Report - assistance-ing.com/

Report Overview

Submitted URL
assistance-ing.com/
IP
193.106.191.135
ASN
#59940 Kanzas LLC
Submitted
2022-11-06 03:13:27
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
34

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
www.googletagmanager.com	75	2013-05-22T04:07:37Z	2023-03-10T13:03:15Z	383 B	39 kB	142.250.74.168
ingdirect.d1.sc.omtrdc.net	unknown	2016-11-29T15:24:58Z	2023-02-04T12:52:55Z	506 B	423 B	13.36.218.177
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-10T05:09:10Z	1.0 kB	2.7 kB	23.36.76.226
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-10T13:49:44Z	682 B	1.6 kB	93.184.220.29
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-10T05:10:00Z	333 B	229 B	34.117.237.239
assets.adobedtm.com	512	2014-01-28T05:51:35Z	2023-03-10T12:19:45Z	2.5 kB	70 kB	23.38.200.237
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-10T05:11:10Z	686 B	1.4 kB	142.250.74.3
dpm.demdex.net	204	2012-05-22T07:45:05Z	2023-03-10T05:16:09Z	481 B	942 B	3.248.125.227
assistance-ing.com	unknown	2022-11-04T22:37:00Z	2022-11-12T12:22:59Z	9.7 kB	1.6 MB	193.106.191.135
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-10T05:12:35Z	413 B	5.8 kB	34.160.144.191
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-10T05:10:02Z	606 B	127 B	54.148.77.40
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-10T05:10:04Z	3.3 kB	62 kB	34.120.237.76
cdn.appdynamics.com	3266	2017-01-26T21:49:30Z	2023-03-08T12:42:49Z	402 B	757 B	143.204.55.129

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed
2022-11-06	medium	assistance-ing.com	Sinkholed

JavaScript (16)

	URL	Size	First Seen	Last Seen
	cdn.appdynamics.com/adrum-ext.a5c406ae5697070ded3eee8312968928.js	52 kB	2023-03-07	2023-11-07
Pretty URL cdn.appdynamics.com/adrum-ext.a5c406ae5697070ded3eee8312968928.js IP 143.204.55.129 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:20:04 Last Seen2023-11-07 02:40:15 Times Seen8 Hash 218855dda579851dcd83a5f2c79d8413 3fc8d034a127e9bf985ceda2aabbc0eb4f95ac57 e1b19c2ac70595557d3f792927531f74faf51f6b1249a7dde90e79dfb2686ac1 Loading...

	assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/scripts/satellite-599fd3ae64746d27bc002479.js	6.5 kB	2023-03-10	2023-03-11
Pretty URL assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/scripts/satellite-599fd3ae64746d27bc002479.js IP 23.38.200.237 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 19:42:59 Last Seen2023-03-11 10:54:56 Times Seen1 Hash 8efc231a284c40905bfdbed761e7ae7b 761a5e95b548c3ce7167654a668b3d71ec4838c1 0fc594e7b9340b3e80637d6fe9deed2ee526c4f620835aa03c67cc9e040d5a34 Loading...

	assistance-ing.com/files/webcomponentsloader.js	2.0 kB	2023-03-10	2023-03-11
Pretty URL assistance-ing.com/files/webcomponentsloader.js IP 193.106.191.135 ASN #59940 Kanzas LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 19:42:59 Last Seen2023-03-11 10:54:56 Times Seen1 Hash c88be5f8309b7f89121e6389450b8270 d724770d4798049a501e2cd4a9ee3cc02ab1a48a b6e713326b2efe10bfebd18e6a1ff0ccec291d87c31de7cc09c3e16fffb3e6ce Loading...

	assistance-ing.com/files/webcomponents-lite.min.js	40 kB	2023-03-07	2024-04-14
Pretty URL assistance-ing.com/files/webcomponents-lite.min.js IP 193.106.191.135 ASN #59940 Kanzas LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:39:42 Last Seen2024-04-14 19:39:56 Times Seen89 Hash 32b5a9b7ada86304bec6b43d3f2194f0 6c4edd8efa046627216a625bf8f8903d41a9fe87 abe23ee1968e6b4d601df4f547cd7ace646b15d520f171d4cd6e5d4ad895e127 Loading...

	www.googletagmanager.com/gtag/js?id=DC-8133842	113 kB	2023-03-10	2023-03-10
Pretty URL www.googletagmanager.com/gtag/js?id=DC-8133842 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 22:08:40 Last Seen2023-03-10 22:08:40 Times Seen1 Hash c1eae2825d8521c9bb04dcfe0e33060e 2f4ab95fc3e0ebb510c027dd1f978c6a119a01bd da86cafb2d225966bfd524d573d91892985eac85fd87e3c061e0bf233de6fc91 Loading...

	assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/scripts/satellite-5b5e9f6464746d2176000c4d.js	149 B	2023-03-07	2023-03-11
Pretty URL assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/scripts/satellite-5b5e9f6464746d2176000c4d.js IP 23.38.200.237 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:39:42 Last Seen2023-03-11 10:54:56 Times Seen1 Hash 513c8fe30f88b362b9720669cfc89e75 2899c387fa02d0ff4de9ff1594a84a07e2cab173 596d106cda1fc675923bedf0f99630c7200d1d78b11e0d126caa02c9716232bf Loading...

	assistance-ing.com/	1.6 kB	2023-03-10	2023-03-11
Pretty URL assistance-ing.com/ IP 193.106.191.135 ASN #59940 Kanzas LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 19:42:59 Last Seen2023-03-11 10:54:56 Times Seen1 Hash 656ef7ef5aab7bbd3ba0dbcbfa2d32a7 9216242cce64706c6a520f82d0e143189c8eed45 2bc1b12a613d6b150faf192d09ea511059720da3b0ca1581f4d38ca3c3460dfb Loading...

	assistance-ing.com/	1.3 kB	2023-03-10	2023-03-11
Pretty URL assistance-ing.com/ IP 193.106.191.135 ASN #59940 Kanzas LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 19:42:59 Last Seen2023-03-11 10:54:56 Times Seen1 Hash cb2641a937ed913b59095d90afa0f8e8 480f87c455b10a9a62948d24d88c37f1bb7edf3f c5d90ceef180311216046ecfe25187e8aee2a1306441a71b94cf62fdfec7dc98 Loading...

	assistance-ing.com/files/browserDetection.js	7.0 kB	2023-03-07	2023-03-11
Pretty URL assistance-ing.com/files/browserDetection.js IP 193.106.191.135 ASN #59940 Kanzas LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:39:42 Last Seen2023-03-11 10:54:56 Times Seen1 Hash b82febe7c2b62272267a31e6ba256a29 0c236cb2ca5818cab8ce1cd870aafe8a21fe257f 36d9c31ecadc672513376da21320d2a8cb438f74f6c83f7783c508f059cbcff0 Loading...

	assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/satelliteLib-ff943d4b1a9a84b593d43ab2733904d5acc749f1.js	107 kB	2023-03-10	2023-03-11
Pretty URL assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/satelliteLib-ff943d4b1a9a84b593d43ab2733904d5acc749f1.js IP 23.38.200.237 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 19:42:59 Last Seen2023-03-11 10:54:56 Times Seen1 Hash b2777e6e7ab9a1f011cc4c6c6f232740 e2dc0d816244abb27d07ada9d0fc9cb4c46307b6 befd05736439e5696d06473c17f9f19df16d81e4906ed6d07afc17d989c6f991 Loading...

	assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/s-code-contents-4cfc297b5ea80996c7a1082decba20b2224a4720.js	43 kB	2023-03-07	2023-03-11
Pretty URL assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/s-code-contents-4cfc297b5ea80996c7a1082decba20b2224a4720.js IP 23.38.200.237 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:39:42 Last Seen2023-03-11 10:54:56 Times Seen1 Hash adf761c96173ddb28b5f1fba4ce800fd 504327dc5983ba5dad6556bb5d7a4f0fff78259a 2311aeb94d32ae37b84ee35cc29f0d8f60fed18bd01aacacf715758c633cc005 Loading...

	assistance-ing.com/files/jquery.js	90 kB	2023-03-07	2024-05-11
Pretty URL assistance-ing.com/files/jquery.js IP 193.106.191.135 ASN #59940 Kanzas LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-05-11 04:01:05 Times Seen270401 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	assistance-ing.com/files/appcache.js	695 B	2023-03-07	2023-03-11
Pretty URL assistance-ing.com/files/appcache.js IP 193.106.191.135 ASN #59940 Kanzas LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:39:42 Last Seen2023-03-11 10:54:56 Times Seen1 Hash 987aae5a5804a44c52f0f1bbd0da87f0 b65cb10812e995c24f13b4d6862e4c3d072e7c24 cffc9b360c3ba5588a27bcaf79e2f0ce9af794d37d3808fa1ecba8c8078d1640 Loading...

		Size	First Seen	Last Seen
	#1 Write - 61bac2dfd257008573ab56cf3927aa69	49 B	2023-03-07	2023-03-11
Pretty Observations First Seen2023-03-07 12:39:42 Last Seen2023-03-11 10:54:56 Times Seen1 Hash 61bac2dfd257008573ab56cf3927aa69 cedb06e49223b89f0a6e04a829e733165abd7e02 a82b80b0ce09c5857b70282f25bd2cf3c481724d701b52b5b2b1c64a3273118a Loading...

	#2 Write - ee0a341d5c2e4232721a34dcc8325232	325 B	2023-03-10	2023-03-11
Pretty Observations First Seen2023-03-10 19:42:59 Last Seen2023-03-11 10:54:56 Times Seen1 Hash ee0a341d5c2e4232721a34dcc8325232 885552e97911be9dd0ee68285c15b509d88d78e6 193909bc4d1e48e34c3fc0c634f077efbe6a612b8d03ed56f49cb2f1b636d56d Loading...

	#3 Write - 6060b506074cdfd6dd501d5c0c7f364a	137 B	2023-03-10	2023-03-11
Pretty Observations First Seen2023-03-10 19:42:59 Last Seen2023-03-11 10:54:49 Times Seen1 Hash 6060b506074cdfd6dd501d5c0c7f364a cc16c04aab2eeacdf7ffe8b0453c82958f2dced2 9c3909f22445478530ec7e9ea8e26bfcea5ff97f2869c8d03c21d631e7447fad Loading...

HTTP Transactions (45)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b720c31d9c036cd2ef10e35fa29f5345
ac625d2e69284e5080bede4b37c31af62c26338b
323b76eceb5d3ad339a1c55bfa7eea4e39741258e08d5005b691f712a9e9c81c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "323B76ECEB5D3AD339A1C55BFA7EEA4E39741258E08D5005B691F712A9E9C81C"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17951
Expires: Sun, 06 Nov 2022 08:12:27 GMT
Date: Sun, 06 Nov 2022 03:13:16 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
72c64df35304c35cd95e4ed6e101e795
a39287987854d644a8da295da536fb31de8b44c1
a9bf0da57e0f108b376781ede4b9762ae1b0d088910d26fb7be98c2d03e69092

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5537
Cache-Control: max-age=114605
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:13:16 GMT
Etag: "63662d58-1d7"
Expires: Mon, 07 Nov 2022 11:03:21 GMT
Last-Modified: Sat, 05 Nov 2022 09:31:04 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

assistance-ing.com/

193.106.191.135

200 OK

1.4 MB

URL HTTP/1.1
assistance-ing.com/
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1995)
Size
1.4 MB (1363925 bytes)
Hash
b24d1814f4304cee5b24ebc00d1332a5
9abc4d379e7bc20f690f39ef8e6e270be5b7ee80
35f0274de1a8cb7fafab6241fb4189f028737bcba8d92002fd544448bdef44db

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:13:16 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
078950c3ba9ad01927f3da494b1d1de4
443c8a8247e4e3e04c14d21e0227fc4e8f396142
dd5dd09fec51669adf36b3014bbf65d7bff608f72018d037f9ed9b414675037c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DD5DD09FEC51669ADF36B3014BBF65D7BFF608F72018D037F9ED9B414675037C"
Last-Modified: Fri, 04 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17872
Expires: Sun, 06 Nov 2022 08:11:08 GMT
Date: Sun, 06 Nov 2022 03:13:16 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: Q8vPjd/xkud6mAGc2236lg732tDbY/cJbMT3QP87Oe2n4RmBVD+0oB7A5BbMPPW57W9q6solMh4=
x-amz-request-id: GAS7H5TQT5Y7C5D3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 06 Nov 2022 02:47:28 GMT
age: 1548
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 03:13:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

assistance-ing.com/files/browserDetection.js

193.106.191.135

200 OK

7.0 kB

URL HTTP/1.1
assistance-ing.com/files/browserDetection.js
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
ASCII text
Size
7.0 kB (6978 bytes)
Hash
b82febe7c2b62272267a31e6ba256a29
0c236cb2ca5818cab8ce1cd870aafe8a21fe257f
36d9c31ecadc672513376da21320d2a8cb438f74f6c83f7783c508f059cbcff0

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /files/browserDetection.js HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87

HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:13:16 GMT
Server: Apache
Last-Modified: Mon, 04 Apr 2022 07:21:18 GMT
Accept-Ranges: bytes
Content-Length: 6978
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/satelliteLib-ff943d4b1a9a84b593d43ab2733904d5acc749f1.js

23.38.200.237

200 OK

34 kB

URL HTTP/1.1
assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/satelliteLib-ff943d4b1a9a84b593d43ab2733904d5acc749f1.js
IP
23.38.200.237:0
ASN
#16625 AKAMAI-AS

File type
ASCII text, with very long lines (32751)
Size
34 kB (33805 bytes)
Hash
6764ff44cc0a7ef2a2ce9d6a416181fc
b6e29a3ff6b9dd5e119e4f737623939880114cbf
abedbbacf6b1e837b52f5f9aff44f7077747bd92658116bfc417822e9e454498

HTTP Headers

GET /a643f33e6621210551ad9868839da5caa659a6f2/satelliteLib-ff943d4b1a9a84b593d43ab2733904d5acc749f1.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "b2777e6e7ab9a1f011cc4c6c6f232740:1571712873.291315"
Last-Modified: Tue, 22 Oct 2019 02:54:33 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 33805
Cache-Control: max-age=3600
Expires: Sun, 06 Nov 2022 04:13:16 GMT
Date: Sun, 06 Nov 2022 03:13:16 GMT
Connection: keep-alive
Access-Control-Allow-Origin: http://assistance-ing.com
Timing-Allow-Origin: *

assistance-ing.com/files/appcache.js

193.106.191.135

200 OK

695 B

URL HTTP/1.1
assistance-ing.com/files/appcache.js
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
ASCII text, with CRLF line terminators
Size
695 B (695 bytes)
Hash
987aae5a5804a44c52f0f1bbd0da87f0
b65cb10812e995c24f13b4d6862e4c3d072e7c24
cffc9b360c3ba5588a27bcaf79e2f0ce9af794d37d3808fa1ecba8c8078d1640

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /files/appcache.js HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87

HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:13:16 GMT
Server: Apache
Last-Modified: Mon, 04 Apr 2022 07:21:18 GMT
Accept-Ranges: bytes
Content-Length: 695
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/scripts/satellite-599fd3ae64746d27bc002479.js

23.38.200.237

200 OK

935 B

URL HTTP/2
assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/scripts/satellite-599fd3ae64746d27bc002479.js
IP
23.38.200.237:0
ASN
#16625 AKAMAI-AS

File type
ASCII text
Size
935 B (935 bytes)
Hash
bb27e330209b99b31a6affc1af9d69b9
8cc82078003cda0f9c6ddc133b3593eb0bc55031
c8c87c07df2868643b35a7be6dcd6e144b46d40beaae09c37c3a29561c8a855e

HTTP Headers

GET /a643f33e6621210551ad9868839da5caa659a6f2/scripts/satellite-599fd3ae64746d27bc002479.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://assistance-ing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "8efc231a284c40905bfdbed761e7ae7b:1571712876.117213"
last-modified: Tue, 22 Oct 2019 02:54:36 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 935
cache-control: max-age=3600
expires: Sun, 06 Nov 2022 04:13:16 GMT
date: Sun, 06 Nov 2022 03:13:16 GMT
access-control-allow-origin: http://assistance-ing.com
timing-allow-origin: *
X-Firefox-Spdy: h2

assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/s-code-contents-4cfc297b5ea80996c7a1082decba20b2224a4720.js

23.38.200.237

200 OK

16 kB

URL HTTP/2
assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/s-code-contents-4cfc297b5ea80996c7a1082decba20b2224a4720.js
IP
23.38.200.237:0
ASN
#16625 AKAMAI-AS

File type
ASCII text, with very long lines (954)
Size
16 kB (16131 bytes)
Hash
d3a1c00299cbcb59ba81750fdee644da
e5f7da1a3f668cb65c50c971e7f490453bdd7226
557ecbd61920c7b664fa6b328d5e574b4ec74d1a086a6738a63c6fca640175a4

HTTP Headers

GET /a643f33e6621210551ad9868839da5caa659a6f2/s-code-contents-4cfc297b5ea80996c7a1082decba20b2224a4720.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://assistance-ing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "adf761c96173ddb28b5f1fba4ce800fd:1571712875.069973"
last-modified: Tue, 22 Oct 2019 02:54:35 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 16131
cache-control: max-age=3600
expires: Sun, 06 Nov 2022 04:13:16 GMT
date: Sun, 06 Nov 2022 03:13:16 GMT
access-control-allow-origin: http://assistance-ing.com
timing-allow-origin: *
X-Firefox-Spdy: h2

assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/scripts/satellite-5b5e9f6464746d2176000c4d.js

23.38.200.237

200 OK

133 B

URL HTTP/2
assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/scripts/satellite-5b5e9f6464746d2176000c4d.js
IP
23.38.200.237:0
ASN
#16625 AKAMAI-AS

File type
ASCII text
Size
133 B (133 bytes)
Hash
8a43043963a33c016030dbedb42de161
986acdc347ad7e582557ef024e3d4956b46d0a7b
9818741551f1b5c39f44b843807020642ba55e35a7a94338ea58d5f46221fd90

HTTP Headers

GET /a643f33e6621210551ad9868839da5caa659a6f2/scripts/satellite-5b5e9f6464746d2176000c4d.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://assistance-ing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "513c8fe30f88b362b9720669cfc89e75:1571712875.723561"
last-modified: Tue, 22 Oct 2019 02:54:35 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 133
cache-control: max-age=3600
expires: Sun, 06 Nov 2022 04:13:16 GMT
date: Sun, 06 Nov 2022 03:13:16 GMT
access-control-allow-origin: http://assistance-ing.com
timing-allow-origin: *
X-Firefox-Spdy: h2

assistance-ing.com/files/webcomponentsloader.js

193.106.191.135

200 OK

2.0 kB

URL HTTP/1.1
assistance-ing.com/files/webcomponentsloader.js
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
HTML document text\012- HTML document, ASCII text
Size
2.0 kB (2022 bytes)
Hash
c88be5f8309b7f89121e6389450b8270
d724770d4798049a501e2cd4a9ee3cc02ab1a48a
b6e713326b2efe10bfebd18e6a1ff0ccec291d87c31de7cc09c3e16fffb3e6ce

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /files/webcomponentsloader.js HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87

HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:13:16 GMT
Server: Apache
Last-Modified: Mon, 04 Apr 2022 07:21:18 GMT
Accept-Ranges: bytes
Content-Length: 2022
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
e13e65ad7f6f12300b12d6cd6936d621
575faf606b5c5e39e0fbbef59998bcd3625aa141
10787f99c02b63d52b9b74fcec9497108d67c56c4a9436e0e3c9a7129d727dda

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:13:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

assistance-ing.com/files/webcomponents-lite.min.js

193.106.191.135

200 OK

40 kB

URL HTTP/1.1
assistance-ing.com/files/webcomponents-lite.min.js
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
Unicode text, UTF-8 text, with very long lines (32004)
Size
40 kB (40547 bytes)
Hash
32b5a9b7ada86304bec6b43d3f2194f0
6c4edd8efa046627216a625bf8f8903d41a9fe87
abe23ee1968e6b4d601df4f547cd7ace646b15d520f171d4cd6e5d4ad895e127

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /files/webcomponents-lite.min.js HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87

HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:13:16 GMT
Server: Apache
Last-Modified: Mon, 04 Apr 2022 07:21:18 GMT
Accept-Ranges: bytes
Content-Length: 40547
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

assistance-ing.com/files/jquery.js

193.106.191.135

200 OK

90 kB

URL HTTP/1.1
assistance-ing.com/files/jquery.js
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
ASCII text, with very long lines (65447)
Size
90 kB (89501 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /files/jquery.js HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87

HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:13:16 GMT
Server: Apache
Last-Modified: Mon, 04 Apr 2022 07:21:18 GMT
Accept-Ranges: bytes
Content-Length: 89501
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

assistance-ing.com/webcomponents-lite.min.js

193.106.191.135

404 Not Found

315 B

URL HTTP/1.1
assistance-ing.com/webcomponents-lite.min.js
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /webcomponents-lite.min.js HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87

HTTP/1.1 404 Not Found
Date: Sun, 06 Nov 2022 03:13:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

assistance-ing.com/files/Logo-footer-public@2x.png

193.106.191.135

200 OK

4.6 kB

URL HTTP/1.1
assistance-ing.com/files/Logo-footer-public@2x.png
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
PNG image data, 380 x 43, 8-bit/color RGBA, non-interlaced\012- data
Size
4.6 kB (4563 bytes)
Hash
3e16edac5327fa60e90c020cfecd1d26
92bddf8eec391e4dc7ea25ca9487694ec2ae10d5
b8074872912ecf763ea36a40e7e360c03bb1490098166cbb7cb0f4684df58947

HTTP Headers

GET /files/Logo-footer-public@2x.png HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87

HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:13:16 GMT
Server: Apache
Last-Modified: Mon, 04 Apr 2022 07:21:18 GMT
Accept-Ranges: bytes
Content-Length: 4563
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

assistance-ing.com/files/Logo-sm@2x.png

193.106.191.135

200 OK

10 kB

URL HTTP/1.1
assistance-ing.com/files/Logo-sm@2x.png
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
PNG image data, 380 x 85, 8-bit/color RGBA, non-interlaced\012- data
Size
10 kB (10252 bytes)
Hash
b5b1e3f79d5be299b837fe381b5a779b
1e20bdd875abe348f6deeb17fa63d7f2ea9b4fd4
ea03709d343c6c8835c527eb160f00b9e39e11461f0e929992964d127edade11

HTTP Headers

GET /files/Logo-sm@2x.png HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87

HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:13:16 GMT
Server: Apache
Last-Modified: Mon, 04 Apr 2022 07:21:18 GMT
Accept-Ranges: bytes
Content-Length: 10252
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
e13e65ad7f6f12300b12d6cd6936d621
575faf606b5c5e39e0fbbef59998bcd3625aa141
10787f99c02b63d52b9b74fcec9497108d67c56c4a9436e0e3c9a7129d727dda

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:13:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/scripts/satellite-5b5e9f6464746d2176000c4d.js

23.38.200.237

200 OK

133 B

URL HTTP/1.1
assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/scripts/satellite-5b5e9f6464746d2176000c4d.js
IP
23.38.200.237:0
ASN
#16625 AKAMAI-AS

File type
ASCII text
Size
133 B (133 bytes)
Hash
8a43043963a33c016030dbedb42de161
986acdc347ad7e582557ef024e3d4956b46d0a7b
9818741551f1b5c39f44b843807020642ba55e35a7a94338ea58d5f46221fd90

HTTP Headers

GET /a643f33e6621210551ad9868839da5caa659a6f2/scripts/satellite-5b5e9f6464746d2176000c4d.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "513c8fe30f88b362b9720669cfc89e75:1571712875.723561"
Last-Modified: Tue, 22 Oct 2019 02:54:35 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 133
Cache-Control: max-age=3600
Expires: Sun, 06 Nov 2022 04:13:16 GMT
Date: Sun, 06 Nov 2022 03:13:16 GMT
Connection: keep-alive
Access-Control-Allow-Origin: http://assistance-ing.com
Timing-Allow-Origin: *

dpm.demdex.net/id?d_visid_ver=1.9.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=80F9246452D96D970A490D45%40AdobeOrg&d_nsid=0&ts=1667704395038

3.248.125.227

200 OK

217 B

URL HTTP/1.1
dpm.demdex.net/id?d_visid_ver=1.9.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=80F9246452D96D970A490D45%40AdobeOrg&d_nsid=0&ts=1667704395038
IP
3.248.125.227:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with no line terminators
Size
217 B (217 bytes)
Hash
6203ae58837b400079d4fdc88c09b9a7
fea3f08ea0af896197f1162607da3ced98e0b576
8580f6359175b561708b9c7788382028cc60eed2910384466b550dddbe3b24f3

HTTP Headers

GET /id?d_visid_ver=1.9.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=80F9246452D96D970A490D45%40AdobeOrg&d_nsid=0&ts=1667704395038 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Origin: http://assistance-ing.com
Connection: keep-alive
Referer: http://assistance-ing.com/

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://assistance-ing.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v045-06d6ad95b.edge-irl1.demdex.com 2 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=24586683198112574692757486228326207838; Max-Age=15552000; Expires=Fri, 05 May 2023 03:13:16 GMT; Path=/; Domain=.demdex.net
Vary: Origin
X-TID: +rXNtw6OSCY=
Content-Length: 217
Connection: keep-alive

assistance-ing.com/files/INGMeWeb-Regular.woff

193.106.191.135

200 OK

37 kB

URL HTTP/1.1
assistance-ing.com/files/INGMeWeb-Regular.woff
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
Web Open Font Format, TrueType, length 37344, version 1.0\012- data
Size
37 kB (37344 bytes)
Hash
9531ef579ed5b9569b6ed482aa1f297a
5274887d1ec5ec45971ec541df0d204a6512b8f7
4a0a7668aaa847d33f49023d0982c6331bc9705cad2586eccb8086a680ef534c

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /files/INGMeWeb-Regular.woff HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87; AMCV_80F9246452D96D970A490D45%40AdobeOrg=2121618341%7CMCIDTS%7C19303; _gcl_au=1.1.623184079.1667704395

HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:13:17 GMT
Server: Apache
Last-Modified: Mon, 04 Apr 2022 07:21:18 GMT
Accept-Ranges: bytes
Content-Length: 37344
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: font/woff

assistance-ing.com/files/icomoon.woff?-hzjjiq

193.106.191.135

200 OK

14 kB

URL HTTP/1.1
assistance-ing.com/files/icomoon.woff?-hzjjiq
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
Web Open Font Format, TrueType, length 13828, version 0.0\012- data
Size
14 kB (13828 bytes)
Hash
08635f4a4b9777666d0f91de7d17fa4e
e662eadd7648ff3bca4f632c9a4fe4d404cbb53d
78d4fb834d0fd693adfc0a60dcb7c2671dee2519dd7c9a11dfcdbebdbdfd54b5

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /files/icomoon.woff?-hzjjiq HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87; AMCV_80F9246452D96D970A490D45%40AdobeOrg=2121618341%7CMCIDTS%7C19303; _gcl_au=1.1.623184079.1667704395

HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:13:17 GMT
Server: Apache
Last-Modified: Mon, 04 Apr 2022 07:21:18 GMT
Accept-Ranges: bytes
Content-Length: 13828
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: font/woff

assistance-ing.com/files/ing-icon-font.woff?-hzjjiq

193.106.191.135

200 OK

5.5 kB

URL HTTP/1.1
assistance-ing.com/files/ing-icon-font.woff?-hzjjiq
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
Web Open Font Format, TrueType, length 5508, version 1.0\012- data
Size
5.5 kB (5508 bytes)
Hash
ac9ea5dd19d6c679a2c9f6987cbb50ec
79009ab4dd175c6b45e4f796ea937e10731730f7
7f61a1d17a23098dc105814179d444e39b1bf567d6a4bc2292fb63b21ed20997

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /files/ing-icon-font.woff?-hzjjiq HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87; AMCV_80F9246452D96D970A490D45%40AdobeOrg=2121618341%7CMCIDTS%7C19303; _gcl_au=1.1.623184079.1667704395

HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:13:17 GMT
Server: Apache
Last-Modified: Mon, 04 Apr 2022 07:21:18 GMT
Accept-Ranges: bytes
Content-Length: 5508
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: font/woff

www.googletagmanager.com/gtag/js?id=DC-8133842

142.250.74.168

200 OK

38 kB

URL HTTP/2
www.googletagmanager.com/gtag/js?id=DC-8133842
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
data
Size
38 kB (38292 bytes)
Hash
a1d59afa1efe789d1e6544a198c8cc66
163de62202df25679b975097fd0dd9f2afa3844e
e5cb35bd410aba4b717a1cc46814a88b50ff311f9514630dffa3480cb43b92e0

HTTP Headers

GET /gtag/js?id=DC-8133842 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://assistance-ing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 06 Nov 2022 03:13:16 GMT
expires: Sun, 06 Nov 2022 03:13:16 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44011
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/s-code-contents-4cfc297b5ea80996c7a1082decba20b2224a4720.js

23.38.200.237

200 OK

16 kB

URL HTTP/1.1
assets.adobedtm.com/a643f33e6621210551ad9868839da5caa659a6f2/s-code-contents-4cfc297b5ea80996c7a1082decba20b2224a4720.js
IP
23.38.200.237:0
ASN
#16625 AKAMAI-AS

File type
ASCII text, with very long lines (954)
Size
16 kB (16131 bytes)
Hash
d3a1c00299cbcb59ba81750fdee644da
e5f7da1a3f668cb65c50c971e7f490453bdd7226
557ecbd61920c7b664fa6b328d5e574b4ec74d1a086a6738a63c6fca640175a4

HTTP Headers

GET /a643f33e6621210551ad9868839da5caa659a6f2/s-code-contents-4cfc297b5ea80996c7a1082decba20b2224a4720.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "adf761c96173ddb28b5f1fba4ce800fd:1571712875.069973"
Last-Modified: Tue, 22 Oct 2019 02:54:35 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16131
Cache-Control: max-age=3600
Expires: Sun, 06 Nov 2022 04:13:17 GMT
Date: Sun, 06 Nov 2022 03:13:17 GMT
Connection: keep-alive
Access-Control-Allow-Origin: http://assistance-ing.com
Timing-Allow-Origin: *

assistance-ing.com/ing-index.html?v=1636086378055

193.106.191.135

404 Not Found

315 B

URL HTTP/1.1
assistance-ing.com/ing-index.html?v=1636086378055
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /ing-index.html?v=1636086378055 HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87; AMCV_80F9246452D96D970A490D45%40AdobeOrg=2121618341%7CMCIDTS%7C19303%7CMCMID%7C34070133972495342513103642531347250184%7CMCAAMLH-1668309195%7C6%7CMCAAMB-1668309195%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1667711595s%7CNONE; _gcl_au=1.1.623184079.1667704395; AMCVS_80F9246452D96D970A490D45%40AdobeOrg=1

HTTP/1.1 404 Not Found
Date: Sun, 06 Nov 2022 03:13:17 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

assistance-ing.com/static/cms-content/html/login/ing-login-content.html

193.106.191.135

404 Not Found

315 B

URL HTTP/1.1
assistance-ing.com/static/cms-content/html/login/ing-login-content.html
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /static/cms-content/html/login/ing-login-content.html HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87; AMCV_80F9246452D96D970A490D45%40AdobeOrg=2121618341%7CMCIDTS%7C19303%7CMCMID%7C34070133972495342513103642531347250184%7CMCAAMLH-1668309195%7C6%7CMCAAMB-1668309195%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1667711595s%7CNONE; _gcl_au=1.1.623184079.1667704395; AMCVS_80F9246452D96D970A490D45%40AdobeOrg=1

HTTP/1.1 404 Not Found
Date: Sun, 06 Nov 2022 03:13:17 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

assistance-ing.com/static/cms-content/html/footer/ing-footer-content.html

193.106.191.135

404 Not Found

315 B

URL HTTP/1.1
assistance-ing.com/static/cms-content/html/footer/ing-footer-content.html
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /static/cms-content/html/footer/ing-footer-content.html HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87; AMCV_80F9246452D96D970A490D45%40AdobeOrg=2121618341%7CMCIDTS%7C19303%7CMCMID%7C34070133972495342513103642531347250184%7CMCAAMLH-1668309195%7C6%7CMCAAMB-1668309195%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1667711595s%7CNONE; _gcl_au=1.1.623184079.1667704395; AMCVS_80F9246452D96D970A490D45%40AdobeOrg=1

HTTP/1.1 404 Not Found
Date: Sun, 06 Nov 2022 03:13:17 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

assistance-ing.com/static/cms-content/html/logged-out/ing-logged-out-content.html

193.106.191.135

404 Not Found

315 B

URL HTTP/1.1
assistance-ing.com/static/cms-content/html/logged-out/ing-logged-out-content.html
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /static/cms-content/html/logged-out/ing-logged-out-content.html HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87; AMCV_80F9246452D96D970A490D45%40AdobeOrg=2121618341%7CMCIDTS%7C19303%7CMCMID%7C34070133972495342513103642531347250184%7CMCAAMLH-1668309195%7C6%7CMCAAMB-1668309195%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1667711595s%7CNONE; _gcl_au=1.1.623184079.1667704395; AMCVS_80F9246452D96D970A490D45%40AdobeOrg=1

HTTP/1.1 404 Not Found
Date: Sun, 06 Nov 2022 03:13:17 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

assistance-ing.com/static/cms-content/html/header/ing-header-content.html

193.106.191.135

404 Not Found

315 B

URL HTTP/1.1
assistance-ing.com/static/cms-content/html/header/ing-header-content.html
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /static/cms-content/html/header/ing-header-content.html HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87; AMCV_80F9246452D96D970A490D45%40AdobeOrg=2121618341%7CMCIDTS%7C19303%7CMCMID%7C34070133972495342513103642531347250184%7CMCAAMLH-1668309195%7C6%7CMCAAMB-1668309195%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1667711595s%7CNONE; _gcl_au=1.1.623184079.1667704395; AMCVS_80F9246452D96D970A490D45%40AdobeOrg=1

HTTP/1.1 404 Not Found
Date: Sun, 06 Nov 2022 03:13:17 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

ingdirect.d1.sc.omtrdc.net/id?d_visid_ver=1.9.0&d_fieldgroup=A&mcorgid=80F9246452D96D970A490D45%40AdobeOrg&mid=34070133972495342513103642531347250184&ts=1667704395390

13.36.218.177

200 OK

2 B

URL HTTP/1.1
ingdirect.d1.sc.omtrdc.net/id?d_visid_ver=1.9.0&d_fieldgroup=A&mcorgid=80F9246452D96D970A490D45%40AdobeOrg&mid=34070133972495342513103642531347250184&ts=1667704395390
IP
13.36.218.177:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with no line terminators
Size
2 B (2 bytes)
Hash
99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

HTTP Headers

GET /id?d_visid_ver=1.9.0&d_fieldgroup=A&mcorgid=80F9246452D96D970A490D45%40AdobeOrg&mid=34070133972495342513103642531347250184&ts=1667704395390 HTTP/1.1
Host: ingdirect.d1.sc.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Origin: http://assistance-ing.com
Connection: keep-alive
Referer: http://assistance-ing.com/

HTTP/1.1 200 OK
access-control-allow-origin: http://assistance-ing.com
access-control-allow-credentials: true
date: Sun, 06 Nov 2022 03:13:17 GMT
p3p: CP="This is not a P3P policy"
server: jag
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 2
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff

assistance-ing.com/files/favicon.png

193.106.191.135

200 OK

4.3 kB

URL HTTP/1.1
assistance-ing.com/files/favicon.png
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced\012- data
Size
4.3 kB (4308 bytes)
Hash
275f365916d033ec31c01bffe4346cda
40ff760129947466b01f57a1a1cbd32e42da8c96
9ebb414e7f7e5beaac0086de794e3b97c01017abcbdf96a775e1dcd754326196

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /files/favicon.png HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87; AMCV_80F9246452D96D970A490D45%40AdobeOrg=2121618341%7CMCIDTS%7C19303%7CMCMID%7C34070133972495342513103642531347250184%7CMCAAMLH-1668309195%7C6%7CMCAAMB-1668309195%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1667711595s%7CNONE; _gcl_au=1.1.623184079.1667704395; AMCVS_80F9246452D96D970A490D45%40AdobeOrg=1

HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 03:13:17 GMT
Server: Apache
Last-Modified: Mon, 04 Apr 2022 07:21:18 GMT
Accept-Ranges: bytes
Content-Length: 4308
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png

assistance-ing.com/ico/144.png

193.106.191.135

404 Not Found

315 B

URL HTTP/1.1
assistance-ing.com/ico/144.png
IP
193.106.191.135:0
ASN
#59940 Kanzas LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /ico/144.png HTTP/1.1
Host: assistance-ing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assistance-ing.com/
Cookie: PHPSESSID=1f1c6aebda2cacb5c8d245471ab97c87; AMCV_80F9246452D96D970A490D45%40AdobeOrg=2121618341%7CMCIDTS%7C19303%7CMCMID%7C34070133972495342513103642531347250184%7CMCAAMLH-1668309195%7C6%7CMCAAMB-1668309195%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1667711595s%7CNONE; _gcl_au=1.1.623184079.1667704395; AMCVS_80F9246452D96D970A490D45%40AdobeOrg=1

HTTP/1.1 404 Not Found
Date: Sun, 06 Nov 2022 03:13:17 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
db63d54b77502dd6c7bdc792d4fd093e
026ad8186833988279468829c004c6e2a2f2626f
eff89ef67baa622e8a196ffcadc44d29aafff009bb531da3e979a1f47c3b1c36

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3360
Cache-Control: max-age=107370
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 03:13:17 GMT
Etag: "63661997-1d7"
Expires: Mon, 07 Nov 2022 09:02:47 GMT
Last-Modified: Sat, 05 Nov 2022 08:06:47 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

54.148.77.40

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.148.77.40:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: iHoQHNWZ/MkWvMKmhY9t7A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: JNBOOTyO6mqLJrtUqiQBLXIuTFI=

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18739
Expires: Sun, 06 Nov 2022 08:25:37 GMT
Date: Sun, 06 Nov 2022 03:13:18 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10462 bytes)
Hash
4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3fDf4aoep5tTAusisXhIdAf0A6SbpM5fYtYaiXtNSb0-VRJo5nu8Vg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 06:27:59 GMT
age: 74719
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b46edc3-3c38-432b-abec-6c61e93e3e1c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.9 kB (5944 bytes)
Hash
7b37723112370a0b108acac266a6dcfd
5434be2648f63624b7729c931c950e54c84d79a9
ae97a46d3825531022f51be38b5932c879fe3996073bad8bcf150e712c571814

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b46edc3-3c38-432b-abec-6c61e93e3e1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 5944
x-amzn-requestid: d3d52642-194b-455f-9e12-5fd306607035
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJatbFmLIAMFp1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7ef-03be7b6f337c5cf934c0d741;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:55 GMT
x-amz-cf-pop: SFO5-C3, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: TiExsCatpiBUi_m04amHP1xFN2Euj0Qq2RQEI8YOn_R2cmfB9yzlIg==
via: 1.1 7ba3caf71ae7a52dd411d1a543e80cd8.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:46:03 GMT
age: 19635
etag: "5434be2648f63624b7729c931c950e54c84d79a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44419343-1ead-483b-bb26-c35907f5e9b8.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12098 bytes)
Hash
c92234d28d67355984873ddf7f2bc85c
309a09b99f2419d6c45c271b67f387a6a62abd4a
436c965529e1e01b2b175fd72f45bab799f77028f1671978c16a37c61e267074

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44419343-1ead-483b-bb26-c35907f5e9b8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 12098
x-amzn-requestid: f8b11dcd-fb4c-4eda-a84d-2c36b08dfd16
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJbDWE7SoAMFatw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d87b-386cc0282685a0e8611a24ce;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:41:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: cuSzUxz5mU03--3mUK73KKUGQQVVu6rlF2oBXm-gBhbN9Y-V1YTXOA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 22:12:38 GMT
etag: "309a09b99f2419d6c45c271b67f387a6a62abd4a"
content-type: image/jpeg
age: 18040
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5cee1982-fead-41ba-9720-19ae491d0af1.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.3 kB (8309 bytes)
Hash
3929fb3c2f0dad9409e9b247ab891518
b8f906e9e3c3addf73e2d387c7238dc1ffe0bb28
64822bf90b140698a0043ea76542823a55daf3bb6ad1b6b3ba972c7fbb256bb5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5cee1982-fead-41ba-9720-19ae491d0af1.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 8309
x-amzn-requestid: 377e4474-c2ee-4477-be4b-18d264ca9aa5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJbgwH23IAMF3kA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d937-7692bcd1131d9749085800b0;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:44:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: JK-yLq7PeMFrcv4opjTjHprEUQ8IIBuHPzhz0ttxQx9GYdBY1EauBA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 22:17:07 GMT
age: 17771
etag: "b8f906e9e3c3addf73e2d387c7238dc1ffe0bb28"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d394a65-12f0-45e6-af37-57a983997faa.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.8 kB (9787 bytes)
Hash
886f94a2b6bfa041d40943e14fee4a18
deba663d6b38f0c151032b2d5b5b5d54f7dd78b0
620c1c5ae68bbbddf31b43bf51161b06d1a3da6b6872643637c057f05cceec6b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d394a65-12f0-45e6-af37-57a983997faa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9787
x-amzn-requestid: fbeabde7-9e76-468d-b945-a3ee931e5f74
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJabbHUPoAMFg_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d77c-1c372f9206e5923d360e9ed6;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UiyazpCisGgn3fc1ZqqIrF3pUpXHrPZqca5x7wINK-H_cP1ck1Pa8Q==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:48:58 GMT
age: 19460
etag: "deba663d6b38f0c151032b2d5b5b5d54f7dd78b0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc334794-344c-42b8-b888-09ae1b980b8f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.0 kB (8972 bytes)
Hash
d7eee78125f913e293f72d50cad14750
b67641e46a68d65f072afc70a8adcfe2e3aac6e4
1146c775722166bb64066ef8ec12aeed842a89dd9cbae011eba9e2cf952fc5e3

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc334794-344c-42b8-b888-09ae1b980b8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8972
x-amzn-requestid: ef054daa-06ba-4c49-a9cf-18ff2123c400
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJabaGl3oAMF5Jw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d77b-7fed4c2a447c3daa4ed6f9f2;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: JuHIea1omMu1inQPB5VfHb6R1r6xCyyq811JiW38QFqTXTMTmC-i_w==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:59:57 GMT
etag: "b67641e46a68d65f072afc70a8adcfe2e3aac6e4"
content-type: image/jpeg
age: 18801
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

cdn.appdynamics.com/adrum-ext.a5c406ae5697070ded3eee8312968928.js

143.204.55.129

200 OK

0 B

URL HTTP/2
cdn.appdynamics.com/adrum-ext.a5c406ae5697070ded3eee8312968928.js
IP
143.204.55.129:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /adrum-ext.a5c406ae5697070ded3eee8312968928.js HTTP/1.1
Host: cdn.appdynamics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://assistance-ing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript
date: Mon, 10 Oct 2022 20:44:43 GMT
server: nginx/1.16.1
last-modified: Wed, 17 Jun 2020 20:46:20 GMT
etag: W/"5eea811c-ca25"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cache-control: public, max-age=2678400, s-max-age=14400
timing-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AGbaP0NM71rv1lXZ3ivAC_fSIkmviGm8N79kjNcgN8NAC5R2ZT2TYQ==
age: 2269713
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (16)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations