Report - www.warganet.net/au/myid.telstra.com/manage/payment.php

Report Overview

Submitted URL
www.warganet.net/au/myid.telstra.com/manage/payment.php
IP
103.148.113.11
ASN
#139993 PT. FORIT ASTA SOLUSINDO
Submitted
2023-02-22 08:33:39
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
34

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.9 kB	34.160.144.191
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	35.81.158.34
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	3.0 kB	8.0 kB	23.36.77.32
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-13T05:09:47Z	686 B	1.4 kB	142.250.74.131
www.warganet.net	unknown	2020-10-03T09:07:44Z	2023-03-09T16:35:30Z	9.7 kB	252 kB	103.148.113.11
ajax.googleapis.com	12905	2013-08-16T11:51:31Z	2023-03-13T08:37:09Z	391 B	32 kB	142.250.74.170
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	56 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-02-21	medium	www.warganet.net/au/myid.telstra.com/manage/payment.php	Telstra Corporation Limited

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-22	medium	www.warganet.net/au/myid.telstra.com/manage/payment.php	Phishing
2023-02-22	medium	www.warganet.net/au/myid.telstra.com/manage/src/font/TelstraAkkuratWeb-Light.woff	Phishing
2023-02-22	medium	www.warganet.net/myaccount/static-content/css/font/td-original-icons.woff	Phishing
2023-02-22	medium	www.warganet.net/au/myid.telstra.com/manage/src/assets/TelstraAkkurat-Bold.woff	Phishing
2023-02-22	medium	www.warganet.net/au/myid.telstra.com/manage/src/font/TelstraAkkuratWeb-Light.woff	Phishing
2023-02-22	medium	www.warganet.net/au/myid.telstra.com/manage/src/font/TelstraAkkuratWeb-Light.ttf	Phishing
2023-02-22	medium	www.warganet.net/myaccount/static-content/css/font/td-original-icons.ttf	Phishing
2023-02-22	medium	www.warganet.net/au/myid.telstra.com/manage/src/assets/TelstraAkkurat-Bold.ttf	Phishing
2023-02-22	medium	www.warganet.net/myaccount/static-content/css/font/TelstraAkkuratWeb-Light.woff	Phishing
2023-02-22	medium	www.warganet.net/au/myid.telstra.com/manage/src/font/TelstraAkkurat-Bold.woff	Phishing
2023-02-22	medium	www.warganet.net/myaccount/static-content/css/font/TelstraAkkuratWeb-Light.ttf	Phishing
2023-02-22	medium	www.warganet.net/au/myid.telstra.com/manage/src/font/TelstraAkkurat-Bold.ttf	Phishing
2023-02-22	medium	www.warganet.net/au/myid.telstra.com/manage/src/font/Akkurat.woff	Phishing
2023-02-22	medium	www.warganet.net/au/myid.telstra.com/manage/src/font/Akkurat.ttf	Phishing
2023-02-22	medium	www.warganet.net/au/myid.telstra.com/manage/src/font/Akkurat.woff	Phishing
2023-02-22	medium	www.warganet.net/au/myid.telstra.com/manage/src/font/Akkurat.ttf	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	www.warganet.net/au/myid.telstra.com/manage/payment.php	858 B	2023-03-08	2024-02-20
Pretty URL www.warganet.net/au/myid.telstra.com/manage/payment.php IP 103.148.113.11 ASN #139993 PT. FORIT ASTA SOLUSINDO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:04:39 Last Seen2024-02-20 19:45:24 Times Seen25 Hash c006c9bdffaa641ebaa48b7cbdef5ae8 3eed5aed8f8483ca61b5ec74a28d3e56b64a4227 0f296d53904f10d904bdf4dc4f0e7cc8b7a38c98c99c6055052cf358b8109321 Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js	90 kB	2023-03-07	2024-04-25
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js IP 142.250.74.170 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-04-25 11:01:39 Times Seen139109 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

HTTP Transactions (47)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
378d97dfed95fd35bca9d8699e56151a
46f96f400be9e5208ccbad84540a7855c9994bef
b86917bafe1d5d6f762dbbe5af0b906ce61e505539b5fe2a1e49b09d500a90c6

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B86917BAFE1D5D6F762DBBE5AF0B906CE61E505539B5FE2A1E49B09D500A90C6"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3130
Expires: Wed, 22 Feb 2023 09:25:38 GMT
Date: Wed, 22 Feb 2023 08:33:28 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
03ba1c19530391f28dcb5c049ab66e99
a1b89c652e5406b1981704d1973ac1c820ec584d
9c78f93d5d5c96391e480ecad78b4a6a30fb33fdc61acc7799fe3401c62a1292

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C78F93D5D5C96391E480ECAD78B4A6A30FB33FDC61ACC7799FE3401C62A1292"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18275
Expires: Wed, 22 Feb 2023 13:38:03 GMT
Date: Wed, 22 Feb 2023 08:33:28 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3c926acb3daeb63b5374bdc352bbb679
167a2af5a3c8d1ec6d16c8f7ef1e063ce14ed481
e0bbf50d7d572d0b16ba4be51b190c4776777ecb572db9b25574b66d8e56ce36

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E0BBF50D7D572D0B16BA4BE51B190C4776777ECB572DB9B25574B66D8E56CE36"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6156
Expires: Wed, 22 Feb 2023 10:16:04 GMT
Date: Wed, 22 Feb 2023 08:33:28 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 22 Feb 2023 07:38:13 GMT
content-type: application/json
age: 3315
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: zzzorR5qv+NZgHHNu18kfPV/nbtXgAwDB3D5S4Mcbg/NNnyKf8JmkRbE9lu0Djlma2wSVtjEhmCOwuixJSYxPQ==
x-amz-request-id: J7APQ75X72HYHDBJ
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 22 Feb 2023 08:23:06 GMT
age: 622
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 22 Feb 2023 08:33:28 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
a27ee3b3c913f55d085b5f85d622e206
2dac3b909debcd683e1f917fc633e71fe2a8d68a
544a2538b1a316f1963a28b489103723a8977ffea4e2baf22d0095001ffdc1af

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 08:33:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.warganet.net/au/myid.telstra.com/manage/payment.php

103.148.113.11

200 OK

27 kB

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/payment.php
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (10703)
Size
27 kB (26949 bytes)
Hash
20819a2522431e998afc13d3a5338a8e
7b26083be533bd1781a9f675076d4d6b657d4487
188a45081a51aec1fc6dceea796fdfeb2d8569551e4c3567d2e3d7588cd3b376

Detections

Analyzer	Verdict	Alert
openphish	Telstra Corporation Limited
fortinet	Phishing

HTTP Headers

GET /au/myid.telstra.com/manage/payment.php HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 08:33:28 GMT
Server: Apache/2
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 26949
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js

142.250.74.170

200 OK

31 kB

URL HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
142.250.74.170:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (65451)
Size
31 kB (31021 bytes)
Hash
903bc7a7e510f87aa5d0201eb59a0832
ac9aa4dd94cde1bcba9037e94087138b127e41fc
41a7ac8150cc9f38421451d5143c1ffec7a1f1fafbf7a7fc0f51b98ad699cf8f

HTTP Headers

GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.warganet.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Feb 2023 16:19:56 GMT
expires: Tue, 20 Feb 2024 16:19:56 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 144813
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
a8530fcefb585de4930c998e366124cc
290ef080fe5bddca89a1a92e505268f9c38a308c
e2369003249fb3ebcc2f3ced2f2cd685376be22d7201cdc52b73751834c5c7fc

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 08:33:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, Alert, Content-Length, Backoff, ETag, Cache-Control, Retry-After, Last-Modified, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 22 Feb 2023 07:51:26 GMT
age: 2523
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

www.warganet.net/au/myid.telstra.com/manage/src/login.css

103.148.113.11

200 OK

12 kB

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/login.css
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
ASCII text, with very long lines (1600), with CRLF line terminators
Size
12 kB (11748 bytes)
Hash
20bd41c557dbb712df28f99702e790cc
1003c0789a0e7f8b0b28bbe89bd9875f8471cfd5
16916ee6cb161de583a63e6d43261e78a060f4bc102e4663e62229553ee0df93

HTTP Headers

GET /au/myid.telstra.com/manage/src/login.css HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/payment.php

HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 08:33:29 GMT
Server: Apache/2
Last-Modified: Mon, 20 Feb 2023 23:37:58 GMT
ETag: "139ae-5f52a272dddb9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 11748
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/css

www.warganet.net/au/myid.telstra.com/manage/src/demo.css

103.148.113.11

200 OK

987 B

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/demo.css
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
ASCII text, with CRLF line terminators
Size
987 B (987 bytes)
Hash
6570ce0301a9284cd7eff19a98ff8ae9
696075f88002c0f8ed5c8612ef0ca86172f8c4da
c21af29ec5f41898b227d18641518c0ca275ac911a590af1cd5dfa7c5c5f6b4a

HTTP Headers

GET /au/myid.telstra.com/manage/src/demo.css HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/payment.php

HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 08:33:29 GMT
Server: Apache/2
Last-Modified: Mon, 20 Feb 2023 23:37:58 GMT
ETag: "1585-5f52a272dd9d1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 987
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/css

www.warganet.net/au/myid.telstra.com/manage/src/log.css

103.148.113.11

200 OK

8.3 kB

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/log.css
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
ASCII text, with CRLF line terminators
Size
8.3 kB (8328 bytes)
Hash
9f1b46a743b817cd2f8ccf0112061947
e101d41ce47787ac526e70313b4e42b88defebde
a9301c2ff0a85789877981fbaf3d299bff553c7ac872b0ebe4a2fda9484b9cf8

HTTP Headers

GET /au/myid.telstra.com/manage/src/log.css HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/payment.php

HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 08:33:29 GMT
Server: Apache/2
Last-Modified: Mon, 20 Feb 2023 23:37:58 GMT
ETag: "b97f-5f52a272de971-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 8328
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/css

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aea9630f88377d01e5cebab9de9c3b89
18c6603c6e63b79d45031e960dddd31b227f0de5
853e5bb59efe99054d86bbacf7c2f1f2483ad9c05d35cc9d8ea5dd9909cb38fb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "853E5BB59EFE99054D86BBACF7C2F1F2483AD9C05D35CC9D8EA5DD9909CB38FB"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12438
Expires: Wed, 22 Feb 2023 12:00:47 GMT
Date: Wed, 22 Feb 2023 08:33:29 GMT
Connection: keep-alive

www.warganet.net/au/myid.telstra.com/manage/src/log1.css

103.148.113.11

200 OK

80 kB

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/log1.css
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
ASCII text, with very long lines (464), with CRLF line terminators
Size
80 kB (79474 bytes)
Hash
2074c5683c2b44e9344a7ad0af6e6514
83859bebd25263415b740182490f08faa14375eb
64e0352e5eaa93fc976ab3d3749c537f80918f10058716c5adee18175a6384e2

HTTP Headers

GET /au/myid.telstra.com/manage/src/log1.css HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/payment.php

HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 08:33:29 GMT
Server: Apache/2
Last-Modified: Mon, 20 Feb 2023 23:37:58 GMT
ETag: "707f8-5f52a272dd5e9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css

www.warganet.net/au/myid.telstra.com/manage/src/log3.css

103.148.113.11

200 OK

18 kB

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/log3.css
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
ASCII text, with very long lines (4168), with CRLF line terminators
Size
18 kB (18227 bytes)
Hash
9178ef7f10af26e023d797c5248886af
77308adcb10844ef9458f3029077c1fb24a6290b
abf794411ea74e28c356f3d14ce84ff09903c5cef943c10c3d281b74110466da

HTTP Headers

GET /au/myid.telstra.com/manage/src/log3.css HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/payment.php

HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 08:33:29 GMT
Server: Apache/2
Last-Modified: Mon, 20 Feb 2023 23:37:58 GMT
ETag: "1be2a-5f52a272dca31-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 18227
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/css

www.warganet.net/au/myid.telstra.com/manage/src/log2.css

103.148.113.11

200 OK

95 kB

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/log2.css
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
ASCII text, with very long lines (310), with CRLF line terminators
Size
95 kB (94845 bytes)
Hash
b2599224654e31dcc9dc34b782231210
10ec400c0095308e71a95069b56779c5a15bd447
074c682e983ae5d42850fcd483e788531edfc11e08cd7c6bdec4eb4d7279838d

HTTP Headers

GET /au/myid.telstra.com/manage/src/log2.css HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/payment.php

HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 08:33:29 GMT
Server: Apache/2
Last-Modified: Mon, 20 Feb 2023 23:37:58 GMT
ETag: "cd5da-5f52a272dc649-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css

push.services.mozilla.com/

35.81.158.34

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.81.158.34:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fJdg+99PP+J8Ln5wQowylA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: UMkdja07G+34eAYboLAz6itK16E=

www.warganet.net/au/myid.telstra.com/manage/src/images/background-image-landing-thin.png

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/images/background-image-landing-thin.png
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /au/myid.telstra.com/manage/src/images/background-image-landing-thin.png HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/log3.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:29 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.warganet.net/au/myid.telstra.com/manage/src/font/TelstraAkkuratWeb-Light.woff

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/font/TelstraAkkuratWeb-Light.woff
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /au/myid.telstra.com/manage/src/font/TelstraAkkuratWeb-Light.woff HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/log3.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:29 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.warganet.net/myaccount/static-content/css/font/td-original-icons.woff

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/myaccount/static-content/css/font/td-original-icons.woff
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /myaccount/static-content/css/font/td-original-icons.woff HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/log1.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:29 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.warganet.net/au/myid.telstra.com/manage/src/assets/TelstraAkkurat-Bold.woff

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/assets/TelstraAkkurat-Bold.woff
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /au/myid.telstra.com/manage/src/assets/TelstraAkkurat-Bold.woff HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/login.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:29 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.warganet.net/au/myid.telstra.com/manage/src/font/TelstraAkkuratWeb-Light.woff

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/font/TelstraAkkuratWeb-Light.woff
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /au/myid.telstra.com/manage/src/font/TelstraAkkuratWeb-Light.woff HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/log3.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:30 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.warganet.net/au/myid.telstra.com/manage/src/font/TelstraAkkuratWeb-Light.ttf

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/font/TelstraAkkuratWeb-Light.ttf
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /au/myid.telstra.com/manage/src/font/TelstraAkkuratWeb-Light.ttf HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/log3.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:30 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.warganet.net/myaccount/static-content/css/font/td-original-icons.ttf

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/myaccount/static-content/css/font/td-original-icons.ttf
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /myaccount/static-content/css/font/td-original-icons.ttf HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/log1.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:30 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.warganet.net/au/myid.telstra.com/manage/src/assets/TelstraAkkurat-Bold.ttf

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/assets/TelstraAkkurat-Bold.ttf
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /au/myid.telstra.com/manage/src/assets/TelstraAkkurat-Bold.ttf HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/login.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:30 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.warganet.net/myaccount/static-content/css/font/TelstraAkkuratWeb-Light.woff

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/myaccount/static-content/css/font/TelstraAkkuratWeb-Light.woff
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /myaccount/static-content/css/font/TelstraAkkuratWeb-Light.woff HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/log1.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:30 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.warganet.net/au/myid.telstra.com/manage/src/font/TelstraAkkurat-Bold.woff

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/font/TelstraAkkurat-Bold.woff
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /au/myid.telstra.com/manage/src/font/TelstraAkkurat-Bold.woff HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/log3.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:30 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.warganet.net/myaccount/static-content/css/font/TelstraAkkuratWeb-Light.ttf

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/myaccount/static-content/css/font/TelstraAkkuratWeb-Light.ttf
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /myaccount/static-content/css/font/TelstraAkkuratWeb-Light.ttf HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/log1.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:30 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.warganet.net/au/myid.telstra.com/manage/src/font/TelstraAkkurat-Bold.ttf

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/font/TelstraAkkurat-Bold.ttf
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /au/myid.telstra.com/manage/src/font/TelstraAkkurat-Bold.ttf HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/log3.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:30 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.warganet.net/favicon.ico

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/favicon.ico
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/payment.php

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:30 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.warganet.net/au/myid.telstra.com/manage/src/font/Akkurat.woff

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/font/Akkurat.woff
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /au/myid.telstra.com/manage/src/font/Akkurat.woff HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/login.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:30 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11345
Expires: Wed, 22 Feb 2023 11:42:35 GMT
Date: Wed, 22 Feb 2023 08:33:30 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11345
Expires: Wed, 22 Feb 2023 11:42:35 GMT
Date: Wed, 22 Feb 2023 08:33:30 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11345
Expires: Wed, 22 Feb 2023 11:42:35 GMT
Date: Wed, 22 Feb 2023 08:33:30 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11345
Expires: Wed, 22 Feb 2023 11:42:35 GMT
Date: Wed, 22 Feb 2023 08:33:30 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11345
Expires: Wed, 22 Feb 2023 11:42:35 GMT
Date: Wed, 22 Feb 2023 08:33:30 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7550b880-8dc3-4409-a3b3-1239677d1950.jpeg

34.120.237.76

200 OK

8.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7550b880-8dc3-4409-a3b3-1239677d1950.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.4 kB (8357 bytes)
Hash
778cd40a592cf457fb9eb33a7b75d352
28ccd5897ab8c35a117f9205621780c20b656186
af48694bb6429a4556af1ad410b5b551341db0e78565838ac9bc964fe11a660c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7550b880-8dc3-4409-a3b3-1239677d1950.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8357
x-amzn-requestid: 2b32517e-a1b4-4e49-a1bd-d190cdab17a0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtXaEGCnIAMFWVg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f5390c-34c389e528b2eda763b78f87;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:35:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FiXUJVVObRyQhccqtgwoHfXeA92GkfT8pmddYQhVpCvGWQZ7QK7zNA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:53:15 GMT
age: 38415
etag: "28ccd5897ab8c35a117f9205621780c20b656186"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.7 kB (7734 bytes)
Hash
e7cd1e9feb9abc7f7d7f0d5fc7b181f0
cf3ce1808c48e1a86910e16731a044f6cb26275d
426c90298d5a0807b7820d803ce2907268df1195e15d5582eb0ff2f3deeb318c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7734
x-amzn-requestid: fe4dc342-33b6-45f6-984c-2c71dfa0ec13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtX-lGiJoAMFW3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f539f6-489049413f3cb63c537f20d0;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:39:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KyUqB4zqsHWgCv7C3-PymFep4oVmPy4ZHFf75lYOfWbb4qgvVRqoLg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:42:20 GMT
age: 39070
etag: "cf3ce1808c48e1a86910e16731a044f6cb26275d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6ace26d-bd9c-47ab-825f-b99efa61c0f2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.7 kB (7749 bytes)
Hash
8b7d3efb167968747ee9863503d9f563
7c987f546f04a465e589ef8b538ffd39610fcc30
f938408970a1dc3af602aef974a01d03c3b3f3999379680b4f370987766d0d59

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6ace26d-bd9c-47ab-825f-b99efa61c0f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7749
x-amzn-requestid: 3e082f2d-e2ba-47c8-8c41-2059c8698e8d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AkyM-GxpoAMFoaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f1ca52-59cfc1c46e5c9f4435bafbfb;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 07:05:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0BKmYYrjI4YueNubFX6j-Ct1WEoTVOPZIxrN62uaIlph-bKRgNxaYA==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Feb 2023 07:55:33 GMT
age: 2277
etag: "7c987f546f04a465e589ef8b538ffd39610fcc30"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3730a4d-6306-42f2-bfe1-95713a6c281e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.3 kB (8285 bytes)
Hash
b1e8a2c7b353953a4e94457bd9e8c79f
e7fc4c1125f77a246b47c8bca80f4b4275060519
1622ad1ad4d88f4d03c8dbca57bd861aeed6c990bdb0e06a78eef97ab1adb1d1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3730a4d-6306-42f2-bfe1-95713a6c281e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8285
x-amzn-requestid: ce375101-d788-4ce5-985b-dfc3f7121789
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ArXsWHj5oAMF0xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f46cb5-7e5a5e61656ffd88015fe58b;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 07:03:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OItOUdwv6_HPZ-sWxCM9ZYb09JQ8egBg-7ltQWL2Cuats3fQgbAqJA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Feb 2023 07:39:45 GMT
age: 3225
etag: "e7fc4c1125f77a246b47c8bca80f4b4275060519"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4834b156-a232-48e1-88d7-26b7f33269db.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.1 kB (9120 bytes)
Hash
775c0dfd787814adca068965c813734f
0c535ea7ab0c4cd506dbb9a2c353b4b592596b5d
a22789eb1eb608955ca9bd5a35b9443c56d1b705021dc5a16fd2e8181bba8c22

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4834b156-a232-48e1-88d7-26b7f33269db.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9120
x-amzn-requestid: f9e7b353-1b84-4dc0-8dd5-cd6967c2c9a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtW0yFW8IAMFz5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f5381e-37798a345aa3e9a519289fee;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:31:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: cydsBoAjtu2LW9EIZLvdbBGmbJPURsp7jzCvU4VltoXKVYBGJJlHaA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:53:04 GMT
age: 38426
etag: "0c535ea7ab0c4cd506dbb9a2c353b4b592596b5d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08c67aa8-e796-4830-ab3f-fea16ab84bcb.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.9 kB (7917 bytes)
Hash
a4cc348b42bd3b7788652eafd83b9fd2
3b2ef9edcc758fcde0c2791325ff5c1602e15e17
dcb7c5b04b47481aa81a3ae542e3a10f6de546046669a222f3ae16fb275eefc9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08c67aa8-e796-4830-ab3f-fea16ab84bcb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7917
x-amzn-requestid: c901f1cf-f0bf-4ecc-af3e-15a98dc24c10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtX9ZHueoAMFVUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f539ef-149858f16b352e192d7ecf53;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:38:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YTfuT9AOTQTrrdlHgUEiCsNARj_bGRJGTFUmidYWuNsQsr4Ynq1zHQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 22:01:39 GMT
age: 37911
etag: "3b2ef9edcc758fcde0c2791325ff5c1602e15e17"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.warganet.net/au/myid.telstra.com/manage/src/font/Akkurat.ttf

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/font/Akkurat.ttf
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /au/myid.telstra.com/manage/src/font/Akkurat.ttf HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/login.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:30 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.warganet.net/au/myid.telstra.com/manage/src/font/Akkurat.woff

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/font/Akkurat.woff
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /au/myid.telstra.com/manage/src/font/Akkurat.woff HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/log3.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:31 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=93
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.warganet.net/au/myid.telstra.com/manage/src/font/Akkurat.ttf

103.148.113.11

404 Not Found

315 B

URL HTTP/1.1
www.warganet.net/au/myid.telstra.com/manage/src/font/Akkurat.ttf
IP
103.148.113.11:0
ASN
#139993 PT. FORIT ASTA SOLUSINDO

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /au/myid.telstra.com/manage/src/font/Akkurat.ttf HTTP/1.1
Host: www.warganet.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.warganet.net/au/myid.telstra.com/manage/src/log3.css

HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 08:33:31 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (47)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type