Report - denizbankonlinebankam-com.net/

Report Overview

Submitted URL
denizbankonlinebankam-com.net/
IP
172.105.111.160
ASN
#63949 Linode, LLC
Submitted
2022-12-02 16:26:35
Access
Website Title
Final URL
Tags
None
urlquery detections
Phishing - Deniz Bank
Phishing - Deniz Bank

Detections

urlquery
32
Network Intrusion Detection
0
Threat Detection Systems
48

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	52.24.78.9
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.8 kB	65 kB	34.120.237.76
denizbankonlinebankam-com.net	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	7.3 kB	998 kB	172.105.111.160
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.3 kB	23.36.77.32
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.6 kB	93.184.220.29
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-12-02	medium	denizbankonlinebankam-com.net/	Deniz Bank
2022-12-02	medium	denizbankonlinebankam-com.net/	Deniz Bank
2022-12-02	medium	denizbankonlinebankam-com.net/	Deniz Bank
2022-12-02	medium	denizbankonlinebankam-com.net/	Deniz Bank
2022-12-02	medium	denizbankonlinebankam-com.net/	Deniz Bank
2022-12-02	medium	denizbankonlinebankam-com.net/	Deniz Bank
2022-12-02	medium	denizbankonlinebankam-com.net/	Deniz Bank
2022-12-02	medium	denizbankonlinebankam-com.net/	Deniz Bank
2022-12-02	medium	denizbankonlinebankam-com.net/	Deniz Bank
2022-12-02	medium	denizbankonlinebankam-com.net/	Deniz Bank
2022-12-02	medium	denizbankonlinebankam-com.net/	Deniz Bank
2022-12-02	medium	denizbankonlinebankam-com.net/	Deniz Bank
2022-12-02	medium	denizbankonlinebankam-com.net/	Deniz Bank
2022-12-02	medium	denizbankonlinebankam-com.net/	Deniz Bank
2022-12-02	medium	denizbankonlinebankam-com.net/	Deniz Bank

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-02	medium	denizbankonlinebankam-com.net/	Phishing
2022-12-02	medium	denizbankonlinebankam-com.net/assets/img/logo-light.svg	Phishing
2022-12-02	medium	denizbankonlinebankam-com.net/assets/js/scripts.4be75bac532d103e7057.js	Phishing
2022-12-02	medium	denizbankonlinebankam-com.net/assets/img/world.svg	Phishing
2022-12-02	medium	denizbankonlinebankam-com.net/assets/img/login-footer-logo.svg	Phishing
2022-12-02	medium	denizbankonlinebankam-com.net/assets/font/opensans-regular-webfont.a66a53e7f788b1ab7e41.woff2	Phishing
2022-12-02	medium	denizbankonlinebankam-com.net/assets/font/opensans-semibold-webfont.1045337df148fc781940.woff2	Phishing
2022-12-02	medium	denizbankonlinebankam-com.net/assets/font/opensans-bold-webfont.7b013a3110831768093f.woff2	Phishing
2022-12-02	medium	denizbankonlinebankam-com.net/assets/font/icomoon.6ed1082a54a66252e299.woff2?cujylf	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	denizbankonlinebankam-com.net/assets/js/scripts.4be75bac532d103e7057.js	1.2 MB	2023-03-08	2024-01-15
Pretty URL denizbankonlinebankam-com.net/assets/js/scripts.4be75bac532d103e7057.js IP 172.105.111.160 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 09:25:08 Last Seen2024-01-15 03:31:11 Times Seen22 Hash a4e4f1fa08bcb6436bc4289530646a04 2b042c5368233c10558f947c48654947ad619bbb 7b2aca03556dc2d03cb0a6feee7d88c62537f84b829c723c5877b8e19415665a Loading...

	denizbankonlinebankam-com.net/	4.2 kB	2023-03-08	2024-01-15
Pretty URL denizbankonlinebankam-com.net/ IP 172.105.111.160 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:40:33 Last Seen2024-01-15 03:31:11 Times Seen16 Hash 67c2cccc8bcd71939a3515d5977702e0 7e116c4228f0b1fefd4d3b9a2db76ae0305b38e8 c6b2c74a177858498faf2cf8b5d51afdc4c162ef1428992db6421acf88646a4c Loading...

	denizbankonlinebankam-com.net/	4.2 kB	2023-03-08	2024-01-15
Pretty URL denizbankonlinebankam-com.net/ IP 172.105.111.160 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:40:33 Last Seen2024-01-15 03:31:11 Times Seen16 Hash 33f51726c1718b640d811a60cc70344d f98304a418d4aea8ef27b50e00bbec76aae7917f 09e1927249f060ec87b7bbb4b1ad518f8dc80bf45498f55856a24a7974ab9abd Loading...

	denizbankonlinebankam-com.net/	988 B	2023-03-08	2024-01-15
Pretty URL denizbankonlinebankam-com.net/ IP 172.105.111.160 ASN #63949 Linode, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:40:33 Last Seen2024-01-15 03:31:11 Times Seen16 Hash 9822a5aad9724c5e7e0c5de28dc78e93 ed9d815293cae3da110a7f06c765877dc473386a 9d10eb8543b1650e5405d19f9b83aebd43f3fcbbbb869e375d307b573b6b5893 Loading...

HTTP Transactions (39)

URL IP Response Size

denizbankonlinebankam-com.net/

172.105.111.160

200 OK

6.8 kB

URL HTTP/1.1
denizbankonlinebankam-com.net/
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (381), with CRLF line terminators
Size
6.8 kB (6826 bytes)
Hash
a31e1d1f8b6f38b7794a444cbb020ffd
b8f079046e90fd790bb9a78da554122314edcfc3
3157d30d7deeaee968940868c4fe7afc969729e7ed8953d66c6c27d8dffe4faf

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Deniz Bank
urlquery		Phishing - Deniz Bank
openphish	Deniz Bank
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
content-length: 6826
content-encoding: gzip
vary: Accept-Encoding,User-Agent
date: Fri, 02 Dec 2022 16:26:23 GMT
server: LiteSpeed

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10222
Expires: Fri, 02 Dec 2022 19:16:45 GMT
Date: Fri, 02 Dec 2022 16:26:23 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
7439fb99a444b66db1e68ffbfaa38451
4b7742d7956485906f1c392c478515ff89a46184
636327ce88f733e5a1d39af212f97242717a39ce20edaef330fafea238e3a309

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5069
Cache-Control: max-age=156561
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:26:23 GMT
Etag: "6389d3f3-1d7"
Expires: Sun, 04 Dec 2022 11:55:44 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:15 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8153
Expires: Fri, 02 Dec 2022 18:42:16 GMT
Date: Fri, 02 Dec 2022 16:26:23 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 16:19:57 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 386
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: xvWrHl1pQqu6uzzxsIegjfsyXz5yBzUWTfdxGK3C72E3iR1AXfe0se8zmRqPjRb0I+lmQXzMPJo=
x-amz-request-id: NJWB34HVMFXSC1F8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 15:46:45 GMT
age: 2378
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 16:26:23 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 16:08:57 GMT
cache-control: public,max-age=3600
age: 1047
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

denizbankonlinebankam-com.net/assets/css/styles.0fca6d11334e40b52585.css

172.105.111.160

200 OK

114 kB

URL HTTP/1.1
denizbankonlinebankam-com.net/assets/css/styles.0fca6d11334e40b52585.css
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type
ASCII text, with very long lines (678), with CRLF line terminators
Size
114 kB (114373 bytes)
Hash
5ef392c44843554f903eeb3da8b2b43b
43fba479957e3e5d9a469a585accae87b3aecf2e
24a1dc253fae8427ac59afa93da3d84d67a5a6721905aa5b7e0c4a2617a40280

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Deniz Bank
urlquery		Phishing - Deniz Bank
openphish	Deniz Bank

HTTP Headers

GET /assets/css/styles.0fca6d11334e40b52585.css HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 16:26:24 GMT
content-type: text/css
last-modified: Sun, 30 Oct 2022 04:25:28 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 114373
date: Fri, 02 Dec 2022 16:26:24 GMT
server: LiteSpeed

denizbankonlinebankam-com.net/assets/img/logo-light.svg

172.105.111.160

200 OK

8.9 kB

URL HTTP/1.1
denizbankonlinebankam-com.net/assets/img/logo-light.svg
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1718), with CRLF line terminators
Size
8.9 kB (8889 bytes)
Hash
c50f1a1ac884061d0233dc0830eeb333
0a7c10606e47bbd82052a06c0593d59e2d499f16
b735b682d389d57f440f92d49b93fae3954bedecfef58aabe7961fbccd37eab2

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Deniz Bank
urlquery		Phishing - Deniz Bank
openphish	Deniz Bank
fortinet	Phishing

HTTP Headers

GET /assets/img/logo-light.svg HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 16:26:24 GMT
content-type: image/svg+xml
last-modified: Sun, 30 Oct 2022 04:16:46 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 8889
date: Fri, 02 Dec 2022 16:26:24 GMT
server: LiteSpeed

denizbankonlinebankam-com.net/assets/js/scripts.4be75bac532d103e7057.js

172.105.111.160

200 OK

343 kB

URL HTTP/1.1
denizbankonlinebankam-com.net/assets/js/scripts.4be75bac532d103e7057.js
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type
Unicode text, UTF-8 text, with very long lines (65448)
Size
343 kB (343315 bytes)
Hash
97a0b88152065f3a1082c91e3d241fd9
30dc03dcebb5fd2c1d0514f5c52b8b3cbf221f39
5d7a23f26ce6539b387a25acc217db19c43676c94d052cd0ce8200665f53e452

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Deniz Bank
urlquery		Phishing - Deniz Bank
openphish	Deniz Bank
fortinet	Phishing

HTTP Headers

GET /assets/js/scripts.4be75bac532d103e7057.js HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 16:26:24 GMT
content-type: application/javascript
last-modified: Tue, 01 Nov 2022 09:31:22 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 343315
date: Fri, 02 Dec 2022 16:26:24 GMT
server: LiteSpeed

denizbankonlinebankam-com.net/assets/img/world.svg

172.105.111.160

200 OK

697 B

URL HTTP/1.1
denizbankonlinebankam-com.net/assets/img/world.svg
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1206), with CRLF line terminators
Size
697 B (697 bytes)
Hash
6aa75cfb5b8dbdee39b8a8784f9d52c6
9edd7412fe1025004b53b192c1b7e7308e66570f
cd4206d2de6320faf5c6ce3ec401f65d1c207ac0976078dc09e28a31357b82a8

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Deniz Bank
urlquery		Phishing - Deniz Bank
openphish	Deniz Bank
fortinet	Phishing

HTTP Headers

GET /assets/img/world.svg HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 16:26:24 GMT
content-type: image/svg+xml
last-modified: Sun, 30 Oct 2022 04:15:48 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 697
date: Fri, 02 Dec 2022 16:26:24 GMT
server: LiteSpeed

denizbankonlinebankam-com.net/assets/img/login-footer-logo.svg

172.105.111.160

200 OK

1.2 kB

URL HTTP/1.1
denizbankonlinebankam-com.net/assets/img/login-footer-logo.svg
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1863), with CRLF line terminators
Size
1.2 kB (1178 bytes)
Hash
7374bb584c51f152fa6c5cfc2a8f6052
0c3e21a743d035582343f2301509058e8b771c5d
28de3bf31be49d55d2000de18121c69bfefa41465633fa6e9d90517957ff3a85

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Deniz Bank
urlquery		Phishing - Deniz Bank
openphish	Deniz Bank
fortinet	Phishing

HTTP Headers

GET /assets/img/login-footer-logo.svg HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 16:26:24 GMT
content-type: image/svg+xml
last-modified: Sun, 30 Oct 2022 04:12:52 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 1178
date: Fri, 02 Dec 2022 16:26:24 GMT
server: LiteSpeed

denizbankonlinebankam-com.net/assets/img/qrPhoto.jpg

172.105.111.160

200 OK

12 kB

URL HTTP/1.1
denizbankonlinebankam-com.net/assets/img/qrPhoto.jpg
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3\012- data
Size
12 kB (11916 bytes)
Hash
ef3712705a4047857e4f67b895d75bf1
d4bd05acd8bfb7d4a44dc9c36267ff799414cf23
cf33092752054c7e93201ebd484c7e47a194635120a46cc3786b4107195edf1e

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Deniz Bank
urlquery		Phishing - Deniz Bank
openphish	Deniz Bank

HTTP Headers

GET /assets/img/qrPhoto.jpg HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 16:26:24 GMT
content-type: image/jpeg
last-modified: Sun, 30 Oct 2022 04:12:58 GMT
accept-ranges: bytes
content-length: 11916
date: Fri, 02 Dec 2022 16:26:24 GMT
server: LiteSpeed
vary: User-Agent

denizbankonlinebankam-com.net/assets/img/enbd.png

172.105.111.160

200 OK

3.8 kB

URL HTTP/1.1
denizbankonlinebankam-com.net/assets/img/enbd.png
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type
PNG image data, 186 x 72, 8-bit/color RGBA, non-interlaced\012- data
Size
3.8 kB (3806 bytes)
Hash
58cf11a4b5f8ebdc29ec2e7b787c8d69
cd2686b1f04cfa4afb69b228fd7177d65e907d32
1b74331ad061c583ad54561f95596a8481b95d863a431fc4daf3a9ee7d151975

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Deniz Bank
urlquery		Phishing - Deniz Bank
openphish	Deniz Bank

HTTP Headers

GET /assets/img/enbd.png HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 16:26:24 GMT
content-type: image/png
last-modified: Sun, 30 Oct 2022 04:12:48 GMT
accept-ranges: bytes
content-length: 3806
date: Fri, 02 Dec 2022 16:26:24 GMT
server: LiteSpeed
vary: User-Agent

denizbankonlinebankam-com.net/assets/font/opensans-regular-webfont.a66a53e7f788b1ab7e41.woff2

172.105.111.160

200 OK

13 kB

URL HTTP/1.1
denizbankonlinebankam-com.net/assets/font/opensans-regular-webfont.a66a53e7f788b1ab7e41.woff2
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type
Web Open Font Format (Version 2), TrueType, length 12552, version 1.0\012- data
Size
13 kB (12552 bytes)
Hash
a66a53e7f788b1ab7e41429e94d5fecf
818f0d5a1110b0ae7c58104a51cde30f088fac84
be3979aa66ab98b74f4c323b1c194cba444de65913e489d5786e0c7fd8f310c0

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Deniz Bank
urlquery		Phishing - Deniz Bank
openphish	Deniz Bank
fortinet	Phishing

HTTP Headers

GET /assets/font/opensans-regular-webfont.a66a53e7f788b1ab7e41.woff2 HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/assets/css/styles.0fca6d11334e40b52585.css

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 16:26:24 GMT
content-type: font/woff2
last-modified: Sun, 30 Oct 2022 04:23:16 GMT
accept-ranges: bytes
content-length: 12552
date: Fri, 02 Dec 2022 16:26:24 GMT
server: LiteSpeed
vary: User-Agent

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
7f1f8fc556d1f7e0aea3e1208ee2fd1c
09c341a56ff876479cfc8a0505a5fef4a5d110f1
65adcf58887bcc23f73379f74ab19a61cfbb93285c95c64b44a6716eeacc1482

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5059
Cache-Control: max-age=151489
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:26:24 GMT
Etag: "6389c02e-1d7"
Expires: Sun, 04 Dec 2022 10:31:13 GMT
Last-Modified: Fri, 02 Dec 2022 09:06:54 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

denizbankonlinebankam-com.net/assets/font/opensans-semibold-webfont.1045337df148fc781940.woff2

172.105.111.160

200 OK

13 kB

URL HTTP/1.1
denizbankonlinebankam-com.net/assets/font/opensans-semibold-webfont.1045337df148fc781940.woff2
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type
Web Open Font Format (Version 2), TrueType, length 12676, version 1.0\012- data
Size
13 kB (12676 bytes)
Hash
1045337df148fc781940fc87f29361ba
0a68e64e217353efae512771a88ad6b0449db886
a085c2f1e7df8cdded779fa68b0ce2e0d31d3352ed8d8238cb540f35fa20cf0d

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Deniz Bank
urlquery		Phishing - Deniz Bank
openphish	Deniz Bank
fortinet	Phishing

HTTP Headers

GET /assets/font/opensans-semibold-webfont.1045337df148fc781940.woff2 HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/assets/css/styles.0fca6d11334e40b52585.css

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 16:26:24 GMT
content-type: font/woff2
last-modified: Sun, 30 Oct 2022 04:23:50 GMT
accept-ranges: bytes
content-length: 12676
date: Fri, 02 Dec 2022 16:26:24 GMT
server: LiteSpeed
vary: User-Agent

denizbankonlinebankam-com.net/assets/font/opensans-bold-webfont.7b013a3110831768093f.woff2

172.105.111.160

200 OK

13 kB

URL HTTP/1.1
denizbankonlinebankam-com.net/assets/font/opensans-bold-webfont.7b013a3110831768093f.woff2
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type
Web Open Font Format (Version 2), TrueType, length 12776, version 1.0\012- data
Size
13 kB (12776 bytes)
Hash
7b013a3110831768093ffa40218ef434
e32cf89ddb775dff039fa59c84fbd6f5d350ceac
b582e5e36135cfe697ec9cfbb06ff7407a7d89a9e4a1287cfdd905cc3f9669e5

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Deniz Bank
urlquery		Phishing - Deniz Bank
openphish	Deniz Bank
fortinet	Phishing

HTTP Headers

GET /assets/font/opensans-bold-webfont.7b013a3110831768093f.woff2 HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/assets/css/styles.0fca6d11334e40b52585.css

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 16:26:24 GMT
content-type: font/woff2
last-modified: Sun, 30 Oct 2022 04:23:56 GMT
accept-ranges: bytes
content-length: 12776
date: Fri, 02 Dec 2022 16:26:24 GMT
server: LiteSpeed
vary: User-Agent

denizbankonlinebankam-com.net/assets/img/loading.gif

172.105.111.160

200 OK

38 kB

URL HTTP/1.1
denizbankonlinebankam-com.net/assets/img/loading.gif
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type
GIF image data, version 89a, 96 x 96\012- data
Size
38 kB (37840 bytes)
Hash
a5ac552d6a23421d7697f897729a2def
836cb1e7a61967b762898a3ce32e64ca7713119c
4d54a976b6fa75c73ec219bf5ca96537d46c387c138842fe3d76be0d9e111e0a

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Deniz Bank
urlquery		Phishing - Deniz Bank
openphish	Deniz Bank

HTTP Headers

GET /assets/img/loading.gif HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 16:26:24 GMT
content-type: image/gif
last-modified: Sun, 30 Oct 2022 04:16:30 GMT
accept-ranges: bytes
content-length: 37840
date: Fri, 02 Dec 2022 16:26:24 GMT
server: LiteSpeed
vary: User-Agent

denizbankonlinebankam-com.net/assets/font/icomoon.6ed1082a54a66252e299.woff2?cujylf

172.105.111.160

200 OK

46 kB

URL HTTP/1.1
denizbankonlinebankam-com.net/assets/font/icomoon.6ed1082a54a66252e299.woff2?cujylf
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type
Web Open Font Format (Version 2), TrueType, length 45832, version 1.0\012- data
Size
46 kB (45832 bytes)
Hash
6ed1082a54a66252e299dca90845546b
ce49c739245d09ce02845d0a9ea8885db7eaba85
3b8441a0eea69959d7a96ae3f548dcac1a7f8646facfffda3f5dc71c6a4d3d46

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Deniz Bank
urlquery		Phishing - Deniz Bank
openphish	Deniz Bank
fortinet	Phishing

HTTP Headers

GET /assets/font/icomoon.6ed1082a54a66252e299.woff2?cujylf HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/assets/css/styles.0fca6d11334e40b52585.css

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 16:26:24 GMT
content-type: font/woff2
last-modified: Sun, 30 Oct 2022 04:25:38 GMT
accept-ranges: bytes
content-length: 45832
date: Fri, 02 Dec 2022 16:26:24 GMT
server: LiteSpeed
vary: User-Agent

denizbankonlinebankam-com.net/veri.php?ip=91.90.42.154

172.105.111.160

200 OK

0 B

URL HTTP/1.1
denizbankonlinebankam-com.net/veri.php?ip=91.90.42.154
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /veri.php?ip=91.90.42.154 HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Origin: http://denizbankonlinebankam-com.net
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/
Content-Length: 0

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
content-length: 0
date: Fri, 02 Dec 2022 16:26:24 GMT
server: LiteSpeed
vary: User-Agent

push.services.mozilla.com/

52.24.78.9

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.24.78.9:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: xTH2FN7C/1cUQ1MJTrtuAw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: O7H86qXnj/zQYKX/GspA4s/Q/cg=

denizbankonlinebankam-com.net/assets/img/favicon.ico

172.105.111.160

200 OK

371 B

URL HTTP/1.1
denizbankonlinebankam-com.net/assets/img/favicon.ico
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type
MS Windows icon resource - 1 icon, 16x16\012- data
Size
371 B (371 bytes)
Hash
8989bfab9db886f00e526c678ef6a568
925f0f5523cc4a8b8b7b5d20de29d582c3fbbb80
66fc940456db280e5c1d05a2a841c02073c15ab7fc1983748e7ef509155dee54

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Deniz Bank
urlquery		Phishing - Deniz Bank
openphish	Deniz Bank

HTTP Headers

GET /assets/img/favicon.ico HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 16:26:25 GMT
content-type: image/x-icon
last-modified: Sun, 30 Oct 2022 04:13:48 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 371
date: Fri, 02 Dec 2022 16:26:25 GMT
server: LiteSpeed

denizbankonlinebankam-com.net/assets/img/autumn.jpg

172.105.111.160

200 OK

379 kB

URL HTTP/1.1
denizbankonlinebankam-com.net/assets/img/autumn.jpg
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1707, components 3\012- data
Size
379 kB (379018 bytes)
Hash
818ced852ca73ab7849232ff704d4e81
fbae534f6bdbdc8c8952f9f6cd1979a4f2391541
a6b40cadc7a04a5580b6996ce951a114128475d91fe662ac24885960f0b5277e

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Deniz Bank
urlquery		Phishing - Deniz Bank
openphish	Deniz Bank

HTTP Headers

GET /assets/img/autumn.jpg HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 16:26:24 GMT
content-type: image/jpeg
last-modified: Sun, 30 Oct 2022 04:14:20 GMT
accept-ranges: bytes
content-length: 379018
date: Fri, 02 Dec 2022 16:26:24 GMT
server: LiteSpeed
vary: User-Agent

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4837
Expires: Fri, 02 Dec 2022 17:47:03 GMT
Date: Fri, 02 Dec 2022 16:26:26 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4837
Expires: Fri, 02 Dec 2022 17:47:03 GMT
Date: Fri, 02 Dec 2022 16:26:26 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4837
Expires: Fri, 02 Dec 2022 17:47:03 GMT
Date: Fri, 02 Dec 2022 16:26:26 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4837
Expires: Fri, 02 Dec 2022 17:47:03 GMT
Date: Fri, 02 Dec 2022 16:26:26 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg

34.120.237.76

200 OK

6.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.2 kB (6174 bytes)
Hash
b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 06:00:48 GMT
age: 37538
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8863 bytes)
Hash
156e9ea97b774cbd8361072e4041b6c8
fc71ae3cae92ed6011904bb2367f23bf4e69fab4
58d953c19ebbbdfc3965bbe3f52308d4702deaf4d0c029f4674bcb862da138af

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8863
x-amzn-requestid: 798d014b-0f9c-4787-a676-8f5e8fae3d11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdG14HBNIAMFdWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851bf-7549feac6d476a8512676412;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: r_0F64VpyutAOJ9IcTWrs3Sv--fhKiwKsV1FW0fOMSRt1QLLPxvJzg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 10:51:17 GMT
age: 20109
etag: "fc71ae3cae92ed6011904bb2367f23bf4e69fab4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.6 kB (7591 bytes)
Hash
d147ccb10bda82b153a596c3c967cd6a
ffd0763f997e71a8c1458523fc17cafe8849dfdf
1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7591
x-amzn-requestid: e179862e-f840-4e50-a9dc-09f325479b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgMFRZIAMFl7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e01-676a1571459f2d83488f2765;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oB5K_ZCWWwCltMx8FQSjDdXRMzSTSyRLSYSLAooQXuCrUxadLUiWkA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:48:51 GMT
age: 67055
etag: "ffd0763f997e71a8c1458523fc17cafe8849dfdf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11402 bytes)
Hash
1c80b8025242ddfcc816ec612456b99e
aa944d10fe4a44b790b01ef62edc0f85a6d558e3
a9f060bc15738a3fe257e0c81a29e4611a89c273bcbb2765ce856d4e854a5f1f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11402
x-amzn-requestid: 20c2c359-1e43-40c0-885d-1c90e76ea12b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGzJHu-IAMFbYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e7a-1d89722e767daa014b174a39;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OJBnbjJB_kvPuJcePGnno3zI0CTWAzV-Osb2L1hPZZhlNYhFHWmLsA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:51:33 GMT
age: 66893
etag: "aa944d10fe4a44b790b01ef62edc0f85a6d558e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.8 kB (4803 bytes)
Hash
cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: ad2d9243-5e32-4faf-8ff3-b9abd3af1e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1_hEJJIAMF4Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387d063-596f5833509112ee6cbedf54;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:51:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PIC-TIeTFK_Y2AiqowYT4_8tMuzIKO23lAwx18fYepTf4PIWkmLqkQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 05:20:15 GMT
age: 39971
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11443 bytes)
Hash
d08081e2dd562ef50e4e98ebc0136698
b5118bca37feda2ada3001199dc1d80ac6d2aacc
5160333e0cfd338b3887972d0a5c0f817ef88b70b7eb78e4e25d153a85e3478f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11443
x-amzn-requestid: 21469d81-ee4b-47f3-8877-b6658b3ea8b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfHDHE4zoAMFvfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891ee0-5b39eddd703ea04e6a1355f8;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:38:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nPuZoyOu_QAqbZvTUaNy1J3BOqnR2ttrIhv9BwRmWnKeba-e6MZWKA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:55:34 GMT
age: 66652
etag: "b5118bca37feda2ada3001199dc1d80ac6d2aacc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

denizbankonlinebankam-com.net/veri.php?ip=91.90.42.154

172.105.111.160

200 OK

0 B

URL HTTP/1.1
denizbankonlinebankam-com.net/veri.php?ip=91.90.42.154
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /veri.php?ip=91.90.42.154 HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Origin: http://denizbankonlinebankam-com.net
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/
Content-Length: 0

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
content-length: 0
date: Fri, 02 Dec 2022 16:26:27 GMT
server: LiteSpeed
vary: User-Agent

denizbankonlinebankam-com.net/veri.php?ip=91.90.42.154

172.105.111.160

200 OK

0 B

URL HTTP/1.1
denizbankonlinebankam-com.net/veri.php?ip=91.90.42.154
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /veri.php?ip=91.90.42.154 HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Origin: http://denizbankonlinebankam-com.net
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/
Content-Length: 0

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
content-length: 0
date: Fri, 02 Dec 2022 16:26:29 GMT
server: LiteSpeed
vary: User-Agent

denizbankonlinebankam-com.net/veri.php?ip=91.90.42.154

172.105.111.160

200 OK

0 B

URL HTTP/1.1
denizbankonlinebankam-com.net/veri.php?ip=91.90.42.154
IP
172.105.111.160:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /veri.php?ip=91.90.42.154 HTTP/1.1
Host: denizbankonlinebankam-com.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Origin: http://denizbankonlinebankam-com.net
Connection: keep-alive
Referer: http://denizbankonlinebankam-com.net/
Content-Length: 0

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
content-length: 0
date: Fri, 02 Dec 2022 16:26:32 GMT
server: LiteSpeed
vary: User-Agent

34.120.237.76

200 OK

7.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.7 kB (7732 bytes)
Hash
379a4a1b95d3aa3c5a4f8e7f9abb030f
d45dceb3dc58a07197aa5077582b5b1cd2ff791a
1b92dec5bf90beffbcd9060052b8788f08645dd4ba34219f7ddb2d40bbd2d151

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 7732
x-amzn-requestid: 3781c2b7-082a-468a-a186-f7483494e749
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoEq3IAMFnKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-679fe9f905e07abf4e6a812c;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FhCtGsjgnq83-zRNBH-y9BHUh2IRaN0ahO-BCUw7bTWU8jAanBqdlA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:53:35 GMT
age: 66777
etag: "d45dceb3dc58a07197aa5077582b5b1cd2ff791a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (39)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type