Report - prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom

Report Overview

Submitted URL
prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
IP
54.85.103.102
ASN
#14618 AMAZON-AES
Submitted
2023-05-02 14:48:25
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
prodeliveryitc.com	unknown	unknown	2022-06-02	2023-03-20	6.5 kB	566 kB	54.85.103.102
ocsp.globalsign.com	2075	1999-04-19	2012-07-20	2023-05-01	358 B	1.9 kB	104.18.20.226
use.typekit.net	494	2010-08-02	2012-07-05	2023-05-01	412 B	4.5 kB	23.36.76.186
p.typekit.net	620	2010-08-02	2012-05-23	2023-05-01	891 B	338 B	23.36.76.186
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2023-05-01	4.0 kB	163 kB	142.250.74.138
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15	2023-05-01	451 B	160 kB	104.18.10.207
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2023-05-01	428 B	29 kB	104.17.24.14
polyfill.io	102644	2013-03-18	2016-02-12	2023-05-01	498 B	1.0 kB	151.101.193.26
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-05-01	2.0 kB	4.2 kB	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator
2023-05-02	medium	prodeliveryitc.com/ckeditor/contents.css?t=N2NK
2023-05-02	medium	prodeliveryitc.com/ckeditor/plugins/formBuilder/styles/formBuilder.css?v=1.3.1682976594554
2023-05-02	medium	prodeliveryitc.com/lib/uri/uri.js
2023-05-02	medium	prodeliveryitc.com/uploads/uploadedFonts/92/Bold/Segoe-UI-Bold.ttf
2023-05-02	medium	prodeliveryitc.com/uploads/uploadedFonts/92/Regular/Segoe-UI.ttf

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js	90 kB	2023-03-07	2024-04-26
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-04-26 21:34:01 Times Seen139424 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

	prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147	0 B	2023-03-07	2024-04-26
Pretty URL prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147 IP 54.85.103.102 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-26 21:35:18 Times Seen37101535 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	polyfill.io/v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7	100 B	2023-03-14	2023-12-19
Pretty URL polyfill.io/v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7 IP 151.101.193.26 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 07:56:47 Last Seen2023-12-19 06:44:57 Times Seen2344 Hash 200a5f97dca74c3f50f25d5992b2509f 1c696dfee387bf0f5fd0d13f254a7a67ba6b11a6 5e8245f74bb3b5a6a427cb68b028830456233ea1e669bf9582a84dd9ca9ab255 Loading...

	prodeliveryitc.com/lib/uri/uri.js	77 kB	2023-03-07	2024-04-26
Pretty URL prodeliveryitc.com/lib/uri/uri.js IP 54.85.103.102 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:23:25 Last Seen2024-04-26 00:44:26 Times Seen1499 Hash 64437cd33e2fa1a40e6850ee6388639e 809078716153b491c00852f366ca3f8d6e03df22 96361c580499a6dd7afa83f352fb2a27c159a39daf794e2e6813514be8a8fbe9 Loading...

HTTP Transactions (32)

URL IP Response Size

prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147

54.85.103.102

200 OK

169 B

URL User Request GET HTTP/1.1
prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
IP
54.85.103.102:443
ASN
#14618 AMAZON-AES

Certificate
IssuerLet's Encrypt
Subjectprodeliveryitc.com
Fingerprint42:19:EB:2F:5E:26:0F:1A:7F:F9:26:6A:01:FF:56:66:85:0C:F8:72
ValidityFri, 28 Apr 2023 20:29:38 GMT - Thu, 27 Jul 2023 20:29:37 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
169 B (169 bytes)
Hash
130d1009f10d4fb1cede97de52442d1f
20a7a05cc7df967bae4e1b71f5e8f299eb556003
c389e590871a87f27ad27393cf7f2947c3ede6ba1cca818cbcff4131e0d0eac4

HTTP Headers

GET /24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147 HTTP/1.1
Host: prodeliveryitc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx/1.22.1
Date: Tue, 02 May 2023 14:48:10 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147

prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147

54.85.103.102

200 OK

1.7 kB

URL User Request GET HTTP/1.1
prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
IP
54.85.103.102:443
ASN
#14618 AMAZON-AES

Certificate
IssuerLet's Encrypt
Subjectprodeliveryitc.com
Fingerprint42:19:EB:2F:5E:26:0F:1A:7F:F9:26:6A:01:FF:56:66:85:0C:F8:72
ValidityFri, 28 Apr 2023 20:29:38 GMT - Thu, 27 Jul 2023 20:29:37 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (609)
Size
1.7 kB (1706 bytes)
Hash
c81c1dde569f462de4b7a5e9beeb54cc
9fda9f2ab4072706fd238d51d077c2ed6b15c4ab
23b29363aa8d3e96911608461e565e42e3244a685e775fc1c322eb3882cc007a

HTTP Headers

GET /24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147 HTTP/1.1
Host: prodeliveryitc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.26
Cache-Control: no-cache, private
Date: Tue, 02 May 2023 14:48:11 GMT
Content-Encoding: gzip

cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js

104.17.24.14

200 OK

28 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT

File type
ASCII text, with very long lines (65451)
Size
28 kB (27958 bytes)
Hash
4b5f47439b640180cc3450f7de05d0d8
5a0dc9bcab80ddc409dd35fcb00a88fe6846fee2
1f85e8b327f42c17c025d69849914068536d9aa95412fe473ae90ffb2f4ebd82

HTTP Headers

GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 02 May 2023 14:48:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 8885350
expires: Sun, 21 Apr 2024 14:48:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fPXufw8hxBx2NxrByHbvSL7Bec8WoN%2BAzjynK9jvvE6bXSU9EhNeBFVHWNghQfe1yYd7WpyqxU4iE0%2FC0W1YL0dzP01RTssMax0YNk0uj1d7Nbvc4mF4XamtkFM7xcfRTNkI2QrK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7c111050ebbf0b02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

polyfill.io/v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7

151.101.193.26

200 OK

113 B

URL GET HTTP/2
polyfill.io/v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7
IP
151.101.193.26:443
ASN
#54113 FASTLY

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerGlobalSign nv-sa
Subjectpolyfill.io
FingerprintCC:EC:67:62:0C:35:B1:49:2F:28:55:33:F4:F0:49:CD:3F:88:CC:3B
ValiditySat, 10 Dec 2022 19:50:06 GMT - Thu, 11 Jan 2024 19:50:05 GMT

File type
ASCII text
Size
113 B (113 bytes)
Hash
5b7235110fbc7e90184fa203f13cc53c
8e0c745064df37441f346ce917c77e75aa01f151
8c25748197226dac63c1d1b2bae3d116d1eebf7209966c7dfeabbd2b55e5f7eb

HTTP Headers

GET /v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7 HTTP/1.1
Host: polyfill.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://prodeliveryitc.com
Connection: keep-alive
Referer: https://prodeliveryitc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
fastly_service_version: 175
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800
content-type: text/javascript; charset=UTF-8
last-modified: Sun, 30 Apr 2023 17:03:36 GMT
useragent_normaliser: firefox/111.0.0
content-encoding: gzip
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
referrer-policy: origin-when-cross-origin
timing-allow-origin: *
normalized-user-agent: firefox/111.0.0
detected-user-agent: Firefox/111.0.
accept-ranges: bytes
date: Tue, 02 May 2023 14:48:11 GMT
age: 152458
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: User-Agent, Accept-Encoding
server-timing: HIT-CLUSTER, fastly;desc="Edge time";dur=2
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 113
X-Firefox-Spdy: h2

prodeliveryitc.com/ckeditor/contents.css?t=N2NK

54.85.103.102

200 OK

2.9 kB

URL GET HTTP/1.1
prodeliveryitc.com/ckeditor/contents.css?t=N2NK
IP
54.85.103.102:443
ASN
#14618 AMAZON-AES

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerLet's Encrypt
Subjectprodeliveryitc.com
Fingerprint42:19:EB:2F:5E:26:0F:1A:7F:F9:26:6A:01:FF:56:66:85:0C:F8:72
ValidityFri, 28 Apr 2023 20:29:38 GMT - Thu, 27 Jul 2023 20:29:37 GMT

File type
ASCII text
Size
2.9 kB (2886 bytes)
Hash
ea34863bd1770c4274d7ed7c58449f2a
1aefe351289c27d7b741cd38baaaad3398e306ba
43b78285c786c968e35d8a44aafb06df291e840e106bd01ddf36df96ce84ff5d

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /ckeditor/contents.css?t=N2NK HTTP/1.1
Host: prodeliveryitc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 02 May 2023 14:48:11 GMT
Content-Type: text/css
Content-Length: 2886
Last-Modified: Fri, 21 Apr 2023 19:40:04 GMT
Connection: keep-alive
ETag: "6442e694-b46"
Expires: Tue, 02 May 2023 14:48:11 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4

104.18.20.226

1.5 kB

URL
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.5 kB (1462 bytes)
Hash
c7f1cad493a12116c71e4666a10055f9
26373bd907a0ef8e87e2a629c119cdf7b1fe9bd8
b074795d7c410ac0d01e3d2af3ce1240ae42d1db82fdc74727c639c6909f6c76

HTTP Headers

POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 02 May 2023 14:48:11 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "8966429780ACF7334A12A1D05FFB1C5D5F59AE5F"
Expires: Wed, 03 May 2023 02:00:00 GMT
Last-Modified: Tue, 02 May 2023 14:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1448
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7c111051c9d4b4f3-OSL

prodeliveryitc.com/ckeditor/plugins/formBuilder/styles/formBuilder.css?v=1.3.1682976594554

54.85.103.102

200 OK

5.2 kB

URL GET HTTP/1.1
prodeliveryitc.com/ckeditor/plugins/formBuilder/styles/formBuilder.css?v=1.3.1682976594554
IP
54.85.103.102:443
ASN
#14618 AMAZON-AES

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerLet's Encrypt
Subjectprodeliveryitc.com
Fingerprint42:19:EB:2F:5E:26:0F:1A:7F:F9:26:6A:01:FF:56:66:85:0C:F8:72
ValidityFri, 28 Apr 2023 20:29:38 GMT - Thu, 27 Jul 2023 20:29:37 GMT

File type
ASCII text
Size
5.2 kB (5201 bytes)
Hash
e741d2aa47efe7dda9dfe0a5014fef0e
30ebfe60d0832bb8114c6ba155f0ddb15c1a527c
68c2e3489d098db2a6e2ddba9f32ff172d1c0ff0983b9b3c3c0b59c8a850cf20

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /ckeditor/plugins/formBuilder/styles/formBuilder.css?v=1.3.1682976594554 HTTP/1.1
Host: prodeliveryitc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 02 May 2023 14:48:11 GMT
Content-Type: text/css
Content-Length: 5201
Last-Modified: Fri, 21 Apr 2023 19:40:04 GMT
Connection: keep-alive
ETag: "6442e694-1451"
Expires: Tue, 02 May 2023 14:48:11 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

prodeliveryitc.com/ckeditor/plugins/lpLinkV2/css/styles.css

54.85.103.102

200 OK

2.2 kB

URL GET HTTP/1.1
prodeliveryitc.com/ckeditor/plugins/lpLinkV2/css/styles.css
IP
54.85.103.102:443
ASN
#14618 AMAZON-AES

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerLet's Encrypt
Subjectprodeliveryitc.com
Fingerprint42:19:EB:2F:5E:26:0F:1A:7F:F9:26:6A:01:FF:56:66:85:0C:F8:72
ValidityFri, 28 Apr 2023 20:29:38 GMT - Thu, 27 Jul 2023 20:29:37 GMT

File type
ASCII text, with very long lines (2158)
Size
2.2 kB (2159 bytes)
Hash
20944bcec784ce7e2b95b62808da9869
29fa6fc754e5f8cda684cfcadad4b996f7404e61
479da2477e3d7631c8cca6c411d1b2afad9d5e66bc6bb7acc8b1bdafadd75499

HTTP Headers

GET /ckeditor/plugins/lpLinkV2/css/styles.css HTTP/1.1
Host: prodeliveryitc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 02 May 2023 14:48:11 GMT
Content-Type: text/css
Content-Length: 2159
Last-Modified: Fri, 21 Apr 2023 19:40:04 GMT
Connection: keep-alive
ETag: "6442e694-86f"
Expires: Tue, 02 May 2023 14:48:11 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

prodeliveryitc.com/ckeditor/plugins/assetImageEditor/styles/assetImageEditor.css

54.85.103.102

200 OK

15 kB

URL GET HTTP/1.1
prodeliveryitc.com/ckeditor/plugins/assetImageEditor/styles/assetImageEditor.css
IP
54.85.103.102:443
ASN
#14618 AMAZON-AES

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerLet's Encrypt
Subjectprodeliveryitc.com
Fingerprint42:19:EB:2F:5E:26:0F:1A:7F:F9:26:6A:01:FF:56:66:85:0C:F8:72
ValidityFri, 28 Apr 2023 20:29:38 GMT - Thu, 27 Jul 2023 20:29:37 GMT

File type
ASCII text, with very long lines (14633)
Size
15 kB (14634 bytes)
Hash
787386e5e10ff3bb89548b79491676c9
91954bf6893e1369d4d29eed13684241e114474e
83f3a7c1ef45aec623457bf7f8165b0ec4ef1699a7822796ded8fa4ee7f67562

HTTP Headers

GET /ckeditor/plugins/assetImageEditor/styles/assetImageEditor.css HTTP/1.1
Host: prodeliveryitc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 02 May 2023 14:48:11 GMT
Content-Type: text/css
Content-Length: 14634
Last-Modified: Fri, 21 Apr 2023 19:40:04 GMT
Connection: keep-alive
ETag: "6442e694-392a"
Expires: Tue, 02 May 2023 14:48:11 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

prodeliveryitc.com/uploads/uploadedFonts/fontsImport.css?v=1683038891

54.85.103.102

200 OK

116 kB

URL GET HTTP/1.1
prodeliveryitc.com/uploads/uploadedFonts/fontsImport.css?v=1683038891
IP
54.85.103.102:443
ASN
#14618 AMAZON-AES

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerLet's Encrypt
Subjectprodeliveryitc.com
Fingerprint42:19:EB:2F:5E:26:0F:1A:7F:F9:26:6A:01:FF:56:66:85:0C:F8:72
ValidityFri, 28 Apr 2023 20:29:38 GMT - Thu, 27 Jul 2023 20:29:37 GMT

File type
ASCII text, with very long lines (508)
Size
116 kB (115728 bytes)
Hash
f12cf955f9530007b94c86552204e11c
72e077abdbd2f741246d9312842cb288132cc9db
d262b685fdf6f1d9e5ff318a7ce6eb5651e8008071d9f8447b4f0550028e219b

HTTP Headers

GET /uploads/uploadedFonts/fontsImport.css?v=1683038891 HTTP/1.1
Host: prodeliveryitc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 02 May 2023 14:48:11 GMT
Content-Type: text/css
Content-Length: 115728
Last-Modified: Mon, 10 Apr 2023 16:15:12 GMT
Connection: keep-alive
ETag: "64343610-1c410"
Expires: Tue, 02 May 2023 14:48:11 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

prodeliveryitc.com/lib/uri/uri.js

54.85.103.102

200 OK

77 kB

URL GET HTTP/1.1
prodeliveryitc.com/lib/uri/uri.js
IP
54.85.103.102:443
ASN
#14618 AMAZON-AES

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerLet's Encrypt
Subjectprodeliveryitc.com
Fingerprint42:19:EB:2F:5E:26:0F:1A:7F:F9:26:6A:01:FF:56:66:85:0C:F8:72
ValidityFri, 28 Apr 2023 20:29:38 GMT - Thu, 27 Jul 2023 20:29:37 GMT

File type
Unicode text, UTF-8 text, with very long lines (1107)
Size
77 kB (76862 bytes)
Hash
64437cd33e2fa1a40e6850ee6388639e
809078716153b491c00852f366ca3f8d6e03df22
96361c580499a6dd7afa83f352fb2a27c159a39daf794e2e6813514be8a8fbe9

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /lib/uri/uri.js HTTP/1.1
Host: prodeliveryitc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 02 May 2023 14:48:11 GMT
Content-Type: application/javascript
Content-Length: 76862
Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT
Connection: keep-alive
ETag: "6074ab5b-12c3e"
Expires: Tue, 02 May 2023 14:48:11 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
12ba8eaf8df351c1b04c5aa90a1654ca
89c8ed3f837bd937b60d8b6862af6e81510a41f5
6b2c88a08976f9b12290abc6f4e7a6cffd00698f8853f3d7bd0a87974c354bfb

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 14:48:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
6f7298ed349da5c5d3cefbd60fb5afbe
88b65ae103faac327c242b0b8c4f56f4b96b299f
ea6a0e7d7ebc2abaf9aaced8273e9883010990d064e7c5c46088cc451623cbcc

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 14:48:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
6f7298ed349da5c5d3cefbd60fb5afbe
88b65ae103faac327c242b0b8c4f56f4b96b299f
ea6a0e7d7ebc2abaf9aaced8273e9883010990d064e7c5c46088cc451623cbcc

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 14:48:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
12ba8eaf8df351c1b04c5aa90a1654ca
89c8ed3f837bd937b60d8b6862af6e81510a41f5
6b2c88a08976f9b12290abc6f4e7a6cffd00698f8853f3d7bd0a87974c354bfb

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 14:48:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
12ba8eaf8df351c1b04c5aa90a1654ca
89c8ed3f837bd937b60d8b6862af6e81510a41f5
6b2c88a08976f9b12290abc6f4e7a6cffd00698f8853f3d7bd0a87974c354bfb

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 14:48:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

use.typekit.net/mgr2odi.css

23.36.76.186

200 OK

4.1 kB

URL GET HTTP/2
use.typekit.net/mgr2odi.css
IP
23.36.76.186:443
ASN
#20940 Akamai International B.V.

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerDigiCert Inc
Subjectuse.typekit.net
Fingerprint5F:2F:EB:47:33:08:97:87:7F:73:06:D1:9A:4B:F5:06:57:11:08:2B
ValidityWed, 14 Sep 2022 00:00:00 GMT - Sun, 15 Oct 2023 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (520)
Size
4.1 kB (4083 bytes)
Hash
c02d78a6a910229f673721e1981453ec
6680274f43c46779e85288d44fc0621c8fcf4ff2
3deb0ea824a7dc4c3c202d89fd356970284a178b9fbd1cb9157a7dcbd68ed146

HTTP Headers

GET /mgr2odi.css HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: text/css;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 4083
date: Tue, 02 May 2023 14:48:12 GMT
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
6f7298ed349da5c5d3cefbd60fb5afbe
88b65ae103faac327c242b0b8c4f56f4b96b299f
ea6a0e7d7ebc2abaf9aaced8273e9883010990d064e7c5c46088cc451623cbcc

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 02 May 2023 14:48:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

p.typekit.net/p.css?s=1&k=mgr2odi&ht=tk&f=137.138.139.140.169.170.171.172.173.174.175.176.5474.5475.25136.25137.143.144.147.148.156.157.161.162.2003.2004.2005.2006.2007.2008.2009.2010.2011.2012.9938.9939.39002.39004.12046.12047.12048.12049.12050.12051.12053.12054.12055.12056.17398.17399.17400.17401.22618.22619.14032.14033.14034.14035.26425.26426.35617.35620.26435.35615.26438.26439.35630.35633.26448.35628.26893.26894.26897.26898.26909.26910.26913.26914.29382.29383&a=14392602&app=typekit&e=css

23.36.76.186

200 OK

5 B

URL GET HTTP/2
p.typekit.net/p.css?s=1&k=mgr2odi&ht=tk&f=137.138.139.140.169.170.171.172.173.174.175.176.5474.5475.25136.25137.143.144.147.148.156.157.161.162.2003.2004.2005.2006.2007.2008.2009.2010.2011.2012.9938.9939.39002.39004.12046.12047.12048.12049.12050.12051.12053.12054.12055.12056.17398.17399.17400.17401.22618.22619.14032.14033.14034.14035.26425.26426.35617.35620.26435.35615.26438.26439.35630.35633.26448.35628.26893.26894.26897.26898.26909.26910.26913.26914.29382.29383&a=14392602&app=typekit&e=css
IP
23.36.76.186:443
ASN
#20940 Akamai International B.V.

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerDigiCert Inc
Subjectuse.typekit.net
Fingerprint5F:2F:EB:47:33:08:97:87:7F:73:06:D1:9A:4B:F5:06:57:11:08:2B
ValidityWed, 14 Sep 2022 00:00:00 GMT - Sun, 15 Oct 2023 23:59:59 GMT

File type
ASCII text
Size
5 B (5 bytes)
Hash
83d24d4b43cc7eef2b61e66c95f3d158
f0cafc285ee23bb6c28c5166f305493c4331c84d
1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb

HTTP Headers

GET /p.css?s=1&k=mgr2odi&ht=tk&f=137.138.139.140.169.170.171.172.173.174.175.176.5474.5475.25136.25137.143.144.147.148.156.157.161.162.2003.2004.2005.2006.2007.2008.2009.2010.2011.2012.9938.9939.39002.39004.12046.12047.12048.12049.12050.12051.12053.12054.12055.12056.17398.17399.17400.17401.22618.22619.14032.14033.14034.14035.26425.26426.35617.35620.26435.35615.26438.26439.35630.35633.26448.35628.26893.26894.26897.26898.26909.26910.26913.26914.29382.29383&a=14392602&app=typekit&e=css HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: text/css
content-length: 5
last-modified: Thu, 28 Jul 2022 22:24:50 GMT
etag: "62e30cb2-5"
cache-control: public, max-age=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Tue, 02 May 2023 14:48:12 GMT
X-Firefox-Spdy: h2

prodeliveryitc.com/uploads/uploadedFonts/92/Bold/Segoe-UI-Bold.ttf

54.85.103.102

200 OK

36 kB

URL GET HTTP/1.1
prodeliveryitc.com/uploads/uploadedFonts/92/Bold/Segoe-UI-Bold.ttf
IP
54.85.103.102:443
ASN
#14618 AMAZON-AES

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerLet's Encrypt
Subjectprodeliveryitc.com
Fingerprint42:19:EB:2F:5E:26:0F:1A:7F:F9:26:6A:01:FF:56:66:85:0C:F8:72
ValidityFri, 28 Apr 2023 20:29:38 GMT - Thu, 27 Jul 2023 20:29:37 GMT

File type
TrueType Font data, 18 tables, 1st "FFTM", 72 names, Macintosh\012- data
Size
36 kB (36056 bytes)
Hash
65099f98c7cb19b3dac57b15a6a708cf
b2b26ea5a35f7c2f107d358f584985aa14218c4d
3084cb39c0f24d7dfa6b576014ec75d0c3b9e852e1a545eaa96253e087f02a2b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /uploads/uploadedFonts/92/Bold/Segoe-UI-Bold.ttf HTTP/1.1
Host: prodeliveryitc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/uploads/uploadedFonts/fontsImport.css?v=1683038891
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 02 May 2023 14:48:12 GMT
Content-Type: application/octet-stream
Content-Length: 36056
Last-Modified: Fri, 24 Feb 2023 15:46:38 GMT
Connection: keep-alive
ETag: "63f8dbde-8cd8"
Expires: Tue, 02 May 2023 15:48:12 GMT
Cache-Control: max-age=3600
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

prodeliveryitc.com/uploads/uploadedFonts/92/Regular/Segoe-UI.ttf

54.85.103.102

200 OK

34 kB

URL GET HTTP/1.1
prodeliveryitc.com/uploads/uploadedFonts/92/Regular/Segoe-UI.ttf
IP
54.85.103.102:443
ASN
#14618 AMAZON-AES

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerLet's Encrypt
Subjectprodeliveryitc.com
Fingerprint42:19:EB:2F:5E:26:0F:1A:7F:F9:26:6A:01:FF:56:66:85:0C:F8:72
ValidityFri, 28 Apr 2023 20:29:38 GMT - Thu, 27 Jul 2023 20:29:37 GMT

File type
TrueType Font data, 18 tables, 1st "FFTM", 48 names, Macintosh\012- data
Size
34 kB (34164 bytes)
Hash
0e7e9a9b5c4abaadef7bc8f4e4574084
995e37cfba0e3df9a716891a4cf9a05b38b118f9
3745c347d168dd938971aed573ab2140b6a766f658c4f353f06ddc05e976ff7a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /uploads/uploadedFonts/92/Regular/Segoe-UI.ttf HTTP/1.1
Host: prodeliveryitc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/uploads/uploadedFonts/fontsImport.css?v=1683038891
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 02 May 2023 14:48:12 GMT
Content-Type: application/octet-stream
Content-Length: 34164
Last-Modified: Fri, 24 Feb 2023 15:46:13 GMT
Connection: keep-alive
ETag: "63f8dbc5-8574"
Expires: Tue, 02 May 2023 15:48:12 GMT
Cache-Control: max-age=3600
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

prodeliveryitc.com/uploads/c_930/backgrounds/itbrief_unsub_bg.jpg

54.85.103.102

200 OK

238 kB

URL GET HTTP/1.1
prodeliveryitc.com/uploads/c_930/backgrounds/itbrief_unsub_bg.jpg
IP
54.85.103.102:443
ASN
#14618 AMAZON-AES

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerLet's Encrypt
Subjectprodeliveryitc.com
Fingerprint42:19:EB:2F:5E:26:0F:1A:7F:F9:26:6A:01:FF:56:66:85:0C:F8:72
ValidityFri, 28 Apr 2023 20:29:38 GMT - Thu, 27 Jul 2023 20:29:37 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2014:07:01 14:51:59], baseline, precision 8, 1366x768, components 3\012- data
Size
238 kB (237484 bytes)
Hash
1dba0da5912b67751021b7569fc540c8
cbd84515581c703faee04780d28c074617dbe10f
d6791c8426846097bfaf2a40143344656ba6875cce3feff1b46026320f3acd2a

HTTP Headers

GET /uploads/c_930/backgrounds/itbrief_unsub_bg.jpg HTTP/1.1
Host: prodeliveryitc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 02 May 2023 14:48:12 GMT
Content-Type: image/jpeg
Content-Length: 237484
Last-Modified: Mon, 26 Oct 2020 18:09:04 GMT
Connection: keep-alive
ETag: "5f9710c0-39fac"
Expires: Tue, 02 May 2023 15:48:12 GMT
Cache-Control: max-age=3600
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

prodeliveryitc.com/favicon.ico

54.85.103.102

200 OK

34 kB

URL GET HTTP/1.1
prodeliveryitc.com/favicon.ico
IP
54.85.103.102:443
ASN
#14618 AMAZON-AES

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerLet's Encrypt
Subjectprodeliveryitc.com
Fingerprint42:19:EB:2F:5E:26:0F:1A:7F:F9:26:6A:01:FF:56:66:85:0C:F8:72
ValidityFri, 28 Apr 2023 20:29:38 GMT - Thu, 27 Jul 2023 20:29:37 GMT

File type
MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Size
34 kB (34494 bytes)
Hash
d4a95c780824be97bc45a187ab7ad24b
53aeb2d44190d91ec2006379b3ddbd202b865d24
502322d8592de8395d6e7c2c37b18e04904e62d8f8b3caaa53858e4ebc64b692

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: prodeliveryitc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 02 May 2023 14:48:13 GMT
Content-Type: image/x-icon
Content-Length: 34494
Last-Modified: Wed, 14 Sep 2022 11:51:00 GMT
Connection: keep-alive
ETag: "6321c024-86be"
Expires: Tue, 02 May 2023 15:48:13 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes

fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;0,800;1,300;1,400;1,600;1,700;1,800&display=swap

142.250.74.138

200 OK

30 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;0,800;1,300;1,400;1,600;1,700;1,800&display=swap
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint78:8B:BB:40:DD:1D:5B:E9:7B:AA:CC:94:45:44:7F:FD:56:6E:E4:60
ValidityMon, 03 Apr 2023 08:24:24 GMT - Mon, 26 Jun 2023 08:24:23 GMT

File type
ASCII text
Size
30 kB (29885 bytes)
Hash
e4fa1db2b8234d996bbc30e25258b7ac
cfde694af6f8372ba8f10e422cac77511bca40a9
a296e19b82044522db09f4064c8ac65b5fd0f7b1a0c78985e5afb6f3019f0416

HTTP Headers

GET /css2?family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;0,800;1,300;1,400;1,600;1,700;1,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 02 May 2023 14:48:12 GMT
date: Tue, 02 May 2023 14:48:12 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css

104.18.10.207

200 OK

160 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT

File type
ASCII text, with very long lines (65324)
Size
160 kB (159515 bytes)
Hash
7cc40c199d128af6b01e74a28c5900b0
d305110fb79113a961394b433d851a3410342b8c
2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6

HTTP Headers

GET /bootstrap/4.4.1/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 02 May 2023 14:48:11 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:09 GMT
cdn-cachedat: 08/03/2021 15:16:56
cdn-edgestorageid: 601
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-proxyver: 1.0
cdn-status: 200
cdn-requestid: d6b43e13ddbcd4f60dded6d39b2abed5
cdn-cache: HIT
cf-cache-status: HIT
age: 1624043
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7c111050eb9bfabc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700&display=swap

142.250.74.138

200 OK

16 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700&display=swap
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint78:8B:BB:40:DD:1D:5B:E9:7B:AA:CC:94:45:44:7F:FD:56:6E:E4:60
ValidityMon, 03 Apr 2023 08:24:24 GMT - Mon, 26 Jun 2023 08:24:23 GMT

File type
ASCII text
Size
16 kB (15536 bytes)
Hash
4a58bcd3bd6d779b2f95fa2c3d9799b2
6d7c9652d3fd4c41a2c0074fe11a74399a13f9c7
e95d267b206ae604c3fc8983d3a2725cd1b12fc17b4c6db44698ec448b18c0e6

HTTP Headers

GET /css2?family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 02 May 2023 14:48:12 GMT
date: Tue, 02 May 2023 14:48:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap

142.250.74.138

200 OK

11 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint78:8B:BB:40:DD:1D:5B:E9:7B:AA:CC:94:45:44:7F:FD:56:6E:E4:60
ValidityMon, 03 Apr 2023 08:24:24 GMT - Mon, 26 Jun 2023 08:24:23 GMT

File type
ASCII text
Size
11 kB (10920 bytes)
Hash
c0349d757cbee6e31e908c4676546f75
60292b8c146a6228607a6875ae67f726eb281ee9
475d281e1b2b3b6aa2b7c8dd40a3b3b80a2418dbcab8e04a4513f1194e629b48

HTTP Headers

GET /css2?family=Noto+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 02 May 2023 14:48:12 GMT
date: Tue, 02 May 2023 14:48:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Muli

142.250.74.138

200 OK

1.2 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Muli
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint78:8B:BB:40:DD:1D:5B:E9:7B:AA:CC:94:45:44:7F:FD:56:6E:E4:60
ValidityMon, 03 Apr 2023 08:24:24 GMT - Mon, 26 Jun 2023 08:24:23 GMT

File type
ASCII text, with very long lines (1204), with no line terminators
Size
1.2 kB (1180 bytes)
Hash
2439e038ad1cbcf4b5ab2971bc1b8db6
6a104c175f49bd1f51812d0fe05f19bd8e798fed
7a2ba8bea2d83173b161b4136d723bd0b5bd19a7938d122060a21749e64b4288

HTTP Headers

GET /css?family=Muli HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 02 May 2023 14:48:12 GMT
date: Tue, 02 May 2023 14:48:12 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&display=swap

142.250.74.138

200 OK

8.2 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&display=swap
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint78:8B:BB:40:DD:1D:5B:E9:7B:AA:CC:94:45:44:7F:FD:56:6E:E4:60
ValidityMon, 03 Apr 2023 08:24:24 GMT - Mon, 26 Jun 2023 08:24:23 GMT

File type
ASCII text, with very long lines (8364), with no line terminators
Size
8.2 kB (8184 bytes)
Hash
81eb5813ba4be0b5e7cdf5f69bb6a1d4
202a83163f2f69a34771cc4bc1438bd3ebf6f633
2281c740e464383bc783ed3a977040f72b1c30fd1ec6da937c850493166ff381

HTTP Headers

GET /css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 02 May 2023 14:48:12 GMT
date: Tue, 02 May 2023 14:48:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap

142.250.74.138

200 OK

28 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint78:8B:BB:40:DD:1D:5B:E9:7B:AA:CC:94:45:44:7F:FD:56:6E:E4:60
ValidityMon, 03 Apr 2023 08:24:24 GMT - Mon, 26 Jun 2023 08:24:23 GMT

File type
ASCII text
Size
28 kB (28046 bytes)
Hash
3ee202f2441da7c1ec2dabc3179b8ca5
e57336cfb1ae04106a7f4f13f291b63f93e4f7a8
9fc14db76db260c7adb8ded4495b5fb3574507e0312553c3e43724e75c5b21c9

HTTP Headers

GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 02 May 2023 14:48:12 GMT
date: Tue, 02 May 2023 14:48:12 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap

142.250.74.138

200 OK

30 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint78:8B:BB:40:DD:1D:5B:E9:7B:AA:CC:94:45:44:7F:FD:56:6E:E4:60
ValidityMon, 03 Apr 2023 08:24:24 GMT - Mon, 26 Jun 2023 08:24:23 GMT

File type
ASCII text
Size
30 kB (30418 bytes)
Hash
11e625df3c09effe1de2fcc2314cde4b
d2bef1ccbceb9b56b072fe5cf05cba70c9a21d21
1fca423be8f3146dbd20485917f007f91f53824c96530b0c29d34f2f35edd002

HTTP Headers

GET /css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 02 May 2023 14:48:12 GMT
date: Tue, 02 May 2023 14:48:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap

142.250.74.138

200 OK

34 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://prodeliveryitc.com/24658-181856/unsubscribe/MCBGGDe6xgtR5z9iZXeMHLE3NJcKdQgDYvTGobpQzsM?prom_type=regular&prom_id=212147
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint78:8B:BB:40:DD:1D:5B:E9:7B:AA:CC:94:45:44:7F:FD:56:6E:E4:60
ValidityMon, 03 Apr 2023 08:24:24 GMT - Mon, 26 Jun 2023 08:24:23 GMT

File type
ASCII text
Size
34 kB (33948 bytes)
Hash
94e1b11eefd121a3cf2726702207c08e
ef5fea084990455f7a60ecba306df046628ee27b
3133d5701c08c2e700289c8b937a62febaf03b69292d3785dad25ff6fff23dbf

HTTP Headers

GET /css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prodeliveryitc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 02 May 2023 14:48:12 GMT
date: Tue, 02 May 2023 14:48:12 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (32)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers