZDM0OTNhYTM3ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRnY20yM2JWR20wazliRldrQThwRVE9PSIsInZhbHVlIjoiQWNxdXRWNE14dUJ3bHB1NGVkNHZsaUxXUlk2TVEyYkJjOUVyWjVqV1krcVhvRkZWWURIRG8zWjg1eS8yYnR1Z2ZhczM4Vkx2ZVdDTk9jVTN5S3hEV0NreEJ1R2YzWjRONVZRQ3BUVUZVODM2Z21JNGRJdEJkL3NQMUdaWk9DWHgiLCJtYWMiOiJhNzdiOTRjMDk1YWUxMmU3MTRlMTczOGEzY2NhNjJlY2YzNWE5MmUyZjA2M2M3YzBhMzBhNTc2YmU5NzdjOTQ1IiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 03:00:00 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 15:05:50 GMT
Accept-Ranges: bytes
Content-Length: 1998
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

delivery.udsbrasil.com.br/public/dinzab/flagscountry.png

38.105.209.111

200 OK

66 kB

URL HTTP/1.1
delivery.udsbrasil.com.br/public/dinzab/flagscountry.png
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
PNG image data, 5630 x 15, 8-bit/color RGBA, non-interlaced\012- data
Size
66 kB (65960 bytes)
Hash
ae33acae404631e997ef8d91dae08ccd
19fae9a6aa4bb419eba378b0d0573906dc1be38a
38025784bedeb5e4cae496b131c85cabbd95ae0b1c0a3c9d9cb474d7262db04b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/flagscountry.png HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
Cookie: XSRF-TOKEN=eyJpdiI6InVMekZDYkFTMHpTdnN0SWwrUmlUSkE9PSIsInZhbHVlIjoiUXZjYndRam5ySEdYYWRwTDJQSTJESEVCUkxXMEd2Q1JMY2h6b1Bwa1U2TG1aaGhrT0t5ckVpcThFWU4rcTh3OUg2K3dVaVk0ZnREQ01wTENCRHhWalRKc3Z6TkJ3ekFCa1doRlUwejcvWkhPVTRXbjdMM3gwYjY4RURlV1ZXa28iLCJtYWMiOiJmOGMyZmJmNjMyMjk2MTljYjU1MWQxZjA4MDIxNWFiZmE5ZGRmM2NlZjlmMzA0MGU2OGEwZDM0OTNhYTM3ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRnY20yM2JWR20wazliRldrQThwRVE9PSIsInZhbHVlIjoiQWNxdXRWNE14dUJ3bHB1NGVkNHZsaUxXUlk2TVEyYkJjOUVyWjVqV1krcVhvRkZWWURIRG8zWjg1eS8yYnR1Z2ZhczM4Vkx2ZVdDTk9jVTN5S3hEV0NreEJ1R2YzWjRONVZRQ3BUVUZVODM2Z21JNGRJdEJkL3NQMUdaWk9DWHgiLCJtYWMiOiJhNzdiOTRjMDk1YWUxMmU3MTRlMTczOGEzY2NhNjJlY2YzNWE5MmUyZjA2M2M3YzBhMzBhNTc2YmU5NzdjOTQ1IiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 03:00:01 GMT
Server: Apache
Last-Modified: Thu, 23 Sep 2021 00:06:48 GMT
Accept-Ranges: bytes
Content-Length: 65960
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false

3.227.115.115

101 Switching Protocols

0 B

URL HTTP/1.1
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
IP
3.227.115.115:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false HTTP/1.1
Host: ws-mt1.pusher.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Sec-WebSocket-Version: 13
Origin: http://delivery.udsbrasil.com.br
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aAXp+3DUX+v/qjw83BCH0g==
Connection: keep-alive, Upgrade
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Date: Mon, 06 Feb 2023 03:00:01 GMT
Connection: upgrade
Server: nginx/1.17.7
Upgrade: websocket
Sec-WebSocket-Accept: AR41sjXsLZJJ+bt6Am+kyAwcG7w=

delivery.udsbrasil.com.br/public/dinzab/loading.gif

38.105.209.111

200 OK

18 kB

URL HTTP/1.1
delivery.udsbrasil.com.br/public/dinzab/loading.gif
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
GIF image data, version 89a, 200 x 103\012- data
Size
18 kB (17585 bytes)
Hash
f3ffb13cf88b13ec557e6149371b361d
3c72f0855b4bd6e3b45675a5e8b08c8fb7a98f49
ce6a239fde88d8fb01c7a10d6f7b27d1bc23f5462d02f5ebb4927479fa32a302

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/loading.gif HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
Cookie: XSRF-TOKEN=eyJpdiI6InVMekZDYkFTMHpTdnN0SWwrUmlUSkE9PSIsInZhbHVlIjoiUXZjYndRam5ySEdYYWRwTDJQSTJESEVCUkxXMEd2Q1JMY2h6b1Bwa1U2TG1aaGhrT0t5ckVpcThFWU4rcTh3OUg2K3dVaVk0ZnREQ01wTENCRHhWalRKc3Z6TkJ3ekFCa1doRlUwejcvWkhPVTRXbjdMM3gwYjY4RURlV1ZXa28iLCJtYWMiOiJmOGMyZmJmNjMyMjk2MTljYjU1MWQxZjA4MDIxNWFiZmE5ZGRmM2NlZjlmMzA0MGU2OGEwZDM0OTNhYTM3ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRnY20yM2JWR20wazliRldrQThwRVE9PSIsInZhbHVlIjoiQWNxdXRWNE14dUJ3bHB1NGVkNHZsaUxXUlk2TVEyYkJjOUVyWjVqV1krcVhvRkZWWURIRG8zWjg1eS8yYnR1Z2ZhczM4Vkx2ZVdDTk9jVTN5S3hEV0NreEJ1R2YzWjRONVZRQ3BUVUZVODM2Z21JNGRJdEJkL3NQMUdaWk9DWHgiLCJtYWMiOiJhNzdiOTRjMDk1YWUxMmU3MTRlMTczOGEzY2NhNjJlY2YzNWE5MmUyZjA2M2M3YzBhMzBhNTc2YmU5NzdjOTQ1IiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 03:00:01 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 15:05:50 GMT
Accept-Ranges: bytes
Content-Length: 17585
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/gif

ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false

3.227.115.115

101 Switching Protocols

0 B

URL HTTP/1.1
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
IP
3.227.115.115:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false HTTP/1.1
Host: ws-mt1.pusher.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Sec-WebSocket-Version: 13
Origin: http://delivery.udsbrasil.com.br
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: M6qp5QtjYUdQAs0kodIu+w==
Connection: keep-alive, Upgrade
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Date: Mon, 06 Feb 2023 03:00:01 GMT
Connection: upgrade
Server: nginx/1.17.7
Upgrade: websocket
Sec-WebSocket-Accept: XM6aceO1wgaTz528qxmanghXSOs=

delivery.udsbrasil.com.br/public/dinzab/favicon.gif

38.105.209.111

200 OK

2.2 kB

URL HTTP/1.1
delivery.udsbrasil.com.br/public/dinzab/favicon.gif
IP
38.105.209.111:0
ASN
#40021 CONTABO

File type
MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel\012- data
Size
2.2 kB (2238 bytes)
Hash
a6f1af8e79a11829ba9a66474b06bb97
d99e3ec7747c865033a8dfad43c9f49634404bc1
b0dbd00f3650fa6b931e678a9d8f79a405d23c7adf111ab91b1a01a0e7109807

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /public/dinzab/favicon.gif HTTP/1.1
Host: delivery.udsbrasil.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/public/nfLtqh5Bww0L0j77GNF5gYXzYe5tebgx
Cookie: XSRF-TOKEN=eyJpdiI6InVMekZDYkFTMHpTdnN0SWwrUmlUSkE9PSIsInZhbHVlIjoiUXZjYndRam5ySEdYYWRwTDJQSTJESEVCUkxXMEd2Q1JMY2h6b1Bwa1U2TG1aaGhrT0t5ckVpcThFWU4rcTh3OUg2K3dVaVk0ZnREQ01wTENCRHhWalRKc3Z6TkJ3ekFCa1doRlUwejcvWkhPVTRXbjdMM3gwYjY4RURlV1ZXa28iLCJtYWMiOiJmOGMyZmJmNjMyMjk2MTljYjU1MWQxZjA4MDIxNWFiZmE5ZGRmM2NlZjlmMzA0MGU2OGEwZDM0OTNhYTM3ZDhiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRnY20yM2JWR20wazliRldrQThwRVE9PSIsInZhbHVlIjoiQWNxdXRWNE14dUJ3bHB1NGVkNHZsaUxXUlk2TVEyYkJjOUVyWjVqV1krcVhvRkZWWURIRG8zWjg1eS8yYnR1Z2ZhczM4Vkx2ZVdDTk9jVTN5S3hEV0NreEJ1R2YzWjRONVZRQ3BUVUZVODM2Z21JNGRJdEJkL3NQMUdaWk9DWHgiLCJtYWMiOiJhNzdiOTRjMDk1YWUxMmU3MTRlMTczOGEzY2NhNjJlY2YzNWE5MmUyZjA2M2M3YzBhMzBhNTc2YmU5NzdjOTQ1IiwidGFnIjoiIn0%3D

HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 03:00:02 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 15:05:50 GMT
Accept-Ranges: bytes
Content-Length: 2238
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/gif

cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js

104.16.87.20

200 OK

0 B

URL HTTP/2
cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js
IP
104.16.87.20:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /gh/killbot-org/Killbot-JS@latest/dist/main.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 06 Feb 2023 02:59:56 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"a7c-kmbumraAtj1yBda8Zbl2dRPRYqU"
x-served-by: cache-fra-eddf8230107-FRA, cache-jnb7025-JNB
x-cache: HIT, MISS
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 1937
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iD52MKSktLyjaFsP6vRiG9Cz0pP6RR%2FFdrv4ofUIOmpwNSMDr9y4pRu0fkUZyDuhlp10Lv3%2BJL2s2eeEL8qDuA6WtAn1D%2F6gVlqZtNlG%2Bi8hAP3mjFCnHlywhu7pm1tp8h4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7950a1f72cb70b41-OSL
content-encoding: br
X-Firefox-Spdy: h2

cdn.lr-in.com/logger-1.min.js

104.21.234.145

200 OK

0 B

URL HTTP/2
cdn.lr-in.com/logger-1.min.js
IP
104.21.234.145:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /logger-1.min.js HTTP/1.1
Host: cdn.lr-in.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://delivery.udsbrasil.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 06 Feb 2023 02:59:59 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
cross-origin-resource-policy: cross-origin
etag: W/"ca4604512cf718b9fcdae3355a2e92e7391bcdb61a2acf57f4888dc45aeceb0f"
last-modified: Fri, 03 Feb 2023 22:30:11 GMT
strict-transport-security: max-age=31556926
x-served-by: cache-ams21022-AMS
x-cache: HIT
x-cache-hits: 1
x-timer: S1675463702.397926,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 285
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lgygFKysAXkRkUho8wAoSHWJb8hAQVd2ZHJDZQI6pV6fcmFok3SFdiEWJEyt1OxliyHAFgc1bqU7eY7l2x%2B7K6cOQnC8xVhbpJzfKPHQUwxLgA4zcd8H9LJVWa7E%2Bjde"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7950a20b1eb4dcc7-LHR
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (18)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML