Report - leguirek.com/product/8600b3599130.html

Report Overview

Submitted URL
leguirek.com/product/8600b3599130.html
IP
108.186.212.160
ASN
#54600 PEGTECHINC
Submitted
2023-01-30 12:46:11
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
4
Threat Detection Systems
34

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
leguirek.com	unknown	2020-05-04T21:00:21Z	2023-01-30T13:45:57Z	8.9 kB	168 kB	108.186.212.160
img.alicdn.com	8663	2015-03-04T08:06:39Z	2023-03-13T06:44:13Z	3.0 kB	1.4 MB	47.246.44.251
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2.4 kB	6.2 kB	95.101.11.115
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	44.239.122.196
www.2022smtjs-01.com	unknown	2022-06-10T00:07:58Z	2023-03-13T04:29:59Z	658 B	2.4 kB	121.54.163.59
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	60 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-01-30 12:46:15	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-01-30 12:46:15	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-01-30 12:46:16	high	116.204.159.190	Client IP	ETPRO MALWARE Possible Panda Banker DGA Lets Encrypt SSL Cert
2023-01-30 12:46:16	high	116.204.159.190	Client IP	ETPRO MALWARE Possible Panda Banker DGA Lets Encrypt SSL Cert

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-01-30	medium	leguirek.com/product/8600b3599130.html	Phishing
2023-01-30	medium	leguirek.com/template/company/xys_qiye1/skin/js/lg-hash.js	Phishing
2023-01-30	medium	leguirek.com/js/orsxg5a.script	Phishing
2023-01-30	medium	leguirek.com/template/company/xys_qiye1/skin/js/touch.js	Phishing
2023-01-30	medium	leguirek.com/template/company/xys_qiye1/skin/js/picturefill.min.js	Phishing
2023-01-30	medium	leguirek.com/template/company/xys_qiye1/skin/js/lg-fullscreen.js	Phishing
2023-01-30	medium	leguirek.com/template/company/xys_qiye1/skin/js/jquery.glide.js	Phishing
2023-01-30	medium	leguirek.com/template/company/xys_qiye1/skin/js/lg-thumbnail.js	Phishing
2023-01-30	medium	leguirek.com/template/company/xys_qiye1/skin/js/lightgallery.js	Phishing
2023-01-30	medium	leguirek.com/template/company/xys_qiye1/skin/js/lg-video.js	Phishing
2023-01-30	medium	leguirek.com/template/company/xys_qiye1/skin/js/bootstrap.js	Phishing
2023-01-30	medium	leguirek.com/template/company/xys_qiye1/skin/js/jquery.min.js	Phishing
2023-01-30	medium	leguirek.com/template/company/xys_qiye1/skin/js/lg-autoplay.js	Phishing
2023-01-30	medium	leguirek.com/template/company/xys_qiye1/skin/js/lg-zoom.js	Phishing
2023-01-30	medium	leguirek.com/template/company/xys_qiye1/skin/js/jquery.mousewheel.min.js	Phishing
2023-01-30	medium	leguirek.com/template/company/xys_qiye1/skin/js/lg-pager.js	Phishing
2023-01-30	medium	leguirek.com/template/company/xys_qiye1/skin/js/common.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (21)

	URL	Size	First Seen	Last Seen
	leguirek.com/template/company/xys_qiye1/skin/js/jquery.mousewheel.min.js	3.1 kB	2023-03-13	2023-03-13
Pretty URL leguirek.com/template/company/xys_qiye1/skin/js/jquery.mousewheel.min.js IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:24:09 Last Seen2023-03-13 12:24:09 Times Seen1 Hash b969a275bc24bff03696cc9f10477eae 212b89ef634adc37506bb6ed0996c0a2dc8dcc1d 4a45dd1bdfef1027b9272960b2202a8235115124e7e9715b0a98ed80d9b3db06 Loading...

	leguirek.com/template/company/xys_qiye1/skin/js/common.js	4.3 kB	2023-03-07	2024-01-07
Pretty URL leguirek.com/template/company/xys_qiye1/skin/js/common.js IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09:34 Last Seen2024-01-07 13:46:21 Times Seen32 Hash 81a92773acadf584bf9dbfc07f756c4e 4eab5a488d8a58eac0724a4ef8a4e93ffd8af440 e1fb8d4c12a31b334259888da64fee316be6447fd1b9ce2e849892ede0b777b3 Loading...

	leguirek.com/js/orsxg5a.script	112 B	2023-03-07	2023-04-01
Pretty URL leguirek.com/js/orsxg5a.script IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:27:17 Last Seen2023-04-01 11:23:21 Times Seen28 Hash f0591e4b89738eebeb06b6122360c3ec 148f3043475382577dab9dfa2a5bf5bb374741ca eb60ef5539eabd97835d587d51913fa2058c3050f21447a4219be9c7c52e1c9f Loading...

	leguirek.com/template/company/xys_qiye1/skin/js/jquery.glide.js	27 kB	2023-03-07	2024-01-07
Pretty URL leguirek.com/template/company/xys_qiye1/skin/js/jquery.glide.js IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09:34 Last Seen2024-01-07 13:46:20 Times Seen32 Hash 44c7effbd30983d4db54980c121f6adf 25b9e890b69a53f9b80df5b2a3839cc905cbdc1d 1a7c9a8d0fba832911d42a29b56340fb99cba63c50a7fd0bfc5b5b2712ba77c6 Loading...

	leguirek.com/template/company/xys_qiye1/skin/js/lightgallery.js	42 kB	2023-03-13	2023-03-13
Pretty URL leguirek.com/template/company/xys_qiye1/skin/js/lightgallery.js IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:24:09 Last Seen2023-03-13 12:24:09 Times Seen1 Hash 734692e9ad9e68c917884270944d78b6 57807c83285d6ad015d4ea72bb3816b9f5d5653b bbaac40a5a9acf8f811d4c9482f256d6094948087c64b2c27fe4b2601e524928 Loading...

	leguirek.com/product/8600b3599130.html	271 B	2023-03-13	2023-03-13
Pretty URL leguirek.com/product/8600b3599130.html IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:24:09 Last Seen2023-03-13 12:24:09 Times Seen1 Hash 4799925cea1c128942f3abe6130b99e5 e18c4a2341ec90d6bc93bcc12c2e41e6d858b87e 1e2a65a9ff0c4d552b2505144f3d533ad6365bfd8b4d8a5daa182afba060b6c7 Loading...

	leguirek.com/template/company/xys_qiye1/skin/js/picturefill.min.js	7.7 kB	2023-03-13	2023-03-13
Pretty URL leguirek.com/template/company/xys_qiye1/skin/js/picturefill.min.js IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:24:09 Last Seen2023-03-13 12:24:09 Times Seen1 Hash 9f1f07fc308bab277c021d697a348d15 5ee0f4ad497e4968fa5adb373829ed46367da16e 480c21ed86d8351b0f8e6f16c76cc4ff15a62fdc1e9c469918f998001fb2045d Loading...

	leguirek.com/template/company/xys_qiye1/skin/js/lg-video.js	9.3 kB	2023-03-13	2023-03-13
Pretty URL leguirek.com/template/company/xys_qiye1/skin/js/lg-video.js IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:24:09 Last Seen2023-03-13 12:24:09 Times Seen1 Hash 71face0b24cb94aff1e4cc53c30ebda3 11ccf57efab950eca8121fa25ad9acc8fe907751 7099c744c6202c457c658460ece06075f8eeb1feed4402016434b569f228bbf1 Loading...

	leguirek.com/template/company/xys_qiye1/skin/js/bootstrap.js	73 kB	2023-03-07	2024-01-07
Pretty URL leguirek.com/template/company/xys_qiye1/skin/js/bootstrap.js IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09:34 Last Seen2024-01-07 13:46:21 Times Seen64 Hash 040d96f1b65d3502d1b54e8824ed833c 405c071f9f798a92fcdf41782159209ef186e0e9 2a7329353dd61e04b69d64a56590b0191b093307db76e0c492fa83afdb2e4d8e Loading...

	leguirek.com/template/company/xys_qiye1/skin/js/lg-zoom.js	14 kB	2023-03-13	2023-03-13
Pretty URL leguirek.com/template/company/xys_qiye1/skin/js/lg-zoom.js IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:24:09 Last Seen2023-03-13 12:24:09 Times Seen1 Hash b21b2bea37b1497ed46d6464fb1a2f72 b67d088ee5002ada9a604c131bbfae7bb64e52cf c9671b2400cef5f666eafbfe46634a7035b3ce7aa74deb78bcae172cfd0859d0 Loading...

	leguirek.com/template/company/xys_qiye1/skin/js/lg-fullscreen.js	3.3 kB	2023-03-13	2023-03-13
Pretty URL leguirek.com/template/company/xys_qiye1/skin/js/lg-fullscreen.js IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:24:09 Last Seen2023-03-13 12:24:09 Times Seen1 Hash 4d0748fde65f228660b81c37528a90b5 65697d511d678593a8bbec984f48c14d47168dfe c663a2121b272d50bfb88b4ec881641a11811fb69cbb4aaa58b5b2ba9a237bcd Loading...

	leguirek.com/template/company/xys_qiye1/skin/js/lg-hash.js	2.0 kB	2023-03-13	2023-03-13
Pretty URL leguirek.com/template/company/xys_qiye1/skin/js/lg-hash.js IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:24:09 Last Seen2023-03-13 12:24:09 Times Seen1 Hash a1b7d9411bcaa8e915bccd999737250f ce80dae0f128a2cd08f641cb18113181223d43b7 9c9a69fb85b844bdb32bc8a2c5c75c1cd79f17abe3044f8b4950fb3fdd8a485d Loading...

	leguirek.com/template/company/xys_qiye1/skin/js/lg-pager.js	3.0 kB	2023-03-13	2023-03-13
Pretty URL leguirek.com/template/company/xys_qiye1/skin/js/lg-pager.js IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:24:09 Last Seen2023-03-13 12:24:09 Times Seen1 Hash 4abe14423910204bf115b17208a88b9c 202bf037830d53506f97f1f3586eac9e13e33edd e6f9fc2d906231525b0b7efc09611da63a0011dd62e8f3fe4bd9d919cf2ade88 Loading...

	leguirek.com/template/company/xys_qiye1/skin/js/lg-thumbnail.js	15 kB	2023-03-13	2023-03-13
Pretty URL leguirek.com/template/company/xys_qiye1/skin/js/lg-thumbnail.js IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:24:09 Last Seen2023-03-13 12:24:09 Times Seen1 Hash 371999caf11e3ce1bcf907eca6539b1c 3f0625c7ffa5c19c703de304d3b8522279e51c6b 77f4f33056c12ecc662c63d4e284062db0c8e558c7222bda202c799f33e5f2af Loading...

	www.2022smtjs-01.com/js/01smt.js	3.9 kB	2023-03-07	2023-03-26
Pretty URL www.2022smtjs-01.com/js/01smt.js IP 121.54.163.59 ASN #132839 POWER LINE DATACENTER Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:02:14 Last Seen2023-03-26 08:34:14 Times Seen18 Hash 94b831d272255576c91b7126605b43cc ef6cd70cfd61ee451145376bca63a412f1c490bf 60fd222564232da0ac6fc034eba6e512ada7eb6f7e1852a9d6784ff3c6a82805 Loading...

	leguirek.com/template/company/xys_qiye1/skin/js/jquery.min.js	96 kB	2023-03-07	2024-04-26
Pretty URL leguirek.com/template/company/xys_qiye1/skin/js/jquery.min.js IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:14 Last Seen2024-04-26 01:02:16 Times Seen2838 Hash 13c0a5055cca7b2463b2f73701960b9e e6082a7b52db82604ac446d2e6a32cb5af263781 20e11ce61890c08c0529911822233c9023ebc367df6c1050dec105e2b9628104 Loading...

	leguirek.com/template/company/xys_qiye1/skin/js/lg-autoplay.js	6.1 kB	2023-03-13	2023-03-13
Pretty URL leguirek.com/template/company/xys_qiye1/skin/js/lg-autoplay.js IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:24:09 Last Seen2023-03-13 12:24:09 Times Seen1 Hash 532b9cd810051cb3d1554c0b490aac63 67dd4279571c45286c800478079f03f9e680f58f 491d2ef0bd6fb9f692e1440dd951350195e41a77bd450ca14d76226fe3696515 Loading...

	leguirek.com/template/company/xys_qiye1/skin/js/touch.js	5.2 kB	2023-03-13	2023-03-13
Pretty URL leguirek.com/template/company/xys_qiye1/skin/js/touch.js IP 108.186.212.160 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:24:09 Last Seen2023-03-13 12:24:09 Times Seen1 Hash ad8828223f00d5d60c8b3b4c02040e4d 65492461ae06fa5df3669786e5a0cee51a325d88 99feb2bbae6217870268e9b353189edcf4c95fb5db752d3d72b5d6a5727d36a8 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 84e0d7ddd860f688c9aec3fb1fd33aac	448 B	2023-03-13	2023-03-13
Pretty Observations First Seen2023-03-13 07:58:59 Last Seen2023-03-13 12:24:09 Times Seen1 Hash 84e0d7ddd860f688c9aec3fb1fd33aac b6f7fcd1f3318a7c61e06ecc050f1aa4c7578e67 140cb918c5c8b145153e62ce657f622b7b239b11d7e3adb55a2e917d184a2856 Loading...

		Size	First Seen	Last Seen
	#1 Write - 19aa3d6558d73ddd7e193e5a0f9efe2a	87 B	2023-03-07	2023-04-01
Pretty Observations First Seen2023-03-07 01:27:17 Last Seen2023-04-01 11:23:21 Times Seen28 Hash 19aa3d6558d73ddd7e193e5a0f9efe2a 48c31f21ec6c183d19a78c56331c3c3cfa28e29d 97e68c2bc84aea0bc72fc605a4f88bc1e3a5e7ec00d0b43dbcfe400807438ca6 Loading...

	#2 Write - e08c7de3d7174e8fc34bcfd88014e8cc	429 B	2023-03-13	2023-03-13
Pretty Observations First Seen2023-03-13 07:58:59 Last Seen2023-03-13 12:24:09 Times Seen1 Hash e08c7de3d7174e8fc34bcfd88014e8cc aa6539cec3a5703529ca03d026baab4d77eb802e c1e7d5ef07434b4cee403003ac71a25648ad9026a0409c573086321e91051e30 Loading...

HTTP Transactions (53)

URL IP Response Size

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19568
Expires: Mon, 30 Jan 2023 18:12:09 GMT
Date: Mon, 30 Jan 2023 12:46:01 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
0c35c3ec659d3a26ea97e68d787bb043
d97e3672244efec5b7814f2d8a734cd1a9387854
4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8741
Expires: Mon, 30 Jan 2023 15:11:42 GMT
Date: Mon, 30 Jan 2023 12:46:01 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 12:35:42 GMT
content-type: application/json
age: 619
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
09ee4b0fe6cf4ca5ed31b24452338d00
7e62b6e20f0d4737f4a8d94f9818a0883027839e
56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3702
Expires: Mon, 30 Jan 2023 13:47:43 GMT
Date: Mon, 30 Jan 2023 12:46:01 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: Pg8SBxabyCoBbgcpdbLZiZnal6C3qWkgdzRk8FsQ9ficMKaC5XIgAyRvIEehIjp69yhqU2XxT6I=
x-amz-request-id: ZY49XR93H3DMMJY1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 11:50:43 GMT
age: 3318
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 12:46:01 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

leguirek.com/product/8600b3599130.html

108.186.212.160

200 OK

4.0 kB

URL HTTP/1.1
leguirek.com/product/8600b3599130.html
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (390), with CRLF, CR line terminators
Size
4.0 kB (3962 bytes)
Hash
9d552c81f877fb43e5241341b34acf03
f513c0cfe4332a98384d36ef804856b691bd98e0
2528fb9054ae3abcf501094b404d559fe1e7d524d02876c6af57789d1d37d595

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /product/8600b3599130.html HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: PHP/7.2.34, ASP.NET
Date: Mon, 30 Jan 2023 12:45:59 GMT
Content-Length: 3962

img.alicdn.com/i1/759349144/O1CN018Hq2tJ2HQ0N8ChTwJ_!!759349144.jpg

47.246.44.251

200 OK

344 kB

URL HTTP/2
img.alicdn.com/i1/759349144/O1CN018Hq2tJ2HQ0N8ChTwJ_!!759349144.jpg
IP
47.246.44.251:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
JPEG image data, baseline, precision 8, 800x800, components 3\012- data
Size
344 kB (344518 bytes)
Hash
459002df50af928e51996a304cf1acd2
ef76998465605a3cf5be47e7d01c2cbfffd9640e
787ffee20ee7d8ec3a8c7754ed7638ebc55269e9afddf009e83dd0b4a4e876b2

HTTP Headers

GET /i1/759349144/O1CN018Hq2tJ2HQ0N8ChTwJ_!!759349144.jpg HTTP/1.1
Host: img.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://leguirek.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 344518
date: Mon, 20 Jun 2022 02:29:17 GMT
last-modified: Wed, 13 Apr 2022 02:49:07 GMT
picasso-ret-code: SUCCESS
request-time: 0.026
expires: Tue, 20 Jun 2023 02:29:17 GMT
cache-control: max-age=31536000
ali-swift-global-savetime: 1655692157
via: cache2.l2ot7-1[0,0,200-0,H], cache4.l2ot7-1[2,0], cache3.se1[0,0,200-0,H], cache5.se1[5,0]
access-control-allow-origin: *
age: 19390604
x-cache: HIT TCP_HIT dirn:2:87611409
x-swift-savetime: Thu, 08 Sep 2022 08:20:59 GMT
x-swift-cachetime: 24602898
s-rt: 5
timing-allow-origin: *
eagleid: 2ff62c9916750827617484840e
X-Firefox-Spdy: h2

img.alicdn.com/i3/1997666737/O1CN01sARP6z1zdamxI2yf1_!!1997666737.jpg

47.246.44.251

200 OK

62 kB

URL HTTP/2
img.alicdn.com/i3/1997666737/O1CN01sARP6z1zdamxI2yf1_!!1997666737.jpg
IP
47.246.44.251:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 800x800, components 3\012- data
Size
62 kB (61742 bytes)
Hash
f3840ec737d4fe365d3968dc0da31b13
6710ec636a87425343fed287410db191edeb26fa
a4d745e08e39901cc9f8004c5d420cb395bcda4b8720f0b867e31f38c95d8739

HTTP Headers

GET /i3/1997666737/O1CN01sARP6z1zdamxI2yf1_!!1997666737.jpg HTTP/1.1
Host: img.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://leguirek.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 61742
date: Fri, 03 Jun 2022 19:09:31 GMT
last-modified: Tue, 21 Dec 2021 04:53:30 GMT
picasso-ret-code: SUCCESS
request-time: 0.056
expires: Sat, 03 Jun 2023 19:09:31 GMT
cache-control: max-age=31536000
ali-swift-global-savetime: 1654283371
via: cache17.l2ot7-1[0,0,200-0,H], cache31.l2ot7-1[2,0], cache8.se1[0,0,200-0,H], cache5.se1[5,0]
access-control-allow-origin: *
age: 20799390
x-cache: HIT TCP_HIT dirn:4:142712879
x-swift-savetime: Wed, 19 Oct 2022 16:51:22 GMT
x-swift-cachetime: 19621089
s-rt: 5
timing-allow-origin: *
eagleid: 2ff62c9916750827617494845e
X-Firefox-Spdy: h2

leguirek.com/template/company/xys_qiye1/skin/js/lg-hash.js

108.186.212.160

200 OK

983 B

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/js/lg-hash.js
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
ASCII text, with CRLF line terminators
Size
983 B (983 bytes)
Hash
099803dbecf0d1551b63421d4711744a
f45a5f55913f13f06821280cbd8006b1ea60f667
78b42d2647c0f5dd498c846af07065b02b24f4d33aa60470e377751bc3b57d54

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/company/xys_qiye1/skin/js/lg-hash.js HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sun, 31 Jul 2016 13:57:14 GMT
Accept-Ranges: bytes
ETag: "4137557133ebd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 983

leguirek.com/js/orsxg5a.script

108.186.212.160

200 OK

112 B

URL HTTP/1.1
leguirek.com/js/orsxg5a.script
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
HTML document, ASCII text, with no line terminators
Size
112 B (112 bytes)
Hash
f0591e4b89738eebeb06b6122360c3ec
148f3043475382577dab9dfa2a5bf5bb374741ca
eb60ef5539eabd97835d587d51913fa2058c3050f21447a4219be9c7c52e1c9f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/orsxg5a.script HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/javascript
Server: Microsoft-IIS/7.5
X-Powered-By: PHP/7.2.34, ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 112

img.alicdn.com/i2/1844389197/O1CN01vV7qQa2HoHKUm5fwM_!!1844389197.jpg

47.246.44.251

200 OK

166 kB

URL HTTP/2
img.alicdn.com/i2/1844389197/O1CN01vV7qQa2HoHKUm5fwM_!!1844389197.jpg
IP
47.246.44.251:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 800x800, components 3\012- data
Size
166 kB (165791 bytes)
Hash
fdec7376139d13a50695d5d97ae34e93
ae4fc269e981389662c91be0b4e0dc132ff47d32
79354b18d969c5384f603bf8b8ad2cccbae312b6dd1bb5e21e21f5b766ee0081

HTTP Headers

GET /i2/1844389197/O1CN01vV7qQa2HoHKUm5fwM_!!1844389197.jpg HTTP/1.1
Host: img.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://leguirek.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 165791
date: Mon, 15 Aug 2022 20:39:24 GMT
last-modified: Fri, 12 Aug 2022 03:41:08 GMT
picasso-ret-code: SUCCESS
request-time: 0.048
traceid: 2ff6079b16605959644642539e
expires: Tue, 15 Aug 2023 20:39:24 GMT
cache-control: max-age=31536000
ali-swift-global-savetime: 1660595964
via: cache40.l2ot7-1[0,0,200-0,H], cache13.l2ot7-1[0,0], cache1.se1[0,0,200-0,H], cache5.se1[5,0]
access-control-allow-origin: *
age: 14486797
x-cache: HIT TCP_HIT dirn:4:194288119
x-swift-savetime: Thu, 01 Sep 2022 03:46:05 GMT
x-swift-cachetime: 30127999
s-rt: 5
timing-allow-origin: *
eagleid: 2ff62c9916750827617494841e
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 12:41:41 GMT
age: 260
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

img.alicdn.com/i3/679662339/O1CN01gX3Z731T9Ixai25AU_!!679662339.jpg

47.246.44.251

200 OK

455 kB

URL HTTP/2
img.alicdn.com/i3/679662339/O1CN01gX3Z731T9Ixai25AU_!!679662339.jpg
IP
47.246.44.251:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
JPEG image data, baseline, precision 8, 750x750, components 3\012- data
Size
455 kB (454807 bytes)
Hash
b7ecb3de23629910629275cf41acacdf
74e7fecefa6f508e0b20519646ddcf4bee01047c
14b7c88c0a1eaa6c941ce8d6f37f6e883bee32dfc18cd929c28af5453f6bd835

HTTP Headers

GET /i3/679662339/O1CN01gX3Z731T9Ixai25AU_!!679662339.jpg HTTP/1.1
Host: img.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://leguirek.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 454807
date: Thu, 21 Jul 2022 06:47:44 GMT
last-modified: Mon, 13 Dec 2021 02:15:50 GMT
picasso-ret-code: SUCCESS
request-time: 0.014
traceid: a3b5399c16583860641352762e
expires: Fri, 21 Jul 2023 06:47:44 GMT
cache-control: max-age=31536000
ali-swift-global-savetime: 1658386064
via: cache32.l2ot7-1[0,0,200-0,H], cache22.l2ot7-1[3,0], cache7.se1[0,1,200-0,H], cache5.se1[5,0]
access-control-allow-origin: *
age: 16696697
x-cache: HIT TCP_HIT dirn:3:116553606
x-swift-savetime: Mon, 26 Sep 2022 20:23:27 GMT
x-swift-cachetime: 25698257
s-rt: 5
timing-allow-origin: *
eagleid: 2ff62c9916750827617494842e
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12616
Expires: Mon, 30 Jan 2023 16:16:18 GMT
Date: Mon, 30 Jan 2023 12:46:02 GMT
Connection: keep-alive

leguirek.com/template/company/xys_qiye1/skin/js/touch.js

108.186.212.160

200 OK

2.8 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/js/touch.js
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
2.8 kB (2754 bytes)
Hash
1739605d331a553455bb6ee11288f682
e6686b4a2ceb9b22ddadb66852f1afbeb30b60b9
47f304c337d8544d94a833a6a498f6ff4e977c411ef204ca29b1801e4c65d9d5

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/company/xys_qiye1/skin/js/touch.js HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sun, 31 Jul 2016 13:57:14 GMT
Accept-Ranges: bytes
ETag: "17c23f7133ebd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 2754

leguirek.com/template/company/xys_qiye1/skin/css/style.css

108.186.212.160

200 OK

6.0 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/css/style.css
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
Unicode text, UTF-8 (with BOM) text, with very long lines (468), with CRLF line terminators
Size
6.0 kB (6002 bytes)
Hash
213bb0a6476b0f7d5870b7e834c0fc35
e74c65eabb64d361ea55a8145bc9822d4514eb7c
1611f32ae4c050110bdb19431ea6627e7ef87cdc06634ecf65d9a0454822f45f

HTTP Headers

GET /template/company/xys_qiye1/skin/css/style.css HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Mon, 04 Sep 2017 18:54:22 GMT
Accept-Ranges: bytes
ETag: "5fa7a738af25d31:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 6002

leguirek.com/template/company/xys_qiye1/skin/js/picturefill.min.js

108.186.212.160

200 OK

3.9 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/js/picturefill.min.js
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
ASCII text, with very long lines (7525), with CRLF, CR line terminators
Size
3.9 kB (3878 bytes)
Hash
0fc8a3065d7137734af4a5ff55dd9a04
ab224312a72af606a71e08a99fa94f1cf758dca4
683aa9025cfcc731410a3ec5845148d20157b37cce5fce246152e4a1a7c4842f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/company/xys_qiye1/skin/js/picturefill.min.js HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sun, 31 Jul 2016 13:57:14 GMT
Accept-Ranges: bytes
ETag: "7124427133ebd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 3878

img.alicdn.com/i2/759349144/O1CN01GwZGif2HQ0N8Ci1Ch_!!759349144.jpg

47.246.44.251

200 OK

321 kB

URL HTTP/2
img.alicdn.com/i2/759349144/O1CN01GwZGif2HQ0N8Ci1Ch_!!759349144.jpg
IP
47.246.44.251:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
JPEG image data, baseline, precision 8, 800x800, components 3\012- data
Size
321 kB (321218 bytes)
Hash
bedc1009791610a4c4b22fc04f874bd7
9971821e79506a25ed2d907ef94d1cc8e690e923
8f69f013445b75399a6e80658f1c3b7acf6a549b5802680bc60858384c4a9a75

HTTP Headers

GET /i2/759349144/O1CN01GwZGif2HQ0N8Ci1Ch_!!759349144.jpg HTTP/1.1
Host: img.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://leguirek.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 321218
date: Thu, 26 Jan 2023 02:09:48 GMT
last-modified: Mon, 10 Oct 2022 21:46:44 GMT
picasso-ret-code: SUCCESS
request-time: 0.015
traceid: 2ff618ab16746989887218436e
expires: Fri, 26 Jan 2024 02:09:48 GMT
cache-control: max-age=31536000
ali-swift-global-savetime: 1674698988
via: cache10.l2ot7-1[0,1,200-0,H], cache10.l2ot7-1[2,0], cache3.se1[166,165,200-0,M], cache5.se1[170,0]
access-control-allow-origin: *
age: 383773
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Mon, 30 Jan 2023 12:46:01 GMT
x-swift-cachetime: 31152227
s-rt: 170
timing-allow-origin: *
eagleid: 2ff62c9916750827617494848e
X-Firefox-Spdy: h2

leguirek.com/template/company/xys_qiye1/skin/js/lg-fullscreen.js

108.186.212.160

200 OK

1.2 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/js/lg-fullscreen.js
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
ASCII text, with CRLF line terminators
Size
1.2 kB (1181 bytes)
Hash
24e9f85b2eac49027fca60c274e07d8b
7a9f94324853b0ac174debd69c183cabbded6a65
9b061a5a329fc8bf33f2ffeb2358cb2733d29eeee9cd7453569c7bd04b9fed1d

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/company/xys_qiye1/skin/js/lg-fullscreen.js HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sun, 31 Jul 2016 13:57:14 GMT
Accept-Ranges: bytes
ETag: "7f4b497133ebd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 1181

leguirek.com/template/company/xys_qiye1/skin/js/jquery.glide.js

108.186.212.160

200 OK

8.5 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/js/jquery.glide.js
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
ISO-8859 text, with CRLF, CR line terminators
Size
8.5 kB (8518 bytes)
Hash
06f13a571218ac52a540713d423e85bb
48c3c9f06dc898ed1b380f6607b30e1b2028f48d
5734111bbfe3ca9544292203628526010a044b03fe6d365e45ed8018f2079299

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/company/xys_qiye1/skin/js/jquery.glide.js HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sat, 30 Jul 2016 11:59:06 GMT
Accept-Ranges: bytes
ETag: "2cf4b9c559ead11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 8518

leguirek.com/template/company/xys_qiye1/skin/js/lg-thumbnail.js

108.186.212.160

200 OK

4.1 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/js/lg-thumbnail.js
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
ASCII text, with CRLF line terminators
Size
4.1 kB (4143 bytes)
Hash
282593314cf08d77792da39a119dce15
1882f730cf51271566e3be3dcfc0ce227c41e7e0
ac6e0d2f2f44408ce72825beca93c47aad3cd17d74d318b4ba53409407388bda

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/company/xys_qiye1/skin/js/lg-thumbnail.js HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sun, 31 Jul 2016 13:57:14 GMT
Accept-Ranges: bytes
ETag: "d9ad4b7133ebd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 4143

push.services.mozilla.com/

44.239.122.196

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.239.122.196:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: POVmWcqx+LWaUgOxdth2Sw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: gUPC09jB+bPPDkzH6tMtlzAyAeg=

leguirek.com/template/company/xys_qiye1/skin/js/lightgallery.js

108.186.212.160

200 OK

12 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/js/lightgallery.js
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
ASCII text, with CRLF line terminators
Size
12 kB (11565 bytes)
Hash
dda1d094247b67b8e706d9df1180de07
da261d5bf7ca922f95b6d735a0d6272a5858ddc6
577d70271a646e6dc4216f9a06dfd56818857384cb1b4533c413e1854ea9ca59

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/company/xys_qiye1/skin/js/lightgallery.js HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sun, 31 Jul 2016 13:57:14 GMT
Accept-Ranges: bytes
ETag: "25e9467133ebd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 11565

www.2022smtjs-01.com/js/01smt.js

121.54.163.59

200 OK

1.8 kB

URL HTTP/1.1
www.2022smtjs-01.com/js/01smt.js
IP
121.54.163.59:0
ASN
#132839 POWER LINE DATACENTER

File type
HTML document text\012- HTML document, ASCII text, with very long lines (447), with CRLF line terminators
Size
1.8 kB (1816 bytes)
Hash
13f8a2a718c036b9c6c88d9f3e628219
8045753f512c3ae15725fff77ad86a5c37e07c9a
c283441fb80dd386c83248a0e3c272980c1aa29ab7ae38e3708e2bfe034b2d3d

HTTP Headers

GET /js/01smt.js HTTP/1.1
Host: www.2022smtjs-01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 12:46:02 GMT
Content-Type: application/javascript
Last-Modified: Sun, 15 May 2022 13:25:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6280ff57-f2f"
Expires: Tue, 31 Jan 2023 00:46:02 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip

leguirek.com/template/company/xys_qiye1/skin/js/lg-video.js

108.186.212.160

200 OK

2.7 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/js/lg-video.js
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
ASCII text, with CRLF line terminators
Size
2.7 kB (2653 bytes)
Hash
309a7068022c3f4df4adc243d7692ed4
f6ff01b969338de31a122bdcabecc11b35cbfd6f
fa2edffb336c028db1749b18d774b35fbb37993267162481cbd3ce06fe2174aa

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/company/xys_qiye1/skin/js/lg-video.js HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sun, 30 Oct 2016 01:23:42 GMT
Accept-Ranges: bytes
ETag: "50ed56404c32d21:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 2653

leguirek.com/template/company/xys_qiye1/skin/js/bootstrap.js

108.186.212.160

200 OK

21 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/js/bootstrap.js
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
ASCII text, with CRLF line terminators
Size
21 kB (21386 bytes)
Hash
bb2e1e7e0ec645095619088e5e8efb6e
108264b34d603174e0e2d7cf224bfa4a6f6e9956
d9f90f1ba997e81bcec86b857e345f32b11c5aa910c85974e2516e75d987ad56

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/company/xys_qiye1/skin/js/bootstrap.js HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sat, 30 Jul 2016 11:59:06 GMT
Accept-Ranges: bytes
ETag: "d99cb8c559ead11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 21386

leguirek.com/template/company/xys_qiye1/skin/js/jquery.min.js

108.186.212.160

200 OK

43 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/js/jquery.min.js
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
ASCII text, with very long lines (32038), with CRLF line terminators
Size
43 kB (42852 bytes)
Hash
fbea5738f328a099e093c95e34690ba8
7885255257820fc1d9c2354e49d0f2fa4e6b6aa4
edc5f7ac6a82277e5df6180508aa220b91079dcec5afdfe3e736caa5d4ee1bee

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/company/xys_qiye1/skin/js/jquery.min.js HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sat, 30 Jul 2016 11:59:06 GMT
Accept-Ranges: bytes
ETag: "8645b7c559ead11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 42852

leguirek.com/template/company/xys_qiye1/skin/js/lg-autoplay.js

108.186.212.160

200 OK

2.1 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/js/lg-autoplay.js
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
ASCII text, with CRLF line terminators
Size
2.1 kB (2069 bytes)
Hash
94660aadc912a7e0e0a0d89199b21416
5cfe2beca724c685cb8d9a32922084aafa6f4ee6
0329940ed648fbcaf456ef6073cd7cebc17e4dd7a77bcdfa2a1fd93eb2a56116

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/company/xys_qiye1/skin/js/lg-autoplay.js HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sun, 31 Jul 2016 13:57:14 GMT
Accept-Ranges: bytes
ETag: "8d72507133ebd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 2069

leguirek.com/template/company/xys_qiye1/skin/js/lg-zoom.js

108.186.212.160

200 OK

3.8 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/js/lg-zoom.js
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
ASCII text, with CRLF line terminators
Size
3.8 kB (3826 bytes)
Hash
05884d76484b38145626e88ce3bcf42b
b54b8198ad7791333e8826f9373c67b281016127
3bfce59b6fbcb9c19e94e43f6a3623e64a8dbb1791ba6a40ce1ed038f4ff762b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/company/xys_qiye1/skin/js/lg-zoom.js HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sun, 31 Jul 2016 13:57:14 GMT
Accept-Ranges: bytes
ETag: "e7d4527133ebd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 3826

leguirek.com/template/company/xys_qiye1/skin/css/glide.css

108.186.212.160

200 OK

1.0 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/css/glide.css
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
1.0 kB (1022 bytes)
Hash
d5c7aa021be21b626d1ef5426ef728cd
65d83c45d6e38927a07c7b08ac6075b04a26e5b8
9d0d2e7fc1e381124959fd73d3fe4b6f22135f80506a32c75ee7e5e07797cab5

HTTP Headers

GET /template/company/xys_qiye1/skin/css/glide.css HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sun, 30 Oct 2016 01:14:42 GMT
Accept-Ranges: bytes
ETag: "92bb43fe4a32d21:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 1022

leguirek.com/template/company/xys_qiye1/skin/css/detailGlide.css

108.186.212.160

200 OK

499 B

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/css/detailGlide.css
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
499 B (499 bytes)
Hash
ebc2684a96a34b394533540ca5904b78
cf88e116bf449e5da6fbc211ec12090d06ad0cf3
f86e12354c8e522b70b38429b838b69d72691a504319904de55aeebefaf5de5f

HTTP Headers

GET /template/company/xys_qiye1/skin/css/detailGlide.css HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sun, 30 Oct 2016 01:14:36 GMT
Accept-Ranges: bytes
ETag: "d61accfa4a32d21:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 499

leguirek.com/template/company/xys_qiye1/skin/css/lightgallery.css

108.186.212.160

200 OK

4.6 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/css/lightgallery.css
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
4.6 kB (4624 bytes)
Hash
3ac6dcff4c76eea9285d5ab294980321
96075e4e5ab562c5e22e7e51011508040875d6a8
9ec4ba8a984b1bc54b95b0ff1f6eea26cef2d58de61a4c648bfc32f9392a2293

HTTP Headers

GET /template/company/xys_qiye1/skin/css/lightgallery.css HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sun, 30 Oct 2016 01:14:48 GMT
Accept-Ranges: bytes
ETag: "cb102324b32d21:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 4624

leguirek.com/template/company/xys_qiye1/skin/js/jquery.mousewheel.min.js

108.186.212.160

200 OK

1.7 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/js/jquery.mousewheel.min.js
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
1.7 kB (1671 bytes)
Hash
a7caca8ac9c69d38e1ad6102ffbdbced
a90546702faf16134130ff61c14c4a7cc1a58db6
f2b0f248630a20b022d60b0526a33bec54264c51261a07f910d1e2ab8de324e2

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/company/xys_qiye1/skin/js/jquery.mousewheel.min.js HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sun, 31 Jul 2016 13:57:14 GMT
Accept-Ranges: bytes
ETag: "f5fb597133ebd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:01 GMT
Content-Length: 1671

leguirek.com/template/company/xys_qiye1/skin/js/lg-pager.js

108.186.212.160

200 OK

1.1 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/js/lg-pager.js
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
ASCII text, with CRLF line terminators
Size
1.1 kB (1109 bytes)
Hash
39155bd95d1f7c7961569b278d6ae4ba
0b3f151b18a0c350808fde58a4002e22ab0399f8
96abb639bf3866708b1f435c4b4853410bd57202b7e8e91f3ef3b32b77036dc9

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/company/xys_qiye1/skin/js/lg-pager.js HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sun, 31 Jul 2016 13:57:14 GMT
Accept-Ranges: bytes
ETag: "9b99577133ebd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:01 GMT
Content-Length: 1109

leguirek.com/template/company/xys_qiye1/skin/css/bootstrap.css

108.186.212.160

200 OK

31 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/css/bootstrap.css
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
Unicode text, UTF-8 text, with very long lines (593), with CRLF line terminators
Size
31 kB (31164 bytes)
Hash
23ad5c312711580882d4312a88be869f
81c12b89153d8648898b1bcd8ce9f16bd71d69aa
468dd67caecff58a86a8754268b7415cccbc24d714366e53f27b4894e1987934

HTTP Headers

GET /template/company/xys_qiye1/skin/css/bootstrap.css HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sun, 30 Oct 2016 01:14:29 GMT
Accept-Ranges: bytes
ETag: "5e1683f64a32d21:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:00 GMT
Content-Length: 31164

leguirek.com/template/company/xys_qiye1/skin/js/common.js

108.186.212.160

200 OK

1.9 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/js/common.js
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
Unicode text, UTF-8 (with BOM) text, with CRLF, CR line terminators
Size
1.9 kB (1928 bytes)
Hash
5a8493127917af5a13a1bc8c3ff24e63
77b8dc682fc2ccfde29c76c6f59c79f817413e64
ca4a54427437486e220eeb7c7e408e6f3892119ab5abfcdc7188d4e694580761

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/company/xys_qiye1/skin/js/common.js HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sat, 30 Jul 2016 11:59:06 GMT
Accept-Ranges: bytes
ETag: "5925bbc559ead11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:01 GMT
Content-Length: 1928

leguirek.com/template/company/xys_qiye1/skin/images/1.png

108.186.212.160

200 OK

2.5 kB

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/images/1.png
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
PNG image data, 1140 x 350, 8-bit/color RGBA, non-interlaced\012- data
Size
2.5 kB (2485 bytes)
Hash
4f1bdb599fd4a114a2b671a46e942ab2
8322b4db8fc9d78123998ce9de0a3510ea4c4112
4f034d1fa75f893eaa58a9fb5263592f4f7a7e904ceb1890b02b9fc61990fbb8

HTTP Headers

GET /template/company/xys_qiye1/skin/images/1.png HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Sun, 31 Jul 2016 05:44:04 GMT
Accept-Ranges: bytes
ETag: "c7c2f28beeead11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:01 GMT
Content-Length: 2485

www.2022smtjs-01.com/lb/smt_data.php?zq=smt&val=smplink&t=0.06989947972750865?v=06513394337727316

121.54.163.59

200 OK

60 B

URL HTTP/1.1
www.2022smtjs-01.com/lb/smt_data.php?zq=smt&val=smplink&t=0.06989947972750865?v=06513394337727316
IP
121.54.163.59:0
ASN
#132839 POWER LINE DATACENTER

File type
JSON data\012- , ASCII text, with no line terminators
Size
60 B (60 bytes)
Hash
603ea9e559af16bcbb0c20088f48390a
473cec4f720f58b9c45e27cae23dc6ec85ad2790
213e5ee9c6ca609b35c5b3e3b1c5e66587fc657635bedfedb5bd99061ed77b04

HTTP Headers

GET /lb/smt_data.php?zq=smt&val=smplink&t=0.06989947972750865?v=06513394337727316 HTTP/1.1
Host: www.2022smtjs-01.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://leguirek.com
Connection: keep-alive
Referer: http://leguirek.com/

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 12:46:02 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *

leguirek.com/template/company/xys_qiye1/skin/images/smallalpha.png

108.186.212.160

200 OK

121 B

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/images/smallalpha.png
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced\012- data
Size
121 B (121 bytes)
Hash
135817dbe920bca9bfb1385abeb9a204
b36df22b873eff7ba3e3a46a88aaf4421024ee48
befe73e9c78796d806a4ff7cf3eaf7101f00e30c58d95ddf27c584a0df358df7

HTTP Headers

GET /template/company/xys_qiye1/skin/images/smallalpha.png HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/template/company/xys_qiye1/skin/css/style.css

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Sun, 31 Jul 2016 13:57:12 GMT
Accept-Ranges: bytes
ETag: "bc8edd6f33ebd11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:01 GMT
Content-Length: 121

leguirek.com/template/company/xys_qiye1/skin/images/alpha.png

108.186.212.160

200 OK

121 B

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/images/alpha.png
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type
PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced\012- data
Size
121 B (121 bytes)
Hash
46db5488c98e1916eb0bd0255e9a4b7a
5e75d95daa1f5d2b57e9d5d6261210e58bde222f
04e5e746ae6f143498f95b1e0024100d4f34ff5b3f834757dabfccc24f511ebc

HTTP Headers

GET /template/company/xys_qiye1/skin/images/alpha.png HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/template/company/xys_qiye1/skin/css/style.css

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Sun, 31 Jul 2016 13:57:12 GMT
Accept-Ranges: bytes
ETag: "de54c36f33ebd11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:01 GMT
Content-Length: 121

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9759
Expires: Mon, 30 Jan 2023 15:28:42 GMT
Date: Mon, 30 Jan 2023 12:46:03 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9759
Expires: Mon, 30 Jan 2023 15:28:42 GMT
Date: Mon, 30 Jan 2023 12:46:03 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9759
Expires: Mon, 30 Jan 2023 15:28:42 GMT
Date: Mon, 30 Jan 2023 12:46:03 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg

34.120.237.76

200 OK

7.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.5 kB (7538 bytes)
Hash
131eb343c5abd61939457d69bd371348
ffb2035cf64fc83f01db5c6f26ffa264b6aac95b
8486eb9dc6325018f8721bc6f37408f260b6e652b145280f2d778d860d3ec2d5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7538
x-amzn-requestid: 8bec493a-9c81-4cfd-b6e9-66f4f3d55cb7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fOOJQEZSoAMFb1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf2a3b-5f0c9f3e4cac1ba26c802050;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 00:45:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3uybP14DBtrEK8ieNWHaQfz3Zl_JMl0_L9CGZgcusTjVCFIIaTpwIQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 00:23:18 GMT
age: 44565
etag: "ffb2035cf64fc83f01db5c6f26ffa264b6aac95b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.5 kB (8464 bytes)
Hash
fe31ee140c2fd62e616c8a1edc9e78bb
7aa5fbdc8156514770ae620e81f1afef1c77890f
799af4bf9fa07ed27ebdc9d1a3344ee8a2b6529f076c263495b93290c47a1cc4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8464
x-amzn-requestid: bf2cf356-ebb1-469b-ba35-a79bb009cad6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj3qGeboAMFzNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e697-7c96841f52b6a96d1b0eaf34;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UNub7Gd4S0ogn5EJhtJVu8q1qML5_4eL2lIPQXiAuXy_q-XiR4s-5w==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:55:21 GMT
etag: "7aa5fbdc8156514770ae620e81f1afef1c77890f"
content-type: image/jpeg
age: 53442
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.5 kB (9457 bytes)
Hash
51aa950d5eed7b90cab6632107092edc
e4388ced02e5576867e77547496dec1ac2338ef7
588830e5f725e8e56270565e40f817f2658b0ee7c0425d138e5f65a17ff40483

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9457
x-amzn-requestid: 7c48e5ca-2128-43da-ba83-fd91568af1ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkBOGHVoAMFQtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6d4-1b850ffd543f51f92dec3894;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: soTFEnYjNcti77h3FpnztwzR7ypv68NbyoI6DxS0NhU412ykFsWAgA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:00:38 GMT
age: 53125
etag: "e4388ced02e5576867e77547496dec1ac2338ef7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.7 kB (7679 bytes)
Hash
3e04b9eaf7449828136ad59e4c9d69f1
b820be4ed885dcf288eb6460c57e1fa7b1c7c476
df75cf7183d401a19655aab025d08ad2c498573c88b32e9b258d951d2993b936

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7679
x-amzn-requestid: 0c7983d5-6040-44e9-b394-21c3784702a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEtEfHoAMFaNA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-54c55dbd09ca642048af8916;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Wx-qjsrMLYpLmE-8QmpR46BeRySbUGL2Rrr6LqhEQ8jaEEj_6Aj0qg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:52:09 GMT
age: 53634
etag: "b820be4ed885dcf288eb6460c57e1fa7b1c7c476"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc895bb6-fa1f-4972-a2f8-5ce71b0c72c0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.7 kB (9700 bytes)
Hash
6d200552d23c85c199558b79cc24348f
8cc20b9ce98eeacd5b826268da24955a82e78a01
09b05ae6f75b5141401ddc49014e0eb2eac0856ba3b5020bc85f4a9a64d3d2a6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc895bb6-fa1f-4972-a2f8-5ce71b0c72c0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9700
x-amzn-requestid: 9f944a46-7e39-44c3-a640-3c7e9b778bca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkoEEkJIAMFs0w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7cd-4b29196f5bd1b2fb04e6363f;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Jdh2u-xrCjqq1SKWL7hCTqrlGRjbytuxecJS-cwiXb5FQypGKYbFzg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:55:35 GMT
age: 53428
etag: "8cc20b9ce98eeacd5b826268da24955a82e78a01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10997 bytes)
Hash
65c02d8a1b0d6a210cb2a649c5c67469
027dbc7a104c922904f067ed15d696c363c11774
89d5443a1d313c632d09a583ef602aa4645a16986076387329f434262d15b0a1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10997
x-amzn-requestid: a6fac0ab-1acf-4808-8785-3b4ec5e32edf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj30FX7IAMFa5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e698-005109ec2e76529e793678d6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: skGKI_MWvDwpAbGibUcr8wTlimgoPU9ZYhEHltd3uhdJZ_GoNznVAA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:53:08 GMT
age: 53575
etag: "027dbc7a104c922904f067ed15d696c363c11774"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

img.alicdn.com/i2/759349144/O1CN01W66qTc2HQ0NPyjD4N_!!759349144.jpg

47.246.44.251

200 OK

0 B

URL HTTP/2
img.alicdn.com/i2/759349144/O1CN01W66qTc2HQ0NPyjD4N_!!759349144.jpg
IP
47.246.44.251:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /i2/759349144/O1CN01W66qTc2HQ0NPyjD4N_!!759349144.jpg HTTP/1.1
Host: img.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://leguirek.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 537463
date: Mon, 30 Jan 2023 12:46:02 GMT
last-modified: Wed, 26 Oct 2022 11:06:14 GMT
picasso-ret-code: SUCCESS
request-time: 0.009
traceid: 2ff62c9916750827617494849e
expires: Tue, 30 Jan 2024 12:46:02 GMT
cache-control: max-age=31536000
ali-swift-global-savetime: 1675082762
via: cache38.l2ot7-1[203,203,200-0,M], cache23.l2ot7-1[310,0], cache5.se1[469,469,200-0,M], cache5.se1[474,0]
access-control-allow-origin: *
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Mon, 30 Jan 2023 12:46:02 GMT
x-swift-cachetime: 31536000
s-rt: 474
timing-allow-origin: *
eagleid: 2ff62c9916750827617494849e
X-Firefox-Spdy: h2

leguirek.com/template/company/xys_qiye1/skin/images/2.jpg

108.186.212.160

200 OK

0 B

URL HTTP/1.1
leguirek.com/template/company/xys_qiye1/skin/images/2.jpg
IP
108.186.212.160:0
ASN
#54600 PEGTECHINC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /template/company/xys_qiye1/skin/images/2.jpg HTTP/1.1
Host: leguirek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://leguirek.com/product/8600b3599130.html

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Tue, 02 Aug 2016 09:34:11 GMT
Accept-Ranges: bytes
ETag: "7c80656a1ecd11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 12:46:01 GMT
Content-Length: 237701

img.alicdn.com/i2/759349144/O1CN01GZV9NY2HQ0NHZJx8U_!!759349144.jpg

47.246.44.251

200 OK

0 B

URL HTTP/2
img.alicdn.com/i2/759349144/O1CN01GZV9NY2HQ0NHZJx8U_!!759349144.jpg
IP
47.246.44.251:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /i2/759349144/O1CN01GZV9NY2HQ0NHZJx8U_!!759349144.jpg HTTP/1.1
Host: img.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://leguirek.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 559416
date: Mon, 30 Jan 2023 12:46:01 GMT
last-modified: Tue, 25 Oct 2022 22:52:53 GMT
picasso-ret-code: SUCCESS
request-time: 0.011
traceid: 2ff62c9916750827617494846e
expires: Tue, 30 Jan 2024 12:46:01 GMT
cache-control: max-age=31536000
ali-swift-global-savetime: 1675082762
via: cache36.l2ot7-1[209,208,200-0,M], cache9.l2ot7-1[210,0], cache4.se1[372,372,200-0,M], cache5.se1[376,0]
access-control-allow-origin: *
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Mon, 30 Jan 2023 12:46:02 GMT
x-swift-cachetime: 31536000
s-rt: 376
timing-allow-origin: *
eagleid: 2ff62c9916750827617494846e
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (21)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML