Report - powerscreen-bg.com/

Report Overview

Submitted URL
powerscreen-bg.com/
IP
217.174.156.100
ASN
#201200 SuperHosting.BG Ltd.
Submitted
2022-12-19 13:15:16
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
32

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-09T05:09:13Z	606 B	127 B	54.202.70.174
powerscreen-bg.com	unknown	2019-07-11T01:59:56Z	2023-03-04T02:25:51Z	18 kB	1.7 MB	217.174.156.100
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-09T10:04:36Z	3.2 kB	60 kB	34.120.237.76
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-09T05:09:05Z	1.7 kB	4.4 kB	23.36.77.32
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-09T05:09:18Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-09T05:09:49Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-09T05:09:48Z	333 B	391 B	34.117.237.239
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-09T11:52:10Z	341 B	797 B	93.184.220.29

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-19	medium	powerscreen-bg.com/	Phishing
2022-12-19	medium	powerscreen-bg.com/js/jsFix.js	Phishing
2022-12-19	medium	powerscreen-bg.com/js/hxdgrid.js	Phishing
2022-12-19	medium	powerscreen-bg.com/js/jquery.min.js	Phishing
2022-12-19	medium	powerscreen-bg.com/js/functions.js	Phishing
2022-12-19	medium	powerscreen-bg.com/js/jquery.prettyPhoto.js	Phishing
2022-12-19	medium	powerscreen-bg.com/js/jquery.easing.js	Phishing
2022-12-19	medium	powerscreen-bg.com/js/jquery.mousewheel.js	Phishing
2022-12-19	medium	powerscreen-bg.com/js/jquery.flexslider.js	Phishing
2022-12-19	medium	powerscreen-bg.com/css/fonts/HPSimplifiedW10-Regular.woff	Phishing
2022-12-19	medium	powerscreen-bg.com/files/145770429778390.jpeg	Phishing
2022-12-19	medium	powerscreen-bg.com/files/	Phishing
2022-12-19	medium	powerscreen-bg.com/files/145770582540582.jpeg	Phishing
2022-12-19	medium	powerscreen-bg.com/files/	Phishing
2022-12-19	medium	powerscreen-bg.com/css/fonts/flexslider-icon.woff	Phishing
2022-12-19	medium	powerscreen-bg.com/js/pxgradient-1.0.3.min.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	powerscreen-bg.com/js/jquery.min.js	84 kB	2023-03-07	2024-04-24
Pretty URL powerscreen-bg.com/js/jquery.min.js IP 217.174.156.100 ASN #201200 SuperHosting.BG Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-24 18:39:40 Times Seen15665 Hash 4a356126b9573eb7bd1e9a7494737410 8258d046f17dd3c15a5d3984e1868b7b5d1db329 22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5 Loading...

	powerscreen-bg.com/js/jquery.prettyPhoto.js	22 kB	2023-03-07	2024-04-24
Pretty URL powerscreen-bg.com/js/jquery.prettyPhoto.js IP 217.174.156.100 ASN #201200 SuperHosting.BG Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:35:07 Last Seen2024-04-24 09:13:49 Times Seen995 Hash f81c3c778084503cad39095830c6b3f1 bc381d45657dbc8d47ed45dca67320f421966f04 47ec7ea65620c8be7945819dd593916a9c7c892e727e645c2990819c414ff31c Loading...

	powerscreen-bg.com/js/pxgradient-1.0.3.min.js	2.5 kB	2023-03-08	2023-03-09
Pretty URL powerscreen-bg.com/js/pxgradient-1.0.3.min.js IP 217.174.156.100 ASN #201200 SuperHosting.BG Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:08:59 Last Seen2023-03-09 17:54:15 Times Seen1 Hash 1b99119eb2aa8c80bb6e8dc9d483d8a4 9f37d9c4474359a39a9afc3e86ac259819b12efb 8be36a0acde5082b9542b307bd23617304fb71fe82b1db17c5e7b70a9c822de9 Loading...

	powerscreen-bg.com/js/functions.js	2.7 kB	2023-03-08	2023-03-09
Pretty URL powerscreen-bg.com/js/functions.js IP 217.174.156.100 ASN #201200 SuperHosting.BG Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:08:59 Last Seen2023-03-09 17:54:15 Times Seen1 Hash c7c3ad0ebfd6f450d40e232c03bb0bb0 7eab15300d468a71180c35f261ce87f32d577361 75e82f9426753e850524f5925829b638571dd86efa263bbc6114acd5a964ea28 Loading...

	powerscreen-bg.com/js/jquery.mousewheel.js	2.4 kB	2023-03-07	2024-04-09
Pretty URL powerscreen-bg.com/js/jquery.mousewheel.js IP 217.174.156.100 ASN #201200 SuperHosting.BG Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:40:36 Last Seen2024-04-09 14:11:08 Times Seen290 Hash b8a3ea9e7aad0c0299dbe5cfe5ede202 a16dd268abef04ccf737103524ccb7eb8ad7dc5a cdbdff46d80b04005fd57facd6a0c73b58da2b0abf21e296be23ece88ac0b278 Loading...

	powerscreen-bg.com/	1.6 kB	2023-03-08	2023-03-09
Pretty URL powerscreen-bg.com/ IP 217.174.156.100 ASN #201200 SuperHosting.BG Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:08:59 Last Seen2023-03-09 17:54:15 Times Seen1 Hash 0cdf10fe5ff4412dccfc756506651295 3347d88dc8636e3e4467c9199a99c9ce63f85920 62159ab9aa82e2ee4d4151dd37253c41dea573c7b84f35477007cd3ba3081d9e Loading...

	unknown	0 B	2023-03-07	2024-04-25
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-25 04:15:07 Times Seen37053855 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	powerscreen-bg.com/js/jquery.easing.js	8.1 kB	2023-03-07	2024-04-21
Pretty URL powerscreen-bg.com/js/jquery.easing.js IP 217.174.156.100 ASN #201200 SuperHosting.BG Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:08:12 Last Seen2024-04-21 12:58:52 Times Seen538 Hash 5d1439f76537cbe4784f036b47540663 16472e1bda47afd1e3202f94bb22efb384f69ea1 cda4b38b39e069aa2813486847385336d428d24a0c67734594116100328774e7 Loading...

	powerscreen-bg.com/js/jquery.flexslider.js	55 kB	2023-03-08	2024-02-29
Pretty URL powerscreen-bg.com/js/jquery.flexslider.js IP 217.174.156.100 ASN #201200 SuperHosting.BG Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:08:59 Last Seen2024-02-29 18:34:41 Times Seen121 Hash 14495a127e21cd4f9f159dd58aecd7c4 60e0fca098cc5d78a2f34db322bd00b319fffeed 5d7bbad207e6689ac31858d421ef9ed79c96ffb3fc8f6fd88e4d20ea78eb12aa Loading...

	powerscreen-bg.com/js/jsFix.js	865 B	2023-03-08	2023-03-09
Pretty URL powerscreen-bg.com/js/jsFix.js IP 217.174.156.100 ASN #201200 SuperHosting.BG Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:08:59 Last Seen2023-03-09 17:54:15 Times Seen1 Hash 4b92d8efbf8bbe5a8fe1db8a3e2c65bc eeb7c7b476399f0d6c5f65bce716527e536209bd 85af371df692c28ea3e7bd1ebc896a2edf37f54b3d58304411a27e321aad90a4 Loading...

	powerscreen-bg.com/	204 B	2023-03-08	2023-03-09
Pretty URL powerscreen-bg.com/ IP 217.174.156.100 ASN #201200 SuperHosting.BG Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:08:59 Last Seen2023-03-09 17:54:15 Times Seen1 Hash 001500a06509b0782cb0ec562fa7e08a 405179862f7dbe50b1183e6c7e82d71e71764ed0 5beef342dac1859a06550a38074d616f062dd1bb10f8739f8f6a7d8c6b2a93aa Loading...

	powerscreen-bg.com/	20 B	2023-03-08	2023-03-09
Pretty URL powerscreen-bg.com/ IP 217.174.156.100 ASN #201200 SuperHosting.BG Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:08:59 Last Seen2023-03-09 17:54:15 Times Seen1 Hash 10479ac07a96e0633a2fc0f0e13a3f83 56405bc1f1170ce6de54cfa7a3a16e6874bd0a69 1f260ee42dbce586e1cb3c4ba2822dfe877162f888e61fe3d4c873c7c8cd16ba Loading...

HTTP Transactions (68)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
2039a1dda99e075b82840608771d2326
e89713a35b312f3b87fbeaad98f03fddecbf77ce
aae78c754635e9833fa6c231d775bddc82add02f9ce3197a0b260a0806e708c3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AAE78C754635E9833FA6C231D775BDDC82ADD02F9CE3197A0B260A0806E708C3"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12009
Expires: Mon, 19 Dec 2022 16:35:14 GMT
Date: Mon, 19 Dec 2022 13:15:05 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4cbb89840b57466fcbc0b31305c9dc47
c2c08a7a243a3f7972e8068c448488cac6d2519f
5f871ffd142470f132fed1c93f5f1a7fe6a5ecc3b4311d3d47555fce1d9a35f1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5F871FFD142470F132FED1C93F5F1A7FE6A5ECC3B4311D3D47555FCE1D9A35F1"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9727
Expires: Mon, 19 Dec 2022 15:57:12 GMT
Date: Mon, 19 Dec 2022 13:15:05 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 19 Dec 2022 12:34:22 GMT
content-type: application/json
age: 2443
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
cf03270e3476f7482a2cc7ddc6a9e857
ab70d5ee87b01e0601f8e518bf36f97c8ceeba9a
43a4e796860a1481636dac103488cadc68c261d13cfe835d273efc368e569f97

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "43A4E796860A1481636DAC103488CADC68C261D13CFE835D273EFC368E569F97"
Last-Modified: Sun, 18 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12496
Expires: Mon, 19 Dec 2022 16:43:21 GMT
Date: Mon, 19 Dec 2022 13:15:05 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 7C9cDBKhEK7fc2b0jnIIdYQY1YyHsXG8bHW7vKArdnG4v1npXf0CyOl3xq0WCnHDbVD8I3H1YMQ=
x-amz-request-id: T190Z9RM94YGQZ3Z
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 19 Dec 2022 12:54:33 GMT
age: 1232
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 19 Dec 2022 13:15:05 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 19 Dec 2022 12:33:24 GMT
age: 2501
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
4df678b16094ceafefdbbd55707f4dbe
39a68e051456a8ab6c782502a94e8b95ccb0a71d
00561de9683c69a89e084b685df25c6ea4d3a38654a40554f127814200aadf6a

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3726
Cache-Control: max-age=161629
Content-Type: application/ocsp-response
Date: Mon, 19 Dec 2022 13:15:05 GMT
Etag: "63a029a8-1d7"
Expires: Wed, 21 Dec 2022 10:08:54 GMT
Last-Modified: Mon, 19 Dec 2022 09:06:48 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

54.202.70.174

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.202.70.174:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hmeYQvwEeTWvf5ZYFHmMqg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: t8MtTShNL6BaggzucY3NwPA4Dl8=

powerscreen-bg.com/

217.174.156.100

200 OK

20 kB

URL HTTP/1.1
powerscreen-bg.com/
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Size
20 kB (19839 bytes)
Hash
c538a9b7b288e5180e2e03c8aa90bda1
6698b4e677c18618169e16dacf6fc17278fc556b
d1ba08e993669601dec1855dafce9b5bd6880d1d649a386e1774ca3828003335

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:08 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75; path=/
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Content-Length: 19839
Keep-Alive: timeout=5, max=100
Content-Type: text/html; charset="utf-8"

powerscreen-bg.com/css/flexslider.css

217.174.156.100

200 OK

6.9 kB

URL HTTP/1.1
powerscreen-bg.com/css/flexslider.css
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
ASCII text
Size
6.9 kB (6857 bytes)
Hash
1a1082adec433385167dc23e970b07b2
2704debebb52da32c3cacc806697d2746373d675
079f4351cbf330c708b4d169d518c57e3c910d4284458ab96fc06f0cc374b21c

HTTP Headers

GET /css/flexslider.css HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:08 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:16 GMT
ETag: "10cd19e5-1ac9-52e1226a21a00"
Accept-Ranges: bytes
Content-Length: 6857
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

powerscreen-bg.com/css/prettyPhoto.css

217.174.156.100

200 OK

20 kB

URL HTTP/1.1
powerscreen-bg.com/css/prettyPhoto.css
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
ASCII text, with very long lines (402)
Size
20 kB (19888 bytes)
Hash
e8d324d0a1c308cc2c9fdddb263223d5
a1ae5ab211ad71549139f3a26c1da50a24710fa6
c63be02717683d2efdc8c887d77d289092a50b7d51210e87033045ea2b7c9eed

HTTP Headers

GET /css/prettyPhoto.css HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:08 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 15 Mar 2016 08:26:23 GMT
ETag: "10cd19ec-4db0-52e12270ce9c0"
Accept-Ranges: bytes
Content-Length: 19888
Keep-Alive: timeout=5, max=100
Content-Type: text/css

powerscreen-bg.com/js/jsFix.js

217.174.156.100

200 OK

865 B

URL HTTP/1.1
powerscreen-bg.com/js/jsFix.js
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
ASCII text, with CRLF line terminators
Size
865 B (865 bytes)
Hash
4b92d8efbf8bbe5a8fe1db8a3e2c65bc
eeb7c7b476399f0d6c5f65bce716527e536209bd
85af371df692c28ea3e7bd1ebc896a2edf37f54b3d58304411a27e321aad90a4

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/jsFix.js HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:08 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 15 Mar 2016 08:27:14 GMT
ETag: "10cd1dc9-361-52e122a171c80"
Accept-Ranges: bytes
Content-Length: 865
Keep-Alive: timeout=5, max=100
Content-Type: application/javascript

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18893
Expires: Mon, 19 Dec 2022 18:30:00 GMT
Date: Mon, 19 Dec 2022 13:15:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18893
Expires: Mon, 19 Dec 2022 18:30:00 GMT
Date: Mon, 19 Dec 2022 13:15:07 GMT
Connection: keep-alive

powerscreen-bg.com/js/hxdgrid.js

217.174.156.100

200 OK

36 kB

URL HTTP/1.1
powerscreen-bg.com/js/hxdgrid.js
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
ASCII text, with CRLF line terminators
Size
36 kB (36049 bytes)
Hash
adb3d080f8bd404873749016e1a3ca01
6a174dd29ecf80bb094c3e3f135f5c41a6069be5
ec5a2236d167b8cda1e3bd60c391f6cb8e7adf912d9b4ccaba58c361a85812ba

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/hxdgrid.js HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:08 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:57 GMT
ETag: "10cd1dac-8cd1-52e122913b640"
Accept-Ranges: bytes
Content-Length: 36049
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

powerscreen-bg.com/css/font-awesome.css

217.174.156.100

200 OK

32 kB

URL HTTP/1.1
powerscreen-bg.com/css/font-awesome.css
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
troff or preprocessor input, ASCII text, with very long lines (352)
Size
32 kB (32294 bytes)
Hash
5c4cea83c0663f32588de595aa304f55
a32cd9c0d65db68aa765d0aa9c1f5db60845b6f5
e1a62aa3e52df42ca18368a83f2a0e8ce4cd3ad3084528e01a10f1026f27c48b

HTTP Headers

GET /css/font-awesome.css HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:08 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 15 Mar 2016 08:26:19 GMT
ETag: "10cd19e6-7e26-52e1226cfe0c0"
Accept-Ranges: bytes
Content-Length: 32294
Keep-Alive: timeout=5, max=100
Content-Type: text/css

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47778af6-2d49-4ee8-b5bf-2e8c1140cce5.jpeg

34.120.237.76

200 OK

9.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47778af6-2d49-4ee8-b5bf-2e8c1140cce5.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.1 kB (9058 bytes)
Hash
e6c714628a486b8d09101fe1115b4a25
a859bec81457e5b3511fb7612b65bcd4be790f21
41586527c64614c69c2833d2eb9a0e5e03906388a39ae16443b45dd6885329af

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47778af6-2d49-4ee8-b5bf-2e8c1140cce5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9058
x-amzn-requestid: 30f541b7-557c-45c6-a639-596ec624d6b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dVJtzFJPIAMFaow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ebcbe-221f45c41cc4ac943f78ce6c;Sampled=0
x-amzn-remapped-date: Sun, 18 Dec 2022 07:09:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: f_sUIMBle-AT5Od_IJdlhNc1razIfG8LYIi1tEsIyWtMRBs063gjwQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Dec 2022 07:18:00 GMT
age: 21427
etag: "a859bec81457e5b3511fb7612b65bcd4be790f21"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

powerscreen-bg.com/css/style.css

217.174.156.100

200 OK

16 kB

URL HTTP/1.1
powerscreen-bg.com/css/style.css
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
ASCII text
Size
16 kB (15955 bytes)
Hash
b173a0b73439adba7b4b6b5a78e73b10
1ed6563a4bfea5e55c72c46f82c1a1b6c9e57d3a
10392d4ddb2fa4e86b587d2eb822ac0fc47b583936dfdbc0ea811b03fc850958

HTTP Headers

GET /css/style.css HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:08 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 14 Apr 2016 09:36:56 GMT
ETag: "10cd19ee-3e53-5306ea2989e00"
Accept-Ranges: bytes
Content-Length: 15955
Keep-Alive: timeout=5, max=100
Content-Type: text/css

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e098e9f-4d93-4282-beb5-b37a17658134.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10670 bytes)
Hash
12c4c2232b6d09e9085f0214b3260c1e
a24f8e949a2f2a973fe2dd5af994cd970d37f13a
000475ed7d0aab9a7dab3e25f0a29f82552739fea99f98cbf5131282d0db7d63

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e098e9f-4d93-4282-beb5-b37a17658134.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10670
x-amzn-requestid: d72e1904-caf4-4c72-a811-d1bde023f4b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT11JGCsIAMFRDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3687-7789040d71253d00378f9162;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8qqSQbj22k16ApKTT8y5BQItInb8EjZuACdWcsW_FnMysvnDADbLxQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Dec 2022 21:39:06 GMT
age: 56161
etag: "a24f8e949a2f2a973fe2dd5af994cd970d37f13a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.2 kB (5185 bytes)
Hash
bfd0e913579b4ff2f511223d70cb01fb
497e0ffef816e100e6ddc221ec17d5f389c1142a
bee68ae1a938a5111a32dab4ec4f6964994e6c39143eac9ab94d6c5e29999372

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5185
x-amzn-requestid: 3087af97-3f2d-4848-b297-eba8d84f10c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10YHv8oAMF2sg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-7527022d4bd9c15518fe75cc;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _WKAnv-iFrsEA9lFq4adBmRVdSk9-FQVF_cFCDhpM1_LMDdt_vPwhQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Dec 2022 21:39:06 GMT
age: 56161
etag: "497e0ffef816e100e6ddc221ec17d5f389c1142a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c81bdf4-0a78-472d-ba75-80092016f334.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12125 bytes)
Hash
ed374d0c34e8b2e15f08a6479a4f45e7
5db9e59699048998f0685e940640eae19ef11c8e
9933854830be796a87cfe44b6b8336294e2d3dbbe3205f267720aca6968c3a21

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c81bdf4-0a78-472d-ba75-80092016f334.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12125
x-amzn-requestid: e44faa15-1dfd-4bc0-bdfb-307c3de2755d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2QPFZAIAMFf5g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3734-33d636210a1e24742ee71187;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:40:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JHDfcd35b-bHZm6oayBIN5NDt6ZeGygBfvu7IKU18wFiLHMGEPQPkQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Dec 2022 22:03:33 GMT
age: 54694
etag: "5db9e59699048998f0685e940640eae19ef11c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8696 bytes)
Hash
ada04738696f861648635c9ba98841e4
ce644cd4349d88aa7c24b2503b0b18b444061639
e5cee777efbf1d8a0f95f6cce71199e5f016a91f90cf0afe38bc86654b9d730d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8696
x-amzn-requestid: c897aeed-a082-46a1-965f-39e8c763cb05
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10ZH3jIAMF0gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-548ac80840737a20743980f5;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JecluZu8ExMmP-UHM8QbK-bjm_yqULU1tl2QQDfKMea8NHM6y2JI7g==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Dec 2022 21:39:06 GMT
age: 56161
etag: "ce644cd4349d88aa7c24b2503b0b18b444061639"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff17f5cdf-f263-46fc-b0f6-fb0fa1945efd.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.8 kB (7760 bytes)
Hash
5c990c360fd972821af876119dd8555b
458555bf2ac16225da8adfc9fbe75aed89526287
beae8e1d373cbe333272e54db93f44e18f063e93f12f005e793ba64e4f7696a8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff17f5cdf-f263-46fc-b0f6-fb0fa1945efd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7760
x-amzn-requestid: a0b96eff-245a-48ab-b09b-013861bbad27
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dKwhKFTtIAMF6TA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639a946d-513964bc657a326217d85e42;Sampled=0
x-amzn-remapped-date: Thu, 15 Dec 2022 03:28:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RIRrm1eTSOwWOIuw-YP0ga1-wyEVmsyLL4_9FnFauMDE_r290dds3Q==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Dec 2022 13:23:41 GMT
etag: "458555bf2ac16225da8adfc9fbe75aed89526287"
content-type: image/jpeg
age: 85886
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

powerscreen-bg.com/js/jquery.min.js

217.174.156.100

200 OK

84 kB

URL HTTP/1.1
powerscreen-bg.com/js/jquery.min.js
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
ASCII text, with very long lines (32025)
Size
84 kB (84380 bytes)
Hash
4a356126b9573eb7bd1e9a7494737410
8258d046f17dd3c15a5d3984e1868b7b5d1db329
22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/jquery.min.js HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:08 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 15 Mar 2016 08:27:14 GMT
ETag: "10cd1dc6-1499c-52e122a171c80"
Accept-Ranges: bytes
Content-Length: 84380
Keep-Alive: timeout=5, max=100
Content-Type: application/javascript

powerscreen-bg.com/js/functions.js

217.174.156.100

200 OK

2.7 kB

URL HTTP/1.1
powerscreen-bg.com/js/functions.js
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
ASCII text, with CRLF line terminators
Size
2.7 kB (2734 bytes)
Hash
c7c3ad0ebfd6f450d40e232c03bb0bb0
7eab15300d468a71180c35f261ce87f32d577361
75e82f9426753e850524f5925829b638571dd86efa263bbc6114acd5a964ea28

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/functions.js HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:57 GMT
ETag: "10cd1daa-aae-52e122913b640"
Accept-Ranges: bytes
Content-Length: 2734
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript

powerscreen-bg.com/js/jquery.prettyPhoto.js

217.174.156.100

200 OK

22 kB

URL HTTP/1.1
powerscreen-bg.com/js/jquery.prettyPhoto.js
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
ASCII text, with very long lines (21223)
Size
22 kB (21506 bytes)
Hash
f81c3c778084503cad39095830c6b3f1
bc381d45657dbc8d47ed45dca67320f421966f04
47ec7ea65620c8be7945819dd593916a9c7c892e727e645c2990819c414ff31c

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/jquery.prettyPhoto.js HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:08 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:27:14 GMT
ETag: "10cd1dc8-5402-52e122a171c80"
Accept-Ranges: bytes
Content-Length: 21506
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

powerscreen-bg.com/js/jquery.easing.js

217.174.156.100

200 OK

8.1 kB

URL HTTP/1.1
powerscreen-bg.com/js/jquery.easing.js
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
Unicode text, UTF-8 text
Size
8.1 kB (8101 bytes)
Hash
5d1439f76537cbe4784f036b47540663
16472e1bda47afd1e3202f94bb22efb384f69ea1
cda4b38b39e069aa2813486847385336d428d24a0c67734594116100328774e7

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/jquery.easing.js HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:27:06 GMT
ETag: "10cd1db8-1fa5-52e12299d0a80"
Accept-Ranges: bytes
Content-Length: 8101
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

powerscreen-bg.com/js/jquery.mousewheel.js

217.174.156.100

200 OK

2.4 kB

URL HTTP/1.1
powerscreen-bg.com/js/jquery.mousewheel.js
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
ASCII text
Size
2.4 kB (2400 bytes)
Hash
b8a3ea9e7aad0c0299dbe5cfe5ede202
a16dd268abef04ccf737103524ccb7eb8ad7dc5a
cdbdff46d80b04005fd57facd6a0c73b58da2b0abf21e296be23ece88ac0b278

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/jquery.mousewheel.js HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:27:14 GMT
ETag: "10cd1dc7-960-52e122a171c80"
Accept-Ranges: bytes
Content-Length: 2400
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

powerscreen-bg.com/js/jquery.flexslider.js

217.174.156.100

200 OK

55 kB

URL HTTP/1.1
powerscreen-bg.com/js/jquery.flexslider.js
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
ASCII text, with very long lines (325)
Size
55 kB (55156 bytes)
Hash
14495a127e21cd4f9f159dd58aecd7c4
60e0fca098cc5d78a2f34db322bd00b319fffeed
5d7bbad207e6689ac31858d421ef9ed79c96ffb3fc8f6fd88e4d20ea78eb12aa

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/jquery.flexslider.js HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:27:08 GMT
ETag: "10cd1dbe-d774-52e1229bb8f00"
Accept-Ranges: bytes
Content-Length: 55156
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

powerscreen-bg.com/css/hxdgrid.css

217.174.156.100

200 OK

477 B

URL HTTP/1.1
powerscreen-bg.com/css/hxdgrid.css
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
ASCII text
Size
477 B (477 bytes)
Hash
f35071cf136480ff8eb7961c613c6942
32645787a6085886dd2d12630d7be3f61ea8f3e8
da02e5ff9fa9cc27471e9295c75a89d5886bc31dfb35a2837c01cc413c56fd23

HTTP Headers

GET /css/hxdgrid.css HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:23 GMT
ETag: "10cd19e7-1dd-52e12270ce9c0"
Accept-Ranges: bytes
Content-Length: 477
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css

powerscreen-bg.com/css/jquery-ui.css

217.174.156.100

200 OK

35 kB

URL HTTP/1.1
powerscreen-bg.com/css/jquery-ui.css
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
ASCII text, with very long lines (2363)
Size
35 kB (35348 bytes)
Hash
776cccf0cb13e685da9d732eb7a21210
88573090efa5b87280ee466f07c97981a43b70b9
f9d1f4242dffd0ebb37bea5a9e0276d50f81249073d66de99684a70c661b78ea

HTTP Headers

GET /css/jquery-ui.css HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:23 GMT
ETag: "10cd19e8-8a14-52e12270ce9c0"
Accept-Ranges: bytes
Content-Length: 35348
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

powerscreen-bg.com/images/logo.png

217.174.156.100

200 OK

12 kB

URL HTTP/1.1
powerscreen-bg.com/images/logo.png
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
PNG image data, 214 x 137, 8-bit/color RGBA, non-interlaced\012- data
Size
12 kB (12411 bytes)
Hash
b92fdf9ebcd721f3e81091637c14fe61
6c39eedcbc64be758721437992d6d21bd989661c
1a3fd0f7702ef0b21aacac6fef4cd857b327d0e7cb84f2c48a57a3ee5ccc8be1

HTTP Headers

GET /images/logo.png HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:51 GMT
ETag: "10cd1d81-307b-52e1228b828c0"
Accept-Ranges: bytes
Content-Length: 12411
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png

powerscreen-bg.com/files/tn/145580783450575.jpg

217.174.156.100

200 OK

62 kB

URL HTTP/1.1
powerscreen-bg.com/files/tn/145580783450575.jpg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 300x225, components 3\012- data
Size
62 kB (62072 bytes)
Hash
a661c3ac2a931399a565a746f34596c1
36f1aba6088ed59b18c7824d0d0b8766056bbb0e
7620302e056f7748db1798b62c5844328eda1ed11de8dd9de27e5d386be37ee3

HTTP Headers

GET /files/tn/145580783450575.jpg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:14:31 GMT
ETag: "10cd1c5c-f278-52fbaf30273c0"
Accept-Ranges: bytes
Content-Length: 62072
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/files/tn/146115719929230.png

217.174.156.100

200 OK

24 kB

URL HTTP/1.1
powerscreen-bg.com/files/tn/146115719929230.png
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
PNG image data, 300 x 169, 8-bit/color RGB, non-interlaced\012- data
Size
24 kB (23992 bytes)
Hash
b1427c5a5c3e343f0318fdc12ccdbdd2
e909a73b3ef6ce161a2d727b795e0033320aeb9f
cd26711f5d8677a4d7a2b364af54326b2faf84a1369a30e9d07903278ef95235

HTTP Headers

GET /files/tn/146115719929230.png HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Wed, 20 Apr 2016 12:59:59 GMT
ETag: "10cd1c87-5db8-530ea2bceb1c0"
Accept-Ranges: bytes
Content-Length: 23992
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

powerscreen-bg.com/files/tn/145692258963991.jpg

217.174.156.100

200 OK

48 kB

URL HTTP/1.1
powerscreen-bg.com/files/tn/145692258963991.jpg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 300x196, components 3\012- data
Size
48 kB (48358 bytes)
Hash
326b791b20a15cae6a42d0fca3a45b86
1614972d0d099b14c795326d009204b73bf74305
97c6604f56fe070e9035816f857c3ecdf522835281100a8526126279459ed363

HTTP Headers

GET /files/tn/145692258963991.jpg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:14:32 GMT
ETag: "10cd1c5f-bce6-52fbaf311b600"
Accept-Ranges: bytes
Content-Length: 48358
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/files/tn/145865697125515.jpg

217.174.156.100

200 OK

46 kB

URL HTTP/1.1
powerscreen-bg.com/files/tn/145865697125515.jpg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 300x224, components 3\012- data
Size
46 kB (46453 bytes)
Hash
fc3dcab7b5cb1c6d8dc21c02ed78ef05
ee9a8e0316ff568cbf9acbc807dad92bdfa3950c
b6ca3177a15b90e60f94999dd3c649555f8ecc215f3a98a61f0bcd92f2a93f2c

HTTP Headers

GET /files/tn/145865697125515.jpg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:14:33 GMT
ETag: "10cd1c7a-b575-52fbaf320f840"
Accept-Ranges: bytes
Content-Length: 46453
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/files/146591007949236.jpg

217.174.156.100

200 OK

125 kB

URL HTTP/1.1
powerscreen-bg.com/files/146591007949236.jpg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, baseline, precision 8, 360x270, components 3\012- data
Size
125 kB (125036 bytes)
Hash
218d53b2cf1945ff2b06a96e6b71dab4
31cb1e5a288a20291f84865133f313a5dc813cdb
7aaedb5bd28455181d3797278dc103bbf43780f57b13746640d27053047561fd

HTTP Headers

GET /files/146591007949236.jpg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 14 Jun 2016 13:14:39 GMT
ETag: "10cd1b58-1e86c-5353cc9880dc0"
Accept-Ranges: bytes
Content-Length: 125036
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/css/fonts/HPSimplifiedW10-Regular.woff

217.174.156.100

200 OK

34 kB

URL HTTP/1.1
powerscreen-bg.com/css/fonts/HPSimplifiedW10-Regular.woff
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
Web Open Font Format, TrueType, length 33508, version 1.0\012- data
Size
34 kB (33508 bytes)
Hash
d3747457b5cd9c1c6d77a1759d668901
aed64df0bf53280cb2fe750896fc31e64621e79f
5743b2102083e05c122b602b520a48336bf6fdc32d078eb745a9615be6af1361

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /css/fonts/HPSimplifiedW10-Regular.woff HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://powerscreen-bg.com/css/style.css
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:23 GMT
ETag: "10ea0e5e-82e4-52e12270ce9c0"
Accept-Ranges: bytes
Content-Length: 33508
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: font/woff

powerscreen-bg.com/images/logoTop.png

217.174.156.100

200 OK

13 kB

URL HTTP/1.1
powerscreen-bg.com/images/logoTop.png
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
PNG image data, 214 x 137, 8-bit/color RGBA, non-interlaced\012- data
Size
13 kB (12637 bytes)
Hash
9129743957939368269069d9945d5951
26dcb15c755abf37b4fb7d02c65b90668c993b47
ac57f4596fb4552e53ba651e172ef3dc7d2bf2381e74f2dca0b34edbf036e35c

HTTP Headers

GET /images/logoTop.png HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:52 GMT
ETag: "10cd1d82-315d-52e1228c76b00"
Accept-Ranges: bytes
Content-Length: 12637
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

powerscreen-bg.com/images/iconSearch.png

217.174.156.100

200 OK

1.3 kB

URL HTTP/1.1
powerscreen-bg.com/images/iconSearch.png
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
PNG image data, 18 x 19, 8-bit/color RGBA, non-interlaced\012- data
Size
1.3 kB (1302 bytes)
Hash
fbf9c59d1394609786a3d238601823ad
3c871f6156c7830ab8c97556d71251cc954bbaf4
312dbcbd48665983efc7b847e89ef81279a3dfc8317466ee3f52cb3de5e2ff02

HTTP Headers

GET /images/iconSearch.png HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:51 GMT
ETag: "10cd1d7f-516-52e1228b828c0"
Accept-Ranges: bytes
Content-Length: 1302
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

powerscreen-bg.com/images/shadow1.png

217.174.156.100

200 OK

5.0 kB

URL HTTP/1.1
powerscreen-bg.com/images/shadow1.png
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
PNG image data, 1500 x 76, 8-bit/color RGB, non-interlaced\012- data
Size
5.0 kB (4950 bytes)
Hash
be45510339a6858a328ec201af55e78d
c2449ace8ce8683eb619f41b39927faa22d93600
6c4ca70db7a55772e93c0f5217d52bcb45f76eda1eb69a18ecf12137235ca39b

HTTP Headers

GET /images/shadow1.png HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/css/style.css
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:55 GMT
ETag: "10cd1d96-1356-52e1228f531c0"
Accept-Ranges: bytes
Content-Length: 4950
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

powerscreen-bg.com/images/shadow2.png

217.174.156.100

200 OK

5.0 kB

URL HTTP/1.1
powerscreen-bg.com/images/shadow2.png
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
PNG image data, 1499 x 76, 8-bit/color RGB, non-interlaced\012- data
Size
5.0 kB (4958 bytes)
Hash
08eefaeb66162b15d479612b140cec8c
f588c43cc14bf1b93e617066c32bd53f850efd73
7c25b7d17df9349b3eaf05fb913ecf44cce92e8728e2f84a84189f37e65024dd

HTTP Headers

GET /images/shadow2.png HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/css/style.css
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:55 GMT
ETag: "10cd1d97-135e-52e1228f531c0"
Accept-Ranges: bytes
Content-Length: 4958
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

powerscreen-bg.com/images/iconPhone.png

217.174.156.100

200 OK

1.5 kB

URL HTTP/1.1
powerscreen-bg.com/images/iconPhone.png
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced\012- data
Size
1.5 kB (1454 bytes)
Hash
8b6570521a74301d4e0abd04482aaff0
f8e334ec2cb32a1f08de4b3084f4f6beb5bbfcbe
b7414534830f6f3b68db47412164f1efd3fc909543768dd38fce402723281058

HTTP Headers

GET /images/iconPhone.png HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/css/style.css
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:51 GMT
ETag: "10cd1d7e-5ae-52e1228b828c0"
Accept-Ranges: bytes
Content-Length: 1454
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png

powerscreen-bg.com/images/shadow.png

217.174.156.100

200 OK

11 kB

URL HTTP/1.1
powerscreen-bg.com/images/shadow.png
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
PNG image data, 247 x 81, 8-bit/color RGBA, non-interlaced\012- data
Size
11 kB (10974 bytes)
Hash
19a31a4125954cacc3db2895e87d6ad8
fd14f3aa512695e569e76e51bc39b3282120b217
ecfe06b104f11f76c87311bc1f5b1c30ed11d8bb4a2da80bfd79c55cb3364235

HTTP Headers

GET /images/shadow.png HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/css/style.css
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:55 GMT
ETag: "10cd1d95-2ade-52e1228f531c0"
Accept-Ranges: bytes
Content-Length: 10974
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png

powerscreen-bg.com/files/tn/144965368018076.jpg

217.174.156.100

200 OK

44 kB

URL HTTP/1.1
powerscreen-bg.com/files/tn/144965368018076.jpg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 300x149, components 3\012- data
Size
44 kB (43795 bytes)
Hash
e0df563bc56b8b7a8f76ccab19505584
55e605cb459d4e5ceb6c032f793143d868586881
d3e5bda742daef4ebd3ab38fb0c7f2d8033ee528ca8a9c1ed60d1aff2a198912

HTTP Headers

GET /files/tn/144965368018076.jpg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:14:21 GMT
ETag: "10cd1bb5-ab13-52fbaf269dd40"
Accept-Ranges: bytes
Content-Length: 43795
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/files/tn/145503935512295.jpg

217.174.156.100

200 OK

67 kB

URL HTTP/1.1
powerscreen-bg.com/files/tn/145503935512295.jpg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 300x200, components 3\012- data
Size
67 kB (67108 bytes)
Hash
31132de63a2824cb922b988c68ecaea6
b4022b6c5e754bb21a2f843165fa3f7a91ea2a63
3d11df159b2a8fde7b86e08eec4d66e79b28e5467a51ca9977cacc01a8b12ba6

HTTP Headers

GET /files/tn/145503935512295.jpg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:14:30 GMT
ETag: "10cd1c49-10624-52fbaf2f33180"
Accept-Ranges: bytes
Content-Length: 67108
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/files/tn/145580690863033.jpg

217.174.156.100

200 OK

42 kB

URL HTTP/1.1
powerscreen-bg.com/files/tn/145580690863033.jpg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 300x168, components 3\012- data
Size
42 kB (41682 bytes)
Hash
4aac942b5c60b4d96bce4b62e63b268a
e1d79005022393d2f4b11cd2e12aa7aec842a06c
a4fa152e92123180d6cee8bd2af1927c87ac998b9deb53a786628cbc2cdd153a

HTTP Headers

GET /files/tn/145580690863033.jpg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:14:31 GMT
ETag: "10cd1c58-a2d2-52fbaf30273c0"
Accept-Ranges: bytes
Content-Length: 41682
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/files/tn/145208563184044.jpg

217.174.156.100

200 OK

63 kB

URL HTTP/1.1
powerscreen-bg.com/files/tn/145208563184044.jpg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 300x225, components 3\012- data
Size
63 kB (62569 bytes)
Hash
178f6425a7990a4e11f0606570684e55
00327a6f56e9a73a46018766468bfabe169206f1
d1b751dbae9fb1ff477bec02d87c1d7d18602cc3a2ca680690e73a77e20cee8a

HTTP Headers

GET /files/tn/145208563184044.jpg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:14:24 GMT
ETag: "10cd1bea-f469-52fbaf297a400"
Accept-Ranges: bytes
Content-Length: 62569
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/files/tn/145079538944783.jpg

217.174.156.100

200 OK

65 kB

URL HTTP/1.1
powerscreen-bg.com/files/tn/145079538944783.jpg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 300x168, components 3\012- data
Size
65 kB (65182 bytes)
Hash
2bd9ef8522eb5cb84e924c734db4b7ac
e1f1684fd827a6f2c905dffc3070ec3dda794abc
99565a8c4ef44818ed555cb40bcc87d8b3f3004dccb94806272a1acc624618a4

HTTP Headers

GET /files/tn/145079538944783.jpg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:14:23 GMT
ETag: "10cd1bd2-fe9e-52fbaf28861c0"
Accept-Ranges: bytes
Content-Length: 65182
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/files/tn/144965296662789.jpg

217.174.156.100

200 OK

68 kB

URL HTTP/1.1
powerscreen-bg.com/files/tn/144965296662789.jpg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 300x225, components 3\012- data
Size
68 kB (67566 bytes)
Hash
4a0441629e95cb033855782ed394416b
ca3cd9890c2eb208fdd7df8c7f8dd4012a61b37b
514535406676ca56d08b696a6db5f2e1d660f6e4e122da888965d19260e342fd

HTTP Headers

GET /files/tn/144965296662789.jpg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:14:12 GMT
ETag: "10cd1ba8-107ee-52fbaf1e08900"
Accept-Ranges: bytes
Content-Length: 67566
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/files/tn/145373356912845.jpg

217.174.156.100

200 OK

56 kB

URL HTTP/1.1
powerscreen-bg.com/files/tn/145373356912845.jpg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 300x193, components 3\012- data
Size
56 kB (55782 bytes)
Hash
6cb48e010355cb9bf8d652a17444585d
113eda1a517f89636d41c76fb001058cbf163653
982ebfb6307e8aadb068dfb2e9b2692728403e852c7eec50ffda1d8c898ed12e

HTTP Headers

GET /files/tn/145373356912845.jpg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:14:27 GMT
ETag: "10cd1c0f-d9e6-52fbaf2c56ac0"
Accept-Ranges: bytes
Content-Length: 55782
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/files/145770429778390.jpeg

217.174.156.100

200 OK

25 kB

URL HTTP/1.1
powerscreen-bg.com/files/145770429778390.jpeg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 244x263, components 3\012- data
Size
25 kB (24605 bytes)
Hash
9917d9e8c20c4474f09319bcdbbd98bb
45ebf67cf2c8a9b1fd9a050cbe179258018c6c96
29f0a34caa8e9cb15105d5cba7c5b00afdc7f02cd042825518bf6057bb769b04

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /files/145770429778390.jpeg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:14:03 GMT
ETag: "10cd1b30-601d-52fbaf15734c0"
Accept-Ranges: bytes
Content-Length: 24605
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/images/iconHome.png

217.174.156.100

200 OK

1.5 kB

URL HTTP/1.1
powerscreen-bg.com/images/iconHome.png
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
PNG image data, 21 x 20, 8-bit/color RGBA, non-interlaced\012- data
Size
1.5 kB (1521 bytes)
Hash
f6bc76b0aca58aa6b96d9b1ec8505bb4
101e8ef7dbae855fdeba94f92fe34ef011ca2819
5febf48db6537a09496c2d1c3f9c313f8ceadbdf664b64369c297e59e6fd124a

HTTP Headers

GET /images/iconHome.png HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:50 GMT
ETag: "10cd1d7c-5f1-52e1228a8e680"
Accept-Ranges: bytes
Content-Length: 1521
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png

powerscreen-bg.com/files/

217.174.156.100

403 Forbidden

199 B

URL HTTP/1.1
powerscreen-bg.com/files/
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
199 B (199 bytes)
Hash
bb8f534fbff5ee61a95af9c4740ae043
832e403d42aac1fec93e4f602338544d3fd2e4f1
5b13fb5957b84ef7bb9d0b6cd509c947ff6a37d67efdac2b896ddd3b908aad10

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /files/ HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 403 Forbidden
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Content-Length: 199
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

powerscreen-bg.com/files/145770582540582.jpeg

217.174.156.100

200 OK

25 kB

URL HTTP/1.1
powerscreen-bg.com/files/145770582540582.jpeg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 244x263, components 3\012- data
Size
25 kB (24605 bytes)
Hash
9917d9e8c20c4474f09319bcdbbd98bb
45ebf67cf2c8a9b1fd9a050cbe179258018c6c96
29f0a34caa8e9cb15105d5cba7c5b00afdc7f02cd042825518bf6057bb769b04

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /files/145770582540582.jpeg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:14:04 GMT
ETag: "10cd1b34-601d-52fbaf1667700"
Accept-Ranges: bytes
Content-Length: 24605
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/files/145753346869952.jpg

217.174.156.100

200 OK

114 kB

URL HTTP/1.1
powerscreen-bg.com/files/145753346869952.jpg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "LEAD Technologies Inc. V1.01", baseline, precision 8, 778x517, components 3\012- data
Size
114 kB (113791 bytes)
Hash
2ad49b07b2609d783578d841386a952b
3f0ab2c6e40b9472da9a5209f676f1b1f6a897f1
7a9334b1641f7c3146f7e83096ab1091458199ca86ce71a4a560021dc8b42d72

HTTP Headers

GET /files/145753346869952.jpg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:14:03 GMT
ETag: "10cd1b2f-1bc7f-52fbaf15734c0"
Accept-Ranges: bytes
Content-Length: 113791
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/images/gradImg.jpg

217.174.156.100

200 OK

64 kB

URL HTTP/1.1
powerscreen-bg.com/images/gradImg.jpg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=180, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=552], baseline, precision 8, 552x265, components 3\012- data
Size
64 kB (64502 bytes)
Hash
9300fbb53c50f26351718af9d8a10e21
492f3cf50071b4b532aa6cb0170dd88bb3460ace
1561a73d944f6f6e7cc94e1c542ab96f421290991b0b7681fd66cbe31b8361cf

HTTP Headers

GET /images/gradImg.jpg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:50 GMT
ETag: "10cd1d77-fbf6-52e1228a8e680"
Accept-Ranges: bytes
Content-Length: 64502
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/files/144888727692570.png

217.174.156.100

200 OK

3.8 kB

URL HTTP/1.1
powerscreen-bg.com/files/144888727692570.png
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
PNG image data, 55 x 55, 8-bit/color RGBA, non-interlaced\012- data
Size
3.8 kB (3785 bytes)
Hash
bec4a197a05c3a773444606351d4e117
3fedec46c86f649b46e4f4039559cf6cdfa72d53
7c895b6a56dc3b2723d021c394d033fc281690c3a7569f5245cb1f31bf3c2ff6

HTTP Headers

GET /files/144888727692570.png HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:13:20 GMT
ETag: "10cd1a40-ec9-52fbaeec71400"
Accept-Ranges: bytes
Content-Length: 3785
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png

powerscreen-bg.com/files/144845882761615.jpg

217.174.156.100

200 OK

258 kB

URL HTTP/1.1
powerscreen-bg.com/files/144845882761615.jpg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 723x286, components 3\012- data
Size
258 kB (258370 bytes)
Hash
784bfcaa2ba0d37b27a03abe61f7ee1f
0f5efe3e3d7c7aa36bec6374c6c1057197bcad38
82c4fe8760abdb69906d2869eda4b1556ed26fa7fa36e330ec2121c5a2500d5d

HTTP Headers

GET /files/144845882761615.jpg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:13:18 GMT
ETag: "10cd1a35-3f142-52fbaeea88f80"
Accept-Ranges: bytes
Content-Length: 258370
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/images/kak.png

217.174.156.100

200 OK

3.7 kB

URL HTTP/1.1
powerscreen-bg.com/images/kak.png
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
PNG image data, 46 x 29, 8-bit/color RGBA, non-interlaced\012- data
Size
3.7 kB (3726 bytes)
Hash
68278bb6584a2442280b54fc90259ba2
95a3922f091a45c821a07c7d0dbf9eb1786a18e5
50dbfbc8d21f43bffa35fe63a0ebaedb06763502cb23d79c3a7529e67734a02c

HTTP Headers

GET /images/kak.png HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:51 GMT
ETag: "10cd1d80-e8e-52e1228b828c0"
Accept-Ranges: bytes
Content-Length: 3726
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png

powerscreen-bg.com/files/144862595233856.png

217.174.156.100

200 OK

2.6 kB

URL HTTP/1.1
powerscreen-bg.com/files/144862595233856.png
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
PNG image data, 55 x 34, 8-bit/color RGBA, non-interlaced\012- data
Size
2.6 kB (2619 bytes)
Hash
3d5fb40dffebb2244598b2a3b7bfbadc
5de42bd5d55f17c357330e51c4714ce561ec2496
537e65f5997b873c0140b183724744c70c15707bde582a9b4997981468a7129e

HTTP Headers

GET /files/144862595233856.png HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:13:20 GMT
ETag: "10cd1a3c-a3b-52fbaeec71400"
Accept-Ranges: bytes
Content-Length: 2619
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png

powerscreen-bg.com/files/144862602555727.png

217.174.156.100

200 OK

4.1 kB

URL HTTP/1.1
powerscreen-bg.com/files/144862602555727.png
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced\012- data
Size
4.1 kB (4137 bytes)
Hash
760053dc7a239f402c3ee47574435dfa
3edc988e77f4776cd2748d9ae4253637d9b9b22e
b74df335a7ca75d1fe2b3abbc8e33bb0341b2bcd67e5ca5e9ba298499aace1f3

HTTP Headers

GET /files/144862602555727.png HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:13:20 GMT
ETag: "10cd1a3d-1029-52fbaeec71400"
Accept-Ranges: bytes
Content-Length: 4137
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png

powerscreen-bg.com/files/tn/145070461123336.jpg

217.174.156.100

200 OK

77 kB

URL HTTP/1.1
powerscreen-bg.com/files/tn/145070461123336.jpg
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 350x234, components 3\012- data
Size
77 kB (76843 bytes)
Hash
1b279aefa520ec2a2f02f34be856389f
a4be56263e79d37a2f877c367781586efd0b2377
edf2456ed1df42f8d977779a47b0e562bf068f3416683a5f64cf9cf5aa826c49

HTTP Headers

GET /files/tn/145070461123336.jpg HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 05 Apr 2016 11:14:21 GMT
ETag: "10cd1bc0-12c2b-52fbaf269dd40"
Accept-Ranges: bytes
Content-Length: 76843
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg

powerscreen-bg.com/files/

217.174.156.100

403 Forbidden

199 B

URL HTTP/1.1
powerscreen-bg.com/files/
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
199 B (199 bytes)
Hash
bb8f534fbff5ee61a95af9c4740ae043
832e403d42aac1fec93e4f602338544d3fd2e4f1
5b13fb5957b84ef7bb9d0b6cd509c947ff6a37d67efdac2b896ddd3b908aad10

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /files/ HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 403 Forbidden
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Content-Length: 199
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

powerscreen-bg.com/css/fonts/flexslider-icon.woff

217.174.156.100

200 OK

1.3 kB

URL HTTP/1.1
powerscreen-bg.com/css/fonts/flexslider-icon.woff
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
Web Open Font Format, TrueType, length 1268, version 1.0\012- data
Size
1.3 kB (1268 bytes)
Hash
f8b92f66539473eea649c8514eb836a0
9876bce2a7b39125bd7a406c445e46e704d7b37e
333fe8266952f16c8b686f3edd78293da28e6eaef314dca86bc4eeaa23f290e8

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /css/fonts/flexslider-icon.woff HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://powerscreen-bg.com/css/flexslider.css
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:26:19 GMT
ETag: "10ea0e62-4f4-52e1226cfe0c0"
Accept-Ranges: bytes
Content-Length: 1268
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: font/woff

powerscreen-bg.com/favicon.ico

217.174.156.100

404 Not Found

20 kB

URL HTTP/1.1
powerscreen-bg.com/favicon.ico
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Size
20 kB (19839 bytes)
Hash
c538a9b7b288e5180e2e03c8aa90bda1
6698b4e677c18618169e16dacf6fc17278fc556b
d1ba08e993669601dec1855dafce9b5bd6880d1d649a386e1774ca3828003335

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 404 Not Found
Date: Mon, 19 Dec 2022 13:15:09 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset="utf-8"

powerscreen-bg.com/js/pxgradient-1.0.3.min.js

217.174.156.100

200 OK

0 B

URL HTTP/1.1
powerscreen-bg.com/js/pxgradient-1.0.3.min.js
IP
217.174.156.100:0
ASN
#201200 SuperHosting.BG Ltd.

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/pxgradient-1.0.3.min.js HTTP/1.1
Host: powerscreen-bg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://powerscreen-bg.com/
Cookie: PHPSESSID=617idj9v0fjnl2otch5os65t75

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 13:15:08 GMT
Server: Apache
Last-Modified: Tue, 15 Mar 2016 08:27:14 GMT
ETag: "10cd1dd0-9e9-52e122a171c80"
Accept-Ranges: bytes
Content-Length: 2537
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP