Report - www.yscholars.org/

Report Overview

URL

www.yscholars.org/
IP

199.34.228.68

ASN

#27647 WEEBLY
Submitted

2023-01-09T08:41:30Z

Access
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

8

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
cdn2.editmysite.com (9)	11564	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3656	286150	151.101.193.46
ocsp.globalsign.com (1)	2075	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	368	1920	104.18.21.226
www.editmysite.com (1)	43381	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	719	11935	74.115.50.67
maps.googleapis.com (1)	33876	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	395	53996	142.250.74.106
maps.gstatic.com (1)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	400	989	142.250.74.3
r3.o.lencr.org (8)	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2704	7092	95.101.11.115
contile.services.mozilla.com (1)	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333	391	34.117.237.239
www.google.com (1)	7	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	384	1166	216.58.207.228
img-getpocket.cdn.mozilla.net (6)	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3260	69193	34.120.237.76
fonts.gstatic.com (1)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	482	16693	142.250.74.163
fonts.googleapis.com (2)	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	913	1492	216.58.207.202
firefox.settings.services.mozilla.com (2)	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782	2374	35.241.9.150
ocsp.pki.goog (7)	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2401	4897	216.58.211.3
push.services.mozilla.com (1)	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606	127	52.89.52.214
static.zbcdn2.net (3)	144238	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1179	115133	172.67.163.130
www.weebly.com (1)	21455	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	717	644	74.115.50.110
ocsp.sca1b.amazontrust.com (1)	1015	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	350	1004	143.204.42.165
ssl.google-analytics.com (1)	275	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	367	17814	142.250.74.104
ec.editmysite.com (2)	12806	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1011	743	44.241.20.95
www.yscholars.org (16)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	8208	2881342	199.34.228.68
ocsp.digicert.com (5)	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1705	3191	93.184.220.29
static.zotabox.com (2)	26406	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	834	968	172.67.20.217
stats.zotabox.com (1)	31839	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	475	469	104.22.55.216
content-signature-2.cdn.mozilla.net (1)	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413	5844	34.160.144.191
www.gstatic.com (1)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	445	165688	142.250.74.99

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-01-09	medium	www.yscholars.org/	Phishing
2023-01-09	medium	www.yscholars.org/	Phishing
2023-01-09	medium	www.yscholars.org/files/theme/custom.js?1662666788	Phishing
2023-01-09	medium	www.yscholars.org/files/theme/plugins.js?1662666788	Phishing
2023-01-09	medium	www.yscholars.org/uploads/5/5/4/4/55441437/editor/ymca-wht-rgb-r_1.png?1530212596	Phishing
2023-01-09	medium	www.yscholars.org/files/theme/fonts/Cachet-Medium.woff2?1668035209	Phishing
2023-01-09	medium	www.yscholars.org/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]	Phishing
2023-01-09	medium	www.yscholars.org/uploads/5/5/4/4/55441437/maggie_tutoring_940.mp4	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

HTTP Transactions (76)

URL IP Response Size

r3.o.lencr.org/

95.101.11.115

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

95.101.11.115:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

b782882bdabaf3b08e64120922b4a4b7

2035ed7fc9fb5b6ee9715601ba43de5f94d0c0e9

3fe7d1a9a55b86ec25d02634749ccfae11f3477033ba8cd7ac4131b7948ba619

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FE7D1A9A55B86EC25D02634749CCFAE11F3477033BA8CD7AC4131B7948BA619"
Last-Modified: Sat, 07 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16332
Expires: Mon, 09 Jan 2023 13:13:29 GMT
Date: Mon, 09 Jan 2023 08:41:17 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

95.101.11.115:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

e4bdd77c0369662aa71ce2d01fd3edab

0ab1c5857e200e7e7946424c2c844537bfbb9775

a163c19fcc8fcf985e8df6ad4bd7ce73912b3df892d8236c70f9bc80820b26da

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A163C19FCC8FCF985E8DF6AD4BD7CE73912B3DF892D8236C70F9BC80820B26DA"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17121
Expires: Mon, 09 Jan 2023 13:26:38 GMT
Date: Mon, 09 Jan 2023 08:41:17 GMT
Connection: keep-alive

www.yscholars.org/

199.34.228.68

301 Moved Permanently

350

URL HTTP/1.1

www.yscholars.org/
IP

199.34.228.68:0
ASN

#27647 WEEBLY

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

Size

350
Hash

f82c90abeac3479fa6756d008858a621

5fd7f8b7e067f824ba3cfef371503fbea8e19d37

6cb135c2bbe2136c74286c121ac3d05fb08dd920a56b00cd4299e305b52db2a0

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET / HTTP/1.1
Host: www.yscholars.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 301 Moved Permanently
Date: Mon, 09 Jan 2023 08:41:17 GMT
Server: Apache
Set-Cookie: is_mobile=0; path=/; domain=www.yscholars.org
Vary: X-W-SSL,User-Agent
Location: https://www.yscholars.org/
X-Host: grn71.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 350
Keep-Alive: timeout=10, max=62
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

r3.o.lencr.org/

95.101.11.115

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

95.101.11.115:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

89a058935fd04697c87e9441fbb466a9

59b5b08119374b1da34cff7e43a7c6dc80103f6e

3a3261f495323ff0f60067b2930b8d0e5e4e5cd6ae9b14929a88047587b735da

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3A3261F495323FF0F60067B2930B8D0E5E4E5CD6AE9B14929A88047587B735DA"
Last-Modified: Sat, 07 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17606
Expires: Mon, 09 Jan 2023 13:34:43 GMT
Date: Mon, 09 Jan 2023 08:41:17 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

14cd9a0afb6ba9a763651d5112760d1e

75d7b104ab9ab11fbb73c3f348b43b0119b5adfa

4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 09 Jan 2023 07:41:37 GMT
content-type: application/json
age: 3580
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

b1fcd419a4245617397846e8d17233f6

2a037ce244587640b27ead9a0ec2af4f862d91b2

e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: F7rFfbvbDu36FFHUOBYoeWcOX9y/TTrdmr9q+iOd7Te7z9QcYaPOD3Ujrcto9BuqV+3hIzNFh/A=
x-amz-request-id: S9BYZ7C42R3PS1QC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 09 Jan 2023 08:16:07 GMT
age: 1510
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Mon, 09 Jan 2023 08:41:17 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329

URL HTTP/2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 09 Jan 2023 08:17:22 GMT
age: 1436
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

95.101.11.115:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

eaa309826d38c9f419b8bcea40ac0d90

1f2b3592928accc8229a6cdef75822c6d8fd5b2b

7706e3c5224f28c225b2eb6e0534f4ec93346a1f7831049b3e97795a4a6d8cbd

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7706E3C5224F28C225B2EB6E0534F4EC93346A1F7831049B3E97795A4A6D8CBD"
Last-Modified: Sat, 07 Jan 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21566
Expires: Mon, 09 Jan 2023 14:40:44 GMT
Date: Mon, 09 Jan 2023 08:41:18 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

471
Hash

54ac41a005cad66e958c904071ea1d4f

66932889be57eb15ab99237a69d292b12090c68d

52545e144a7ca5c37c5369d5f5b566b4e5e820b1920ab7fe8e413e7fe022e21b

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6428
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 08:41:18 GMT
Last-Modified: Mon, 09 Jan 2023 06:54:10 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

www.yscholars.org/

199.34.228.68

200 OK

16550

URL HTTP/1.1

www.yscholars.org/
IP

199.34.228.68:0
ASN

#27647 WEEBLY

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (42749)

Size

16550
Hash

841e8321a14e5ff2eae1cc1685e1a09b

7c757851ca1be68c233b7d13b5e5b455bc389943

81be5d57b86cb10ac4c2d8a34dee9db14485bca9bc314b991327c54a596f8ab8

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET / HTTP/1.1
Host: www.yscholars.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 08:41:18 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=www.yscholars.org
language=en; expires=Mon, 23-Jan-2023 08:41:18 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"b26ea39560f668caac8191e3317aefca-gzip"
Content-Encoding: gzip
X-Host: grn23.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 16550
Keep-Alive: timeout=10, max=69
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

cdn2.editmysite.com/css/sites.css?buildTime=1668027576

151.101.193.46

200 OK

29746

URL HTTP/2

cdn2.editmysite.com/css/sites.css?buildTime=1668027576
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text, with very long lines (65536), with no line terminators

Size

29746
Hash

d10158b22b553f723d99dc78eaee6390

80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6

939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e

HTTP Headers

                                        GET /css/sites.css?buildTime=1668027576 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 16 Dec 2022 19:54:14 GMT
etag: W/"639ccce6-347ac"
expires: Fri, 13 Jan 2023 10:07:19 GMT
cache-control: max-age=1209600
x-host: blu13.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 09 Jan 2023 08:41:18 GMT
age: 858839
x-served-by: cache-sjc10062-SJC, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 1244, 2
x-timer: S1673253679.821318,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29746
X-Firefox-Spdy: h2

cdn2.editmysite.com/js/site/commerce-core.js?buildTime=1668027576

151.101.193.46

200 OK

17388

URL HTTP/2

cdn2.editmysite.com/js/site/commerce-core.js?buildTime=1668027576
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text, with very long lines (32011)

Size

17388
Hash

e32a0ae988b9f1c9de6f0f70bfa0ffbd

c2e9ad2d183fa12c63df33521a919ad9eb0b44cb

fb4389e623d2a4a9b1d7be60bb37b99e71294a39fbfee8f7d9db5f68f67d0ec8

HTTP Headers

                                        GET /js/site/commerce-core.js?buildTime=1668027576 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 16 Dec 2022 19:54:38 GMT
etag: "639cccfe-f57e"
expires: Tue, 10 Jan 2023 11:45:25 GMT
cache-control: max-age=1209600
x-host: blu111.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 09 Jan 2023 08:41:18 GMT
age: 1112152
x-served-by: cache-sjc10039-SJC, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 57, 1
x-timer: S1673253679.824426,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17388
X-Firefox-Spdy: h2

cdn2.editmysite.com/js/site/main-commerce-browse.js?buildTime=1668027576

151.101.193.46

200 OK

16977

URL HTTP/2

cdn2.editmysite.com/js/site/main-commerce-browse.js?buildTime=1668027576
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32049)

Size

16977
Hash

15eaf839ff82242f8d02b1f60c073760

ed5886bbb71827073b52523683a95f0a051f8c40

c484962adc762a7df4929e867d53141cebf339cc60e1c611b3b7bfa61e1aea7d

HTTP Headers

                                        GET /js/site/main-commerce-browse.js?buildTime=1668027576 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 03 Jan 2023 21:16:25 GMT
etag: "63b49b29-f92d"
expires: Wed, 18 Jan 2023 07:58:05 GMT
cache-control: max-age=1209600
x-host: blu114.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 09 Jan 2023 08:41:18 GMT
age: 434594
x-served-by: cache-sjc10072-SJC, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 1
x-timer: S1673253679.824542,VS0,VE2
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 16977
X-Firefox-Spdy: h2

cdn2.editmysite.com/css/social-icons.css?buildtime=1668027576

151.101.193.46

200 OK

1638

URL HTTP/2

cdn2.editmysite.com/css/social-icons.css?buildtime=1668027576
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text, with very long lines (13080)

Size

1638
Hash

03f309e96ce0dd83ba8f7754ff3cf854

778de49f4961a2b63912c3aebc2f45444df76b63

6f5dfae580d7ee9bb236fca05f0562f1e6a5fa5362c6607a0aab3e1c2d483192

HTTP Headers

                                        GET /css/social-icons.css?buildtime=1668027576 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 16 Dec 2022 19:54:14 GMT
etag: W/"639ccce6-3319"
expires: Fri, 13 Jan 2023 10:07:30 GMT
cache-control: max-age=1209600
x-host: blu89.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 09 Jan 2023 08:41:18 GMT
age: 858828
x-served-by: cache-sjc10062-SJC, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 866, 1
x-timer: S1673253679.827418,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1638
X-Firefox-Spdy: h2

push.services.mozilla.com/

52.89.52.214

101 Switching Protocols

URL HTTP/1.1

push.services.mozilla.com/
IP

52.89.52.214:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DjaOLsT7RnY4FZ2DOrPd/Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: SbCAfkw6SJN88inhaezBz2MpUoA=

cdn2.editmysite.com/css/old/fancybox.css?1668027576

151.101.193.46

200 OK

1218

URL HTTP/2

cdn2.editmysite.com/css/old/fancybox.css?1668027576
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text, with very long lines (3910)

Size

1218
Hash

b644e92258f4c7c0b4270047652d1e60

93734d52ee9e86a768159e514076051813c39cd9

29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907

HTTP Headers

                                        GET /css/old/fancybox.css?1668027576 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Fri, 16 Dec 2022 19:54:20 GMT
etag: "639cccec-f47"
expires: Fri, 13 Jan 2023 10:07:30 GMT
cache-control: max-age=1209600
x-host: blu108.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 09 Jan 2023 08:41:18 GMT
age: 858828
x-served-by: cache-sjc10062-SJC, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 4, 1
x-timer: S1673253679.828638,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1218
X-Firefox-Spdy: h2

cdn2.editmysite.com/js/jquery-1.8.3.min.js

151.101.193.46

200 OK

33467

URL HTTP/2

cdn2.editmysite.com/js/jquery-1.8.3.min.js
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text, with very long lines (65483)

Size

33467
Hash

67a5a77f65f13559b3d723829f2e0108

5e861ec7c2993abffc3591d6132c47bc7cdc3e98

ac4ffabaed7382810a3829d812e1a45c77984a1dbfaf7d172c8bc19b3cf68ca6

HTTP Headers

                                        GET /js/jquery-1.8.3.min.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 16 Dec 2022 19:54:04 GMT
etag: "639cccdc-16dc4"
expires: Tue, 10 Jan 2023 23:08:14 GMT
cache-control: max-age=1209600
x-host: grn127.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 09 Jan 2023 08:41:18 GMT
age: 1071185
x-served-by: cache-sjc10032-SJC, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 19, 6972
x-timer: S1673253679.829142,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33467
X-Firefox-Spdy: h2

cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1668027576&

151.101.193.46

200 OK

32800

URL HTTP/2

cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1668027576&
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text, with very long lines (65024)

Size

32800
Hash

58a9c1c02a5743ff2107715d041d28b7

619d9394e8b3afce9f9cc066b924ddb5d3265265

98b8090e2292b69bb8ad0ef4082f55458b891130ee6b3d9c6fce5075eec64dbf

HTTP Headers

                                        GET /js/lang/en/stl.js?buildTime=1668027576& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Fri, 16 Dec 2022 19:53:10 GMT
etag: "639ccca6-2c22a"
expires: Tue, 10 Jan 2023 09:39:14 GMT
cache-control: max-age=1209600
x-host: blu84.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 09 Jan 2023 08:41:18 GMT
age: 1119725
x-served-by: cache-sjc10026-SJC, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 7, 1
x-timer: S1673253679.830345,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 32800
X-Firefox-Spdy: h2

cdn2.editmysite.com/js/site/main.js?buildTime=1668027576

151.101.193.46

200 OK

146400

URL HTTP/2

cdn2.editmysite.com/js/site/main.js?buildTime=1668027576
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

ASCII text, with very long lines (32147)

Size

146400
Hash

81b8673c5d3aa3ab8c0574f2a8f0e3b4

2e0661bc7907d9e2703b3347c3fec579f0aef5d6

0e981f4de6287406ce261fddea24aa05ded4b6a8c4c07283c363c1502071cf40

HTTP Headers

                                        GET /js/site/main.js?buildTime=1668027576 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 03 Jan 2023 21:16:25 GMT
etag: "63b49b29-74804"
expires: Wed, 18 Jan 2023 08:28:45 GMT
cache-control: max-age=1209600
x-host: grn49.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 09 Jan 2023 08:41:18 GMT
age: 432752
x-served-by: cache-sjc10033-SJC, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 207, 1
x-timer: S1673253679.826955,VS0,VE12
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 146400
X-Firefox-Spdy: h2

ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3

104.18.21.226

200 OK

1462

URL HTTP/1.1

ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP

104.18.21.226:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

1462
Hash

00f0a4f680914686e50421eb15f82bc3

5461b7aae5b9aa0d4e195247aed182f36a87c3c3

7308b69f7f7a856675736c1a65346aa5589c2034f7dfddd28e4309927ef2a14f

HTTP Headers

                                        POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 08:41:18 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "F35676F2766255BD806D4FF05F2B6FABBC13B69C"
Expires: Mon, 09 Jan 2023 19:00:00 GMT
Last-Modified: Mon, 09 Jan 2023 07:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2013
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786bdf854db0b527-OSL

www.yscholars.org/files/templateArtifacts.js?1668035209

199.34.228.68

200 OK

1632

URL HTTP/1.1

www.yscholars.org/files/templateArtifacts.js?1668035209
IP

199.34.228.68:0
ASN

#27647 WEEBLY

Magic

exported SGML document, ASCII text, with very long lines (1630)

Size

1632
Hash

e0836e8203c22b8e4086f27e91e86f5a

28235e77f5a895c8cd411aff4a6ef4e6f7d419c2

32dbc4a2eeca39a57d35670f00e2cf59e03c279521e47506c56c5c36d8b664b6

HTTP Headers

                                        GET /files/templateArtifacts.js?1668035209 HTTP/1.1
Host: www.yscholars.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Mon, 09 Jan 2023 08:41:19 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn72.sf2p.intern.weebly.net
Content-Encoding: gzip

www.yscholars.org/uploads/5/5/4/4/55441437/published/ymca-wht-rgb-r.png?1486819777

199.34.228.68

200 OK

3330

URL HTTP/1.1

www.yscholars.org/uploads/5/5/4/4/55441437/published/ymca-wht-rgb-r.png?1486819777
IP

199.34.228.68:0
ASN

#27647 WEEBLY

Magic

PNG image data, 130 x 99, 8-bit gray+alpha, non-interlaced\012- data

Size

3330
Hash

8ad6301c492be251eedc11717ccd8996

0e6d12b55cfdd654bc98a880f407a50ccd47a89b

939da61311c2c3fdd702068f1a4e658eb63933f1bbd42593231fb34988240130

HTTP Headers

                                        GET /uploads/5/5/4/4/55441437/published/ymca-wht-rgb-r.png?1486819777 HTTP/1.1
Host: www.yscholars.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Mon, 09 Jan 2023 08:41:19 GMT
Content-Type: image/png
Content-Length: 3330
Connection: keep-alive
Last-Modified: Thu, 23 Jan 2020 12:18:17 GMT
x-rgw-object-type: Normal
ETag: "8ad6301c492be251eedc11717ccd8996"
x-amz-request-id: tx000000000000054165dd5-0063b0a4ad-c696eea-sfo1
X-Storage-Bucket: z939d
X-Storage-Object: 939da61311c2c3fdd702068f1a4e658eb63933f1bbd42593231fb34988240130
X-Host: blu49.sf2p.intern.weebly.net
Accept-Ranges: bytes

www.yscholars.org/files/theme/custom.js?1662666788

199.34.228.68

200 OK

1623

URL HTTP/1.1

www.yscholars.org/files/theme/custom.js?1662666788
IP

199.34.228.68:0
ASN

#27647 WEEBLY

Magic

ASCII text

Size

1623
Hash

dce0fe93d5df1a2816baa9d7adfbe2d7

e889bd25fcc0bdb18fcaa2f6c1da126a7280e7da

606f343f6bcc156536f4d82f406c34a0ab0dc96fad95adf29576cf00440153d6

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /files/theme/custom.js?1662666788 HTTP/1.1
Host: www.yscholars.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Mon, 09 Jan 2023 08:41:19 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 14 Mar 2020 00:51:18 GMT
x-rgw-object-type: Normal
ETag: W/"0f16d64e1537d059e6bf4da7926d48fd"
x-amz-request-id: tx0000000000000198daa6a-0062e97e79-c033918-sfo1
X-Storage-Bucket: z7246
X-Storage-Object: 724629c58e1f2dab6bdadd1460189593caec674369b93ab0ebfc7a6c26b5dc3f
X-Host: blu81.sf2p.intern.weebly.net
Content-Encoding: gzip

www.yscholars.org/files/theme/plugins.js?1662666788

199.34.228.68

200 OK

15718

URL HTTP/1.1

www.yscholars.org/files/theme/plugins.js?1662666788
IP

199.34.228.68:0
ASN

#27647 WEEBLY

Magic

ASCII text

Size

15718
Hash

73e0c3d8015786a52050e368475eb71e

d8ae8d96e5bb1cdba9580c81a75889e0e0bb29e0

3d81bcf9e4db50e32cb84e37d17860d2f32bb73ee3bd785db39d8cbbd256cf40

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /files/theme/plugins.js?1662666788 HTTP/1.1
Host: www.yscholars.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Mon, 09 Jan 2023 08:41:19 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 12 Dec 2019 11:10:12 GMT
x-rgw-object-type: Normal
ETag: W/"f46cb521e2acb6d769a1756d6618b602"
x-amz-request-id: tx00000000000000cbc41c4-0062946e0b-b9fbc64-sfo1
X-Storage-Bucket: z13a5
X-Storage-Object: 13a516002d0cf3d7ddd1facf45d2b1d49ff984092f96a8a883258952ebe1ce48
X-Host: grn14.sf2p.intern.weebly.net
Content-Encoding: gzip

cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1668027576

151.101.193.46

200 OK

471

URL HTTP/2

cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1668027576
IP

151.101.193.46:0
ASN

#54113 FASTLY

Magic

data

Size

471
Hash

322ed21a07c2e213a7e9a6b4629de604

d0a43043a6cc33a5499a728350828ea0d58102ac

91bbf21776e486fd7fb453f706c03e554b01253e007c1809f447916e20b9f872

HTTP Headers

                                        GET /js/site/main-customer-accounts-site.js?buildTime=1668027576 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Tue, 03 Jan 2023 21:16:25 GMT
etag: "63b49b29-82588"
expires: Wed, 18 Jan 2023 08:28:46 GMT
cache-control: max-age=1209600
x-host: blu10.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 09 Jan 2023 08:41:18 GMT
age: 432753
x-served-by: cache-sjc10033-SJC, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 213, 1
x-timer: S1673253679.824890,VS0,VE9
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 158973
X-Firefox-Spdy: h2

www.yscholars.org/files/theme/fonts/Cachet-Bold.woff2?1668035209

199.34.228.68

200 OK

23104

URL HTTP/1.1

www.yscholars.org/files/theme/fonts/Cachet-Bold.woff2?1668035209
IP

199.34.228.68:0
ASN

#27647 WEEBLY

Magic

Web Open Font Format (Version 2), TrueType, length 23104, version 1.0\012- data

Size

23104
Hash

e999ee5b27411fcf1a3b0cecd951d865

e7d0f5ce79847cebbd6570b2445e4aa9067f43fa

2dbe881c8cd9ae773b76a68b121e4614716cdcfa860e06caebbc27c16cd22c90

HTTP Headers

                                        GET /files/theme/fonts/Cachet-Bold.woff2?1668035209 HTTP/1.1
Host: www.yscholars.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.yscholars.org/files/main_style.css?1668035209
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Mon, 09 Jan 2023 08:41:19 GMT
Content-Type: font/woff2
Content-Length: 23104
Connection: keep-alive
Last-Modified: Thu, 17 Sep 2020 11:26:37 GMT
x-rgw-object-type: Normal
ETag: "e999ee5b27411fcf1a3b0cecd951d865"
x-amz-request-id: tx00000000000003a40585d-0063830030-c67eadd-sfo1
X-Storage-Bucket: z2dbe
X-Storage-Object: 2dbe881c8cd9ae773b76a68b121e4614716cdcfa860e06caebbc27c16cd22c90
X-Host: grn77.sf2p.intern.weebly.net
Accept-Ranges: bytes

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

8b33ebf66adf8ea748d256ed5248639a

54f661bd5cdfe8ec55371d0d7d63437abc1d54b7

d7b4bf07bc0c94009920239a1136dfdafa898ac2efab9d4131e68682f826e76b

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 08:41:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.com/recaptcha/api.js?_=1673253666747

216.58.207.228

200 OK

552

URL HTTP/2

www.google.com/recaptcha/api.js?_=1673253666747
IP

216.58.207.228:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (850), with no line terminators

Size

552
Hash

760f8751978f13903fbb5b593bea05c7

3c463f9d47be6cafa5acd0c828a42054054debd3

ba7b03872b122ab1d52e67ee1d6ad77d7749c5504b0c733bd90392d16c509410

HTTP Headers

                                        GET /recaptcha/api.js?_=1673253666747 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
expires: Mon, 09 Jan 2023 08:41:19 GMT
date: Mon, 09 Jan 2023 08:41:19 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 552
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.yscholars.org/uploads/5/5/4/4/55441437/editor/ymca-wht-rgb-r_1.png?1530212596

199.34.228.68

200 OK

3715

URL HTTP/1.1

www.yscholars.org/uploads/5/5/4/4/55441437/editor/ymca-wht-rgb-r_1.png?1530212596
IP

199.34.228.68:0
ASN

#27647 WEEBLY

Magic

PNG image data, 153 x 117, 8-bit colormap, non-interlaced\012- data

Size

3715
Hash

1f613469e36cbe807f3a25e35610ea78

7338949abd75cb5c5c156458c9c150f817c73344

075aef8acb420554abfb835a23706f1ea10c0b647b4398d516fea7b3e8737c36

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /uploads/5/5/4/4/55441437/editor/ymca-wht-rgb-r_1.png?1530212596 HTTP/1.1
Host: www.yscholars.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Mon, 09 Jan 2023 08:41:19 GMT
Content-Type: image/png
Content-Length: 3715
Connection: keep-alive
Last-Modified: Thu, 23 Jan 2020 12:18:15 GMT
x-rgw-object-type: Normal
ETag: "1f613469e36cbe807f3a25e35610ea78"
x-amz-request-id: tx00000000000005a50c339-0063bbd32f-c699baa-sfo1
X-Storage-Bucket: z075a
X-Storage-Object: 075aef8acb420554abfb835a23706f1ea10c0b647b4398d516fea7b3e8737c36
X-Host: grn132.sf2p.intern.weebly.net
Accept-Ranges: bytes

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

53e4963971e19408d4cf264bd653599d

271fa6d9b5843b97d579a713fbb48b388c61eba0

c3245e3793f7aab542ba2b4b719f5145a45ba29d536456ad629a364ab2df400b

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 08:41:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.yscholars.org/uploads/5/5/4/4/55441437/maggie_tutoring_940.jpg

199.34.228.68

200 OK

51984

URL HTTP/1.1

www.yscholars.org/uploads/5/5/4/4/55441437/maggie_tutoring_940.jpg
IP

199.34.228.68:0
ASN

#27647 WEEBLY

Magic

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc52.122.0", baseline, precision 8, 1280x720, components 3\012- data

Size

51984
Hash

bcd1aeca60ce8791bd18ee8823e92cb4

395ffa4901bb8a5b94d0e71b5a6b984c5581aa7b

ffee4ae01cc0068c807391d2e1c6595dd32e7bd584a519854465fc4591d1f6ce

HTTP Headers

                                        GET /uploads/5/5/4/4/55441437/maggie_tutoring_940.jpg HTTP/1.1
Host: www.yscholars.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Mon, 09 Jan 2023 08:41:19 GMT
Content-Type: image/jpeg
Content-Length: 51984
Connection: keep-alive
Last-Modified: Thu, 23 Jan 2020 12:16:20 GMT
x-rgw-object-type: Normal
ETag: "bcd1aeca60ce8791bd18ee8823e92cb4"
x-amz-request-id: tx00000000000005abc9936-0063bbd32f-c695612-sfo1
X-Storage-Bucket: zffee
X-Storage-Object: ffee4ae01cc0068c807391d2e1c6595dd32e7bd584a519854465fc4591d1f6ce
X-Host: grn61.sf2p.intern.weebly.net
Accept-Ranges: bytes

ocsp.digicert.com/

93.184.220.29

200 OK

279

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

279
Hash

ff6979e89753b688f670e9ec57938469

ad268140d40e12214d7181552b570a10c578c5fd

4dcfeeea367566fc8b55e0aac69835c7cd7e38b4d35feaa3344930d693f5d33f

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2137
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 08:41:19 GMT
Last-Modified: Mon, 09 Jan 2023 08:05:42 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

279
Hash

ff6979e89753b688f670e9ec57938469

ad268140d40e12214d7181552b570a10c578c5fd

4dcfeeea367566fc8b55e0aac69835c7cd7e38b4d35feaa3344930d693f5d33f

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2137
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 08:41:19 GMT
Last-Modified: Mon, 09 Jan 2023 08:05:42 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

279
Hash

ff6979e89753b688f670e9ec57938469

ad268140d40e12214d7181552b570a10c578c5fd

4dcfeeea367566fc8b55e0aac69835c7cd7e38b4d35feaa3344930d693f5d33f

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6443
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 08:41:19 GMT
Etag: "63baa0ef-117"
Last-Modified: Mon, 09 Jan 2023 06:53:56 GMT
Server: ECS (amb/6BA6)
X-Cache: HIT
Content-Length: 279

static.zbcdn2.net/__oagproa/social_tab/default.js

172.67.163.130

200 OK

23131

URL HTTP/2

static.zbcdn2.net/__oagproa/social_tab/default.js
IP

172.67.163.130:0
ASN

#13335 CLOUDFLARENET

Magic

ASCII text, with very long lines (65536), with no line terminators

Size

23131
Hash

8edfeb649fe4d0559770509e6baba222

c48a0c3b817d47ac3f3033248329087aebd73645

20bc97c51dfce00599dc1f1edd615517df8bfa8c9e92a66348a9d378c19f3449

HTTP Headers

                                        GET /__oagproa/social_tab/default.js HTTP/1.1
Host: static.zbcdn2.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yscholars.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
date: Mon, 09 Jan 2023 08:41:19 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 04 Jan 2023 02:57:51 GMT
vary: Accept-Encoding
etag: W/"63b4eb2f-2f9f3"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
timing-allow-origin: *
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
z-server: mariadb
cache-control: max-age=691200
cf-cache-status: HIT
age: 2761
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sZ2qMyBXAJ44oLUBICzloYWiwtAgCQNt13D7SPB6lDmKR85bwcRwOu9vdiRSK7%2FZ6LmOy4C5wLRL7Oh09G4tqfIzjPbW1XO0ru6NYVBNYOgvqOBftJVK5gdKf7LuZkHX4JzOTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 786bdf8b3b1ab4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

www.weebly.com/weebly/apps/generateMap.php?map=google&elementid=452830596564030381&ineditor=0&control=3&width=auto&height=350px&overviewmap=0&scalecontrol=0&typecontrol=0&zoom=16&long=-122.27263440000002&lat=37.86986890000001&domain=www&point=1&align=1&reseller=false

74.115.50.110

302 Found

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (51)

#1 JS:Script (size: 95)

#2 JS:Script (size: 35)

#3 JS:Script (size: 67465)

#4 JS:Script (size: 62)

#5 JS:Script (size: 88656)

#6 JS:Script (size: 53)

#7 JS:Script (size: 2943)

#8 JS:Script (size: 62846)

#9 JS:Script (size: 265)

#10 JS:Script (size: 109)

#11 JS:Script (size: 180778)

#12 JS:Script (size: 2233)

#13 JS:Script (size: 664)

#14 JS:Script (size: 75006)

#15 JS:Script (size: 46274)

#16 JS:Script (size: 1756)

#17 JS:Script (size: 2254)

#18 JS:Script (size: 1157)

#19 JS:Script (size: 81402)

#20 JS:Script (size: 271389)

#21 JS:Script (size: 195059)

#22 JS:Script (size: 88160)

#23 JS:Script (size: 169553)

#24 JS:Script (size: 27290)

#25 JS:Script (size: 8232)

#26 JS:Script (size: 62)

#27 JS:Script (size: 850)

#28 JS:Script (size: 11574)

#29 JS:Script (size: 72358)

#30 JS:Script (size: 19482)

#31 JS:Script (size: 117)

#32 JS:Script (size: 51459)

#33 JS:Script (size: 22)

#34 JS:Script (size: 62)

#35 JS:Script (size: 272)

#36 JS:Script (size: 10064)

#37 JS:Script (size: 37129)

#38 JS:Script (size: 62)

#39 JS:Script (size: 88891)

#40 JS:Script (size: 5617)

#41 JS:Script (size: 240978)

#42 JS:Script (size: 63789)

#43 JS:Script (size: 93636)

#44 JS:Script (size: 0)

#45 JS:Script (size: 477188)

#46 JS:Script (size: 7160)

#47 JS:Script (size: 32)

#48 JS:Script (size: 163821)

#49 JS:Script (size: 253994)

#1 JS:Eval (size: 118258)

#1 JS:Write (size: 90543)

HTTP Transactions (76)

URL HTTP/1.1

IP

ASN

Magic

Size