Report - myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I

Report Overview

Submitted URL
myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
IP
162.213.196.78
ASN
#29802 HVC-AS
Submitted
2023-04-09 13:42:35
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
myftpbd.com	unknown	2021-02-27	2023-03-24	7.9 kB	196 kB	162.213.196.78
cdnjs.cloudflare.com	235	2015-04-17	2023-04-08	420 B	28 kB	104.17.24.14
ocsp.sectigo.com	487	2019-11-29	2023-04-08	1.3 kB	3.9 kB	172.64.155.188
pfobellweb.hs.llnwd.net	918999	2016-01-04	2023-03-25	2.7 kB	141 kB	95.140.228.128

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-04-09	medium	myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js	87 kB	2023-03-07	2024-05-10
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-05-10 10:22:41 Times Seen110342 Hash a09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef Loading...

	myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I	123 B	2023-03-08	2023-12-03
Pretty URL myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I IP 162.213.196.78 ASN #29802 HVC-AS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 14:39:43 Last Seen2023-12-03 01:53:18 Times Seen51 Hash c6f71262e6a805c66a24446191013adb 97a61675261a2fd41ad6aeb432802d5dcdaa137c f99db4bcbe58617238673ae853542a7a70ce4da862ffcbc738c168d87f71618b Loading...

HTTP Transactions (20)

URL IP Response Size

myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I

162.213.196.78

200 OK

7.8 kB

URL User Request GET HTTP/1.1
myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
IP
162.213.196.78:80
ASN
#29802 HVC-AS

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (535), with CRLF line terminators
Size
7.8 kB (7843 bytes)
Hash
574914c2a97838d627c95cab6f456d3a
7b505e3624ff168a5317dd8e484eea05ef98298a
5c2197e6a643371b9389b370eb1762df3cf22586a5c6ede2f58dcb8082195960

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I HTTP/1.1
Host: myftpbd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
content-encoding: gzip
vary: Accept-Encoding
date: Sun, 09 Apr 2023 13:42:20 GMT
server: LiteSpeed

myftpbd.com/web1/im_g/bell.css

162.213.196.78

200 OK

1.4 kB

URL GET HTTP/1.1
myftpbd.com/web1/im_g/bell.css
IP
162.213.196.78:80
ASN
#29802 HVC-AS

Requested by
http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I

File type
ASCII text, with very long lines (7383), with no line terminators
Size
1.4 kB (1397 bytes)
Hash
4f3fb371856dd10743cec6ee9642f61e
019a4732b5fab1286f211fbe0d25792fd4228cef
26f05de427673c91cee6f3a4056917c7fdda9e2c0f7a288cfdaef3de604c09c8

HTTP Headers

GET /web1/im_g/bell.css HTTP/1.1
Host: myftpbd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 16 Apr 2023 13:42:20 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 04:33:28 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1397
date: Sun, 09 Apr 2023 13:42:20 GMT
server: LiteSpeed

myftpbd.com/web1/im_g/registrationFlow-login.css

162.213.196.78

200 OK

6.9 kB

URL GET HTTP/1.1
myftpbd.com/web1/im_g/registrationFlow-login.css
IP
162.213.196.78:80
ASN
#29802 HVC-AS

Requested by
http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I

File type
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
6.9 kB (6915 bytes)
Hash
f4f1b7da34e5b346e6d9c3c8736d6a7b
9a3be946cf8628641abaab3890cd2bac632bae60
54ecbfeaeda614fc612ca00732f4dcef8253eb7d99ef03143b4a6f87533f19d3

HTTP Headers

GET /web1/im_g/registrationFlow-login.css HTTP/1.1
Host: myftpbd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 16 Apr 2023 13:42:20 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 03:25:12 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 6915
date: Sun, 09 Apr 2023 13:42:20 GMT
server: LiteSpeed

cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js

104.17.24.14

200 OK

27 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT

File type
ASCII text, with very long lines (65451)
Size
27 kB (27433 bytes)
Hash
77bd61b98f7b67af56639229724f8dd4
f04f07dd8ff53e58c32b738f81b71a014bca441d
8ce54c3b77bf31899b27b29188ff4936b580f2bd2b3222d43dda2851ba272e24

HTTP Headers

GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://myftpbd.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 09 Apr 2023 13:42:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 27433
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-1538f"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 246680
expires: Fri, 29 Mar 2024 13:42:21 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M8bPfTjRpeqyR%2FaX2BuPq1g4sceDEb8vj1TFoEk2A8w8KXHmR%2Fj%2BwOmzSPHWpJSEJTnK8FX18pWmiO%2F93sOVlVf%2BQmSrDJslEAUJxOnJ9TF8B%2BXlFuTPzTaja7izWmDv26M0gdkw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7b532c3d3c3c0b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

myftpbd.com/web1/im_g/bell_003.css

162.213.196.78

200 OK

39 kB

URL GET HTTP/1.1
myftpbd.com/web1/im_g/bell_003.css
IP
162.213.196.78:80
ASN
#29802 HVC-AS

Requested by
http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I

File type
Unicode text, UTF-8 (with BOM) text, with very long lines (854), with CRLF line terminators
Size
39 kB (39325 bytes)
Hash
3aa087d4390883e5b200fa4a1218305c
32f970a7b734c16d47167e7b98b7287344fe8a4b
359e34f4e0d6719191f5d6ba9330b72569066e733e24589d1a549f4a91141a54

HTTP Headers

GET /web1/im_g/bell_003.css HTTP/1.1
Host: myftpbd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 16 Apr 2023 13:42:20 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 04:38:58 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 39325
date: Sun, 09 Apr 2023 13:42:20 GMT
server: LiteSpeed

myftpbd.com/web1/im_g/bell_002.css

162.213.196.78

200 OK

85 kB

URL GET HTTP/1.1
myftpbd.com/web1/im_g/bell_002.css
IP
162.213.196.78:80
ASN
#29802 HVC-AS

Requested by
http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I

File type
Unicode text, UTF-8 text, with very long lines (65160), with no line terminators
Size
85 kB (85398 bytes)
Hash
db1e1a88a0c9dd7af7e929feee9e1fc3
0a46d78e52ffd3701ff52bb3e6b4edcd999c784d
280bc08416ba39666f7dced34f7184a5bd57746526e7a26d7c85dffb034aeb50

HTTP Headers

GET /web1/im_g/bell_002.css HTTP/1.1
Host: myftpbd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 16 Apr 2023 13:42:20 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 04:37:34 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 85398
date: Sun, 09 Apr 2023 13:42:20 GMT
server: LiteSpeed

myftpbd.com/web1/im_g/69643-bell-icon-person.jpg

162.213.196.78

200 OK

9.7 kB

URL GET HTTP/1.1
myftpbd.com/web1/im_g/69643-bell-icon-person.jpg
IP
162.213.196.78:80
ASN
#29802 HVC-AS

Requested by
http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 81x77, components 3\012- data
Size
9.7 kB (9744 bytes)
Hash
1c75beb5df106a3b0ad48f2ca2a93535
7a3d5a78a58927b0ef80c02caee46d50c008e463
7b1416db2386c035920fbaac1eda0aea0067a271808920b91082f8dc8d435871

HTTP Headers

GET /web1/im_g/69643-bell-icon-person.jpg HTTP/1.1
Host: myftpbd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 16 Apr 2023 13:42:21 GMT
content-type: image/jpeg
last-modified: Mon, 12 Sep 2022 12:06:20 GMT
accept-ranges: bytes
content-length: 9744
date: Sun, 09 Apr 2023 13:42:21 GMT
server: LiteSpeed

myftpbd.com/web1/im_g/img_login_MyBell_June2021.jpg

162.213.196.78

200 OK

12 kB

URL GET HTTP/1.1
myftpbd.com/web1/im_g/img_login_MyBell_June2021.jpg
IP
162.213.196.78:80
ASN
#29802 HVC-AS

Requested by
http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 179x359, components 3\012- data
Size
12 kB (12306 bytes)
Hash
5c865dbdbe5489ca99f421a6b973f614
7ae0226d959abe9e5f8d286eebc3df13240de2a5
2931a8b701600da4eec98964180aa22f475abcf44fd9f2d5ce4b11db2baa3b38

HTTP Headers

GET /web1/im_g/img_login_MyBell_June2021.jpg HTTP/1.1
Host: myftpbd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 16 Apr 2023 13:42:21 GMT
content-type: image/jpeg
last-modified: Mon, 12 Sep 2022 12:06:20 GMT
accept-ranges: bytes
content-length: 12306
date: Sun, 09 Apr 2023 13:42:21 GMT
server: LiteSpeed

myftpbd.com/web1/im_g/mybell-changing-plans-md.jpg

162.213.196.78

200 OK

13 kB

URL GET HTTP/1.1
myftpbd.com/web1/im_g/mybell-changing-plans-md.jpg
IP
162.213.196.78:80
ASN
#29802 HVC-AS

Requested by
http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 430x290, components 3\012- data
Size
13 kB (12690 bytes)
Hash
a66f1a71245272ef47b3fb6e5c3c9835
1f2d2e92fa99e4c169a72e815befc262b37c1dd6
3da0a9f0c5d3821aaa894c3ebf0793e06364a8cba038b1df3764fe90b200817b

HTTP Headers

GET /web1/im_g/mybell-changing-plans-md.jpg HTTP/1.1
Host: myftpbd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 16 Apr 2023 13:42:21 GMT
content-type: image/jpeg
last-modified: Mon, 12 Sep 2022 12:06:20 GMT
accept-ranges: bytes
content-length: 12690
date: Sun, 09 Apr 2023 13:42:21 GMT
server: LiteSpeed

ocsp.sectigo.com/

172.64.155.188

472 B

URL
ocsp.sectigo.com/
IP
172.64.155.188:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
4c4bd50555c91da8fc723e002cc14159
1fc2f5069bb382ac209c7aaba39e9c12135e5ed0
6cee87ab23f92a5a3ad28c911d6174f8ee3f3407dec9c78a18e8a90c7dc01a21

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 13:42:21 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 08 Apr 2023 14:22:58 GMT
Expires: Sat, 15 Apr 2023 14:22:57 GMT
Etag: "1fc2f5069bb382ac209c7aaba39e9c12135e5ed0"
Cache-Control: max-age=520235,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b532c3f78600b45-OSL

ocsp.sectigo.com/

172.64.155.188

472 B

URL
ocsp.sectigo.com/
IP
172.64.155.188:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
4c4bd50555c91da8fc723e002cc14159
1fc2f5069bb382ac209c7aaba39e9c12135e5ed0
6cee87ab23f92a5a3ad28c911d6174f8ee3f3407dec9c78a18e8a90c7dc01a21

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 13:42:21 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 08 Apr 2023 14:22:58 GMT
Expires: Sat, 15 Apr 2023 14:22:57 GMT
Etag: "1fc2f5069bb382ac209c7aaba39e9c12135e5ed0"
Cache-Control: max-age=520235,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b532c3f7b84b50c-OSL

pfobellweb.hs.llnwd.net/styles/RSX/framework/css/fonts/bellslim_medium-webfont.woff2?ver=00000000

95.140.228.128

200 OK

20 kB

URL GET HTTP/1.1
pfobellweb.hs.llnwd.net/styles/RSX/framework/css/fonts/bellslim_medium-webfont.woff2?ver=00000000
IP
95.140.228.128:443
ASN
#22822 LLNW

Requested by
http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
Certificate
IssuerSectigo Limited
Subject*.hs.llnwd.net
Fingerprint63:D3:89:40:69:80:20:2E:DC:DB:FF:D2:29:5F:87:E5:EC:AC:11:49
ValiditySun, 27 Nov 2022 00:00:00 GMT - Mon, 27 Nov 2023 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 19880, version 1.0\012- data
Size
20 kB (19880 bytes)
Hash
c3d987cf1cfdf2ad3d83a05a1ad8dd56
f64db451fac03f18ddd6ade18e713faa91b8e572
e36f3860d6fe12df58872c55cf1fb78b7a3fe86d9a27591bfda5d8ceb34a31f3

HTTP Headers

GET /styles/RSX/framework/css/fonts/bellslim_medium-webfont.woff2?ver=00000000 HTTP/1.1
Host: pfobellweb.hs.llnwd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://myftpbd.com
Connection: keep-alive
Referer: http://myftpbd.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 13:42:21 GMT
Content-Type: application/octet-stream
Content-Length: 19880
Connection: keep-alive
Cache-Control: public, max-age=86400
Accept-Ranges: bytes
X-Generated-By: O-BC011
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1
Content-Security-Policy: frame-ancestors oneview.bell.ca bell.ca *.bell.ca *.bellmts.ca *.virginmobile.ca *.vm.ca *.vmobile.ca *.vmcanada.com *.thesource.ca *.decibelinsight.net *.decibel.com *.luckymobile.ca *.virginplus.ca; script-src https://*.luckymobile.ca https://www.googletagmanager.com https://sc-static.net https://assets.adobedtm.com https://*.google-analytics.com https://*.postescanada-canadapost.ca https://*.digital.nuance.com https://*.inq.com https://connect.facebook.net https://static.ads-twitter.com https://*.twitter.com https://ssl.geoplugin.net https://s.pinimg.com https://*.google.com https://*.gstatic.com https://*.vmobile.ca https://*.googleadservices.com https://*.stackadapt.com https://*.doubleclick.net https://*.virginplus.ca https://*.bell.ca https://*.tiktok.com https://*.know-where.com https://*.korem.com https://*.googleapis.com https://*.coveo.com https://siteimproveanalytics.com https://*.licdn.com https://vldbellsup.hs.llnwd.net https://vfobellsup.hs.llnwd.net https://prdbellsup.hs.llnwd.net https://pfobellsup.hs.llnwd.net https://cdnjs.cloudflare.com https://vldbellweb.hs.llnwd.net https://vfobellweb.hs.llnwd.net https://prdbellweb.hs.llnwd.net https://pfobellweb.hs.llnwd.net https://*.medallia.ca https://*.kampyle.com https://*.decibelinsight.net https://*.decibelinsight.com https://*.bazaarvoice.com https://*.bing.com https://*.clarity.ms 'unsafe-inline' 'unsafe-eval'; object-src 'none'
X-Content-Type-Options: nosniff
X-LLID: 3742dfcee2734d94ea0c29e00c764675
Age: 32996
Last-Modified: Sun, 19 Jan 2020 06:54:18 GMT
Expires: Mon, 10 Apr 2023 04:32:25 GMT

ocsp.sectigo.com/

104.18.32.68

472 B

URL
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
4c4bd50555c91da8fc723e002cc14159
1fc2f5069bb382ac209c7aaba39e9c12135e5ed0
6cee87ab23f92a5a3ad28c911d6174f8ee3f3407dec9c78a18e8a90c7dc01a21

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 13:42:21 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 08 Apr 2023 14:22:58 GMT
Expires: Sat, 15 Apr 2023 14:22:57 GMT
Etag: "1fc2f5069bb382ac209c7aaba39e9c12135e5ed0"
Cache-Control: max-age=520235,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b532c3f9ddf0b39-OSL

pfobellweb.hs.llnwd.net/Styles/BRF2/Master/core/fonts/bell-icon.woff?ver=202202230149

95.140.228.128

200 OK

61 kB

URL GET HTTP/1.1
pfobellweb.hs.llnwd.net/Styles/BRF2/Master/core/fonts/bell-icon.woff?ver=202202230149
IP
95.140.228.128:443
ASN
#22822 LLNW

Requested by
http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
Certificate
IssuerSectigo Limited
Subject*.hs.llnwd.net
Fingerprint63:D3:89:40:69:80:20:2E:DC:DB:FF:D2:29:5F:87:E5:EC:AC:11:49
ValiditySun, 27 Nov 2022 00:00:00 GMT - Mon, 27 Nov 2023 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 60636, version 0.0\012- data
Size
61 kB (60636 bytes)
Hash
147bb5d7368847c0cb55316422a38722
0f95202e20bae626206e0d28c3f5374e40137398
9f3c160c9e4d24dded596bf2aefd1efd36bab9e5b10b44a01ffe73a2e994ffed

HTTP Headers

GET /Styles/BRF2/Master/core/fonts/bell-icon.woff?ver=202202230149 HTTP/1.1
Host: pfobellweb.hs.llnwd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://myftpbd.com
Connection: keep-alive
Referer: http://myftpbd.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 13:42:21 GMT
Content-Type: application/octet-stream
Content-Length: 60636
Connection: keep-alive
Cache-Control: public, max-age=86400
Accept-Ranges: bytes
X-Generated-By: O-BC001
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1
Content-Security-Policy: frame-ancestors oneview.bell.ca bell.ca *.bell.ca *.bellmts.ca *.virginmobile.ca *.vm.ca *.vmobile.ca *.vmcanada.com *.thesource.ca *.decibelinsight.net *.decibel.com *.luckymobile.ca *.virginplus.ca; script-src https://*.luckymobile.ca https://www.googletagmanager.com https://sc-static.net https://assets.adobedtm.com https://*.google-analytics.com https://*.postescanada-canadapost.ca https://*.digital.nuance.com https://*.inq.com https://connect.facebook.net https://static.ads-twitter.com https://*.twitter.com https://ssl.geoplugin.net https://s.pinimg.com https://*.google.com https://*.gstatic.com https://*.vmobile.ca https://*.googleadservices.com https://*.stackadapt.com https://*.doubleclick.net https://*.virginplus.ca https://*.bell.ca https://*.tiktok.com https://*.know-where.com https://*.korem.com https://*.googleapis.com https://*.coveo.com https://siteimproveanalytics.com https://*.licdn.com https://vldbellsup.hs.llnwd.net https://vfobellsup.hs.llnwd.net https://prdbellsup.hs.llnwd.net https://pfobellsup.hs.llnwd.net https://cdnjs.cloudflare.com https://vldbellweb.hs.llnwd.net https://vfobellweb.hs.llnwd.net https://prdbellweb.hs.llnwd.net https://pfobellweb.hs.llnwd.net https://*.medallia.ca https://*.kampyle.com https://*.decibelinsight.net https://*.decibelinsight.com https://*.bazaarvoice.com https://*.bing.com https://*.clarity.ms 'unsafe-inline' 'unsafe-eval'; object-src 'none'
X-Content-Type-Options: nosniff
X-LLID: a73cb20a2bad1437dc6617f89d9b8e53
Age: 64354
Last-Modified: Sat, 12 Nov 2022 08:13:40 GMT
Expires: Sun, 09 Apr 2023 19:49:47 GMT

pfobellweb.hs.llnwd.net/styles/RSX/framework/css/fonts/bellslim_regular-webfont.woff2?ver=00000000

95.140.228.128

200 OK

19 kB

URL GET HTTP/1.1
pfobellweb.hs.llnwd.net/styles/RSX/framework/css/fonts/bellslim_regular-webfont.woff2?ver=00000000
IP
95.140.228.128:443
ASN
#22822 LLNW

Requested by
http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
Certificate
IssuerSectigo Limited
Subject*.hs.llnwd.net
Fingerprint63:D3:89:40:69:80:20:2E:DC:DB:FF:D2:29:5F:87:E5:EC:AC:11:49
ValiditySun, 27 Nov 2022 00:00:00 GMT - Mon, 27 Nov 2023 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 19412, version 1.0\012- data
Size
19 kB (19412 bytes)
Hash
dc0a99b10362b5e020067080e04dc409
312c96ef72bb892f3ee196b6d05ffee2f0553bbe
3e4d8f00673f6a80b26a8565f9931374e1e9171553b078261a67772af7511629

HTTP Headers

GET /styles/RSX/framework/css/fonts/bellslim_regular-webfont.woff2?ver=00000000 HTTP/1.1
Host: pfobellweb.hs.llnwd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://myftpbd.com
Connection: keep-alive
Referer: http://myftpbd.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 13:42:21 GMT
Content-Type: application/octet-stream
Content-Length: 19412
Connection: keep-alive
Cache-Control: public, max-age=86400
Accept-Ranges: bytes
X-Generated-By: O-BC009
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1
Content-Security-Policy: frame-ancestors oneview.bell.ca bell.ca *.bell.ca *.bellmts.ca *.virginmobile.ca *.vm.ca *.vmobile.ca *.vmcanada.com *.thesource.ca *.decibelinsight.net *.decibel.com *.luckymobile.ca *.virginplus.ca; script-src https://*.luckymobile.ca https://www.googletagmanager.com https://sc-static.net https://assets.adobedtm.com https://*.google-analytics.com https://*.postescanada-canadapost.ca https://*.digital.nuance.com https://*.inq.com https://connect.facebook.net https://static.ads-twitter.com https://*.twitter.com https://ssl.geoplugin.net https://s.pinimg.com https://*.google.com https://*.gstatic.com https://*.vmobile.ca https://*.googleadservices.com https://*.stackadapt.com https://*.doubleclick.net https://*.virginplus.ca https://*.bell.ca https://*.tiktok.com https://*.know-where.com https://*.korem.com https://*.googleapis.com https://*.coveo.com https://siteimproveanalytics.com https://*.licdn.com https://vldbellsup.hs.llnwd.net https://vfobellsup.hs.llnwd.net https://prdbellsup.hs.llnwd.net https://pfobellsup.hs.llnwd.net https://cdnjs.cloudflare.com https://vldbellweb.hs.llnwd.net https://vfobellweb.hs.llnwd.net https://prdbellweb.hs.llnwd.net https://pfobellweb.hs.llnwd.net https://*.medallia.ca https://*.kampyle.com https://*.decibelinsight.net https://*.decibelinsight.com https://*.bazaarvoice.com https://*.bing.com https://*.clarity.ms 'unsafe-inline' 'unsafe-eval'; object-src 'none'
X-Content-Type-Options: nosniff
X-LLID: 8e2133c3b4f2eb9c86411616427188d3
Age: 32995
Last-Modified: Sun, 19 Jan 2020 06:54:18 GMT
Expires: Mon, 10 Apr 2023 04:32:26 GMT

ocsp.sectigo.com/

104.18.32.68

472 B

URL
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
4c4bd50555c91da8fc723e002cc14159
1fc2f5069bb382ac209c7aaba39e9c12135e5ed0
6cee87ab23f92a5a3ad28c911d6174f8ee3f3407dec9c78a18e8a90c7dc01a21

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 13:42:21 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 08 Apr 2023 14:22:58 GMT
Expires: Sat, 15 Apr 2023 14:22:57 GMT
Etag: "1fc2f5069bb382ac209c7aaba39e9c12135e5ed0"
Cache-Control: max-age=520235,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b532c3f9acab4fa-OSL

pfobellweb.hs.llnwd.net/styles/RSX/framework/css/fonts/bellslim_black-webfont.woff2?ver=00000000

95.140.228.128

200 OK

12 kB

URL GET HTTP/1.1
pfobellweb.hs.llnwd.net/styles/RSX/framework/css/fonts/bellslim_black-webfont.woff2?ver=00000000
IP
95.140.228.128:443
ASN
#22822 LLNW

Requested by
http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
Certificate
IssuerSectigo Limited
Subject*.hs.llnwd.net
Fingerprint63:D3:89:40:69:80:20:2E:DC:DB:FF:D2:29:5F:87:E5:EC:AC:11:49
ValiditySun, 27 Nov 2022 00:00:00 GMT - Mon, 27 Nov 2023 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 11668, version 1.0\012- data
Size
12 kB (11668 bytes)
Hash
fea4fffe21c2b84cdaace01e6009504c
3c431e71a5b149834114afc745fb049f2159456c
fe9e041b5ae5802ca35044060f054fe65ff2371f02ffaf1d897ec59152f7c2b0

HTTP Headers

GET /styles/RSX/framework/css/fonts/bellslim_black-webfont.woff2?ver=00000000 HTTP/1.1
Host: pfobellweb.hs.llnwd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://myftpbd.com
Connection: keep-alive
Referer: http://myftpbd.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 13:42:21 GMT
Content-Type: application/octet-stream
Content-Length: 11668
Connection: keep-alive
Cache-Control: public, max-age=86400
Accept-Ranges: bytes
X-Generated-By: O-BC008
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1
Content-Security-Policy: frame-ancestors oneview.bell.ca bell.ca *.bell.ca *.bellmts.ca *.virginmobile.ca *.vm.ca *.vmobile.ca *.vmcanada.com *.thesource.ca *.decibelinsight.net *.decibel.com *.luckymobile.ca *.virginplus.ca; script-src https://*.luckymobile.ca https://www.googletagmanager.com https://sc-static.net https://assets.adobedtm.com https://*.google-analytics.com https://*.postescanada-canadapost.ca https://*.digital.nuance.com https://*.inq.com https://connect.facebook.net https://static.ads-twitter.com https://*.twitter.com https://ssl.geoplugin.net https://s.pinimg.com https://*.google.com https://*.gstatic.com https://*.vmobile.ca https://*.googleadservices.com https://*.stackadapt.com https://*.doubleclick.net https://*.virginplus.ca https://*.bell.ca https://*.tiktok.com https://*.know-where.com https://*.korem.com https://*.googleapis.com https://*.coveo.com https://siteimproveanalytics.com https://*.licdn.com https://vldbellsup.hs.llnwd.net https://vfobellsup.hs.llnwd.net https://prdbellsup.hs.llnwd.net https://pfobellsup.hs.llnwd.net https://cdnjs.cloudflare.com https://vldbellweb.hs.llnwd.net https://vfobellweb.hs.llnwd.net https://prdbellweb.hs.llnwd.net https://pfobellweb.hs.llnwd.net https://*.medallia.ca https://*.kampyle.com https://*.decibelinsight.net https://*.decibelinsight.com https://*.bazaarvoice.com https://*.bing.com https://*.clarity.ms 'unsafe-inline' 'unsafe-eval'; object-src 'none'
X-Content-Type-Options: nosniff
X-LLID: 5a64e3cfb812e4737019b094a479204f
Age: 32995
Last-Modified: Sun, 24 Feb 2019 06:31:52 GMT
Expires: Mon, 10 Apr 2023 04:32:26 GMT

myftpbd.com/web1/im_g/favicon.ico

162.213.196.78

200 OK

13 kB

URL GET HTTP/1.1
myftpbd.com/web1/im_g/favicon.ico
IP
162.213.196.78:80
ASN
#29802 HVC-AS

Requested by
http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I

File type
MS Windows icon resource - 5 icons, 32x32, 8 bits/pixel, 48x48, 8 bits/pixel\012- data
Size
13 kB (13005 bytes)
Hash
25a537cb440345f7ed27f700f9871951
42703837a4aa30064728289729bf2a44f979036b
dc235e90c3fdf50b2046a5abb891bcf5412266df18e9c8d9007cab0344c0c595

HTTP Headers

GET /web1/im_g/favicon.ico HTTP/1.1
Host: myftpbd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 16 Apr 2023 13:42:21 GMT
content-type: image/x-icon
last-modified: Thu, 15 Sep 2022 03:33:28 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 13005
date: Sun, 09 Apr 2023 13:42:21 GMT
server: LiteSpeed

myftpbd.com/web1/im_g/bellIcon_196x196_precomposed.png

162.213.196.78

200 OK

4.1 kB

URL GET HTTP/1.1
myftpbd.com/web1/im_g/bellIcon_196x196_precomposed.png
IP
162.213.196.78:80
ASN
#29802 HVC-AS

Requested by
http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I

File type
PNG image data, 196 x 196, 8-bit colormap, non-interlaced\012- data
Size
4.1 kB (4064 bytes)
Hash
f98ba05492deabb181da961131fd1853
3f78552874af3911e47385b684456ed1f61ff3bd
8b9db0163e82742adf34942363cb11891e285399bac01fcc48beeccf8a752f61

HTTP Headers

GET /web1/im_g/bellIcon_196x196_precomposed.png HTTP/1.1
Host: myftpbd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 16 Apr 2023 13:42:21 GMT
content-type: image/png
last-modified: Thu, 15 Sep 2022 03:33:58 GMT
accept-ranges: bytes
content-length: 4064
date: Sun, 09 Apr 2023 13:42:21 GMT
server: LiteSpeed

pfobellweb.hs.llnwd.net/styles/RSX/framework/css/fonts/bellslim_semibold-webfont.woff2?ver=00000000

95.140.228.128

200 OK

19 kB

URL GET HTTP/1.1
pfobellweb.hs.llnwd.net/styles/RSX/framework/css/fonts/bellslim_semibold-webfont.woff2?ver=00000000
IP
95.140.228.128:443
ASN
#22822 LLNW

Requested by
http://myftpbd.com/web1/bell.php?myBell_LoginNZ8YTCIZ9E0VRD7TU0V4HSMWUBBVJU5RBO74XX9ADRC2OQIQP9G0AFUDAYKZC2L2VD78V9RUURWIE283ROD5W9ZW3SE1RNXC6K77SUMDKOC8RLPHU3VUV0QJTH5XT0NY9G20S7HXQQUM86SCK-en_CA=YOXZIFFYP2UF62C91KMH1GTSI1PJG6C0C56H9F8KUXGPH9NY34PNYKMX6AUMN215X0W146ZS7DBYXG9IENBS3ODYLDOIFHT7A46HYY01MEQQK74734BKIBYSL-credentials=?78AKS8RZUAFFJEVODZPJ9KLFTR53RDAEQ7KSNK6T8K8NAWUI5XHGOKO8J7VY9PMTAE2H3RLI2GZN8A401KXI3OMQAZXTLQ4FL6LVCU5G4T6QJDUO9ABQALQ2OI9N2NF544I
Certificate
IssuerSectigo Limited
Subject*.hs.llnwd.net
Fingerprint63:D3:89:40:69:80:20:2E:DC:DB:FF:D2:29:5F:87:E5:EC:AC:11:49
ValiditySun, 27 Nov 2022 00:00:00 GMT - Mon, 27 Nov 2023 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 19348, version 1.0\012- data
Size
19 kB (19348 bytes)
Hash
cbcd6bfdb582f21405f7a8c62fb942ea
0360ad3f8fbf83bd89c6495f3c83dd957b382bad
41407c31a0d44bb952744a390decccd0a4ba5918e4ff89c860f2495d5ee7a7fe

HTTP Headers

GET /styles/RSX/framework/css/fonts/bellslim_semibold-webfont.woff2?ver=00000000 HTTP/1.1
Host: pfobellweb.hs.llnwd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://myftpbd.com
Connection: keep-alive
Referer: http://myftpbd.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 13:42:22 GMT
Content-Type: application/octet-stream
Content-Length: 19348
Connection: keep-alive
Cache-Control: public, max-age=86400
Accept-Ranges: bytes
X-Generated-By: O-BC012
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1
Content-Security-Policy: frame-ancestors oneview.bell.ca bell.ca *.bell.ca *.bellmts.ca *.virginmobile.ca *.vm.ca *.vmobile.ca *.vmcanada.com *.thesource.ca *.decibelinsight.net *.decibel.com *.luckymobile.ca *.virginplus.ca; script-src https://*.luckymobile.ca https://www.googletagmanager.com https://sc-static.net https://assets.adobedtm.com https://*.google-analytics.com https://*.postescanada-canadapost.ca https://*.digital.nuance.com https://*.inq.com https://connect.facebook.net https://static.ads-twitter.com https://*.twitter.com https://ssl.geoplugin.net https://s.pinimg.com https://*.google.com https://*.gstatic.com https://*.vmobile.ca https://*.googleadservices.com https://*.stackadapt.com https://*.doubleclick.net https://*.virginplus.ca https://*.bell.ca https://*.tiktok.com https://*.know-where.com https://*.korem.com https://*.googleapis.com https://*.coveo.com https://siteimproveanalytics.com https://*.licdn.com https://vldbellsup.hs.llnwd.net https://vfobellsup.hs.llnwd.net https://prdbellsup.hs.llnwd.net https://pfobellsup.hs.llnwd.net https://cdnjs.cloudflare.com https://vldbellweb.hs.llnwd.net https://vfobellweb.hs.llnwd.net https://prdbellweb.hs.llnwd.net https://pfobellweb.hs.llnwd.net https://*.medallia.ca https://*.kampyle.com https://*.decibelinsight.net https://*.decibelinsight.com https://*.bazaarvoice.com https://*.bing.com https://*.clarity.ms 'unsafe-inline' 'unsafe-eval'; object-src 'none'
X-Content-Type-Options: nosniff
X-LLID: c1ac10793bd7161141055184c4a30a0f
Age: 32984
Last-Modified: Sun, 19 Jan 2020 06:54:18 GMT
Expires: Mon, 10 Apr 2023 04:32:38 GMT

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (20)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size