| fundacaoiluminar.com.br/wp-admin/maint/10/nebujdfrsc |  50.116.87.58 | | 0 B |
URL fundacaoiluminar.com.br/wp-admin/maint/10/nebujdfrsc IP50.116.87.58:0 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-admin/maint/10/nebujdfrsc HTTP/1.1
Host: fundacaoiluminar.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
refresh: 0;url=https://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc
accept-ranges: none
content-length: 0
content-type: text/html; charset=UTF-8
date: Fri, 10 May 2024 12:08:12 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ct.contentsquare.net/ss/3776/58f9bb16-be1c-40a4-a9f6-764647d60c8c/26/uxa.js | 54.230.111.38 | 200 OK | 0 B |
URL GET HTTP/2ct.contentsquare.net/ss/3776/58f9bb16-be1c-40a4-a9f6-764647d60c8c/26/uxa.js IP54.230.111.38:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerAmazon Subjectct-tag.clicktale.net Fingerprint10:39:DF:70:AE:32:9B:84:B8:81:D6:1D:49:EF:00:D6:AD:D8:DD:B3 ValidityWed, 27 Mar 2024 00:00:00 GMT - Sat, 26 Apr 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ss/3776/58f9bb16-be1c-40a4-a9f6-764647d60c8c/26/uxa.js HTTP/1.1
Host: ct.contentsquare.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 0
last-modified: Wed, 18 Dec 2019 09:42:25 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Thu, 09 May 2024 14:13:41 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2u-z3LHxRp-1U5f_B6ZjXhHXHGyCw0Pbzjq_DIRWuQhWzowcYt3NAQ==
age: 0
timing-allow-origin: *
cache-control: max-age=900
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ct.contentsquare.net/ss/3776/58f9bb16-be1c-40a4-a9f6-764647d60c8c/44/ptc.js | 54.230.111.38 | 200 OK | 13 kB |
URL GET HTTP/2ct.contentsquare.net/ss/3776/58f9bb16-be1c-40a4-a9f6-764647d60c8c/44/ptc.js IP54.230.111.38:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerAmazon Subjectct-tag.clicktale.net Fingerprint10:39:DF:70:AE:32:9B:84:B8:81:D6:1D:49:EF:00:D6:AD:D8:DD:B3 ValidityWed, 27 Mar 2024 00:00:00 GMT - Sat, 26 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2457) Hashaa3cbdb491e81732a5d832f42af9c472 cfdfb96d9de6100037b91473ac60959314f6b648 9f532955099a9275d70302ecd0ba9fd9a311d3e8f746f5a607353152a599fa08
GET /ss/3776/58f9bb16-be1c-40a4-a9f6-764647d60c8c/44/ptc.js HTTP/1.1
Host: ct.contentsquare.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 13091
last-modified: Thu, 23 Mar 2023 23:58:56 GMT
x-amz-server-side-encryption: AES256
content-encoding: br
x-amz-version-id: aV2hZqOzpx_37U8zafww4Uug6Rd1lPK8
accept-ranges: bytes
server: AmazonS3
date: Thu, 09 May 2024 14:39:02 GMT
cache-control: max-age=900
etag: "358a149c6c09c7f0da1b6c9c624d51be"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5t3FxSDXbvbF0O6kHElCB-JIbHXxfy1C7PYc9_FRd55XQPH9nYX27g==
age: 0
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ct.contentsquare.net/ss/3776/58f9bb16-be1c-40a4-a9f6-764647d60c8c/44/uxa.js | 54.230.111.38 | 200 OK | 82 kB |
URL GET HTTP/2ct.contentsquare.net/ss/3776/58f9bb16-be1c-40a4-a9f6-764647d60c8c/44/uxa.js IP54.230.111.38:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerAmazon Subjectct-tag.clicktale.net Fingerprint10:39:DF:70:AE:32:9B:84:B8:81:D6:1D:49:EF:00:D6:AD:D8:DD:B3 ValidityWed, 27 Mar 2024 00:00:00 GMT - Sat, 26 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (49304) Hash7568eadb6fb48bd9ceeed54930db09b9 50c527e331236c33a122d63da565c33de895a513 a43a5476bf2d0008573d56fc46d518e589f46dfc3951bebeda21207c66634d7d
GET /ss/3776/58f9bb16-be1c-40a4-a9f6-764647d60c8c/44/uxa.js HTTP/1.1
Host: ct.contentsquare.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 81635
last-modified: Thu, 23 Mar 2023 23:58:58 GMT
x-amz-server-side-encryption: AES256
content-encoding: br
x-amz-version-id: oJ2xj_Hc9mDB57T9lt_0FSgNFz_2rThN
accept-ranges: bytes
server: AmazonS3
date: Thu, 09 May 2024 14:39:02 GMT
cache-control: max-age=900
etag: "b0c72483b62e5d7115a3ce535c891da7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aUYaKN05N2wCHwurphiLJJX3nQkwYaNg6mo0hndnQrgyIZLNoDL8sg==
age: 0
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/axp-script-supplier/5.1.2/script-supplier.js |  104.110.3.84 | 200 OK | 27 kB |
URL GET HTTP/2www.aexp-static.com/cdaas/one/axp-script-supplier/5.1.2/script-supplier.js IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (50952), with NEL line terminators Hash44eb8c26271dc0fdc48a99d625418d63 72b766568a27b14fcd7358a3434ec1cd2db8fcf5 9ad6508c3b1ec50fb822906413eef4ce884138325c780efa68eb945a255b43de
GET /cdaas/one/axp-script-supplier/5.1.2/script-supplier.js HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 10:52:18 GMT
etag: W/"62f0eae2-13f4b"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 26660
date: Fri, 10 May 2024 12:08:13 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/api/axpi/gct/1.0.0/VIDServiceDomestic.js | 104.110.3.84 | 200 OK | 964 B |
URL GET HTTP/2www.aexp-static.com/cdaas/api/axpi/gct/1.0.0/VIDServiceDomestic.js IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeC source, ASCII text, with very long lines (739), with CRLF line terminators Hash38b6bfbc51c97cbed3a9c199cf2214a8 674f8e3bcbd3820c604e7d53e08b3393ce2d16e8 1c3af0f5ae3a08efeae217399270988bf0e5251b5a44be77ab97fcba28602af9
GET /cdaas/api/axpi/gct/1.0.0/VIDServiceDomestic.js HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 21 Apr 2020 11:56:20 GMT
etag: W/"5e9edf64-9cc"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 964
date: Fri, 10 May 2024 12:08:13 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/one-identity-session/1.17.1/timeout.js | 104.110.3.84 | 200 OK | 11 kB |
URL GET HTTP/2www.aexp-static.com/cdaas/one/one-identity-session/1.17.1/timeout.js IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (33873) Hash5f1dd4c7239209f835dd644b6e36a9c3 b16b7ef7736750128d4720261cabf03aa1e3343f e179365f08ac25d54800342e439ee5b2427f5f5f6b2b67915c7a2e23b682927d
GET /cdaas/one/one-identity-session/1.17.1/timeout.js HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 04 Feb 2022 17:27:58 GMT
etag: W/"61fd621e-8708"
timing-allow-origin: *
access-control-allow-origin: https://global.americanexpress.com
access-control-allow-credentials: true
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 10965
date: Fri, 10 May 2024 12:08:13 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/api/axpi/omniture/visitorapi/5.0.1/visitorAPI-NonAAM.js | 104.110.3.84 | 200 OK | 21 kB |
URL GET HTTP/2www.aexp-static.com/cdaas/api/axpi/omniture/visitorapi/5.0.1/visitorAPI-NonAAM.js IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (31997), with CRLF line terminators Hash772c9c6eaeedba2508e606a78b991205 39832a714d5a9cfffbc522a14a7122d811da8002 d464cfeb6a0b8a7f2caf889cf11a9c1b1d77662d6b45a0ef1698bc16d5fe1250
GET /cdaas/api/axpi/omniture/visitorapi/5.0.1/visitorAPI-NonAAM.js HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 17 Oct 2022 12:01:07 GMT
etag: W/"634d4403-f769"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 20632
date: Fri, 10 May 2024 12:08:13 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/shared-scripts-contentsquare/1.0.8/csq.js | 104.110.3.84 | 200 OK | 559 B |
URL GET HTTP/2www.aexp-static.com/cdaas/one/shared-scripts-contentsquare/1.0.8/csq.js IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeJavaScript source, ASCII text Hashb2a8d44287800e168bbbb358f5d3263f 1332610f0f71b1a6f2310ef4c23877df839d32a3 d6cea3ef5423ab7bae0f90b5b9ff7b3d575b351e17dc4873174c5d40d1f55bd9
GET /cdaas/one/shared-scripts-contentsquare/1.0.8/csq.js HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Mar 2023 15:10:30 GMT
etag: W/"64230366-421"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 559
date: Fri, 10 May 2024 12:08:13 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/styles/dls.min.css | 104.110.3.84 | 200 OK | 51 kB |
URL GET HTTP/2www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/styles/dls.min.css IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash4bd9811ba7caedefaf1d5b4d348b5402 61de1ffedee8e64b1b383710f42eb9539aa0fe85 3488e209e7ecf29039fda4dfc5a98bfabb7a682c79bdb0d3e848dc5509fdc776
GET /cdaas/one/statics/axp-dls/5.11.2/package/dist/styles/dls.min.css HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 10 Oct 2019 22:16:00 GMT
etag: W/"5d9fada0-5655a"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
x-frame-options: DENY
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-security-policy: default-src 'self';
content-encoding: gzip
content-length: 51294
date: Fri, 10 May 2024 12:08:13 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/user-consent-management/1.6.6/UCM.js | 104.110.3.84 | 200 OK | 42 kB |
URL GET HTTP/2www.aexp-static.com/cdaas/one/user-consent-management/1.6.6/UCM.js IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (42165), with LF, NEL line terminators Hash9800b8b1d3e95db022afaa61ab87ab3b a0cf11b39cec89678b3b3e3039e8537a9384955f 98ec0a182491d0f23aaaedc0c771e65b88ad23038d22d27477e05b089f28db7c
GET /cdaas/one/user-consent-management/1.6.6/UCM.js HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Feb 2023 20:40:52 GMT
etag: W/"63fe66d4-20c5a"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 42087
date: Fri, 10 May 2024 12:08:13 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| icm.aexp-static.com/content/dam/chat/prod/lechat/css/chatFrame.css?70 | 104.110.3.84 | 200 OK | 3.3 kB |
URL GET HTTP/2icm.aexp-static.com/content/dam/chat/prod/lechat/css/chatFrame.css?70 IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash82650bd01c3776e0a465060e6d6dc506 a600a101a6b11a7cf38c9a0eb60af53f4352e297 43cd810f097c80c86e207e3115cb4bffbda760f9001e7a8e2329afab8985919d
GET /content/dam/chat/prod/lechat/css/chatFrame.css?70 HTTP/1.1
Host: icm.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
accept-ranges: bytes
access-control-allow-origin: *
content-encoding: br
etag: "46ec-59725f3079b96-gzip"
last-modified: Sun, 05 May 2024 16:11:39 GMT
server: Akamai Resource Optimizer
strict-transport-security: max-age=63072000; includeSubdomains;
vary: Accept-Encoding
x-content-type-options: nosniff
content-length: 3257
cache-control: public, must-revalidate, max-age=14400
date: Fri, 10 May 2024 12:08:13 GMT
X-Firefox-Spdy: h2
|
|
| icm.aexp-static.com/content/dam/chat/prod/lechat/js/chatButtonBootStrap.js?70 | 104.110.3.84 | 200 OK | 27 kB |
URL GET HTTP/2icm.aexp-static.com/content/dam/chat/prod/lechat/js/chatButtonBootStrap.js?70 IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (926), with CRLF line terminators Hash67f4fe4e3f7cf282addfc6d5b86d5780 f146ae0a6ebedd0614e0f999caa0a749058ab0bb 48df559b7f72977b57934382932681001ee1ea38375fb8bf6c51adecd9c587e1
GET /content/dam/chat/prod/lechat/js/chatButtonBootStrap.js?70 HTTP/1.1
Host: icm.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
accept-ranges: bytes
access-control-allow-origin: *
content-encoding: br
etag: "25ba7-5c8e3f2ab0243-gzip"
last-modified: Mon, 06 May 2024 23:53:11 GMT
server: Akamai Resource Optimizer
strict-transport-security: max-age=63072000; includeSubDomains
vary: Accept-Encoding
x-content-type-options: nosniff
content-length: 26810
cache-control: public, must-revalidate, max-age=14345
date: Fri, 10 May 2024 12:08:13 GMT
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-bluebox-solid.svg | 104.110.3.84 | 200 OK | 989 B |
URL GET HTTP/2www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-bluebox-solid.svg IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashd97d46fe48d19d2c4f236b9a2cfee5f3 a164f3588bb4b601c472461a24a6eec265bcf8c8 028f643755987211bf2f3add6c62ae1870a888cf2f4fe3040a4fac7dce2543ab
GET /cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-bluebox-solid.svg HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 31 Oct 2019 17:37:19 GMT
etag: W/"5dbb1bcf-962"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 989
date: Fri, 10 May 2024 12:08:13 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-stack.svg | 104.110.3.84 | 200 OK | 743 B |
URL GET HTTP/2www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-stack.svg IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash78af472d7f07aacd83d8e224c119950a b04f7889c9277106b40ef90b7b19c1091884d876 fc69234936c0df004440641a5df9ee1e3c3532df5780984f0f636e85e8788519
GET /cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-stack.svg HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 31 Oct 2019 17:37:19 GMT
etag: W/"5dbb1bcf-66e"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 743
date: Fri, 10 May 2024 12:08:13 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-stack-white.svg | 104.110.3.84 | 200 OK | 742 B |
URL GET HTTP/2www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-stack-white.svg IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash7c6c3493f958764fd6b2a550a98ab676 0d89801ff7089bcfddda2f22ab37da7155948ff7 56b8e90244c34621e294d3357edfef9a1467e501773ed21b25dc6367ab3d7803
GET /cdaas/one/statics/axp-static-assets/1.8.0/package/dist/img/logos/dls-logo-stack-white.svg HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 31 Oct 2019 17:37:19 GMT
etag: W/"5dbb1bcf-66b"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 742
date: Fri, 10 May 2024 12:08:13 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/statics/axp-static-assets/2.14.2/package/dist/img/flags/dls-flag-us.svg | 104.110.3.84 | 200 OK | 587 B |
URL GET HTTP/2www.aexp-static.com/cdaas/one/statics/axp-static-assets/2.14.2/package/dist/img/flags/dls-flag-us.svg IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash56addba553083eb384b100cbb7e8632f f718526f1ef720e5d361536615595d5bfc3c9688 5e60a20da0f769a6260d4ed755d615da930b87c62436f807a6ff32d000017d18
GET /cdaas/one/statics/axp-static-assets/2.14.2/package/dist/img/flags/dls-flag-us.svg HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Fri, 04 Sep 2020 17:15:25 GMT
etag: W/"5f52762d-15f8"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 587
date: Fri, 10 May 2024 12:08:13 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.7.1/package/dist/img/logos/dls-logo-line.svg | 104.110.3.84 | 200 OK | 712 B |
URL GET HTTP/2www.aexp-static.com/cdaas/one/statics/axp-static-assets/1.7.1/package/dist/img/logos/dls-logo-line.svg IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashebbbafae5bdc09d7ded7cef405413ac5 7a635abed6420b798397c62270d2df8b084cd8a8 c39e8554624a4b74e596d2bfa96bdd4d30dbc395532ab32e67591c0e929080e9
GET /cdaas/one/statics/axp-static-assets/1.7.1/package/dist/img/logos/dls-logo-line.svg HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Fri, 18 Oct 2019 19:50:49 GMT
etag: W/"5daa1799-693"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 712
date: Fri, 10 May 2024 12:08:13 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| static.wixstatic.com/media/369c26_b396f2977e5a40839e2fc77a6f9aac2b~mv2.gif | 54.230.111.85 | 200 OK | 46 kB |
URL GET HTTP/2static.wixstatic.com/media/369c26_b396f2977e5a40839e2fc77a6f9aac2b~mv2.gif IP54.230.111.85:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerSectigo Limited Subject*.wixstatic.com FingerprintB2:F9:78:29:9F:1D:8B:05:44:BE:8D:28:55:FF:F7:E1:35:EE:21:C8 ValidityMon, 01 Jan 2024 00:00:00 GMT - Sat, 29 Jun 2024 23:59:59 GMT
File typeGIF image data, version 89a, 231 x 231 Hashcb93719526bfbcc31f4cd6a067904c0d ccc200eb3eac8872f657643d1cfc5efabe77d08b be09957b988dd42f4fe1655f4869cb79027e5e70a6c211db9a3caa0ac48806ff
GET /media/369c26_b396f2977e5a40839e2fc77a6f9aac2b~mv2.gif HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 46309
server: openresty/1.21.4.1
date: Mon, 08 Apr 2024 12:14:06 GMT
expires: Mon, 08 Apr 2024 13:14:06 GMT
cache-control: public, max-age=15552000, immutable
last-modified: Sat, 13 Aug 2022 13:49:12 GMT
etag: "cb93719526bfbcc31f4cd6a067904c0d"
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Length
timing-allow-origin: *
x-seen-by: gcp.us-central-1.media-router-6fb99f9c5-nj6wj
via: 1.1 google, 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _94PutwlyRlBgxBtSEP9ozaS-MKT3z4bhL6352Y9yLMXTwTgxx9dkA==
age: 2764447
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js |  104.17.25.14 | 200 OK | 4.5 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js IP104.17.25.14:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash053305c2b293c27c02523cda42962c09 556b0af7346b9e21a8eea1be8b195b563169ecd5 be483938eb34538b970684f72e312f62652e84b42b7ad86953962d1ce2217c44
GET /ajax/libs/jquery.mask/1.14.10/jquery.mask.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 12:08:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 4517
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-4e98"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 745281
expires: Wed, 30 Apr 2025 12:08:13 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pTIMlp1MvQWesT68u1k%2BFZItOa%2BCAn%2BSJK5lXhMv63PWrCFngDCEh3H8Cc5gNhbClYAZi03imfB7598AqWjlfmmOvsW8ERdOlC8Ug6Y4AiYpIVLyoYCxKAAE9X3LK03klrBORPPU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8819d03f187e56b7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js | 152.199.19.160 | 200 OK | 30 kB |
URL GET HTTP/2ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js IP152.199.19.160:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subject*.vo.msecnd.net Fingerprint86:E0:37:E4:B1:31:51:81:DD:54:33:82:FF:4D:EB:D1:15:5F:65:C4 ValidityTue, 30 Jan 2024 00:00:00 GMT - Thu, 30 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/jQuery/jquery-3.3.1.min.js HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 4009693
cache-control: public,max-age=31536000
content-type: application/javascript
date: Fri, 10 May 2024 12:08:13 GMT
etag: "80288516b793d31:0"
last-modified: Mon, 22 Jan 2018 19:27:49 GMT
server: ECAcc (ska/F6AE)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 30394
X-Firefox-Spdy: h2
|
|
| cdaas.americanexpress.com/myca/oce/latest/content/js/common/js/rwd.js | 139.71.113.91 | 200 OK | 1.1 kB |
URL GET HTTP/1.1cdaas.americanexpress.com/myca/oce/latest/content/js/common/js/rwd.js IP139.71.113.91:443 ASN#6307 AMERICAN-EXPRESS
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectcdaas.americanexpress.com Fingerprint85:14:2D:76:FA:1D:AD:6F:B8:10:2B:70:65:AB:0B:16:81:50:E9:BF ValidityWed, 11 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
Hashf6efadd784e4a924115dc32a16f59f81 86c46b36f734a37f5754d1786e2e418e87505251 71e7da9aa463a8be3a95848a9ff158473d323fcac8109889e1391ee9ab7f3288
GET /myca/oce/latest/content/js/common/js/rwd.js HTTP/1.1
Host: cdaas.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 12:08:13 GMT
Content-Type: application/javascript
Last-Modified: Tue, 23 Apr 2024 18:22:49 GMT
Connection: keep-alive
ETag: W/"6627fc79-caa"
Timing-Allow-Origin: *
Vary: Origin
Cache-Control: max-age=31536000, must-revalidate
Content-Encoding: gzip
Transfer-Encoding: chunked
|
|
| vinshousing.com/wp-content/themes/backup/tmp/index.html |  188.114.97.1 | | 58 kB |
URL vinshousing.com/wp-content/themes/backup/tmp/index.html IP188.114.97.1:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (21550) Hash0c1f3e1a3ab81beae3712a47f91c4bbd e0e5f8922bfe6d14e349326335347025d3b614fb 76d9a43e60988c6a82be2a13279bdf89a6f0d91ffed9fcaff544c0817ec951cb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - American Express |
GET /wp-content/themes/backup/tmp/index.html HTTP/1.1
Host: vinshousing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 12:08:12 GMT
content-type: text/html
last-modified: Sun, 17 Mar 2024 11:47:08 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K1zGCmnNlxcEK47Ek0pT27ekSD2uU%2BrezIrUSG1q5nzevRPrjt%2BMntSa8a6n7EMHdBXD8C%2BokTbOc1OQxOgHt6CoH4Soyu%2B1faWazFbIDrmPVMsCnj0cfFh%2Ftqvo4niLMHI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8819d036ba9ab517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdaas.americanexpress.com/myca/oce/latest/content/css/oce-min.css | 139.71.113.91 | 200 OK | 53 kB |
URL GET HTTP/1.1cdaas.americanexpress.com/myca/oce/latest/content/css/oce-min.css IP139.71.113.91:443 ASN#6307 AMERICAN-EXPRESS
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectcdaas.americanexpress.com Fingerprint85:14:2D:76:FA:1D:AD:6F:B8:10:2B:70:65:AB:0B:16:81:50:E9:BF ValidityWed, 11 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashc8a96f8bbff4bcaf320bd6b053ef727c 9d178afc85a4a0b02c70db494e6546c263958e44 50e7b1a6748965cdf1ef90c53928314c31002b8d81891c5f713b532ba53f8543
GET /myca/oce/latest/content/css/oce-min.css HTTP/1.1
Host: cdaas.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 12:08:14 GMT
Content-Type: text/css
Last-Modified: Tue, 23 Apr 2024 18:22:50 GMT
Connection: keep-alive
ETag: W/"6627fc7a-446e4"
Timing-Allow-Origin: *
Vary: Origin
Cache-Control: max-age=31536000, must-revalidate
Content-Encoding: gzip
Transfer-Encoding: chunked
|
|
| ct.contentsquare.net/ss/3776/58f9bb16-be1c-40a4-a9f6-764647d60c8c/26/uxa.js | 54.230.111.38 | 200 OK | 0 B |
URL GET HTTP/2ct.contentsquare.net/ss/3776/58f9bb16-be1c-40a4-a9f6-764647d60c8c/26/uxa.js IP54.230.111.38:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerAmazon Subjectct-tag.clicktale.net Fingerprint10:39:DF:70:AE:32:9B:84:B8:81:D6:1D:49:EF:00:D6:AD:D8:DD:B3 ValidityWed, 27 Mar 2024 00:00:00 GMT - Sat, 26 Apr 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ss/3776/58f9bb16-be1c-40a4-a9f6-764647d60c8c/26/uxa.js HTTP/1.1
Host: ct.contentsquare.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 0
last-modified: Wed, 18 Dec 2019 09:42:25 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Thu, 09 May 2024 14:13:41 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ure2EalB5M8m-w8c2dFHgPTemh8o9yM6nECkg7q-5O7J2vm4nzWgQA==
age: 0
timing-allow-origin: *
cache-control: max-age=900
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/user-consent-management/1.6.6/UCM.js | 104.110.3.84 | 200 OK | 42 kB |
URL GET HTTP/2www.aexp-static.com/cdaas/one/user-consent-management/1.6.6/UCM.js IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (42165), with LF, NEL line terminators Hash9800b8b1d3e95db022afaa61ab87ab3b a0cf11b39cec89678b3b3e3039e8537a9384955f 98ec0a182491d0f23aaaedc0c771e65b88ad23038d22d27477e05b089f28db7c
GET /cdaas/one/user-consent-management/1.6.6/UCM.js HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Feb 2023 20:40:52 GMT
etag: W/"63fe66d4-20c5a"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 42087
date: Fri, 10 May 2024 12:08:14 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/shared-scripts-contentsquare/1.0.8/csq.js | 104.110.3.84 | 200 OK | 559 B |
URL GET HTTP/2www.aexp-static.com/cdaas/one/shared-scripts-contentsquare/1.0.8/csq.js IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeJavaScript source, ASCII text Hashb2a8d44287800e168bbbb358f5d3263f 1332610f0f71b1a6f2310ef4c23877df839d32a3 d6cea3ef5423ab7bae0f90b5b9ff7b3d575b351e17dc4873174c5d40d1f55bd9
GET /cdaas/one/shared-scripts-contentsquare/1.0.8/csq.js HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Mar 2023 15:10:30 GMT
etag: W/"64230366-421"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 559
date: Fri, 10 May 2024 12:08:14 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/one-identity-session/1.17.1/timeout.js | 104.110.3.84 | 200 OK | 11 kB |
URL GET HTTP/2www.aexp-static.com/cdaas/one/one-identity-session/1.17.1/timeout.js IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (33873) Hash5f1dd4c7239209f835dd644b6e36a9c3 b16b7ef7736750128d4720261cabf03aa1e3343f e179365f08ac25d54800342e439ee5b2427f5f5f6b2b67915c7a2e23b682927d
GET /cdaas/one/one-identity-session/1.17.1/timeout.js HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 04 Feb 2022 17:27:58 GMT
etag: W/"61fd621e-8708"
timing-allow-origin: *
access-control-allow-origin: https://global.americanexpress.com
access-control-allow-credentials: true
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 10965
date: Fri, 10 May 2024 12:08:14 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| cdaas.americanexpress.com/myca/oce/latest/content/images/common/cm15-double-card.png | 139.71.113.91 | 404 Not Found | 146 B |
URL GET HTTP/1.1cdaas.americanexpress.com/myca/oce/latest/content/images/common/cm15-double-card.png IP139.71.113.91:443 ASN#6307 AMERICAN-EXPRESS
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectcdaas.americanexpress.com Fingerprint85:14:2D:76:FA:1D:AD:6F:B8:10:2B:70:65:AB:0B:16:81:50:E9:BF ValidityWed, 11 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /myca/oce/latest/content/images/common/cm15-double-card.png HTTP/1.1
Host: cdaas.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 10 May 2024 12:08:14 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
|
|
| cdaas.americanexpress.com/myca/oce/latest/content/images/common/cid-double.png | 139.71.113.91 | 404 Not Found | 146 B |
URL GET HTTP/1.1cdaas.americanexpress.com/myca/oce/latest/content/images/common/cid-double.png IP139.71.113.91:443 ASN#6307 AMERICAN-EXPRESS
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectcdaas.americanexpress.com Fingerprint85:14:2D:76:FA:1D:AD:6F:B8:10:2B:70:65:AB:0B:16:81:50:E9:BF ValidityWed, 11 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /myca/oce/latest/content/images/common/cid-double.png HTTP/1.1
Host: cdaas.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 10 May 2024 12:08:14 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
|
|
| www.aexp-static.com/cdaas/one/statics/@americanexpress/static-assets/2.27.0/package/dist/fonts/3be50273-0b2e-4aef-ae68-882eacd611f9-3.woff | 104.110.3.84 | 200 OK | 37 kB |
URL GET HTTP/2www.aexp-static.com/cdaas/one/statics/@americanexpress/static-assets/2.27.0/package/dist/fonts/3be50273-0b2e-4aef-ae68-882eacd611f9-3.woff IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 37153, version 1.0 Hashc0e3b5653c803f69c05862736a765e4a 4ae2328614d48c62388c8409cbd1d9e7b5d4dfda 48050d8eeb740bb31aaad9eb82bcd4a493b474c9385eeda5fc2ca2ea279cffad
GET /cdaas/one/statics/@americanexpress/static-assets/2.27.0/package/dist/fonts/3be50273-0b2e-4aef-ae68-882eacd611f9-3.woff HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/woff
content-length: 37153
last-modified: Mon, 01 Aug 2022 18:53:00 GMT
etag: "62e8210c-9121"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
access-control-allow-origin: *
access-control-allow-methods: GET
accept-ranges: bytes
date: Fri, 10 May 2024 12:08:14 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/iconfont/dls-icons.woff | 104.110.3.84 | 200 OK | 40 kB |
URL GET HTTP/2www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/iconfont/dls-icons.woff IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 40332, version 1.0 Hash6d616bd3a5427bc276ed155995b12294 71f3cd6fb8f03d6a56962802058d8a0830122d4c 80239f6b5f0ac5edc4a589c5bba51392f015dddf3c2d7ba9ce922058d63d8ec2
GET /cdaas/one/statics/axp-dls/5.11.2/package/dist/iconfont/dls-icons.woff HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://www.aexp-static.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/woff
content-length: 40332
last-modified: Thu, 10 Oct 2019 22:15:49 GMT
etag: "5d9fad95-9d8c"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
access-control-allow-origin: *
access-control-allow-methods: GET
accept-ranges: bytes
date: Fri, 10 May 2024 12:08:14 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Medium.woff | 104.110.3.84 | 200 OK | 73 kB |
URL GET HTTP/2www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Medium.woff IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 72956, version 0.0 Hashba8101d8a4e5a90bd9d07a05afd8466d f616f6471fc3c3badb3cb8b693d4329deb2e2d3b d5d7822393d3103ec421f72f09c7f7c78948c68da112031c0afd1c0b0da92c08
GET /cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Medium.woff HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://www.aexp-static.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/woff
content-length: 72956
last-modified: Thu, 10 Oct 2019 22:15:47 GMT
etag: "5d9fad93-11cfc"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
access-control-allow-origin: *
access-control-allow-methods: GET
accept-ranges: bytes
date: Fri, 10 May 2024 12:08:14 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Regular.woff | 104.110.3.84 | 200 OK | 77 kB |
URL GET HTTP/2www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Regular.woff IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 76792, version 0.0 Hash6824f89aed1f9cea50aeae0f94e590e4 b110bcca0524f8b001826673291c6201fbebd161 7ef974010abfe71fb92dc3f53e3948e1e544cf6821bf9802ea0bf35fa8fe5af6
GET /cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Regular.woff HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://www.aexp-static.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/woff
content-length: 76792
last-modified: Thu, 10 Oct 2019 22:15:47 GMT
etag: "5d9fad93-12bf8"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
access-control-allow-origin: *
access-control-allow-methods: GET
accept-ranges: bytes
date: Fri, 10 May 2024 12:08:14 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| omns.americanexpress.com/id?d_visid_ver=5.0.1&d_fieldgroup=A&mcorgid=5C36123F5245AF470A490D45%40AdobeOrg&mid=68380715914845897299154426295664018125&ts=1715342894728 | 63.140.62.17 | 200 OK | 48 B |
URL GET HTTP/2omns.americanexpress.com/id?d_visid_ver=5.0.1&d_fieldgroup=A&mcorgid=5C36123F5245AF470A490D45%40AdobeOrg&mid=68380715914845897299154426295664018125&ts=1715342894728 IP63.140.62.17:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectomns.americanexpress.com Fingerprint6F:19:39:1A:28:26:BB:82:2C:E5:3C:86:4F:EB:0F:BF:7B:1D:B5:A2 ValidityFri, 29 Mar 2024 00:00:00 GMT - Thu, 27 Mar 2025 23:59:59 GMT
Hash5e50525d45b92607df719b68dc0b685c 19412bdda122ffac5a00ee23fd5e2b62ac28573a 7639c3ec55bf95dc6c88938621d5daaacbac2697b472aaa28dd4d5318ff68d46
GET /id?d_visid_ver=5.0.1&d_fieldgroup=A&mcorgid=5C36123F5245AF470A490D45%40AdobeOrg&mid=68380715914845897299154426295664018125&ts=1715342894728 HTTP/1.1
Host: omns.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://vinshousing.com
access-control-allow-credentials: true
date: Fri, 10 May 2024 12:08:14 GMT
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_ecid=MCMID%7C68380715914845897299154426295664018125; Path=/; Domain=americanexpress.com; Max-Age=63072000; Expires=Sun, 10 May 2026 12:08:08 GMT; SameSite=None; Secure
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 48
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Light.woff | 104.110.3.84 | 200 OK | 74 kB |
URL GET HTTP/2www.aexp-static.com/cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Light.woff IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 73604, version 0.0 Hash7294a33a9bec0eae9f3adddbcfe009c9 6e2cf6a463aab5c238468b67831a30dbdf430bda e9f9fab2d479b79aca1d3d3bf0a9fc36131752869363180bef040905a008cc1b
GET /cdaas/one/statics/axp-dls/5.11.2/package/dist/fonts/Roboto-Light.woff HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://www.aexp-static.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/woff
content-length: 73604
last-modified: Thu, 10 Oct 2019 22:15:47 GMT
etag: "5d9fad93-11f84"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
access-control-allow-origin: *
access-control-allow-methods: GET
accept-ranges: bytes
date: Fri, 10 May 2024 12:08:15 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.aexp-static.com/cdaas/one/statics/@americanexpress/static-assets/2.27.0/package/dist/iconfont/dls-icons.woff?v=2.27.0 | 104.110.3.84 | 200 OK | 57 kB |
URL GET HTTP/2www.aexp-static.com/cdaas/one/statics/@americanexpress/static-assets/2.27.0/package/dist/iconfont/dls-icons.woff?v=2.27.0 IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 56824, version 1.0 Hash0c8ca2c3b2337e728ee9e14246a5d58f 69f859084816f38c2e5531a2b46c4059b71d9f9b 3530f9432334e47cf7e84f8e0ce64f80d45d7329f44f691a3eb30977a4bbf052
GET /cdaas/one/statics/@americanexpress/static-assets/2.27.0/package/dist/iconfont/dls-icons.woff?v=2.27.0 HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vinshousing.com
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/woff
content-length: 56824
last-modified: Mon, 01 Aug 2022 18:53:07 GMT
etag: "62e82113-ddf8"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
access-control-allow-origin: *
access-control-allow-methods: GET
accept-ranges: bytes
date: Fri, 10 May 2024 12:08:15 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| cdaas.americanexpress.com/myca/oce/latest/content/images/common/cm15-double-card.png | 139.71.113.91 | 404 Not Found | 146 B |
URL GET HTTP/1.1cdaas.americanexpress.com/myca/oce/latest/content/images/common/cm15-double-card.png IP139.71.113.91:443 ASN#6307 AMERICAN-EXPRESS
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectcdaas.americanexpress.com Fingerprint85:14:2D:76:FA:1D:AD:6F:B8:10:2B:70:65:AB:0B:16:81:50:E9:BF ValidityWed, 11 Oct 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /myca/oce/latest/content/images/common/cm15-double-card.png HTTP/1.1
Host: cdaas.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 10 May 2024 12:08:14 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
|
|
| www.aexp-static.com/cdaas/api/axpi/omniture/visitorapi/5.0.1/visitorAPI-NonAAM.js | 104.110.3.84 | 200 OK | 21 kB |
URL GET HTTP/2www.aexp-static.com/cdaas/api/axpi/omniture/visitorapi/5.0.1/visitorAPI-NonAAM.js IP104.110.3.84:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectm.americanexpress.com Fingerprint3D:49:C1:10:15:C4:62:62:B3:CD:E6:43:D8:FF:DE:DD:A4:9F:03:26 ValidityWed, 06 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (31997), with CRLF line terminators Hash772c9c6eaeedba2508e606a78b991205 39832a714d5a9cfffbc522a14a7122d811da8002 d464cfeb6a0b8a7f2caf889cf11a9c1b1d77662d6b45a0ef1698bc16d5fe1250
GET /cdaas/api/axpi/omniture/visitorapi/5.0.1/visitorAPI-NonAAM.js HTTP/1.1
Host: www.aexp-static.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 17 Oct 2022 12:01:07 GMT
etag: W/"634d4403-f769"
timing-allow-origin: *
cache-control: max-age=31536000, must-revalidate
content-encoding: gzip
content-length: 20632
date: Fri, 10 May 2024 12:08:15 GMT
vary: Origin, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| www.americanexpress.com/favicon.ico | 104.110.22.253 | | 1.4 kB |
URL GET www.americanexpress.com/favicon.ico IP104.110.22.253:0
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectwww.americanexpress.com Fingerprint64:A2:B0:4D:11:47:D0:C0:37:73:B5:62:91:90:F7:0D:1F:42:FA:10 ValidityThu, 03 Aug 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hash974ccc6c4c6e1c7f04606973beb3ba20 0f96f86d488a4b5805744fa067c3cfd57c928406 265d3f591d92fadfe95f4660c382ee64a23538a7353b9880434205a102833de0
GET /favicon.ico HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Cookie: s_ecid=MCMID%7C68380715914845897299154426295664018125
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
strict-transport-security: max-age=15552000;
last-modified: Fri, 07 Jun 2019 04:05:21 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1381
x-cnection: close
content-type: image/x-icon
date: Fri, 10 May 2024 12:08:15 GMT
set-cookie: agent-id=05ee6218-4c72-46d6-a57c-9a80e1569448; expires=Sat, 10-May-2025 12:08:15 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
|
|
| www.americanexpress.com/favicon.ico | 104.110.22.253 | | 1.4 kB |
URL GET www.americanexpress.com/favicon.ico IP104.110.22.253:0
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectwww.americanexpress.com Fingerprint64:A2:B0:4D:11:47:D0:C0:37:73:B5:62:91:90:F7:0D:1F:42:FA:10 ValidityThu, 03 Aug 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hash974ccc6c4c6e1c7f04606973beb3ba20 0f96f86d488a4b5805744fa067c3cfd57c928406 265d3f591d92fadfe95f4660c382ee64a23538a7353b9880434205a102833de0
GET /favicon.ico HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Cookie: s_ecid=MCMID%7C68380715914845897299154426295664018125
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
strict-transport-security: max-age=15552000;
last-modified: Fri, 07 Jun 2019 04:05:21 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1381
x-cnection: close
content-type: image/x-icon
date: Fri, 10 May 2024 12:08:15 GMT
set-cookie: agent-id=74afc426-6198-482f-80ad-b2b509f043b9; expires=Sat, 10-May-2025 12:08:15 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
|
|
| lpchat.americanexpress.com/le_unified_window/10.26.0.0-release_5560/desktopEmbedded.js?version=10.26.0.0-release_5560 | 34.120.154.120 | 200 OK | 999 kB |
URL GET HTTP/2lpchat.americanexpress.com/le_unified_window/10.26.0.0-release_5560/desktopEmbedded.js?version=10.26.0.0-release_5560 IP34.120.154.120:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectlpchat.americanexpress.com FingerprintD4:B0:C1:84:8F:23:81:DD:20:EF:F7:0A:D4:B0:53:7B:C7:CA:4A:BE ValiditySat, 27 May 2023 00:00:00 GMT - Thu, 23 May 2024 23:59:59 GMT
Size999 kB (999172 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /le_unified_window/10.26.0.0-release_5560/desktopEmbedded.js?version=10.26.0.0-release_5560 HTTP/1.1
Host: lpchat.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 12:08:13 GMT
last-modified: Sat, 17 Jun 2023 16:22:59 GMT
etag: W/"e14121e1120a46de140ce3d55dbec5b2"
x-goog-generation: 1687018979791126
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 999172
content-type: application/javascript
x-goog-hash: crc32c=zA1O8g==, md5=4UEh4RIKRt4UDOPVXb7Fsg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: none
access-control-allow-origin: *
access-control-expose-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
x-guploader-uploadid: ABPtcPpE2xBiqvAmVX8S7a3bjZYbC3KoBJJEu0BEuRlCUwoutlCcbxGax192hIVYQtaTzrmPEECodFXwDg
server: UploadServer
vary: Accept-Encoding
content-encoding: br
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| vinshousing.com/ruxitagentjs_ICA27NVfghjqrux_10255221104040649.js | 188.114.97.1 | 404 Not Found | 315 B |
URL GET HTTP/3vinshousing.com/ruxitagentjs_ICA27NVfghjqrux_10255221104040649.js IP188.114.97.1:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerLet's Encrypt Subjectvinshousing.com FingerprintDE:C9:89:2F:91:D9:4D:E2:07:DD:58:81:27:CE:26:3D:83:04:B3:7E ValidityThu, 09 May 2024 09:16:22 GMT - Wed, 07 Aug 2024 09:16:21 GMT
File typeHTML document, ASCII text, with very long lines (326), with no line terminators Hash97ef40509b73c101d6815511c3adf98d a4242322497ea630ea72e26ba297a95a2bbe5ccd 322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - American Express |
GET /ruxitagentjs_ICA27NVfghjqrux_10255221104040649.js HTTP/1.1
Host: vinshousing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/wp-content/themes/backup/tmp/index.html
Cookie: AMCV_5C36123F5245AF470A490D45%40AdobeOrg=359503849%7CMCMID%7C68380715914845897299154426295664018125%7CvVersion%7C5.0.1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 10 May 2024 12:08:14 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GkQ2gsODGztbUrP4QSbexMsS01zhoN9wKx3ZvvcJg5qwwDHZwctSRd%2FCg1O0wIh0whxQCB3rnbUwk7Dtmzhczayt%2FmJdLqHrSXWD6jSMOb1TaNr14YwgF5r1KxrVZimFa1Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8819d0447842b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lpchat.americanexpress.com/le_unified_window/10.26.0.0-release_5560/lpChatV3.min.js?version=10.26.0.0-release_5560 | 34.120.154.120 | 200 OK | 94 kB |
URL GET HTTP/2lpchat.americanexpress.com/le_unified_window/10.26.0.0-release_5560/lpChatV3.min.js?version=10.26.0.0-release_5560 IP34.120.154.120:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectlpchat.americanexpress.com FingerprintD4:B0:C1:84:8F:23:81:DD:20:EF:F7:0A:D4:B0:53:7B:C7:CA:4A:BE ValiditySat, 27 May 2023 00:00:00 GMT - Thu, 23 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32002) Hashd32e789b3183ed4536dc36e4cabf74ec 6b90b3e6dc44c30dcfa273e7c48d31ec00aac82b 5941d1622373ff4da4a0ec6ae2c474a80f2e65763aca377b069690ed4cc26d02
GET /le_unified_window/10.26.0.0-release_5560/lpChatV3.min.js?version=10.26.0.0-release_5560 HTTP/1.1
Host: lpchat.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 12:08:13 GMT
last-modified: Sat, 17 Jun 2023 16:22:59 GMT
etag: W/"d32e789b3183ed4536dc36e4cabf74ec"
x-goog-generation: 1687018979737136
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 93955
content-type: application/javascript
x-goog-hash: crc32c=JX6E+w==, md5=0y54mzGD7UU23Dbkyr907A==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: none
access-control-allow-origin: *
access-control-expose-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
x-guploader-uploadid: ABPtcPo8BKkw55azrQV5nypgWoMhc3C_mxRFCgOb043AnfU25o8eJr4M56_k6qW1Btr7Ztw1rc4
server: UploadServer
vary: Accept-Encoding
content-encoding: br
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lpchat.americanexpress.com/le_unified_window/10.26.0.0-release_5560/ui-framework.js?version=10.26.0.0-release_5560 | 34.120.154.120 | 200 OK | 40 kB |
URL GET HTTP/2lpchat.americanexpress.com/le_unified_window/10.26.0.0-release_5560/ui-framework.js?version=10.26.0.0-release_5560 IP34.120.154.120:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectlpchat.americanexpress.com FingerprintD4:B0:C1:84:8F:23:81:DD:20:EF:F7:0A:D4:B0:53:7B:C7:CA:4A:BE ValiditySat, 27 May 2023 00:00:00 GMT - Thu, 23 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32006) Hash0dfc7fa7d2051d776d5937b7a3a7c4dd e0548931c28581b7f1975bf8c2d8b03b94591b87 3e4f5d07904cf355da7bfbca5d4eee18a4c09fc9e6a79df958d0bb1225572983
GET /le_unified_window/10.26.0.0-release_5560/ui-framework.js?version=10.26.0.0-release_5560 HTTP/1.1
Host: lpchat.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 12:08:13 GMT
last-modified: Sat, 17 Jun 2023 16:22:59 GMT
etag: W/"0dfc7fa7d2051d776d5937b7a3a7c4dd"
x-goog-generation: 1687018979345736
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 40455
content-type: application/javascript
x-goog-hash: crc32c=wefPQw==, md5=Dfx/p9IFHXdtWTe3o6fE3Q==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: none
access-control-allow-origin: *
access-control-expose-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
x-guploader-uploadid: ABPtcPqL9YGuXyYnRB2QLg20We532GNG_RDdavv97bwoh5B6Epxpj0ORZwQVOmlEQGBRgTbkF60
server: UploadServer
vary: Accept-Encoding
content-encoding: br
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lpchat.americanexpress.com/le_unified_window/10.26.0.0-release_5560/surveylogicinstance.min.js?version=10.26.0.0-release_5560 | 34.120.154.120 | 200 OK | 7.9 kB |
URL GET HTTP/2lpchat.americanexpress.com/le_unified_window/10.26.0.0-release_5560/surveylogicinstance.min.js?version=10.26.0.0-release_5560 IP34.120.154.120:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectlpchat.americanexpress.com FingerprintD4:B0:C1:84:8F:23:81:DD:20:EF:F7:0A:D4:B0:53:7B:C7:CA:4A:BE ValiditySat, 27 May 2023 00:00:00 GMT - Thu, 23 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7983), with no line terminators Hashcfdc0f6d6d3ed7161374908f71552a3f 75cc9ef0f56266c34279610ab72199d30792650c adc1a3973cf95e6dcb09f066ded367af85875542eaca31981b8c1f888d36f320
GET /le_unified_window/10.26.0.0-release_5560/surveylogicinstance.min.js?version=10.26.0.0-release_5560 HTTP/1.1
Host: lpchat.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 12:08:13 GMT
last-modified: Sat, 17 Jun 2023 16:22:59 GMT
etag: W/"d53092c1d6e0a7a3d1bb802c67a6e1e9"
x-goog-generation: 1687018979285447
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7866
content-type: application/javascript
x-goog-hash: crc32c=GIGCsg==, md5=1TCSwdbgp6PRu4AsZ6bh6Q==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: none
access-control-allow-origin: *
access-control-expose-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
x-guploader-uploadid: ABPtcPqah5LuDks5jrQEIPnr8Hg7eFG2F0bLTgEL3PJ4B-WoCE25wEVX2DqIL9LU_t5QaF6fe-s
server: UploadServer
vary: Accept-Encoding
content-encoding: br
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lpchat.americanexpress.com/le_unified_window/10.26.0.0-release_5560/UMSClientAPI.min.js?version=10.26.0.0-release_5560 | 34.120.154.120 | 200 OK | 90 kB |
URL GET HTTP/2lpchat.americanexpress.com/le_unified_window/10.26.0.0-release_5560/UMSClientAPI.min.js?version=10.26.0.0-release_5560 IP34.120.154.120:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerDigiCert Inc Subjectlpchat.americanexpress.com FingerprintD4:B0:C1:84:8F:23:81:DD:20:EF:F7:0A:D4:B0:53:7B:C7:CA:4A:BE ValiditySat, 27 May 2023 00:00:00 GMT - Thu, 23 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32003) Hash8f52a626981f930e71e87f22a5f0080d 4c1cdf091636a6d733fd9c7141d52fc07ecb9e1c 57554877947a356911e17034359412ea444c15f58884c0100062788dd3660bb8
GET /le_unified_window/10.26.0.0-release_5560/UMSClientAPI.min.js?version=10.26.0.0-release_5560 HTTP/1.1
Host: lpchat.americanexpress.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 12:08:13 GMT
last-modified: Sat, 17 Jun 2023 16:22:59 GMT
etag: W/"8f52a626981f930e71e87f22a5f0080d"
x-goog-generation: 1687018979574643
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 90535
content-type: application/javascript
x-goog-hash: crc32c=D9Dodw==, md5=j1KmJpgfkw5x6H8ipfAIDQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: none
access-control-allow-origin: *
access-control-expose-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
x-guploader-uploadid: ABPtcPr52njKQHyIMPMuTMPKXzxTJghZkct1CJ0hFlFO6UbTt0PGk34V5gVph9m634t0aFbmbeYp_PyWew
server: UploadServer
vary: Accept-Encoding
content-encoding: br
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdaas.aexp.com/cdaas/axp-app/modules/axp-identity-root/1.43.0/images/icon-192.png | 0.0.0.0 | | 0 B |
URL GET cdaas.aexp.com/cdaas/axp-app/modules/axp-identity-root/1.43.0/images/icon-192.png IP0.0.0.0:0
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdaas/axp-app/modules/axp-identity-root/1.43.0/images/icon-192.png HTTP/1.1
Host: cdaas.aexp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| vinshousing.com/ruxitagentjs_ICA27NVfghjqrux_10255221104040649.js | 188.114.97.1 | 404 Not Found | 315 B |
URL GET HTTP/3vinshousing.com/ruxitagentjs_ICA27NVfghjqrux_10255221104040649.js IP188.114.97.1:443
Requested byhttps://vinshousing.com/wp-content/themes/backup/tmp/index.html#nebujdfrsc CertificateIssuerLet's Encrypt Subjectvinshousing.com FingerprintDE:C9:89:2F:91:D9:4D:E2:07:DD:58:81:27:CE:26:3D:83:04:B3:7E ValidityThu, 09 May 2024 09:16:22 GMT - Wed, 07 Aug 2024 09:16:21 GMT
File typeHTML document, ASCII text, with very long lines (326), with no line terminators Hash97ef40509b73c101d6815511c3adf98d a4242322497ea630ea72e26ba297a95a2bbe5ccd 322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - American Express |
GET /ruxitagentjs_ICA27NVfghjqrux_10255221104040649.js HTTP/1.1
Host: vinshousing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vinshousing.com/wp-content/themes/backup/tmp/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 10 May 2024 12:08:13 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=smU86UbLwSDzkz6Sv5G5Z9YaZIa9BOKKfWzwpc5e7S5vkBF%2BLioqlZQh2iqKCujGteY5HW7Quor3p%2FyTWlASXvirs2VJGcEjSWxg9tlcqxl47FDA6C299E%2FhBYCtqtXzSNA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8819d039bc0cb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vinshousing.com/wp-content/themes/backup/tmp/index.html | 188.114.97.1 | 200 OK | 722 kB |
URL User Request GET HTTP/2vinshousing.com/wp-content/themes/backup/tmp/index.html IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subjectvinshousing.com FingerprintDE:C9:89:2F:91:D9:4D:E2:07:DD:58:81:27:CE:26:3D:83:04:B3:7E ValidityThu, 09 May 2024 09:16:22 GMT - Wed, 07 Aug 2024 09:16:21 GMT
Size722 kB (722488 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - American Express |
GET /wp-content/themes/backup/tmp/index.html HTTP/1.1
Host: vinshousing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 12:08:12 GMT
content-type: text/html
last-modified: Sun, 17 Mar 2024 11:47:08 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K1zGCmnNlxcEK47Ek0pT27ekSD2uU%2BrezIrUSG1q5nzevRPrjt%2BMntSa8a6n7EMHdBXD8C%2BokTbOc1OQxOgHt6CoH4Soyu%2B1faWazFbIDrmPVMsCnj0cfFh%2Ftqvo4niLMHI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8819d036ba9ab517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
0.0.0.0