ocsp.pki.goog/gts1c3
471 B IP
Hash 92ecc8124d8a77387b48190d99e2d602
43f58e76a0a1ea98ff3d4b60a5c083e6e4875a3a
ec6f6123546a631545a0cf232023e48a1112ed6962c89372f69f10ed10a6ed9c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 14:21:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 92ecc8124d8a77387b48190d99e2d602
43f58e76a0a1ea98ff3d4b60a5c083e6e4875a3a
ec6f6123546a631545a0cf232023e48a1112ed6962c89372f69f10ed10a6ed9c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 14:21:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 82d60e5c89d861bf88494c1b30123a7d
696454de610c86434fca82187d45b770aa712b74
1c270911b4dc1e66edab7b962f92245d40a0725385601f27a4532f216161aa6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 14:21:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
code.jquery.com/jquery-3.5.1.js
84 kB URL code.jquery.com/jquery-3.5.1.js
IP
Hash 23c7c5d2d1317508e807a6c7f777d6ed
ad16c4a132ad2a03b4951185fed46d55397b5e88
416a3b2c3bf16d64f6b5b6d0f7b079df2267614dd6847fc2f3271b4409233c37
GET /jquery-3.5.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 14:21:52 GMT
content-encoding: gzip
content-length: 84374
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-4638e"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1686061312.dop068.sk1.t,1686061312.cds014.sk1.hn,1686061312.cds241.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 82d60e5c89d861bf88494c1b30123a7d
696454de610c86434fca82187d45b770aa712b74
1c270911b4dc1e66edab7b962f92245d40a0725385601f27a4532f216161aa6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 14:21:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 228335310e064064e595f506f85bce16
be51dc4247d0c1f4930bcb48acf84b684ab39c63
11e3db6caae7ff90f20e7edf253909003afc8243a8524190c1a7fa8f7d5e944a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 14:21:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/_/translate_http/_/js/k=translate_http.tr.no.ZVPgEtntkjc.O/d=1/rs=AN8SPfpzw53Xp0rOcSbn5ESv2H1EPH7fXg/m=corsproxy
200 OK 26 kB URL GET HTTP/2 www.gstatic.com/_/translate_http/_/js/k=translate_http.tr.no.ZVPgEtntkjc.O/d=1/rs=AN8SPfpzw53Xp0rOcSbn5ESv2H1EPH7fXg/m=corsproxy
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (2586)
Hash 270ffcd066ccddc13cbef4f9d248988b
297529a921dd0b52ad7288d5847c3fe2ab49e507
bac5fc39c07c07d3ece30d4db6927b7905b109946b058655af54ea6bb23560e1
GET /_/translate_http/_/js/k=translate_http.tr.no.ZVPgEtntkjc.O/d=1/rs=AN8SPfpzw53Xp0rOcSbn5ESv2H1EPH7fXg/m=corsproxy HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 25780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Jun 2023 21:25:49 GMT
expires: Tue, 04 Jun 2024 21:25:49 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 03 Jun 2023 11:22:22 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 60963
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/_/translate_http/_/js/k=translate_http.tr.no.ZVPgEtntkjc.O/d=1/exm=corsproxy/ed=1/rs=AN8SPfpzw53Xp0rOcSbn5ESv2H1EPH7fXg/m=navigationui
200 OK 12 kB URL GET HTTP/2 www.gstatic.com/_/translate_http/_/js/k=translate_http.tr.no.ZVPgEtntkjc.O/d=1/exm=corsproxy/ed=1/rs=AN8SPfpzw53Xp0rOcSbn5ESv2H1EPH7fXg/m=navigationui
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (2016)
Hash ed6c5876061077e2bee210f44438495b
cbaeb94b25f6861a3a9d37492cf58ae533f41bfd
ca57b291903c09ebc7bfa53fd551f39000ae6876f4c5ab7d6e31ab908b8d3756
GET /_/translate_http/_/js/k=translate_http.tr.no.ZVPgEtntkjc.O/d=1/exm=corsproxy/ed=1/rs=AN8SPfpzw53Xp0rOcSbn5ESv2H1EPH7fXg/m=navigationui HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 12148
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Jun 2023 21:25:49 GMT
expires: Tue, 04 Jun 2024 21:25:49 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 03 Jun 2023 11:22:22 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 60963
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 82d60e5c89d861bf88494c1b30123a7d
696454de610c86434fca82187d45b770aa712b74
1c270911b4dc1e66edab7b962f92245d40a0725385601f27a4532f216161aa6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 14:21:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 228335310e064064e595f506f85bce16
be51dc4247d0c1f4930bcb48acf84b684ab39c63
11e3db6caae7ff90f20e7edf253909003afc8243a8524190c1a7fa8f7d5e944a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 14:21:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.xn--c1ac4bxc.xn--p1ai/e5anJtZGTgERAvhcq2sbU678zYwxCVHWjdyBNrQ9DfMKpuk4SP/e5anJtZGTgERAvhcq2sbU678zYwxCVHWjdyBNrQ9DfMKpuk4SP/YldGeWF5NTNaV0psY2tCdGIzTnpZV1JoYlhNdVkyOXQ6ZXZKSG8=
1.0 kB URL khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.xn--c1ac4bxc.xn--p1ai/e5anJtZGTgERAvhcq2sbU678zYwxCVHWjdyBNrQ9DfMKpuk4SP/e5anJtZGTgERAvhcq2sbU678zYwxCVHWjdyBNrQ9DfMKpuk4SP/YldGeWF5NTNaV0psY2tCdGIzTnpZV1JoYlhNdVkyOXQ6ZXZKSG8=
IP
File type HTML document text\012- HTML document, ASCII text
Hash 4e956b67345c62f83da93e9aa5b7be19
24aa7643fa28f7872310ecbcc144b6b7a21e613f
a4c79d13986c434b421e6e838e129aae1c1f88e0aa4781c49400715c3c3d3a44
GET /e5anJtZGTgERAvhcq2sbU678zYwxCVHWjdyBNrQ9DfMKpuk4SP/e5anJtZGTgERAvhcq2sbU678zYwxCVHWjdyBNrQ9DfMKpuk4SP/YldGeWF5NTNaV0psY2tCdGIzTnpZV1JoYlhNdVkyOXQ6ZXZKSG8= HTTP/1.1
Host: khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.xn--c1ac4bxc.xn--p1ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Jun 2023 14:21:53 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 1023
Connection: keep-alive
Set-Cookie: PHPSESSID=eek95mofn0bvvruub6ipj29k4k; path=/
Vary: Accept-Encoding
Content-Encoding: gzip
code.jquery.com/jquery-3.5.1.js
84 kB URL code.jquery.com/jquery-3.5.1.js
IP
Hash 23c7c5d2d1317508e807a6c7f777d6ed
ad16c4a132ad2a03b4951185fed46d55397b5e88
416a3b2c3bf16d64f6b5b6d0f7b079df2267614dd6847fc2f3271b4409233c37
GET /jquery-3.5.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.xn--c1ac4bxc.xn--p1ai/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 14:21:53 GMT
content-encoding: gzip
content-length: 84374
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-4638e"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1686061313.dop013.sk1.t,1686061313.cds259.sk1.hn,1686061313.cds204.sk1.c
X-Firefox-Spdy: h2
khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.xn--c1ac4bxc.xn--p1ai/favicon.ico
1.0 kB URL khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.xn--c1ac4bxc.xn--p1ai/favicon.ico
IP
File type HTML document text\012- HTML document, ASCII text
Hash a47ad1d200eafe8121155a4dfd72a074
aae77507ff86396a9071f137e1231c3ee2584ef5
1c1d932f4464600a16bdac184ae0ec7490dbd7123a95cbb77d1b21ca9ffd2b06
GET /favicon.ico HTTP/1.1
Host: khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.xn--c1ac4bxc.xn--p1ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.xn--c1ac4bxc.xn--p1ai/e5anJtZGTgERAvhcq2sbU678zYwxCVHWjdyBNrQ9DfMKpuk4SP/e5anJtZGTgERAvhcq2sbU678zYwxCVHWjdyBNrQ9DfMKpuk4SP/YldGeWF5NTNaV0psY2tCdGIzTnpZV1JoYlhNdVkyOXQ6ZXZKSG8=
Cookie: PHPSESSID=eek95mofn0bvvruub6ipj29k4k
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Jun 2023 14:21:53 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 1025
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.xn--c1ac4bxc.xn--p1ai/api.php
166 B URL khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.xn--c1ac4bxc.xn--p1ai/api.php
IP
File type ASCII text, with no line terminators
Hash edd1254d2f35bce04d9c5c4f510a4d11
3f4c0d613be1740f4c2a4bcfe9c646a7da54cf8b
d74464fe4c3465e9a3aeec490b10ef9a35b78aa40560b63419a79a92741ec9ac
NIDS Severity Alert suricata medium ET PHISHING HiYu - Request for Victim Enrichment
suricata medium ET PHISHING HiYu - Victim Enrichment Response M3
POST /api.php HTTP/1.1
Host: khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.xn--c1ac4bxc.xn--p1ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 58
Origin: http://khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.xn--c1ac4bxc.xn--p1ai
DNT: 1
Connection: keep-alive
Referer: http://khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.xn--c1ac4bxc.xn--p1ai/e5anJtZGTgERAvhcq2sbU678zYwxCVHWjdyBNrQ9DfMKpuk4SP/e5anJtZGTgERAvhcq2sbU678zYwxCVHWjdyBNrQ9DfMKpuk4SP/YldGeWF5NTNaV0psY2tCdGIzTnpZV1JoYlhNdVkyOXQ6ZXZKSG8=
Cookie: PHPSESSID=eek95mofn0bvvruub6ipj29k4k
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Jun 2023 14:21:54 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 166
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
471 B IP
Hash 92ecc8124d8a77387b48190d99e2d602
43f58e76a0a1ea98ff3d4b60a5c083e6e4875a3a
ec6f6123546a631545a0cf232023e48a1112ed6962c89372f69f10ed10a6ed9c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 14:21:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 5.6 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 14:21:54 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1026479
expires: Sun, 26 May 2024 14:21:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H0YbMhnxKfKNUOigPhr2LMeWk48dUnJ9gg6UXjLyv5cNEFlQXpsEy%2Fh8U32HVkf%2FxwJW4BfsGa29oGJGa9LJm2D2v7gyV8KVlpZZxXcjNjC%2F0USrVhsQaCntwgEpbpb5SYmfWZqk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d314df29a9ab505-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css
200 OK 4.4 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (23577)
Hash 04425bbdc6243fc6e54bf8984fe50330
8c15c6bd82c71e9ef1bb11cf24e502fe07518ac5
541ac58217a8ade1a5e292a65a0661dc9db7a49ae13654943817a4fbc6761afd
GET /ajax/libs/font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 14:21:54 GMT
content-type: text/css; charset=utf-8
content-length: 4364
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-5cbb"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 7041401
expires: Sun, 26 May 2024 14:21:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V4BtIijSMi%2FAfCGI8W%2F98OEUvhzy6Ibbbjzpkmr2%2BM%2FYi6C1%2Bfy1vrCB3XFlyeZifOs3xvOHGf8QauJj3%2F7wTXiQr%2FZrzHZoMEoNGlcAyDIamHxUIA%2Fzb2EwGnr0MWD6MyUmLGAA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d314df29aa2b505-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 82d60e5c89d861bf88494c1b30123a7d
696454de610c86434fca82187d45b770aa712b74
1c270911b4dc1e66edab7b962f92245d40a0725385601f27a4532f216161aa6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 14:21:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hh1iil.web.app/images/hinet_logo.png
20 kB URL GET hh1iil.web.app/images/hinet_logo.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 672 x 169, 8-bit/color RGBA, non-interlaced\012- data
Hash 61001786662e8f730542fec9ff1f3d58
58ef2465fc4785c0923631e1ec8c40063fb07bc6
3586220992a4ac38538843f259cdd76bf7af13fcbd6a848ee66922611d4daab7
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/hinet_logo.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "9ae760408cf42e77666e83be2cc3fb2647fa57af8a4b22ca167ce184de79e578-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.025100,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 20248
X-Firefox-Spdy: h2
hh1iil.web.app/images/OUT.png
11 kB URL GET hh1iil.web.app/images/OUT.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 272 x 185, 8-bit colormap, non-interlaced\012- data
Hash dede0fe72a80053288dee4d473880588
d27defe0ce72c632e8fb7c3267d77609e0fd6d7b
3946a9d4e8cec66374d02c37b350641ae3510ff29af591ef593cd0e6293c036a
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/OUT.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "906e64556f82b3975f6376407fef0a3ebdd566e6074d89820c05c9eccda9b118-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.025106,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11405
X-Firefox-Spdy: h2
hh1iil.web.app/css.css
200 OK 16 B IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type ASCII text, with no line terminators
Hash 84dc6f6eb165e40e17bfcd25fe05772d
15193ea58dae366371bc3d93b0ea2ef692ec1654
a3248da8f3c61d39eab838800354a10ee1a7bf18c3a7e408aa4bd953f69837a0
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /css.css HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=3600
content-type: text/css; charset=utf-8
etag: "e929f6098de013ac08d8ffd64a567ea65def5c26e2e84aabc6163837953ec660"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.024652,VS0,VE4
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 16
X-Firefox-Spdy: h2
hh1iil.web.app/images/logo3.png
18 kB URL GET hh1iil.web.app/images/logo3.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 678 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 0eba45fe16da1f9d4f959f07ff7f1e34
7bd2638a397353be342b01a62d21f7025cf28102
3a5849148cf4670a48b26a4e93efaba384d549ea599add4c89da9be3c4620ad5
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/logo3.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "0b35a3a2af14b518f2a494821e756b28af06d8d7be3081f3aa547cf344da0df8-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.025167,VS0,VE4
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17859
X-Firefox-Spdy: h2
hh1iil.web.app/images/11and1.png
13 kB URL GET hh1iil.web.app/images/11and1.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 496 x 124, 8-bit/color RGBA, non-interlaced\012- data
Hash a012da4ec239fc8e0d09a1d80db24705
3472c1b3825eaef54a36c7006ed43497a5d2856e
2f44a09c646e42f10ec6a54a77dbf319981649dc0bbee85b8af15de740e18849
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/11and1.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "734c6236e660c41b75e3618598ea3a07c2ec9495414bae72c5143c0b1bf30fae-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.025137,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 13125
X-Firefox-Spdy: h2
hh1iil.web.app/images/web-mail.png
3.3 kB URL GET hh1iil.web.app/images/web-mail.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 299 x 37, 8-bit/color RGB, non-interlaced\012- data
Hash 70e58609b4b2405368d6e4af8b0be2a3
b96ef160eaac31d7a5154bcc03d3453b279a81c1
c0b68546949f5fffe9569b37a3b5b5182cb366ea9c63c1b8e17ef90fcf365a4c
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/web-mail.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "b8cf760c6433f590de559eec0c7c19272b1e11bf6a5bc81706a2e294a3610277-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.025200,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3294
X-Firefox-Spdy: h2
hh1iil.web.app/images/bartom.png
13 kB URL GET hh1iil.web.app/images/bartom.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 394 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash b92e4f82fdb58704095201d7da095f6e
ca772b63a93bd265139a5f541228f079ee2c1619
e5fd2ad8c71c1d3bd4722be727879550655f62c365d19530155a73ad74e3560f
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/bartom.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "377ea4f8c68d52d2be4d1bd99a5f392278f1c033106ce6f33aa0e26a7c6124c6-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.030311,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 13214
X-Firefox-Spdy: h2
hh1iil.web.app/images/GO2.png
200 OK 38 kB URL GET HTTP/2 hh1iil.web.app/images/GO2.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 800 x 400, 8-bit colormap, non-interlaced\012- data
Hash 55a959c78cad4276119eb4fba417108c
11cbdb593bb62ecd4668c7e57cd6bfd728f444f7
ec57ff5772e321a27595934831db29f09792cf36b34ddc15bdd5fb4dccddfa1b
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/GO2.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "ade0a872d26c02796324c525c327519e3cca32ea757d4ba98a28cb6819a78a79"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.030337,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 37861
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 82d60e5c89d861bf88494c1b30123a7d
696454de610c86434fca82187d45b770aa712b74
1c270911b4dc1e66edab7b962f92245d40a0725385601f27a4532f216161aa6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 14:21:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hh1iil.web.app/images/GoDaddyLogo.png
15 kB URL GET hh1iil.web.app/images/GoDaddyLogo.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 900 x 252, 8-bit/color RGBA, non-interlaced\012- data
Hash 461726554009f5d72cd6403e19b9a05b
9613ad4cfc97b1e2235381b9227e494d20a6f9db
a52acfe90ddc096e7fbdd5aa2fb638eb0a604afbd7b13b33376e10e0d3d0a47f
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/GoDaddyLogo.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: image/png
etag: "f9268bd5462e6c7922e5951e25b7cf0f22472b5787166239d25fcad997b454de"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.030232,VS0,VE3
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 14653
X-Firefox-Spdy: h2
hh1iil.web.app/images/owa.png
200 OK 1.5 kB URL GET HTTP/2 hh1iil.web.app/images/owa.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 120 x 38, 8-bit/color RGBA, non-interlaced\012- data
Hash 57c63f8c9d91db551905afe19c28e2fb
6e3738d9efab3caabc6b843430d21fade6735ca4
a782150402e8029730321b43291e7104ce52033059bea111fb546c36e5dc9999
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/owa.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "95800ee9b640c4c63c793f5472a9634589ab390249c5ca9d6ff5ca5141820530"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.030397,VS0,VE3
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1489
X-Firefox-Spdy: h2
hh1iil.web.app/images/microsoft.webp
16 kB URL GET hh1iil.web.app/images/microsoft.webp
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x675, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f490cdbabf84b7f04f6e1df1ecc0d2bc
32085a179786c0dfb83afda9c9b789645ba1ac03
d8112eb7eb1380b0dac48529cb2e643563521eaa60972826017dfb4e00bef823
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/microsoft.webp HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/webp
etag: "ef85d72eb2d4d346dd9962722952949d8454a7d048add7042cb022f1085838f9-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.030361,VS0,VE5
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 15772
X-Firefox-Spdy: h2
hh1iil.web.app/images/OL.png
11 kB URL GET hh1iil.web.app/images/OL.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 462 x 104, 8-bit/color RGBA, non-interlaced\012- data
Hash efef2b9ef415e0272c0e200b0787c858
caa7eb9989eef2df5dc3e389a16f8a1bea7cf35e
a24e474952444d9b1a9b21e52553a94b8c9d222ed90572a76aff0df9ec9891a2
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/OL.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "fb0110c32ca02a410818c1d15c59f57a9cbb3188c9cf2c9dd59f78b97d4ea717-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.030373,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11365
X-Firefox-Spdy: h2
hh1iil.web.app/images/1and1z.png
30 kB URL GET hh1iil.web.app/images/1and1z.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 628 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash d824be82b5d68a084300550234a0d2b8
785bacc154c013840d7b627fad26f06cd6af96ba
be4b7409c6a222ec4753cb85d27138db22b27e1e1f1fe3bb0b895e24bb23342e
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/1and1z.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "6d10253974bcddcc5461912bd8e881ea86858f3753a250ee3947672b2cfdad4a-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.030259,VS0,VE5
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 30491
X-Firefox-Spdy: h2
hh1iil.web.app/images/maxresdefault.jpg
58 kB URL GET hh1iil.web.app/images/maxresdefault.jpg
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Hash 7d754a7b54e0cd53c5412c8780bc8b03
dde032ab42f29c23bcb8db574e1a4a1846b619ed
b649968f2627f7708d082c720774ce74f13eadb1d73bf2c21aa87ee19371992e
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/maxresdefault.jpg HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "6de1ca583125043a52d027c5059feecef470e47ff0b4c0adf95625dcec31ed33-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.030296,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 57992
X-Firefox-Spdy: h2
hh1iil.web.app/images/RackspaceLogo.png
6.0 kB URL GET hh1iil.web.app/images/RackspaceLogo.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 404 x 125, 8-bit colormap, non-interlaced\012- data
Hash 60dd08de12cf49a3778980a70f86b6a3
e33a46bbf63937fcbbdb0d2051284c17a72608b9
5d136f00203860388f5f013be9adcd0455868ba2d9b0eb1154e2c4ddb96eab62
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/RackspaceLogo.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "8df3da2bbcf6fd18fb2a95e88424020b9e55354cb0e32ce99aa91802ae05a28b-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.038462,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6034
X-Firefox-Spdy: h2
hh1iil.web.app/images/barsohu.png
28 kB URL GET hh1iil.web.app/images/barsohu.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 352 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 7722212d42163fa3982ade61064389fc
06f0b8bd715b385935745470656672de81999a97
c4b51968c7a5b21e875fdfe2aa024aac7923c2afa2df0b41786bafb089af67ce
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/barsohu.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "4e96214e9aecda2a5ae471fcc4df6b5a0de9474605f2bd091cfb3c3df296608f-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.030319,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 28254
X-Firefox-Spdy: h2
hh1iil.web.app/images/Strato1.png
22 kB URL GET hh1iil.web.app/images/Strato1.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 451 x 225, 8-bit/color RGBA, non-interlaced\012- data
Hash 60ce079d54058ba2979773e4e1b6c429
6574bf5a1e2661c0890214269cb2b43d5019ba78
e3d2bd4d0748fa09a5318e27668b6b33878dc4f746182d86612bc62ff4271370
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/Strato1.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "e95b2fe49b8a8e8e6371f12b99bed9f4e693691275d657e3b5952dbb9dfc6ef1-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.042703,VS0,VE4
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 22542
X-Firefox-Spdy: h2
hh1iil.web.app/images/RackspaceEmail.jpg
91 kB URL GET hh1iil.web.app/images/RackspaceEmail.jpg
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x630, components 3\012- data
Hash 4f3e15b515575528a3212a8c0fe444f3
bb2c1abcd1dd3c218fc86d06577a55433a40613f
86de50cfe24a2ba7491fbffe9f894ce1d608f21d6b5e1d6e2822f6b7fd1c80f9
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/RackspaceEmail.jpg HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "96af5e82e8a5ee845369cb301c2ef0b1e7a119ee95facaa89e6b725692b56368-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.033810,VS0,VE7
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 90786
X-Firefox-Spdy: h2
hh1iil.web.app/images/Strato.jpg
93 kB URL GET hh1iil.web.app/images/Strato.jpg
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=342, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1594], baseline, precision 8, 2070x718, components 3\012- data
Hash 4f4285865ec206c5058e0fd1e4b152a6
af7d04a5e557368673ca664ae8a0082b5d1ac2e0
fa87a0a6fe6f885a4543a0db0d08d007d49107faa681fa1b5570e60676a9224f
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/Strato.jpg HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "934a510f9e98f521ce22443fa919b81f7cd1280c5a6f28115e7e0df7a1ae786e-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.042821,VS0,VE4
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 93088
X-Firefox-Spdy: h2
hh1iil.web.app/images/up.png
16 kB URL GET hh1iil.web.app/images/up.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 678 x 190, 8-bit/color RGBA, non-interlaced\012- data
Hash c475e509670e673873c2de76467590f6
f38930411fe166c53bc3e39c41490d6dddb44517
6a92fc1991fffb5fe08c105e9d525339ed407126f99ed2354ebfe73b6edb1f89
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/up.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "a7cc6e509a48d70003d38d254d83e19ec95d55c8520dcd4b08488e0c0ec9a171-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.047319,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 16480
X-Firefox-Spdy: h2
hh1iil.web.app/images/logo3j.png
16 kB URL GET hh1iil.web.app/images/logo3j.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 678 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 1d3255d73f90ab964722ea56653d242b
d6b84a8ca0f26fff3532a095406cca5b21d06eb9
9121eb3a0f69b4ca59a522c4cf0f3d40edd54a83db59927b83e84373a03060cf
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/logo3j.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "c8ea9150fedf4cbac20a363b025abd969225299d9663c89335a871e678c1a474-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.055391,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 15504
X-Firefox-Spdy: h2
hh1iil.web.app/images/logo1.png
16 kB URL GET hh1iil.web.app/images/logo1.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 678 x 52, 8-bit/color RGBA, non-interlaced\012- data
Hash 45f7c08a654cad299c9db8e0d1a8beef
32c25fbb880eb53c1956a9597505d65fd010a59b
20562cf0bf0d5594c88ffe98d6a013dc3d6d12a62bca19b77b869bd86314c91c
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/logo1.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "0c6a5681acefc4150a905b3f5e3786bdbd7b270d9405e71fa49bce51a8fc2048-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.055357,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 15587
X-Firefox-Spdy: h2
hh1iil.web.app/images/bar.png
200 OK 17 kB URL GET HTTP/2 hh1iil.web.app/images/bar.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 366 x 81, 8-bit/color RGBA, non-interlaced\012- data
Hash 130fcc48d7025f2f9611ee27b7c867dc
077121c5864bceaaf3194a94a113c9401c19a979
06553ad171b48d412cfaa957b3bc4fca3f5bc84befc8be86a71ed43945b123ce
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/bar.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "f6741a7381cd8950bda0306908865b7f91744e127f952e6bc6e21c8357ab249e"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.060261,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 16908
X-Firefox-Spdy: h2
hh1iil.web.app/images/22.png
11 kB URL GET hh1iil.web.app/images/22.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 742 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash bb6241d50cc0dd5de86464fb1db20837
97204b4fffdc5baef72dbfb62c7df2b39a639aab
51773f8628a02bddab6140432920e5811665153aa0b414edf754eb356857d07e
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/22.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "154252794893f7be4870cf985c1f7a6e7fc5dac74e8facbc7b70b0cb9176d709-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.082110,VS0,VE7
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11419
X-Firefox-Spdy: h2
hh1iil.web.app/images/bar2.png
39 kB URL GET hh1iil.web.app/images/bar2.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 748 x 278, 8-bit/color RGBA, non-interlaced\012- data
Hash 3f7449abc2ba5835099a9f84960f03e6
9bcabdbf6415f669ec5f2d25a1cbc59cb707555d
bba9dc42160ee6c6786e970f2411e7d697b59d4b91ea879fae022ccbdf712be9
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/bar2.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "70acc3ff12fed48314fff0e2812f733ee38b2034f6520398098cc1363adc8560-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.082089,VS0,VE11
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 39444
X-Firefox-Spdy: h2
hh1iil.web.app/images/mailapp_logo_141212.png
2.0 kB URL GET hh1iil.web.app/images/mailapp_logo_141212.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 256 x 36, 8-bit colormap, non-interlaced\012- data
Hash e6a8e95e49019f9234b6a91eb082c66b
1096ea00f1c9452e7fa7ae83e4b5db426673be49
d7916ca92b82038f9fb31b42361f28ec13a1c9339088ad8bd5911eb616003419
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/mailapp_logo_141212.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "0afc6df680e4a4dee3c467c8b9923d58c0ebcc7ef325698a8fcfa92a3e9c6948-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.091777,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1979
X-Firefox-Spdy: h2
hh1iil.web.app/images/mail.jpg
29 kB URL GET hh1iil.web.app/images/mail.jpg
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 635x480, components 3\012- data
Hash cc329c14b679b4b5c91175b58947aa3a
60f72b2caf7a7bb5af072431b2afc6c47e26d56c
2f1e0b5b9f1bc293b06fbef86413bde5e9c9792fc4bd99b5ec42abfbed3138f3
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/mail.jpg HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "9e258451aafcd4389df181a6696653eef4adbc311a191d780d93bc7e8cdc315a-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.091788,VS0,VE3
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29287
X-Firefox-Spdy: h2
hh1iil.web.app/images/3.png
37 kB URL GET hh1iil.web.app/images/3.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 792 x 390, 8-bit/color RGBA, non-interlaced\012- data
Hash 9ef094aa939ba4b3a89e08e81123fb2e
ef77d46dc464587156a54c323729d4cf1cc4716a
c7b4da6b025b9483896f92a0a4acdb9d56fb836de37939db19bc91638f727e5a
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/3.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "49d11b3876f73ea8c85d7d64b958a83ddee85c54ba11440c6b32990c9e4a6285-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.091813,VS0,VE3
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 36995
X-Firefox-Spdy: h2
hh1iil.web.app/images/namecheap.png
20 kB URL GET hh1iil.web.app/images/namecheap.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 871 x 162, 8-bit/color RGBA, non-interlaced\012- data
Hash af1ced5d03ef3b75a6416a210c669ba3
c867aa2bb3f3c327a975fcc62518b925825ce770
7e99cdebab89eaaaea33556ff31b9748b72af9d7df632394859e96bda3392e2f
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/namecheap.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "b70e6d6e25d31aacf3952bc7bd9465d9460258e08184cf050c96fec2ab284e9e-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.096749,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 19473
X-Firefox-Spdy: h2
hh1iil.web.app/images/rediffmailpro.png
36 kB URL GET hh1iil.web.app/images/rediffmailpro.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 768 x 117, 8-bit/color RGBA, non-interlaced\012- data
Hash 3379ba0cfceccefa8e4630e6f7c16c40
703d27a4940571543835addaa01fa9c44394bbcd
06a73f5e2ba3b74db00863eff5062fd7c0609dd2d34e3985d48c2ae2f8392fd3
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/rediffmailpro.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "b0da2b83313a4a3e8c330911303b5ece9b082c11777249ffd40549342fbddfff-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.098271,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 35540
X-Firefox-Spdy: h2
hh1iil.web.app/images/aliyun.png
24 kB URL GET hh1iil.web.app/images/aliyun.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 981 x 338, 8-bit gray+alpha, non-interlaced\012- data
Hash cb2381123a9bcfa63a674bd9e520efb6
3ad18f4e9b65b628fe541097c27dddf378d8f795
1cc4a7f4f5e1a4dd85983feec05a7b5fbd1fa7549d6d961245b813649945e341
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/aliyun.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "8385a706e92c737f354b16f226ea5e468651e8a05edec97e31b972aaff52b18f-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.099248,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24327
X-Firefox-Spdy: h2
hh1iil.web.app/images/netease.png
9.0 kB URL GET hh1iil.web.app/images/netease.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 472 x 107, 8-bit colormap, non-interlaced\012- data
Hash b49213a83097b724893db7de0b8f87e8
8c5eccb665e726e5a5f014e2e7d8638a541c0643
a17ab7216709ca54497edfa587cfc5003d8ba623c675a966ddd26264b4a07a05
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/netease.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "d257a9a29b79bed0e62ee1dc17cd87bc5675d9d4b5e0729e6523628e0a5712d1-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.099400,VS0,VE4
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 8995
X-Firefox-Spdy: h2
hh1iil.web.app/images/networksolutions.png
93 kB URL GET hh1iil.web.app/images/networksolutions.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 1014 x 253, 8-bit/color RGBA, non-interlaced\012- data
Hash fb01fbd01a12fd460351c3c796f3e709
8bedcc7e587c2e344fbc72e5fa3de780b7889bd5
468bffcd5ce5d92dc0d2be0c8727bb60ea08541e7fd4de8d5c7649a150c4a566
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/networksolutions.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "c551841a655c8c3da0cfaddddfad96d5eb632873e4aa703de901c602ca56c5d5-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.105428,VS0,VE3
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 93153
X-Firefox-Spdy: h2
hh1iil.web.app/images/proofpoint.png
126 kB URL GET hh1iil.web.app/images/proofpoint.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 3356 x 646, 8-bit/color RGBA, non-interlaced\012- data
Size 126 kB (125512 bytes)
Hash 5237fdacf20a4b52e937e80ad04a290f
3ebe43e5d1bd3bd50159dca171697a4efbe0eb4a
becc811da3241568d19bbd5293dd6e60c4e9da46dc517e0663986a939ca44418
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/proofpoint.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "8f1990f3f7636c8e83f3d6c812ba39fc2c0c99f4970f40202bb695d259d4c6ea-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.106617,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 125512
X-Firefox-Spdy: h2
hh1iil.web.app/images/ovh.png
200 OK 5.9 kB URL GET HTTP/2 hh1iil.web.app/images/ovh.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 417 x 104, 8-bit/color RGB, non-interlaced\012- data
Hash 055b91d6d7bb73be499a7ad65f029547
6b3c24253f144d08583b86e0be78fb38a932b910
1c9128d9fc938445476abf489ef140410d03ef8a78291a8f96c627b2ce3bd8e4
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/ovh.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "3a72b2bc6533e7d62651e5362ae1fc3ff563ec6fa1aafccbcf684f7cb83bcaa1"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.105666,VS0,VE4
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5938
X-Firefox-Spdy: h2
hh1iil.web.app/images/one-com.png
17 kB URL GET hh1iil.web.app/images/one-com.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 630x168, components 3\012- data
Hash bbbda7b01ce2cb931c902f7e2458a535
742044bd6c98ece22835898e6d1905e43dc712a6
d3e8d09dc713efb17cdf056cdcab4809e131714d961c6e56b629b3f1020e5c4c
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/one-com.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "1d155eca46add202fef77095da5c12efb380b812e0ee70c5ca5884fd22e560d7-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.105650,VS0,VE5
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17375
X-Firefox-Spdy: h2
hh1iil.web.app/images/netvigator.png
33 kB URL GET hh1iil.web.app/images/netvigator.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 1200 x 280, 8-bit/color RGBA, non-interlaced\012- data
Hash 23bd801d10d011a9e81645daa7405edc
b37370bc5f7f4e3232161158a371658c7ae053a0
20fb7370427339dd4343bea66b881feff72ceda3c0a6a53b69a292cf0cfd1eff
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/netvigator.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "8f078c8e1dff7d244bda9c582792207af10dec51dff0685f0e2912ff77229683-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.104208,VS0,VE7
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33376
X-Firefox-Spdy: h2
hh1iil.web.app/images/cisco.png
28 kB URL GET hh1iil.web.app/images/cisco.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 2400 x 1271, 8-bit colormap, non-interlaced\012- data
Hash 5cb5bf90c01997b69d54993c77ccd6fd
93a54a8d1c132c095f8118d45cd0ab0b301d3c83
eff231b51c6cf96650d49f67dfe9d5197c00ab1e41a8e6a6b88dccb317d7fad7
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/cisco.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "e4977c048d6efb4c124b8bd07a82d259e10589225d7d76b8c61b5e7b6639bd6d-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.106623,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 28493
X-Firefox-Spdy: h2
hh1iil.web.app/images/icoremail.png
32 kB URL GET hh1iil.web.app/images/icoremail.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 652 x 126, 8-bit/color RGBA, non-interlaced\012- data
Hash ff140a0dfb0caa27556fc4af2e19c79f
44772cd304141e74cd88f93df64794158a4d7e2b
ea44f6d49881d87e9d0d90901eada5baa41ef8d785ada738d8a3d3a058c13220
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/icoremail.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "c98be00a53f95b695f374f2ba335cd7d30313d4329659195133689332b654129-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.111595,VS0,VE3
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 31909
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
200 OK 42 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (65371)
Hash ec3bb52a00e176a7181d454dffaea219
6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68
f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hh1iil-web-app.translate.goog
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 14:21:54 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 01/05/2023 13:19:14
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1082
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: ebd89301ac2027627d481f7ac3328da7
cdn-cache: HIT
cf-cache-status: HIT
age: 9611
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7d314df279a20afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
hh1iil.web.app/images/zoho.png
21 kB URL GET hh1iil.web.app/images/zoho.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 607 x 136, 8-bit/color RGB, non-interlaced\012- data
Hash 155742f1ccb76052fd6febd94e51cfea
31ee60f98e709552f668b4f94a9d8728014056ad
f66609bb86cb9b6a805c499e61811192c05f73a62e21eae1326b45d364fd72d2
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/zoho.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: image/png
etag: "92e24c89f1f4fdef1b62ee62c03fefc644948693964e2be722da467e3f167bdd"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.117561,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 21248
X-Firefox-Spdy: h2
hh1iil.web.app/images/spamexperts.png
7.1 kB URL GET hh1iil.web.app/images/spamexperts.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 700 x 200, 8-bit colormap, non-interlaced\012- data
Hash a889c8789769e51dfa873e99d5ee1bc2
0e7106e0a96b54b79fd43d3dd80b69fc24da0ab4
7171c4f9346794867e87ad491ab6edde325e7c443e22eed0510f6a8192c41b7f
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/spamexperts.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "5d6e8a7e7c739257e244965a087f05b95a77f24593f48d6f34c17ed98cb60a7a-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.117688,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7126
X-Firefox-Spdy: h2
hh1iil.web.app/images/mimecast.png
30 kB URL GET hh1iil.web.app/images/mimecast.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 495 x 116, 8-bit/color RGBA, non-interlaced\012- data
Hash 607e49134596c82c0d4b8e2ed36447bc
758b0477a6b8d8346880d64a1b18c506406148b3
199832ffaa7e76cf198ccb2e2271e32d1d381b74a2f1d51fde6454e2f8f0407b
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/mimecast.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "f7ed76580c5d98dc77cfe0eab3ae296a35092f9331ad2901bd618b48fe991747-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.122668,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29944
X-Firefox-Spdy: h2
hh1iil.web.app/images/amazonaws.png
59 kB URL GET hh1iil.web.app/images/amazonaws.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 1200 x 451, 8-bit/color RGBA, non-interlaced\012- data
Hash 8261cc598c7249d515aae0e938445649
a0560b4a6845bcc8e854c5794fff44dd798cdbc4
b62c9b1690f95215d8983019191b6a003ebaa41e80c6c67cbf562fc6f588315d
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/amazonaws.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: image/png
etag: "d7858382ed4e20e2adb0291a4c5c7d4bc659345a0ebe0652fb697f92a6e1fc55"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1686061315.131218,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 59085
X-Firefox-Spdy: h2
hh1iil.web.app/images/mailprotect.png
200 OK 4.4 kB URL GET HTTP/2 hh1iil.web.app/images/mailprotect.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 450 x 112, 8-bit colormap, non-interlaced\012- data
Hash 5a42caf7a3c97538d418ffe87d69fba3
694c1635f4d07010cc72adb66d83641c4ceedfe8
a80643b15ef5d3d689760452ab7411c7d8bf35ad14c1d08de3683134148138a4
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/mailprotect.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "efc7ede72d48127ae388016c96ec4a638eff1f1218bbfc9dc6753bec1ab514a7"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.130852,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4443
X-Firefox-Spdy: h2
hh1iil.web.app/images/mailgun.svg
200 OK 1.8 kB URL GET HTTP/2 hh1iil.web.app/images/mailgun.svg
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c631ae74c14b008f93570c5ba2ac26c1
4c4658d0deaf0242dce54e609892e76114b30ee9
ac891a6a3b37ba14f19f2c6f93f11dc432c5724cb306f38e2384a6a0700fde01
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/mailgun.svg HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: "d6d9a0ddf2b1159d4f7c128adfc2b485eb2700ca4cc46249a979180c1f582d24-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.122701,VS0,VE10
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1782
X-Firefox-Spdy: h2
hh1iil.web.app/images/sm_logo.png
200 OK 20 kB URL GET HTTP/2 hh1iil.web.app/images/sm_logo.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 308 x 102, 8-bit/color RGBA, non-interlaced\012- data
Hash 54d083d530d52007ac9913a92a0ae88a
ee9136bde3b102856b7f623b8860e3a60ceb1af9
ab7ae3b697c2eaa54dbf1350879bb3eadfdca065454ae7066a7d5b3a7c23b316
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/sm_logo.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "2ef2c2dc6c4f4d73a701107f14aa1d71257ef1c1742b1ffb19adc32b27bc4b5b"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.131246,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 20173
X-Firefox-Spdy: h2
hh1iil.web.app/images/bluehost.png
40 kB URL GET hh1iil.web.app/images/bluehost.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 814 x 230, 8-bit/color RGB, non-interlaced\012- data
Hash 0332771276de40f2ba51a7d014ab6840
9eb58f5267ee13962e7e50358ff0227b76562abf
3e996db8d3efab6c312722c8001d384068bdb69947309f3777eb824d0570fd60
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/bluehost.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "2ce313ef4c88404cb3dab7b09f0f7eab1110b81153b3ecf2ee56ac383ef2903a-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.130833,VS0,VE4
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 39513
X-Firefox-Spdy: h2
hh1iil.web.app/images/communilink.png
200 OK 5.6 kB URL GET HTTP/2 hh1iil.web.app/images/communilink.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 210 x 47, 8-bit/color RGBA, non-interlaced\012- data
Hash 9be1a837c71cae776a54312c376688d5
dc4fe2ae374f9998063c9e823af8a3162e15d93a
3e3d7633600881f807339aa35ef5e56001e6dff4605e05bb79ade9fbd803548b
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/communilink.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "0399bef4e39b8ffe4b2394c3baf71e8069dfb689d9770201f3f7638b126c0ded"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.132997,VS0,VE7
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5614
X-Firefox-Spdy: h2
hh1iil.web.app/images/chinaemail.png
14 kB URL GET hh1iil.web.app/images/chinaemail.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 403 x 78, 8-bit/color RGBA, non-interlaced\012- data
Hash 7726dfe0a0dd607f721aebdebeccef09
bb641b6db361262c121faaa3970d9697f4e3fa1c
3bac7ef48293684121ef0b7fc5c544fa112851f2d5308310af3641cb715092af
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/chinaemail.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "74382ca485a8944c1a5f1e09eb5749b103a046c6cec3f4235b3fba8c3284375c-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.132991,VS0,VE7
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 13761
X-Firefox-Spdy: h2
hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK
90 kB URL hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (894)
Hash bf05bbc15102ea2fcc6aab1a52a59a16
ca1a65ac98c3d57783be64903053540bbbab2e8e
09e6aecc82514da4fcfc189fab375eb0fdd190b79304cf7bf32ca8514f0891ba
GET /host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK HTTP/1.1
Host: hh1iil-web-app.translate.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.xn--c1ac4bxc.xn--p1ai/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
x-robots-tag: none
content-security-policy: frame-ancestors *.translate.goog
content-type: text/html; charset=utf-8
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
content-encoding: gzip
date: Tue, 06 Jun 2023 14:21:54 GMT
server: ESF
cache-control: private
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+572; expires=Thu, 05-Jun-2025 14:21:54 GMT; path=/; domain=.translate.goog; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Tue, 06 Jun 2023 14:21:54 GMT
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/axios/0.21.1/axios.min.js
200 OK 4.4 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/axios/0.21.1/axios.min.js
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (14271)
Hash 70489d9432ef978db53bebda3e9f4c14
f24d0bcc36027bce45c86acfba57b248edb6a3f9
24b9a49d375465e659dbaecb3fda81fbf0d3eedbf138e29cb5229e502d8a4fa1
GET /ajax/libs/axios/0.21.1/axios.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 06 Jun 2023 14:21:55 GMT
content-type: application/javascript; charset=utf-8
content-length: 4420
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5fe182ae-3813"
last-modified: Tue, 22 Dec 2020 05:22:54 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1549939
expires: Sun, 26 May 2024 14:21:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BtMnOZ8hBq73EsvrQyDLdzknhQTpOn21EeYLyRAjb8gEDGmudf1VAC9%2BBqr6LOv8updYS46t%2FrGA7uau1Ti58qYjpOFLqwZDGPZQW%2F%2BB9ZcCLuSBlAu2aPb9LIzHMmMsRAbKqiXV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d314df43be21c0e-OSL
alt-svc: h3=":443"; ma=86400
hh1iil.web.app/images/mailhostbox.png
64 kB URL GET hh1iil.web.app/images/mailhostbox.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 1669 x 306, 8-bit/color RGBA, non-interlaced\012- data
Hash af536e34fa5f148baf3cdfdf5ceb43f5
9419b8a217de3f9542e265a8e86baa1d25c67cc0
ed0ef3ee384224eb40c192f8f46a21c736961bdbf1908e4d34f2bbcc1952159c
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/mailhostbox.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: image/png
etag: "efa41e84542ead7da829375f6b3610fc2e251eaa86058540528b1f06b9407dd2"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.135309,VS0,VE5
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 64291
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/bootstrap-validator/0.4.5/js/bootstrapvalidator.min.js
200 OK 12 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/bootstrap-validator/0.4.5/js/bootstrapvalidator.min.js
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type exported SGML document, ASCII text, with very long lines (32057)
Hash 4d66f8e07cb1166be60710ba16cc90d6
d2cf09a21a10fff3b8dbcf3ab91eb6be64fbc2fe
a8c5cb039624fc9574b08f6beab86699ad9d4160c67e47ed21e8b851b0325214
GET /ajax/libs/bootstrap-validator/0.4.5/js/bootstrapvalidator.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 06 Jun 2023 14:21:55 GMT
content-type: application/javascript; charset=utf-8
content-length: 12439
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d8f-dab7"
last-modified: Mon, 04 May 2020 16:06:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 7602142
expires: Sun, 26 May 2024 14:21:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YLtOJoBQaXcT1%2BXzTLFVJ8K6rr01JA7P1Z7A9gqc7jQ9YB8Pf3nCkG1snAw9KCZV7gMte%2B9kHcJ7dssjOMSTvA0uPU10Q3oY4Kx90j7MF5U4IFVD9Fh8KKMU7gUNIGbihOHglAz1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d314df43be31c0e-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
200 OK 28 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 06 Jun 2023 14:21:55 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 6462539
expires: Sun, 26 May 2024 14:21:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZpPJHs95FbFaUIleneKUxvOgJo%2Beu3sHBk%2BJPzzbJyOHIJ7kI7XMHyGzaruqGRC5U775%2BB8YuagVcv2yha1jQcWK4EVwWsBXvi5CEwUkgb7Q5Ug9VDxuK8JGNYA69OrpfYm9fifi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d314df43be11c0e-OSL
alt-svc: h3=":443"; ma=86400
hh1iil.web.app/images/abchk.gif
8.0 kB URL GET hh1iil.web.app/images/abchk.gif
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type GIF image data, version 89a, 450 x 56\012- data
Hash e8a59d6e204f09b59bb24b9f1c754992
787392b64e7c03cb851a0c632d268af913fbf549
c6da29c0e197ed6fbcc95816020f4b8ecf422967336fbda363829e3fb37805a6
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/abchk.gif HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/gif
etag: "5bbdac4fe2ee8822e344d15b3f204695b3691d78a0a307059be7f969d917d14c-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.135429,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7957
X-Firefox-Spdy: h2
hh1iil.web.app/images/appriver.png
56 kB URL GET hh1iil.web.app/images/appriver.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 1000 x 393, 8-bit/color RGBA, non-interlaced\012- data
Hash 1287f31b82f86b2882b435b80209c835
2f16c80c0a6400d759b4401db5b688191c3ff31f
3869b3cc095dd94e43c84b0f341871888f73983cca65bfe61ada11a2c11e3e2c
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/appriver.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "c4ed6d5dd87156f9fb703b957327ef3a2b92487e0a241ba9b647ae6262a760c7-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.135260,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 55719
X-Firefox-Spdy: h2
hh1iil.web.app/images/centurylink.svg
200 OK 1.9 kB URL GET HTTP/2 hh1iil.web.app/images/centurylink.svg
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2172)
Hash 24bd77031fa624c5dbd1da50aed1c6bd
911df5270a2e85a42d4610125f7ce06555150828
bddb86b72f88dbaf9d3f3cfe9a1ad695a960cdc3bcf1a2f41f1876e70cb08d6b
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/centurylink.svg HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: "6ad96ea84f79935063875f4f5403ed27fe5254d680c687f7f039b272e83e6d97-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.137184,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1932
X-Firefox-Spdy: h2
hh1iil.web.app/images/antispameurope.png
11 kB URL GET hh1iil.web.app/images/antispameurope.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 900 x 112, 8-bit colormap, non-interlaced\012- data
Hash 449d2b956252efa9de969de69e27c325
887b79592ab523e2d1c09736e28a0b0155df8c09
efe0974fc6be18035522f6d426c8b263ab3670f8d0141d049780577a1233cacb
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/antispameurope.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "2ada9c64d1e7076e77ab6265bad2708052eed5dccbac46f6c4066b2637a8ad44-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.136800,VS0,VE7
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11179
X-Firefox-Spdy: h2
hh1iil.web.app/images/yandex.png
25 kB URL GET hh1iil.web.app/images/yandex.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 1280 x 309, 8-bit/color RGBA, non-interlaced\012- data
Hash 898ce1c6dd03140573d79822cbe85459
47802d2bfb5856257ccade12992388e0a787f245
d54ae78bab189ea59a6668fa34efdc7df4e34f00af22c6d6cb65a434eddc320c
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/yandex.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: image/png
etag: "929889c95c54c420793dd9b6a740f74bb033641876a2d5328cb36c3b9d15b6ae"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.135661,VS0,VE8
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25361
X-Firefox-Spdy: h2
hh1iil.web.app/images/upE.png
15 kB URL GET hh1iil.web.app/images/upE.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 678 x 190, 8-bit/color RGBA, non-interlaced\012- data
Hash 604761878f8be0085a9c6c918a25f12e
9b8fe36d57b019f2ae533ca37b67d29a20f64298
4a8f39204ede049ea5897996a93177c624975cca529463f24df0579d678765d0
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/upE.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "a0e1b276602ab4d06bcf8736ea0a63767cbd20db14326fcec57cd5127d6c1e90-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.154008,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 15384
X-Firefox-Spdy: h2
hh1iil.web.app/images/appliedexch.svg
200 OK 731 B URL GET HTTP/2 hh1iil.web.app/images/appliedexch.svg
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1956), with no line terminators
Hash 621030dc47ec132e9432690d046e3d42
8ec98c3fd39f2de0b793eba7169ed18608d35a7f
eba244412a691d204430b1e2706bc24d6051fb9bc94269f0bf73c9b7c6549e52
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/appliedexch.svg HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: "ef1f9efaefa1649c168a0a501a03c63a53075bf385f4382ac4cb79788b4b4e02-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.154023,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 731
X-Firefox-Spdy: h2
hh1iil.web.app/images/22z.png
8.0 kB URL GET hh1iil.web.app/images/22z.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 742 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash f7d53cc6a698b7a9814163fd08d6a620
294055c5abc4b4fc849e1cdadbee3fc5db06da9f
70abcdb6827abc9ac5ab9140db78de248d5121a51085f1cbe615cd0b244f016c
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/22z.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "9dfa8b265433b4fa623ce6c0bdbcae947ea4ff3051dca2db12d14066de72a32d-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.154063,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7974
X-Firefox-Spdy: h2
hh1iil.web.app/images/email-logo.png
244 kB URL GET hh1iil.web.app/images/email-logo.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 600 x 596, 8-bit/color RGBA, non-interlaced\012- data
Size 244 kB (244517 bytes)
Hash f58c7e5aae47b6ad085bfc141454ecbb
597884caffb1fe40827f75c5fe3f5a1200e6b7f6
7b6dc2f1897bd365bd6331bcc118405739d7a9255c1187b28e70f6ba1a3798e1
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/email-logo.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: image/png
etag: "fcaa83440306b9249b6239fdae1f05903f2937a21f109f6527f263ca4d746099"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.189568,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 244517
X-Firefox-Spdy: h2
khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.goog/zhWDw4iE/CKg5p/trgyX?YldGeWF5NTNaV0psY2tCdGIzTnpZV1JoYlhNdVkyOXQ6ZXZKSG8=+&_x_tr_sch=http&_x_tr_sl=BsEOuGfI&_x_tr_tl=khqSbzSz
3.8 kB URL khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.goog/zhWDw4iE/CKg5p/trgyX?YldGeWF5NTNaV0psY2tCdGIzTnpZV1JoYlhNdVkyOXQ6ZXZKSG8=+&_x_tr_sch=http&_x_tr_sl=BsEOuGfI&_x_tr_tl=khqSbzSz
IP
File type gzip compressed data, max compression\012- data
Hash ac82fb6871aeb16447ca36d8930256fd
2a73068b5dd8553270560b78b6e94e1eab55c517
2ee436e7e9eb90b8c3fd8cd56b0bccbaf62ab70779acfde6830389cce2cf135a
GET /zhWDw4iE/CKg5p/trgyX?YldGeWF5NTNaV0psY2tCdGIzTnpZV1JoYlhNdVkyOXQ6ZXZKSG8=+&_x_tr_sch=http&_x_tr_sl=BsEOuGfI&_x_tr_tl=khqSbzSz HTTP/1.1
Host: khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-robots-tag: none
content-security-policy: frame-ancestors *.translate.goog
content-type: text/html; charset=UTF-8
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
content-encoding: gzip
date: Tue, 06 Jun 2023 14:21:52 GMT
server: ESF
cache-control: private
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+727; expires=Thu, 05-Jun-2025 14:21:51 GMT; path=/; domain=.translate.goog; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Tue, 06 Jun 2023 14:21:52 GMT
X-Firefox-Spdy: h2
hh1iil.web.app/images/imgES.png
25 kB URL GET hh1iil.web.app/images/imgES.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 694 x 88, 8-bit/color RGBA, non-interlaced\012- data
Hash d7e25ab4fc1000157e2b4f1f8aa4b364
55350a81c021bca29706b9f883067f557b1a58fa
c6ca5fc667ab54130ce49e5351d2dfc2f2da43abf107879e508b9e373aab2170
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/imgES.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "50b30adb35a27142215d886e10bd060c859051dfba6911e327a4109f298ebde9-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.191087,VS0,VE3
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24785
X-Firefox-Spdy: h2
hh1iil.web.app/images/webmail.png
64 kB URL GET hh1iil.web.app/images/webmail.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 1488 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash a8f4a61dbcc12ce5a52316c09c8b120f
2000a86853d6815a8c5846fb9b8fa0e3a93cf50c
60e051edfcd4d9c2bec25fd8dbd244a9c72dc5d6b9bf68fc4165be57b51e13c2
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/webmail.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "8b0575b2aab0a9a441aea4790ad865b30ed8b34607347a94ed229a5af2e4d32e-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.194772,VS0,VE3
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 63976
X-Firefox-Spdy: h2
hh1iil.web.app/images/Horde-Rouncube-SSL.png
28 kB URL GET hh1iil.web.app/images/Horde-Rouncube-SSL.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 662 x 331, 8-bit colormap, non-interlaced\012- data
Hash b2d5673a1d421f235278a3c5b9e26a1b
50da73dbfe9e81b95ffd73c03a0e5a271af93e21
59e04354184fce9275de3df6b2a545ddb044b001687945d25e548ffbdd2e0271
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/Horde-Rouncube-SSL.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "35f63333d4f9c200e55044e64645276919ccf2c3e37f08f09b9f65e03f5af5c6-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.194740,VS0,VE4
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 27997
X-Firefox-Spdy: h2
hh1iil.web.app/images/zoho1.png
48 kB URL GET hh1iil.web.app/images/zoho1.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 647 x 232, 8-bit/color RGBA, non-interlaced\012- data
Hash ba3702bdbe72f0d08b16ab43bebaa17e
69a9a80dfe807a24fa3e822e02f5b0a14b93146b
0018abd0bece4b3d99d45fc953718d895130b956209c34519ff0723a7bd2b1b5
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/zoho1.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "2b47262bf5b768e434b5b6c925625ac0d001373a549c9cdb9f58719c1d0cd10e-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.194703,VS0,VE7
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 47548
X-Firefox-Spdy: h2
hh1iil.web.app/images/upES.png
22 kB URL GET hh1iil.web.app/images/upES.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 678 x 190, 8-bit/color RGBA, non-interlaced\012- data
Hash 11a592253aeaa9a34bf2c7b73ca91363
acf8a1482f5647b22df116cb65b9fc8faec50f78
665d9240438b1ba264e19f4338275b6133bc6cd6e98286e4dd493ed7edbeaff8
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/upES.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "20505ed14f414cb97f2a25b91fbc495d60a983db3a2b2d10f46f2f3e50a97373-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.203766,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 21473
X-Firefox-Spdy: h2
code.jquery.com/jquery-latest.min.js
200 OK 33 kB URL GET HTTP/2 code.jquery.com/jquery-latest.min.js
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerSectigo Limited
Subject*.jquery.com
Fingerprint64:50:4C:BB:DF:F3:1D:70:CC:5D:9E:B7:BE:80:91:84:03:C1:D1:83
ValidityWed, 03 Aug 2022 00:00:00 GMT - Fri, 14 Jul 2023 23:59:59 GMT
File type ASCII text, with very long lines (32086)
Hash 8101d596b2b8fa35fe3a634ea342d7c3
d6c1f41972de07b09bfa63d2e50f9ab41ec372bd
540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
GET /jquery-latest.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 14:21:55 GMT
content-encoding: gzip
content-length: 33202
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-1762a"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1686061315.dop224.sk1.t,1686061315.cds250.sk1.hn,1686061315.cds256.sk1.c
X-Firefox-Spdy: h2
hh1iil.web.app/images/22zES.png
7.2 kB URL GET hh1iil.web.app/images/22zES.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 742 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash f7c3e89a2c91a43779102064f77d070a
1320b7ec9ce6a9c1ff9336fab4a1417ea4a21286
45e0e5c41c9824ba33f1b1fcc7211c102b6b2e4b6eee6934cc0019485cdbd498
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/22zES.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "55e15e5ce152c8262735725b3fd86227c7f5e165282f9d1349d0c1712806a305-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.204102,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7243
X-Firefox-Spdy: h2
code.jquery.com/jquery-1.11.2.min.js
200 OK 33 kB URL GET HTTP/2 code.jquery.com/jquery-1.11.2.min.js
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerSectigo Limited
Subject*.jquery.com
Fingerprint64:50:4C:BB:DF:F3:1D:70:CC:5D:9E:B7:BE:80:91:84:03:C1:D1:83
ValidityWed, 03 Aug 2022 00:00:00 GMT - Fri, 14 Jul 2023 23:59:59 GMT
File type ASCII text, with very long lines (32047)
Hash 5790ead7ad3ba27397aedfa3d263b867
8130544c215fe5d1ec081d83461bf4a711e74882
2ecd295d295bec062cedebe177e54b9d6b19fc0a841dc5c178c654c9ccff09c0
GET /jquery-1.11.2.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 14:21:55 GMT
content-encoding: gzip
content-length: 33262
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-176bb"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1686061315.dop224.sk1.t,1686061315.cds250.sk1.hn,1686061315.cds264.sk1.c
X-Firefox-Spdy: h2
hh1iil.web.app/images/jp.png
15 kB URL GET hh1iil.web.app/images/jp.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 674 x 194, 8-bit/color RGBA, non-interlaced\012- data
Hash 69bb6f84af7c32ea431bde5c19e9c7dc
5593d908bb712234b6a6025b2b82a592a58c79b0
ba2d7b7a2e6917130153dc1eb4b092e25931b6b982d98c07e75086365f3e66c6
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/jp.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "c369d237efe0c7a7af5092177baafec22ce276a88c429f135d588999f483a7e2-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.204084,VS0,VE3
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 15251
X-Firefox-Spdy: h2
hh1iil.web.app/images/jp1.png
6.9 kB URL GET hh1iil.web.app/images/jp1.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 742 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash d366f713e3b1a1dd526919213eaa0fd9
f45579628a864fbd02a7ea68e9bcd055cc48c04b
f07c7c0f2148853f079309e0d65ca0b67ef639d6a8199842f95906498291e064
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/jp1.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "d34a28d736cdf2ec2269975d9ba904c41af576bdc2759fee8960b5e7cac95681-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.208349,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6943
X-Firefox-Spdy: h2
hh1iil.web.app/images/barEE.png
122 kB URL GET hh1iil.web.app/images/barEE.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 1272 x 128, 8-bit/color RGBA, non-interlaced\012- data
Size 122 kB (122398 bytes)
Hash d4f6d83016b3581864c3d8e65db01bc4
1ca0ec7907c5aa782a21e19bfc471da4e4646945
e18a309fa4dae2dc4b5097501b036ee2b087d56f4e7722fbd5da10822e446c45
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/barEE.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: image/png
etag: "dc2619ea511bda0d8363a21c1d9ee3f8610a110982503795764a6d9a4909fef7"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.203822,VS0,VE7
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 122398
X-Firefox-Spdy: h2
hh1iil.web.app/images/alpha-mail.png
11 kB URL GET hh1iil.web.app/images/alpha-mail.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 300 x 85, 8-bit/color RGBA, non-interlaced\012- data
Hash a975966266b2eadf4f714320c940df07
ad19ffd7b2c03a35a7620c6333fc4d181717bf94
6ec7a1e6abd01504b0afd6faaef1cbdf2246a6a73049c32e3a3304136e6ca4f6
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/alpha-mail.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: image/png
etag: "e77281f9a71e207ff0d203e67dd0c40853af78d85bc2a380b6255005dcb70506"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.208338,VS0,VE5
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10943
X-Firefox-Spdy: h2
hh1iil.web.app/images/kr.png
15 kB URL GET hh1iil.web.app/images/kr.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 672 x 196, 8-bit/color RGBA, non-interlaced\012- data
Hash e0fea73da5ec63e94f74c4ab3f34c209
236cce0214c24b63fec86b21823e223a8cb0890d
57bb6b39c65818ba4964cae26b15959ac4904db706d2c02d86931f546d4722ec
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/kr.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "10e7106f838e85ec6d3c6a7b5e37f5ea9d98195bdd3e65be24ae128ab123b065-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.213705,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 15113
X-Firefox-Spdy: h2
hh1iil.web.app/images/kr1.png
5.6 kB URL GET hh1iil.web.app/images/kr1.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 742 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 3adc7eec1e592b7436720321fbcbfe6e
c622c77610cd2e2953b3da5a3ac7149cdf1db4b8
fcac17e6882cfa89c6965969baa4c9c3eefc1cf72be9e1626b8580b2a8aff8ec
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/kr1.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "3c971913b6e351496103e9b5cc01f2410aff1123e6926dc51e57bba5386e7e2c-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.213680,VS0,VE9
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5599
X-Firefox-Spdy: h2
hh1iil.web.app/images/arrow_left.svg
200 OK 251 B URL GET HTTP/2 hh1iil.web.app/images/arrow_left.svg
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (513), with no line terminators
Hash a9cc2824ef3517b6c4160dcf8ff7d410
8db9aebad84ca6e4225bfdd2458ff3821cc4f064
34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/arrow_left.svg HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: "4e7f626bb20831778d24d6db15fa7e7e40cac4f3418884335c69112ba62144d7-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.239358,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 251
X-Firefox-Spdy: h2
hh1iil.web.app/images/LIMG-6387c83601f38.css
200 OK 1.2 kB URL GET HTTP/2 hh1iil.web.app/images/LIMG-6387c83601f38.css
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 108 x 24, 8-bit colormap, non-interlaced\012- data
Hash ee236805d05e24861ce1b6b0e7d94b8d
d46828cf9df268ddaf62facf15590a447116aeb8
175986272200fb72da9a598d30016bbda9ddcaa9e6e3f07eb94bc74196d4b805
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/LIMG-6387c83601f38.css HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "de61b70ff4e846c3d14a8c65e181bf8a790eeaf781938210f3f7f756f7060a2f-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.239385,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1169
X-Firefox-Spdy: h2
hh1iil.web.app/images/enterpass.png
200 OK 1.4 kB URL GET HTTP/2 hh1iil.web.app/images/enterpass.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 170 x 29, 8-bit/color RGB, non-interlaced\012- data
Hash bd6e291a9a3cc17ed37605e4ff0010cc
6c1efd74231e3d253e0f51e4656eced2f3335d71
706de242e7c3cfc4b16ba8174723f26fb80566c3171e9e795f057476011a5de1
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/enterpass.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "909c503a0b280f24a8681edbb12ad327ef1902d3f3cfd38d3b4716874c330b79"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.245928,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1446
X-Firefox-Spdy: h2
hh1iil.web.app/images/forgpass.png
200 OK 713 B URL GET HTTP/2 hh1iil.web.app/images/forgpass.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 121 x 20, 8-bit/color RGB, non-interlaced\012- data
Hash b19cac60e41c79bd974c1080088c6fef
ffe553d8ca430dd309494e910a989271648a4ddd
e29db32031dc537aee9cb557b408395f3324f1e0f744349c0cdf943a3af39296
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/forgpass.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "f1bc255f8081950b311cb61fe58357da797b95838d7dc6e1010ccf5f0f24bcc7"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.253647,VS0,VE5
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 713
X-Firefox-Spdy: h2
hh1iil.web.app/images/firstmsg1.png
7.8 kB URL GET hh1iil.web.app/images/firstmsg1.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 353 x 41, 8-bit/color RGBA, interlaced\012- data
Hash 171e95241350097818ecc71ad59f3f8a
f63f42bb5982e02abdfa18cd801be4c4db90540a
f7bb8c87c9ab76081f182ccf8fbebd8d43da4e9b94cdbcaedfd2697c057c61ba
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/firstmsg1.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "75b27e0a6890d5ef05f72eaf7970626ac3e6a3f80de12e56117b1246a2b9d0f3-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.253674,VS0,VE7
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7822
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@4.5.3/dist/js/bootstrap.bundle.min.js
200 OK 84 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@4.5.3/dist/js/bootstrap.bundle.min.js
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint88:D1:D3:FA:BE:69:45:71:5A:74:78:14:1A:E8:F3:5A:88:69:9C:7F
ValidityFri, 23 Dec 2022 10:55:14 GMT - Wed, 24 Jan 2024 10:55:13 GMT
File type ASCII text, with very long lines (65299)
Hash 7f389f5d2622ce2090eca7c36bcb90bc
ab27031159724e2421f6ff5c70f48e657abe9d39
8d7089253dca29c9cd8d9deb7ec69b0a3d445f88f6a26478c719be1f90adcb01
GET /npm/bootstrap@4.5.3/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hh1iil-web-app.translate.goog
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.5.3
x-jsd-version-type: version
etag: W/"148b8-qycDEVlyTiQh9v9ccPSOZXq+nTk"
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
age: 9007276
x-served-by: cache-fra-eddf8230067-FRA, cache-bma1637-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 84152
X-Firefox-Spdy: h2
www.gstatic.com/_/translate_http/_/js/k=translate_http.tr.no.ZVPgEtntkjc.O/d=1/exm=corsproxy/ed=1/rs=AN8SPfpzw53Xp0rOcSbn5ESv2H1EPH7fXg/m=navigationui
200 OK 12 kB URL GET HTTP/2 www.gstatic.com/_/translate_http/_/js/k=translate_http.tr.no.ZVPgEtntkjc.O/d=1/exm=corsproxy/ed=1/rs=AN8SPfpzw53Xp0rOcSbn5ESv2H1EPH7fXg/m=navigationui
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (2016)
Hash ed6c5876061077e2bee210f44438495b
cbaeb94b25f6861a3a9d37492cf58ae533f41bfd
ca57b291903c09ebc7bfa53fd551f39000ae6876f4c5ab7d6e31ab908b8d3756
GET /_/translate_http/_/js/k=translate_http.tr.no.ZVPgEtntkjc.O/d=1/exm=corsproxy/ed=1/rs=AN8SPfpzw53Xp0rOcSbn5ESv2H1EPH7fXg/m=navigationui HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 12148
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Jun 2023 21:25:49 GMT
expires: Tue, 04 Jun 2024 21:25:49 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 03 Jun 2023 11:22:22 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 60966
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hh1iil.web.app/images/1.png
1.2 MB URL GET hh1iil.web.app/images/1.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 3360 x 1778, 8-bit/color RGBA, non-interlaced\012- data
Size 1.2 MB (1216025 bytes)
Hash aacf3a973d47ce3f74acd43480b24754
ba5e23f3bf5818cc96400f1c511f58107437cfaf
576b5902b3fb9ae061bf88b31c698554c39de566ba4bef220201d4853b352db3
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/1.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "c3c983ec420dc49a8556d150cd9d05d194bfa439b15da9a480e4727f2ab01e33-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.082356,VS0,VE6
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1216025
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4int/wrllXI_-LL8
472 B URL ocsp.pki.goog/s/gts1d4int/wrllXI_-LL8
IP
Hash 89450551b8a5d60bb38fc1fa19a46f4b
b146c696ea3a152475469f4b0ee49c9698d0a685
068c6d6c245bf0438476c5208158d772d1eae8376b0f748928a0a68a49f5a6bc
POST /s/gts1d4int/wrllXI_-LL8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 14:21:56 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 228335310e064064e595f506f85bce16
be51dc4247d0c1f4930bcb48acf84b684ab39c63
11e3db6caae7ff90f20e7edf253909003afc8243a8524190c1a7fa8f7d5e944a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 14:21:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
1.5 kB URL ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash c708099bfc772690c0172f7af22483a1
dc92cb7295cd25396cae94d1ac079c688955db4b
5ec6d2a0392340b3deca53b56c5f7cc9089ce804e4b23d017a870f0936da3888
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 14:21:57 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "630A6BD9EEC0A2C5BC4DA40BC1FB9E233B01FB2B"
Expires: Wed, 07 Jun 2023 02:00:00 GMT
Last-Modified: Tue, 06 Jun 2023 14:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 320
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d314e00dbe70b51-OSL
hh1iil.web.app/js.css
200 OK 2.4 kB IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type ASCII text, with very long lines (2607)
Hash 6c476058a5ac6849fbc745f660d88536
61414f19d39a6d6ac2f7230ef328368a99940aaf
2b208279cab054a06b85e32a4474d1f62d3025cbda56ea50fb0e1bd625e46696
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /js.css HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil.web.app/css.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2377
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "9dad7f5296f434ecbed626b638b68b7157dd8ed3d0cfadbbe406b95f57b743dc-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:57 GMT
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061317.303700,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2
200 OK 18 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 18028, version 1.589\012- data
Hash 448c34a56d699c29117adc64c43affeb
ca35b697d99cae4d1b60f2d60fcd37771987eb07
fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c
GET /bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hh1iil-web-app.translate.goog
DNT: 1
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Jun 2023 14:21:57 GMT
content-type: font/woff2
content-length: 18028
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "448c34a56d699c29117adc64c43affeb"
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 11/15/2022 10:30:09
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1053
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: fb1e5508af9b7a22bde9c04cfbf83ed8
cdn-cache: HIT
cf-cache-status: HIT
age: 9612
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7d314e021b9d0afa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
hh1iil.web.app/images/BIMG-6387129910832.png
289 kB URL GET hh1iil.web.app/images/BIMG-6387129910832.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size 289 kB (289153 bytes)
Hash 7d07c247e8dfd5bfaf9a7169b5c402bd
392cc7836ca5418f3e65cc67f5680b2a359399dc
345f500582fb5cfc20df5426c6b54bb0bcaa62eb0249a4a661dc9716a9edc006
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/BIMG-6387129910832.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 289153
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "0d421c50fe9a7ae8381ae23fb0ee3e3cad0cc5d09366c53bf01c377be6c6cd72-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:57 GMT
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061317.450033,VS0,VE3
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
200 OK 77 kB URL GET HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint49:14:F2:7A:2C:AE:36:01:38:B7:F7:3D:DB:44:3E:3F:5C:FB:6B:15
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (60130)
Hash a12ec7ebe75a4d59a5dd6b79e2ba2e16
28f5dcc595ee6d4163481ef64170180502c8629b
fc5128dfdcdfa0c3a9967a6d2f19399d7bf1aaae6ad7571b96b03915a1f30dda
GET /releases/v5.15.4/css/free.min.css?token=585b051251 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hh1iil-web-app.translate.goog/
Origin: https://hh1iil-web-app.translate.goog
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 14:21:57 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f40585e1285ddfba696e566c1dd902de.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: kJO9ykTP9Kh_Q7qxd1Ne7jVxx5EL7YonMCfoxSLA7yOw83w1yc0C5Q==
age: 58085
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gIhWgOEnYDoQNAV3Amr%2FVhXmneBRgBfJhfx8CYleGJ3vN7Nr9gNderUTa75WsOj8Atk%2BSCLDhC47JEZIRu2qeaEombGplEx6%2Bmi2FNGDFT9qoYKFx4hl%2FhcQ87N8gs9ylX3%2BGJQSwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d314e025a41419d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverWebsiteTranslationUi.en_US.26hw_TPT7Cg.es5.O/ck=boq-translate.TranslateWebserverWebsiteTranslationUi.H-GBM4VE6n8.L.F4.O/am=0DkLAAQ/d=1/exm=_b,_r,_tp/excm=_b,_r,_tp,iframenavigationview/ed=1/wt=2/ujg=1/rs=ANkVxDlvYbdYLBxakj_K-xSEeJq_dwg2qg/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,pKzUve,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,OmgaI,XVMNvd,L1AAkb,KUM7Z,Mlhmy,CXsKQe,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,P5Thrf,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,xQtZb,JNoxi,kWgXee,BVgquf,QIhFr,ovKuLd,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,BBI74,VwDzFe,MdUzUe,A7fCU,zbML3c,zr1jrb,Uas9Hd,pjICDe
89 kB URL www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverWebsiteTranslationUi.en_US.26hw_TPT7Cg.es5.O/ck=boq-translate.TranslateWebserverWebsiteTranslationUi.H-GBM4VE6n8.L.F4.O/am=0DkLAAQ/d=1/exm=_b,_r,_tp/excm=_b,_r,_tp,iframenavigationview/ed=1/wt=2/ujg=1/rs=ANkVxDlvYbdYLBxakj_K-xSEeJq_dwg2qg/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,pKzUve,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,OmgaI,XVMNvd,L1AAkb,KUM7Z,Mlhmy,CXsKQe,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,P5Thrf,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,xQtZb,JNoxi,kWgXee,BVgquf,QIhFr,ovKuLd,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,BBI74,VwDzFe,MdUzUe,A7fCU,zbML3c,zr1jrb,Uas9Hd,pjICDe
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (2691)
Hash a65877796ecd89529a21e0e4d8cc7cc5
180a4f1d20bb0568d8dfce255f5b59fefaca02d6
1f659e71836a64edbb5d87f60d182753571e58e70faa547552b4c185f6b497cc
GET /_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverWebsiteTranslationUi.en_US.26hw_TPT7Cg.es5.O/ck=boq-translate.TranslateWebserverWebsiteTranslationUi.H-GBM4VE6n8.L.F4.O/am=0DkLAAQ/d=1/exm=_b,_r,_tp/excm=_b,_r,_tp,iframenavigationview/ed=1/wt=2/ujg=1/rs=ANkVxDlvYbdYLBxakj_K-xSEeJq_dwg2qg/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,pKzUve,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,OmgaI,XVMNvd,L1AAkb,KUM7Z,Mlhmy,CXsKQe,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,P5Thrf,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,xQtZb,JNoxi,kWgXee,BVgquf,QIhFr,ovKuLd,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,BBI74,VwDzFe,MdUzUe,A7fCU,zbML3c,zr1jrb,Uas9Hd,pjICDe HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://translate.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/translate-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/translate-boq-js-css-signers"
report-to: {"group":"boq-infra/translate-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/translate-boq-js-css-signers"}]}
content-length: 88642
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Jun 2023 18:43:06 GMT
expires: Tue, 04 Jun 2024 18:43:06 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Sat, 03 Jun 2023 02:24:46 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding, Origin
age: 70731
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverWebsiteTranslationUi.en_US.26hw_TPT7Cg.es5.O/ck=boq-translate.TranslateWebserverWebsiteTranslationUi.H-GBM4VE6n8.L.F4.O/am=0DkLAAQ/d=1/exm=A7fCU,BBI74,BVgquf,COQbmf,CXsKQe,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P5Thrf,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,gychg,hc6Ubd,kWgXee,lsjVmc,lwddkf,n73qwf,ovKuLd,pKzUve,pjICDe,pw70Gc,s39S4,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,iframenavigationview/ed=1/wt=2/ujg=1/rs=ANkVxDlvYbdYLBxakj_K-xSEeJq_dwg2qg/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:GkRiKb/m=sJhETb,i5dxUd,m9oV,JH2zc,bTi8wc,i5H9N,RAnnUd,PHUIyb,VNcg1e,DFTXbf,t1sulf,uu7UOe,wg1P6b,J1hrIc,sMS7Ab,JWUKXe,soHxf,xzbRj,qNG0Fc,HwavCb,qRXAtf,yRXbo,ywOR5c,tQKCld,thZ3rf,L2d1X,tsNC9c,QM0Gm,PxcVCe,JzDP5e,rFVO7,W225x,cSdwA
75 kB URL www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverWebsiteTranslationUi.en_US.26hw_TPT7Cg.es5.O/ck=boq-translate.TranslateWebserverWebsiteTranslationUi.H-GBM4VE6n8.L.F4.O/am=0DkLAAQ/d=1/exm=A7fCU,BBI74,BVgquf,COQbmf,CXsKQe,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P5Thrf,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,gychg,hc6Ubd,kWgXee,lsjVmc,lwddkf,n73qwf,ovKuLd,pKzUve,pjICDe,pw70Gc,s39S4,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,iframenavigationview/ed=1/wt=2/ujg=1/rs=ANkVxDlvYbdYLBxakj_K-xSEeJq_dwg2qg/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:GkRiKb/m=sJhETb,i5dxUd,m9oV,JH2zc,bTi8wc,i5H9N,RAnnUd,PHUIyb,VNcg1e,DFTXbf,t1sulf,uu7UOe,wg1P6b,J1hrIc,sMS7Ab,JWUKXe,soHxf,xzbRj,qNG0Fc,HwavCb,qRXAtf,yRXbo,ywOR5c,tQKCld,thZ3rf,L2d1X,tsNC9c,QM0Gm,PxcVCe,JzDP5e,rFVO7,W225x,cSdwA
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (1657)
Hash ea1c48f8f231a77d9fac3a4615b54e0c
92bb03c4dfa9cc2c430613e736adcdc16f490430
0c52e5ad8bc4bce5fabe7818c7fd703ade7a7e1cd66db819a74036c45575fd52
GET /_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverWebsiteTranslationUi.en_US.26hw_TPT7Cg.es5.O/ck=boq-translate.TranslateWebserverWebsiteTranslationUi.H-GBM4VE6n8.L.F4.O/am=0DkLAAQ/d=1/exm=A7fCU,BBI74,BVgquf,COQbmf,CXsKQe,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P5Thrf,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,gychg,hc6Ubd,kWgXee,lsjVmc,lwddkf,n73qwf,ovKuLd,pKzUve,pjICDe,pw70Gc,s39S4,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,iframenavigationview/ed=1/wt=2/ujg=1/rs=ANkVxDlvYbdYLBxakj_K-xSEeJq_dwg2qg/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:GkRiKb/m=sJhETb,i5dxUd,m9oV,JH2zc,bTi8wc,i5H9N,RAnnUd,PHUIyb,VNcg1e,DFTXbf,t1sulf,uu7UOe,wg1P6b,J1hrIc,sMS7Ab,JWUKXe,soHxf,xzbRj,qNG0Fc,HwavCb,qRXAtf,yRXbo,ywOR5c,tQKCld,thZ3rf,L2d1X,tsNC9c,QM0Gm,PxcVCe,JzDP5e,rFVO7,W225x,cSdwA HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://translate.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/translate-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/translate-boq-js-css-signers"
report-to: {"group":"boq-infra/translate-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/translate-boq-js-css-signers"}]}
content-length: 74713
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Jun 2023 18:43:06 GMT
expires: Tue, 04 Jun 2024 18:43:06 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Sat, 03 Jun 2023 02:24:46 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding, Origin
age: 70731
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
663 B URL www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1660), with no line terminators
Hash 554640f465eb3ed903b543dae0a1bcac
e0e6e2c8939008217eb76a3b3282ca75f3dc401a
99bf4aa403643a6d41c028e5db29c79c17cbc815b3e10cd5c6b8f90567a03e52
GET /images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://translate.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 663
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Jun 2023 12:24:45 GMT
expires: Sat, 01 Jun 2024 12:24:45 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Dec 2021 12:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin
age: 352632
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0
200 OK 57 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 56780, version 4.197\012- data
Hash 97493d3f11c0a3bd5cbd959f5d19b699
1075231650f579955905bb2f6527148a8e2b4b16
aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c
GET /ajax/libs/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hh1iil-web-app.translate.goog
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 06 Jun 2023 14:21:57 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 56780
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-ddcc"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2369483
expires: Sun, 26 May 2024 14:21:57 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=maguAFJc6F3BJZw71IXp9xNgqg8X2xVNOoCADWMlO5XByuCG6ppPVDdzuRl8HsIFRPDMzfR4doGHXUnPZU9NsfyOo0cVGQ9RN%2BCYNtafNwAU0l28unKH%2Bl7jVJhdc1hBayqvXXor"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d314e054f941c0e-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hh1iil-web-app.translate.goog
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 06 Jun 2023 14:21:57 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1772140
expires: Sun, 26 May 2024 14:21:57 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TvAiT8kHsu11KLMNToBeXMnLr03h%2BSraF1nT94yxmJfqFaFqwURBpZvaIhExNWdOVqk0gI01rpwcGj74SG6Q8O5FP0UF4bnP9JWs32xaIUHjWcm5hUfMAojiHpboAbFEWl0AkyBS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d314e054f961c0e-OSL
alt-svc: h3=":443"; ma=86400
www.gstatic.com/translate/pwt_hackathon_bard_logo_processing.gif
112 kB URL www.gstatic.com/translate/pwt_hackathon_bard_logo_processing.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type GIF image data, version 89a, 64 x 64\012- data
Size 112 kB (111830 bytes)
Hash cad066aa5000d5318ec2aeb1ff09fc92
874e026942b1621477ec77c0dc2443b8222e19d5
f1c19def8abe99d6e922755fc028d2cf35bf3419b020d7f955f1c202d2c7936c
GET /translate/pwt_hackathon_bard_logo_processing.gif HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://translate.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 111830
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 May 2023 17:19:54 GMT
expires: Wed, 29 May 2024 17:19:54 GMT
cache-control: public, max-age=31536000
age: 594123
last-modified: Thu, 16 Mar 2023 15:58:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/translate/pwt_hackathon_bard_logo_resting.gif
278 kB URL www.gstatic.com/translate/pwt_hackathon_bard_logo_resting.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type GIF image data, version 89a, 64 x 64\012- data
Size 278 kB (277497 bytes)
Hash 672bfa55b918b562f6f1de38eddfbc93
481b9a02cd93ec8b3d03a386af43312352d1d6a4
6f260bf3eacb674168155cfb377a8df06da619fd7cc6b62f406ace0113f81ecc
GET /translate/pwt_hackathon_bard_logo_resting.gif HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://translate.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 277497
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 May 2023 20:18:55 GMT
expires: Thu, 30 May 2024 20:18:55 GMT
cache-control: public, max-age=31536000
age: 496982
last-modified: Thu, 16 Mar 2023 15:58:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverWebsiteTranslationUi.en_US.26hw_TPT7Cg.es5.O/ck=boq-translate.TranslateWebserverWebsiteTranslationUi.H-GBM4VE6n8.L.F4.O/am=0DkLAAQ/d=1/exm=A7fCU,BBI74,BVgquf,COQbmf,CXsKQe,DFTXbf,EEDORb,EFQ78c,GkRiKb,HwavCb,IZT63,J1hrIc,JH2zc,JNoxi,JWUKXe,JzDP5e,KG2eXe,KUM7Z,L1AAkb,L2d1X,LEikZe,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P5Thrf,PHUIyb,PrPYRd,PxcVCe,QIhFr,QM0Gm,RAnnUd,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VNcg1e,VwDzFe,W225x,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bTi8wc,byfTOb,cSdwA,e5qFLc,fKUV3e,gychg,hc6Ubd,i5H9N,i5dxUd,kWgXee,lsjVmc,lwddkf,m9oV,n73qwf,ovKuLd,pKzUve,pjICDe,pw70Gc,qNG0Fc,qRXAtf,rFVO7,s39S4,sJhETb,sMS7Ab,soHxf,t1sulf,tQKCld,thZ3rf,tsNC9c,uu7UOe,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,xzbRj,yDVVkb,yRXbo,ywOR5c,zbML3c,zr1jrb/excm=_b,_r,_tp,iframenavigationview/ed=1/wt=2/ujg=1/rs=ANkVxDlvYbdYLBxakj_K-xSEeJq_dwg2qg/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd
5.4 kB URL www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverWebsiteTranslationUi.en_US.26hw_TPT7Cg.es5.O/ck=boq-translate.TranslateWebserverWebsiteTranslationUi.H-GBM4VE6n8.L.F4.O/am=0DkLAAQ/d=1/exm=A7fCU,BBI74,BVgquf,COQbmf,CXsKQe,DFTXbf,EEDORb,EFQ78c,GkRiKb,HwavCb,IZT63,J1hrIc,JH2zc,JNoxi,JWUKXe,JzDP5e,KG2eXe,KUM7Z,L1AAkb,L2d1X,LEikZe,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P5Thrf,PHUIyb,PrPYRd,PxcVCe,QIhFr,QM0Gm,RAnnUd,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VNcg1e,VwDzFe,W225x,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bTi8wc,byfTOb,cSdwA,e5qFLc,fKUV3e,gychg,hc6Ubd,i5H9N,i5dxUd,kWgXee,lsjVmc,lwddkf,m9oV,n73qwf,ovKuLd,pKzUve,pjICDe,pw70Gc,qNG0Fc,qRXAtf,rFVO7,s39S4,sJhETb,sMS7Ab,soHxf,t1sulf,tQKCld,thZ3rf,tsNC9c,uu7UOe,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,xzbRj,yDVVkb,yRXbo,ywOR5c,zbML3c,zr1jrb/excm=_b,_r,_tp,iframenavigationview/ed=1/wt=2/ujg=1/rs=ANkVxDlvYbdYLBxakj_K-xSEeJq_dwg2qg/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (2314)
Hash 9a8001de365ed6b3d68dbe5a03793322
fad40a2f778efbce6f9e9929a7a5c484d5cdf60e
ec07820348ebcafc3f77066fcde353773aa326b03cf061db94b21a63f3a81e45
GET /_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverWebsiteTranslationUi.en_US.26hw_TPT7Cg.es5.O/ck=boq-translate.TranslateWebserverWebsiteTranslationUi.H-GBM4VE6n8.L.F4.O/am=0DkLAAQ/d=1/exm=A7fCU,BBI74,BVgquf,COQbmf,CXsKQe,DFTXbf,EEDORb,EFQ78c,GkRiKb,HwavCb,IZT63,J1hrIc,JH2zc,JNoxi,JWUKXe,JzDP5e,KG2eXe,KUM7Z,L1AAkb,L2d1X,LEikZe,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P5Thrf,PHUIyb,PrPYRd,PxcVCe,QIhFr,QM0Gm,RAnnUd,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VNcg1e,VwDzFe,W225x,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bTi8wc,byfTOb,cSdwA,e5qFLc,fKUV3e,gychg,hc6Ubd,i5H9N,i5dxUd,kWgXee,lsjVmc,lwddkf,m9oV,n73qwf,ovKuLd,pKzUve,pjICDe,pw70Gc,qNG0Fc,qRXAtf,rFVO7,s39S4,sJhETb,sMS7Ab,soHxf,t1sulf,tQKCld,thZ3rf,tsNC9c,uu7UOe,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,xzbRj,yDVVkb,yRXbo,ywOR5c,zbML3c,zr1jrb/excm=_b,_r,_tp,iframenavigationview/ed=1/wt=2/ujg=1/rs=ANkVxDlvYbdYLBxakj_K-xSEeJq_dwg2qg/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://translate.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/translate-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/translate-boq-js-css-signers"
report-to: {"group":"boq-infra/translate-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/translate-boq-js-css-signers"}]}
content-length: 5411
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Jun 2023 18:43:06 GMT
expires: Tue, 04 Jun 2024 18:43:06 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Sat, 03 Jun 2023 02:24:46 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding, Origin
age: 70732
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
translate.google.com/websitetranslationui?parent=https%3A%2F%2Fhh1iil-web-app.translate.goog&pfu=https%3A%2F%2Fhh1iil-web-app.translate.goog%2Fhost%3A-webmail.mossadams.com%3A4628%3F%2B%26_x_tr_sl%3DQOOMOEVZ%26_x_tr_tl%3DDLbcFcQK&u=https%3A%2F%2Fhh1iil.web.app%2Fhost%3A-webmail.mossadams.com%3A4628%3F%2B&sl=QOOMOEVZ&tl=DLbcFcQK&opu=https%3A%2F%2Ftranslate.google.com%2Fwebsite%3Fsl%3DQOOMOEVZ%26tl%3DDLbcFcQK%26hl%26u%3Dhttps%3A%2F%2Fhh1iil.web.app%2Fhost%3A-webmail.mossadams.com%3A4628%3F%252B%26anno%3D2&client=tr&uip=true
200 OK 95 kB URL GET HTTP/2 translate.google.com/websitetranslationui?parent=https%3A%2F%2Fhh1iil-web-app.translate.goog&pfu=https%3A%2F%2Fhh1iil-web-app.translate.goog%2Fhost%3A-webmail.mossadams.com%3A4628%3F%2B%26_x_tr_sl%3DQOOMOEVZ%26_x_tr_tl%3DDLbcFcQK&u=https%3A%2F%2Fhh1iil.web.app%2Fhost%3A-webmail.mossadams.com%3A4628%3F%2B&sl=QOOMOEVZ&tl=DLbcFcQK&opu=https%3A%2F%2Ftranslate.google.com%2Fwebsite%3Fsl%3DQOOMOEVZ%26tl%3DDLbcFcQK%26hl%26u%3Dhttps%3A%2F%2Fhh1iil.web.app%2Fhost%3A-webmail.mossadams.com%3A4628%3F%252B%26anno%3D2&client=tr&uip=true
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Hash 18d16d7f1369a56acbdcd4027ef3f645
7556de145395f8b397724105ccf40e6c242e428d
b9a2fcb43fe1b321df80c99cf6b073236365bfb9dc813f2613e5e681e55cb6f1
GET /websitetranslationui?parent=https%3A%2F%2Fhh1iil-web-app.translate.goog&pfu=https%3A%2F%2Fhh1iil-web-app.translate.goog%2Fhost%3A-webmail.mossadams.com%3A4628%3F%2B%26_x_tr_sl%3DQOOMOEVZ%26_x_tr_tl%3DDLbcFcQK&u=https%3A%2F%2Fhh1iil.web.app%2Fhost%3A-webmail.mossadams.com%3A4628%3F%2B&sl=QOOMOEVZ&tl=DLbcFcQK&opu=https%3A%2F%2Ftranslate.google.com%2Fwebsite%3Fsl%3DQOOMOEVZ%26tl%3DDLbcFcQK%26hl%26u%3Dhttps%3A%2F%2Fhh1iil.web.app%2Fhost%3A-webmail.mossadams.com%3A4628%3F%252B%26anno%3D2&client=tr&uip=true HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-frame-options: ALLOW-FROM https://hh1iil-web-app.translate.goog
content-security-policy: frame-ancestors https://hh1iil-web-app.translate.goog, script-src 'nonce-TIJGVMrlQ3GmbavNR97HxA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateWebserverWebsiteTranslationUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/TranslateWebserverWebsiteTranslationUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/TranslateWebserverWebsiteTranslationUi/cspreport
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-ua-compatible: IE=edge
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Jun 2023 14:21:57 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
cross-origin-resource-policy: same-site
cross-origin-opener-policy: same-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: __Secure-ENID=12.SE=O_ANT_R1NWuRDHbpS47CwRAVxzrwJhqqQtf7M_H2uc9_3z7eh5gFJMksStsgLLHMee6ZwSZM7dnjUpVC0yqfoerrQ_DM8QUCsnUDp0JPqse4b1nCOTeSs4Zdy4S9jHn1SRE8u8YT4J--i2ARYMOPKGXtu6-nvmVj57yJUZOuiAI; expires=Sat, 06-Jul-2024 06:40:15 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+449; expires=Thu, 05-Jun-2025 14:21:57 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/i/productlogos/translate/v6/32px.svg
3.2 kB URL fonts.gstatic.com/s/i/productlogos/translate/v6/32px.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6020), with no line terminators
Hash 67c66ecfc5021ae0cfbdf32bdee91688
2d7b977111e97df855d96daf2e5ca7f07ee8cc43
99294fad3e114681d7504cad26b5d425bf7bb98c82bb4abce603e145ba2e3e17
GET /s/i/productlogos/translate/v6/32px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://translate.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3169
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 May 2023 17:35:12 GMT
expires: Wed, 29 May 2024 17:35:12 GMT
cache-control: public, max-age=31536000
age: 593206
last-modified: Wed, 27 Jan 2021 09:57:55 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/productsans/v9/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2
32 kB URL fonts.gstatic.com/s/productsans/v9/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 31568, version 1.0\012- data
Hash eb11bfb369775ff0739dabb3a5f379cc
2eebaea2f7080c0b256fbfc70ab91473243af0f8
2e0bdc192134bb3950a1ba4c1148901e39ebd8d2d01f64ef23106e90a9f771b0
GET /s/productsans/v9/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://translate.google.com/
Origin: https://translate.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31568
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 May 2023 21:56:42 GMT
expires: Thu, 30 May 2024 21:56:42 GMT
cache-control: public, max-age=31536000
age: 491116
last-modified: Mon, 15 Aug 2016 20:30:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverWebsiteTranslationUi.en_US.26hw_TPT7Cg.es5.O/ck=boq-translate.TranslateWebserverWebsiteTranslationUi.H-GBM4VE6n8.L.F4.O/am=0DkLAAQ/d=1/exm=A7fCU,BBI74,BVgquf,COQbmf,CXsKQe,DFTXbf,EEDORb,EFQ78c,GkRiKb,HwavCb,IZT63,J1hrIc,JH2zc,JNoxi,JWUKXe,JzDP5e,KG2eXe,KUM7Z,L1AAkb,L2d1X,LEikZe,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P5Thrf,PHUIyb,PrPYRd,PxcVCe,QIhFr,QM0Gm,RAnnUd,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VNcg1e,VwDzFe,W225x,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bTi8wc,byfTOb,cSdwA,e5qFLc,fKUV3e,gychg,hc6Ubd,i5H9N,i5dxUd,kWgXee,lsjVmc,lwddkf,m9oV,n73qwf,ovKuLd,pKzUve,pjICDe,pw70Gc,qNG0Fc,qRXAtf,rFVO7,s39S4,sJhETb,sMS7Ab,soHxf,t1sulf,tQKCld,thZ3rf,tsNC9c,uu7UOe,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,xzbRj,yDVVkb,yRXbo,ywOR5c,zbML3c,zr1jrb/excm=_b,_r,_tp,iframenavigationview/ed=1/wt=2/ujg=1/rs=ANkVxDlvYbdYLBxakj_K-xSEeJq_dwg2qg/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf
688 B URL www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverWebsiteTranslationUi.en_US.26hw_TPT7Cg.es5.O/ck=boq-translate.TranslateWebserverWebsiteTranslationUi.H-GBM4VE6n8.L.F4.O/am=0DkLAAQ/d=1/exm=A7fCU,BBI74,BVgquf,COQbmf,CXsKQe,DFTXbf,EEDORb,EFQ78c,GkRiKb,HwavCb,IZT63,J1hrIc,JH2zc,JNoxi,JWUKXe,JzDP5e,KG2eXe,KUM7Z,L1AAkb,L2d1X,LEikZe,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P5Thrf,PHUIyb,PrPYRd,PxcVCe,QIhFr,QM0Gm,RAnnUd,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VNcg1e,VwDzFe,W225x,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bTi8wc,byfTOb,cSdwA,e5qFLc,fKUV3e,gychg,hc6Ubd,i5H9N,i5dxUd,kWgXee,lsjVmc,lwddkf,m9oV,n73qwf,ovKuLd,pKzUve,pjICDe,pw70Gc,qNG0Fc,qRXAtf,rFVO7,s39S4,sJhETb,sMS7Ab,soHxf,t1sulf,tQKCld,thZ3rf,tsNC9c,uu7UOe,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,xzbRj,yDVVkb,yRXbo,ywOR5c,zbML3c,zr1jrb/excm=_b,_r,_tp,iframenavigationview/ed=1/wt=2/ujg=1/rs=ANkVxDlvYbdYLBxakj_K-xSEeJq_dwg2qg/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (755)
Hash 668fcf2c065fcdb17291f97926392e47
f3bcf41198e2b6f5c1fd7676d7a7388ca3f901b4
d61608853eb6428d092d8862f205fdd6e0410cf877bd0bb21e51020ff780f698
GET /_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverWebsiteTranslationUi.en_US.26hw_TPT7Cg.es5.O/ck=boq-translate.TranslateWebserverWebsiteTranslationUi.H-GBM4VE6n8.L.F4.O/am=0DkLAAQ/d=1/exm=A7fCU,BBI74,BVgquf,COQbmf,CXsKQe,DFTXbf,EEDORb,EFQ78c,GkRiKb,HwavCb,IZT63,J1hrIc,JH2zc,JNoxi,JWUKXe,JzDP5e,KG2eXe,KUM7Z,L1AAkb,L2d1X,LEikZe,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P5Thrf,PHUIyb,PrPYRd,PxcVCe,QIhFr,QM0Gm,RAnnUd,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VNcg1e,VwDzFe,W225x,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bTi8wc,byfTOb,cSdwA,e5qFLc,fKUV3e,gychg,hc6Ubd,i5H9N,i5dxUd,kWgXee,lsjVmc,lwddkf,m9oV,n73qwf,ovKuLd,pKzUve,pjICDe,pw70Gc,qNG0Fc,qRXAtf,rFVO7,s39S4,sJhETb,sMS7Ab,soHxf,t1sulf,tQKCld,thZ3rf,tsNC9c,uu7UOe,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,xzbRj,yDVVkb,yRXbo,ywOR5c,zbML3c,zr1jrb/excm=_b,_r,_tp,iframenavigationview/ed=1/wt=2/ujg=1/rs=ANkVxDlvYbdYLBxakj_K-xSEeJq_dwg2qg/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://translate.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/translate-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/translate-boq-js-css-signers"
report-to: {"group":"boq-infra/translate-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/translate-boq-js-css-signers"}]}
content-length: 688
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Jun 2023 18:43:06 GMT
expires: Tue, 04 Jun 2024 18:43:06 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Sat, 03 Jun 2023 02:24:46 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding, Origin
age: 70732
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverWebsiteTranslationUi.en_US.26hw_TPT7Cg.es5.O/ck=boq-translate.TranslateWebserverWebsiteTranslationUi.H-GBM4VE6n8.L.F4.O/am=0DkLAAQ/d=1/exm=A7fCU,BBI74,BVgquf,COQbmf,CXsKQe,DFTXbf,EEDORb,EFQ78c,GkRiKb,HwavCb,IZT63,J1hrIc,JH2zc,JNoxi,JWUKXe,JzDP5e,KG2eXe,KUM7Z,L1AAkb,L2d1X,LEikZe,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P5Thrf,PHUIyb,PrPYRd,PxcVCe,QIhFr,QM0Gm,RAnnUd,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VNcg1e,VwDzFe,W225x,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bTi8wc,bm51tf,byfTOb,cSdwA,e5qFLc,fKUV3e,gychg,hc6Ubd,i5H9N,i5dxUd,kWgXee,lsjVmc,lwddkf,m9oV,n73qwf,ovKuLd,pKzUve,pjICDe,pw70Gc,qNG0Fc,qRXAtf,rFVO7,s39S4,sJhETb,sMS7Ab,soHxf,t1sulf,tQKCld,thZ3rf,tsNC9c,uu7UOe,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,xzbRj,yDVVkb,yRXbo,ywOR5c,zbML3c,zr1jrb/excm=_b,_r,_tp,iframenavigationview/ed=1/wt=2/ujg=1/rs=ANkVxDlvYbdYLBxakj_K-xSEeJq_dwg2qg/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk
2.8 kB URL www.gstatic.com/_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverWebsiteTranslationUi.en_US.26hw_TPT7Cg.es5.O/ck=boq-translate.TranslateWebserverWebsiteTranslationUi.H-GBM4VE6n8.L.F4.O/am=0DkLAAQ/d=1/exm=A7fCU,BBI74,BVgquf,COQbmf,CXsKQe,DFTXbf,EEDORb,EFQ78c,GkRiKb,HwavCb,IZT63,J1hrIc,JH2zc,JNoxi,JWUKXe,JzDP5e,KG2eXe,KUM7Z,L1AAkb,L2d1X,LEikZe,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P5Thrf,PHUIyb,PrPYRd,PxcVCe,QIhFr,QM0Gm,RAnnUd,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VNcg1e,VwDzFe,W225x,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bTi8wc,bm51tf,byfTOb,cSdwA,e5qFLc,fKUV3e,gychg,hc6Ubd,i5H9N,i5dxUd,kWgXee,lsjVmc,lwddkf,m9oV,n73qwf,ovKuLd,pKzUve,pjICDe,pw70Gc,qNG0Fc,qRXAtf,rFVO7,s39S4,sJhETb,sMS7Ab,soHxf,t1sulf,tQKCld,thZ3rf,tsNC9c,uu7UOe,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,xzbRj,yDVVkb,yRXbo,ywOR5c,zbML3c,zr1jrb/excm=_b,_r,_tp,iframenavigationview/ed=1/wt=2/ujg=1/rs=ANkVxDlvYbdYLBxakj_K-xSEeJq_dwg2qg/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (732)
Hash 2739dbf7ce76cef27213ae3d52bc62bb
f3631d4aa31d9770b61d312e37d358da6ab1af74
5ce7be328a74c93a2229329b1af3a8d9dd5e056d0e4c438dbf86e3dedca5c6a3
GET /_/mss/boq-translate/_/js/k=boq-translate.TranslateWebserverWebsiteTranslationUi.en_US.26hw_TPT7Cg.es5.O/ck=boq-translate.TranslateWebserverWebsiteTranslationUi.H-GBM4VE6n8.L.F4.O/am=0DkLAAQ/d=1/exm=A7fCU,BBI74,BVgquf,COQbmf,CXsKQe,DFTXbf,EEDORb,EFQ78c,GkRiKb,HwavCb,IZT63,J1hrIc,JH2zc,JNoxi,JWUKXe,JzDP5e,KG2eXe,KUM7Z,L1AAkb,L2d1X,LEikZe,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P5Thrf,PHUIyb,PrPYRd,PxcVCe,QIhFr,QM0Gm,RAnnUd,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VNcg1e,VwDzFe,W225x,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bTi8wc,bm51tf,byfTOb,cSdwA,e5qFLc,fKUV3e,gychg,hc6Ubd,i5H9N,i5dxUd,kWgXee,lsjVmc,lwddkf,m9oV,n73qwf,ovKuLd,pKzUve,pjICDe,pw70Gc,qNG0Fc,qRXAtf,rFVO7,s39S4,sJhETb,sMS7Ab,soHxf,t1sulf,tQKCld,thZ3rf,tsNC9c,uu7UOe,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,xzbRj,yDVVkb,yRXbo,ywOR5c,zbML3c,zr1jrb/excm=_b,_r,_tp,iframenavigationview/ed=1/wt=2/ujg=1/rs=ANkVxDlvYbdYLBxakj_K-xSEeJq_dwg2qg/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://translate.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/translate-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/translate-boq-js-css-signers"
report-to: {"group":"boq-infra/translate-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/translate-boq-js-css-signers"}]}
content-length: 2789
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Jun 2023 18:43:07 GMT
expires: Tue, 04 Jun 2024 18:43:07 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Sat, 03 Jun 2023 02:24:46 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding, Origin
age: 70731
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
use.fontawesome.com/3fa6ba2462.css
200 OK 34 kB URL GET HTTP/3 use.fontawesome.com/3fa6ba2462.css
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectuse.fontawesome.com
FingerprintC8:38:F5:E2:7C:CE:53:71:EB:92:1D:71:F5:78:FE:7C:C4:4D:65:BC
ValiditySat, 06 May 2023 03:15:52 GMT - Fri, 04 Aug 2023 03:15:51 GMT
Hash 366389759ac4b0c0361542c35e6f2cad
b13ec80160a49c6f5eba73522ef3dfd7e702ef8f
c67215cb72fca6e1912e29e0f2384c9899857d3c452f095588c1bdf937baf789
GET /3fa6ba2462.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 06 Jun 2023 14:21:58 GMT
content-type: text/css
x-amz-id-2: cG/Oe8FTn9L4mj74lPiZSfgH7K4RYRRr99NrzlkgDtLsCmwm5XrPzSBgeSDrLQI8vR1u64We4EH92Euc7rwBaUckuOw7DFS21r3rpyob8KA=
x-amz-request-id: 1MBMGB7DZKKYQN89
last-modified: Wed, 30 Jun 2021 18:35:04 GMT
etag: W/"366389759ac4b0c0361542c35e6f2cad"
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W3N6g3Q3XSZSnxSUlpdQu65HyR8xVX9028n4sT1tjB6KiIVKysdhJGUcRRFRkxMjz%2Fb%2F57YoWYMIzdRZrU4ZsRnVCTDcUPFcFq8VMZUc3ed6wQbye4d%2FpJjuzLMzVmw8DKaB5UCs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d314e056fda24e4-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
play.google.com/log?format=json&hasfast=true
131 B URL play.google.com/log?format=json&hasfast=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://translate.google.com/
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1172
Origin: https://translate.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://translate.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Tue, 06 Jun 2023 14:21:59 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+370; expires=Thu, 05-Jun-2025 14:21:59 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Tue, 06 Jun 2023 14:21:59 GMT
X-Firefox-Spdy: h2
hh1iil-web-app.translate.goog/favicon.ico
400 Bad Request 4.7 kB URL GET HTTP/3 hh1iil-web-app.translate.goog/favicon.ico
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (24233), with no line terminators
Hash 1caf4a35d77608eb55a7fc58cb1b9498
a8cda76492af35110a197e060d21e6e26a03f5a0
2b76d5e3e7d82bd69646bbb177cb1e275cfda334e9825b787d9a68928d8e3d92
GET /favicon.ico HTTP/1.1
Host: hh1iil-web-app.translate.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Jun 2023 14:21:58 GMT
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
hh1iil.web.app/images/bg_v3.png
9.6 kB URL GET hh1iil.web.app/images/bg_v3.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type PNG image data, 300 x 860, 8-bit colormap, non-interlaced\012- data
Hash 4193590606fb8aabf4db068a4e80470a
4887200aed6e0db012d38e037afc2de221f77bcb
dd8b4abb72cdfaa00427d235cfa1a0efe27f528db7b61669d7328404d49cb623
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/bg_v3.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil.web.app/js.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 9640
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "108ce5e794232879c9364dc8f3acaa03f428b98a1ebbb62769bd8a71dc0af247-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:59 GMT
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061320.622185,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
hh1iil.web.app/img/favicon.ico
56 kB URL GET hh1iil.web.app/img/favicon.ico
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (60016), with CRLF line terminators
Hash af93f378a525e87c0d8d41e47881c312
4b704fc82c70466204c940ee11e1ad0763c0d2ec
c920755e8d6c39a7b30a08cef053d2482fc2e3b22ab99696fd7e57bd6a8dec13
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /img/favicon.ico HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 55880
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "d61d715e843adb551cb72f4c94d7bbea00f1e890779f249bb25a02873168c126-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:59 GMT
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061320.697619,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
ocsp.pki.goog/gts1c3
471 B IP
Hash e658f45faae0edd26f5908c922167f73
33e4e65ccf9cb9b15a7a9f5fd0083f1cebfa7064
5cc8bb25c78320b6cafdc4a6a017081a2c953cb86e1a1dc45c8f8811798adbc5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 14:21:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
200 OK 78 kB URL GET HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint49:14:F2:7A:2C:AE:36:01:38:B7:F7:3D:DB:44:3E:3F:5C:FB:6B:15
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 78168, version 331.-31196\012- data
Hash a9fd1225fb2cd32320e2b931dca01089
44ec5c6a868b4ce62350d9f040ed8e18f7a1d128
c5dd43f53f3af822cbf17b1fb75f46192cdbd51724f277acf6cf0dacb3fd57e7
GET /releases/v5.15.4/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hh1iil-web-app.translate.goog
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Jun 2023 14:21:59 GMT
content-type: font/woff2
content-length: 78168
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:58:24 GMT
etag: "a9fd1225fb2cd32320e2b931dca01089"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 a6a1a17bbe377bf7c4423397c71959da.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: xoaRcSRDVakKkVa-OAt-QB_ih3kM7rqJm0-6XIJ6Qq11KsJFDuug6A==
age: 38258
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J5ngnP1xw8sSOUEMonQt5bgB9HhB2RYlCazgwYCqcx0lsYgQ4M%2FhCGteueVM%2BEkoquAatp9uXKVznZZB%2B6BPTXp%2BiBm9aUjZ01zCDrxnIQ5fN%2Fx6jbA2mxj2VsT2KM14B8GymHcHgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d314e105f57419d-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ZVPgEtntkjc.O/d=1/exm=el_conf/ed=1/rs=AN8SPfpzw53Xp0rOcSbn5ESv2H1EPH7fXg/m=el_main
200 OK 78 kB URL GET HTTP/2 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ZVPgEtntkjc.O/d=1/exm=el_conf/ed=1/rs=AN8SPfpzw53Xp0rOcSbn5ESv2H1EPH7fXg/m=el_main
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (1734)
Hash 66e1e8babd7e11e70eb1b55c6b1f8797
1dbd41fee441a6f5b0a3878228951eeca1af8e55
db0041c31fbbec6fdc6cc8fa2a829ea66efede78fff5d1be0272c1db9362b7b3
GET /_/translate_http/_/js/k=translate_http.tr.no.ZVPgEtntkjc.O/d=1/exm=el_conf/ed=1/rs=AN8SPfpzw53Xp0rOcSbn5ESv2H1EPH7fXg/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 77484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Jun 2023 17:17:27 GMT
expires: Tue, 04 Jun 2024 17:17:27 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 03 Jun 2023 11:22:22 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 75872
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash e658f45faae0edd26f5908c922167f73
33e4e65ccf9cb9b15a7a9f5fd0083f1cebfa7064
5cc8bb25c78320b6cafdc4a6a017081a2c953cb86e1a1dc45c8f8811798adbc5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 14:21:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash f92399559e74f6a631ba6fe9986f6e21
99d11e3a579dccb7be7ded16649293ccf1767ae1
a672379c41ff33db9389a16853e4ada69f40e307119b49de18f672ff2df79fb9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 14:21:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
logo.clearbit.com/mossadams.com
200 OK 7.7 kB URL GET HTTP/2 logo.clearbit.com/mossadams.com
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerAmazon
Subjectclearbit.com
Fingerprint31:EB:6C:93:D2:64:5D:C7:18:D5:50:63:59:4E:0E:0D:87:08:36:3D
ValidityTue, 21 Feb 2023 00:00:00 GMT - Thu, 21 Mar 2024 23:59:59 GMT
File type PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced\012- data
Hash 9a7e739f26f438768e9c60d60a4da30c
15f8fae74c9921200b8b637c9364b4720e419903
6638bf56ff73a6f9a6d87db382e7228940a5f8be0296d5dad305c5ac4121d113
GET /mossadams.com HTTP/1.1
Host: logo.clearbit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hh1iil-web-app.translate.goog/
Origin: https://hh1iil-web-app.translate.goog
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
cache-control: public, max-age=2592000
date: Tue, 23 May 2023 09:56:20 GMT
x-envoy-response-flags: -
server: envoy
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xhYRfSEfbBBtqC4i1YrVGsNlYrKlSjwqye-rfRBXws2NhdpWmX7EfA==
age: 1225539
X-Firefox-Spdy: h2
translate.google.com/gen204?nca=te_li&client=wt_lib&logld=vTE_20230604
204 No Content 0 B URL GET HTTP/3 translate.google.com/gen204?nca=te_li&client=wt_lib&logld=vTE_20230604
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gen204?nca=te_li&client=wt_lib&logld=vTE_20230604 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: image/gif; charset=us-ascii
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Jun 2023 14:21:59 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: same-origin
content-security-policy: script-src 'nonce-QbObhSrsdeX7zXHKdFIowQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: __Secure-ENID=12.SE=ZRPK0SXfFq2MfUBJYDbqw3ycbySBH95oN6Ht3ER4ntHSU0TQjNkTzSuWrUKBL77kSW4nCurW4mrj7S8kW79ndEtEXXi12FWv1B-xdXaaCON3LtogWA0c7SUeDVhT9SHLYuPlEdGKE1plZxQaqqkbgU9MmFMsJiqLup0466nOCNg; expires=Sat, 06-Jul-2024 06:40:17 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
200 OK 3.3 kB URL GET HTTP/3 fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6225), with no line terminators
Hash 2bd5c073a88b83ed74db88282a56ddfb
d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650
ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09
GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Jun 2023 08:05:11 GMT
expires: Sun, 02 Jun 2024 08:05:11 GMT
cache-control: public, max-age=31536000
age: 281808
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://mossadams.com&size=64
990 B URL t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://mossadams.com&size=64
IP
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 645a02c6e443ab7833e8025db7c92066
77a257397aaa05dadc3dacb26f95aaec48bef786
c1d1a9b3472e3779f1cbb399d5dcae76dad56277544e2f357ae12c438d4fb365
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://mossadams.com&size=64 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hh1iil-web-app.translate.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-location: https://www.mossadams.com/mossadams/favicons/apple-touch-icon.png?v=zXvdJaWW6G
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 990
date: Tue, 06 Jun 2023 14:22:00 GMT
expires: Tue, 13 Jun 2023 14:22:00 GMT
cache-control: public, max-age=604800
last-modified: Sun, 30 Aug 2020 16:30:06 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
translate.googleapis.com/translate_a/t?anno=3&client=wt_lib&format=html&v=1.0&key&logld=vTE_20230604&sl=QOOMOEVZ&tl=DLbcFcQK&tc=0&tk=819018.743988
200 OK 772 B URL POST HTTP/3 translate.googleapis.com/translate_a/t?anno=3&client=wt_lib&format=html&v=1.0&key&logld=vTE_20230604&sl=QOOMOEVZ&tl=DLbcFcQK&tc=0&tk=819018.743988
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1474), with no line terminators
Hash 6b06525801a14ca1a381454e38957946
3c23025891120f2ba357f103ddff2ed2ec795a38
11926cb3c78473115e6481415fb7a52f1c8ab5f4f0723693efef4d04497d3566
POST /translate_a/t?anno=3&client=wt_lib&format=html&v=1.0&key&logld=vTE_20230604&sl=QOOMOEVZ&tl=DLbcFcQK&tc=0&tk=819018.743988 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 3137
Origin: https://hh1iil-web-app.translate.goog
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Jun 2023 14:22:00 GMT
content-disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
content-security-policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-vfCsIU1UZDKkmJqHf7IEnQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.mossadams.com/
301 Moved Permanently 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoDaddy.com, Inc.
Subjectmossadams.com
Fingerprint5C:4C:40:F0:49:D5:CF:4A:19:8C:12:A9:A9:F8:D6:E0:F7:AE:CE:DA
ValidityMon, 13 Feb 2023 16:40:57 GMT - Thu, 07 Mar 2024 01:24:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: www.mossadams.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hh1iil-web-app.translate.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Length: 122
Content-Type: text/html; charset=utf-8
Date: Tue, 06 Jun 2023 14:22:00 GMT
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: Request-Context
Cache-Control: no-cache
Expires: -1
Location: /home
Pragma: no-cache
Set-Cookie: CMSPreferredCulture=en-US; expires=Thu, 06-Jun-2024 14:22:00 GMT; path=/; HttpOnly
ARRAffinity=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8;Path=/;HttpOnly;Secure;Domain=www.mossadams.com
ARRAffinitySameSite=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.mossadams.com
X-Frame-Options: SAMEORIGIN
Request-Context: appId=cid-v1:e18830c3-7ccc-45f4-827c-976e1ceeca31
X-Powered-By: ASP.NET
translate.googleapis.com/translate_a/t?anno=3&client=wt_lib&format=html&v=1.0&key&logld=vTE_20230604&sl=QOOMOEVZ&tl=DLbcFcQK&tc=0&tk=819018.743988
200 OK 772 B URL POST HTTP/3 translate.googleapis.com/translate_a/t?anno=3&client=wt_lib&format=html&v=1.0&key&logld=vTE_20230604&sl=QOOMOEVZ&tl=DLbcFcQK&tc=0&tk=819018.743988
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1474), with no line terminators
Hash 6b06525801a14ca1a381454e38957946
3c23025891120f2ba357f103ddff2ed2ec795a38
11926cb3c78473115e6481415fb7a52f1c8ab5f4f0723693efef4d04497d3566
POST /translate_a/t?anno=3&client=wt_lib&format=html&v=1.0&key&logld=vTE_20230604&sl=QOOMOEVZ&tl=DLbcFcQK&tc=0&tk=819018.743988 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 3137
Origin: https://hh1iil-web-app.translate.goog
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Jun 2023 14:22:00 GMT
content-disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt
content-security-policy: script-src 'nonce-Jxu0m-T18VVQeMgba3TgHQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.mossadams.com/
301 Moved Permanently 122 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoDaddy.com, Inc.
Subjectmossadams.com
Fingerprint5C:4C:40:F0:49:D5:CF:4A:19:8C:12:A9:A9:F8:D6:E0:F7:AE:CE:DA
ValidityMon, 13 Feb 2023 16:40:57 GMT - Thu, 07 Mar 2024 01:24:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3f80b80320ecf96b8ef0f953ac22b40f
27168c29173cdd096da634399070559ef3bcc1a9
b057003b71cba586e39d5a024a9d2f7e93a4645d9676dca014fbe871b2574bd5
GET / HTTP/1.1
Host: www.mossadams.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Length: 122
Content-Type: text/html; charset=utf-8
Date: Tue, 06 Jun 2023 14:22:02 GMT
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: Request-Context
Cache-Control: no-cache
Expires: -1
Location: /home
Pragma: no-cache
Set-Cookie: CMSPreferredCulture=en-US; expires=Thu, 06-Jun-2024 14:22:02 GMT; path=/; HttpOnly
ARRAffinity=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8;Path=/;HttpOnly;Secure;Domain=www.mossadams.com
ARRAffinitySameSite=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.mossadams.com
X-Frame-Options: SAMEORIGIN
Request-Context: appId=cid-v1:e18830c3-7ccc-45f4-827c-976e1ceeca31
X-Powered-By: ASP.NET
www.mossadams.com/
301 Moved Permanently 122 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoDaddy.com, Inc.
Subjectmossadams.com
Fingerprint5C:4C:40:F0:49:D5:CF:4A:19:8C:12:A9:A9:F8:D6:E0:F7:AE:CE:DA
ValidityMon, 13 Feb 2023 16:40:57 GMT - Thu, 07 Mar 2024 01:24:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3f80b80320ecf96b8ef0f953ac22b40f
27168c29173cdd096da634399070559ef3bcc1a9
b057003b71cba586e39d5a024a9d2f7e93a4645d9676dca014fbe871b2574bd5
GET / HTTP/1.1
Host: www.mossadams.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Length: 122
Content-Type: text/html; charset=utf-8
Date: Tue, 06 Jun 2023 14:22:02 GMT
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: Request-Context
Cache-Control: no-cache
Expires: -1
Location: /home
Pragma: no-cache
Set-Cookie: CMSPreferredCulture=en-US; expires=Thu, 06-Jun-2024 14:22:02 GMT; path=/; HttpOnly
ARRAffinity=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8;Path=/;HttpOnly;Secure;Domain=www.mossadams.com
ARRAffinitySameSite=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.mossadams.com
X-Frame-Options: SAMEORIGIN
Request-Context: appId=cid-v1:e18830c3-7ccc-45f4-827c-976e1ceeca31
X-Powered-By: ASP.NET
www.mossadams.com/
301 Moved Permanently 122 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoDaddy.com, Inc.
Subjectmossadams.com
Fingerprint5C:4C:40:F0:49:D5:CF:4A:19:8C:12:A9:A9:F8:D6:E0:F7:AE:CE:DA
ValidityMon, 13 Feb 2023 16:40:57 GMT - Thu, 07 Mar 2024 01:24:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3f80b80320ecf96b8ef0f953ac22b40f
27168c29173cdd096da634399070559ef3bcc1a9
b057003b71cba586e39d5a024a9d2f7e93a4645d9676dca014fbe871b2574bd5
GET / HTTP/1.1
Host: www.mossadams.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Length: 122
Content-Type: text/html; charset=utf-8
Date: Tue, 06 Jun 2023 14:22:02 GMT
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: Request-Context
Cache-Control: no-cache
Expires: -1
Location: /home
Pragma: no-cache
Set-Cookie: CMSPreferredCulture=en-US; expires=Thu, 06-Jun-2024 14:22:02 GMT; path=/; HttpOnly
ARRAffinity=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8;Path=/;HttpOnly;Secure;Domain=www.mossadams.com
ARRAffinitySameSite=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.mossadams.com
X-Frame-Options: SAMEORIGIN
Request-Context: appId=cid-v1:e18830c3-7ccc-45f4-827c-976e1ceeca31
X-Powered-By: ASP.NET
www.mossadams.com/
301 Moved Permanently 122 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoDaddy.com, Inc.
Subjectmossadams.com
Fingerprint5C:4C:40:F0:49:D5:CF:4A:19:8C:12:A9:A9:F8:D6:E0:F7:AE:CE:DA
ValidityMon, 13 Feb 2023 16:40:57 GMT - Thu, 07 Mar 2024 01:24:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3f80b80320ecf96b8ef0f953ac22b40f
27168c29173cdd096da634399070559ef3bcc1a9
b057003b71cba586e39d5a024a9d2f7e93a4645d9676dca014fbe871b2574bd5
GET / HTTP/1.1
Host: www.mossadams.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Length: 122
Content-Type: text/html; charset=utf-8
Date: Tue, 06 Jun 2023 14:22:02 GMT
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: Request-Context
Cache-Control: no-cache
Expires: -1
Location: /home
Pragma: no-cache
Set-Cookie: CMSPreferredCulture=en-US; expires=Thu, 06-Jun-2024 14:22:02 GMT; path=/; HttpOnly
ARRAffinity=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8;Path=/;HttpOnly;Secure;Domain=www.mossadams.com
ARRAffinitySameSite=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.mossadams.com
X-Frame-Options: SAMEORIGIN
Request-Context: appId=cid-v1:e18830c3-7ccc-45f4-827c-976e1ceeca31
X-Powered-By: ASP.NET
www.mossadams.com/
301 Moved Permanently 122 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoDaddy.com, Inc.
Subjectmossadams.com
Fingerprint5C:4C:40:F0:49:D5:CF:4A:19:8C:12:A9:A9:F8:D6:E0:F7:AE:CE:DA
ValidityMon, 13 Feb 2023 16:40:57 GMT - Thu, 07 Mar 2024 01:24:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3f80b80320ecf96b8ef0f953ac22b40f
27168c29173cdd096da634399070559ef3bcc1a9
b057003b71cba586e39d5a024a9d2f7e93a4645d9676dca014fbe871b2574bd5
GET / HTTP/1.1
Host: www.mossadams.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Length: 122
Content-Type: text/html; charset=utf-8
Date: Tue, 06 Jun 2023 14:22:02 GMT
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: Request-Context
Cache-Control: no-cache
Expires: -1
Location: /home
Pragma: no-cache
Set-Cookie: CMSPreferredCulture=en-US; expires=Thu, 06-Jun-2024 14:22:02 GMT; path=/; HttpOnly
ARRAffinity=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8;Path=/;HttpOnly;Secure;Domain=www.mossadams.com
ARRAffinitySameSite=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.mossadams.com
X-Frame-Options: SAMEORIGIN
Request-Context: appId=cid-v1:e18830c3-7ccc-45f4-827c-976e1ceeca31
X-Powered-By: ASP.NET
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
0 B URL translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-encoding,content-type,x-goog-authuser
Referer: https://hh1iil-web-app.translate.goog/
Origin: https://hh1iil-web-app.translate.goog
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://hh1iil-web-app.translate.goog
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin
content-type: text/plain; charset=UTF-8
date: Tue, 06 Jun 2023 14:22:09 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+276; expires=Thu, 05-Jun-2025 14:22:09 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Tue, 06 Jun 2023 14:22:09 GMT
cache-control: private
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
131 B URL translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Encoding: gzip
Content-Type: application/binary
Content-Length: 275
Origin: https://hh1iil-web-app.translate.goog
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://hh1iil-web-app.translate.goog
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Tue, 06 Jun 2023 14:22:09 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+565; expires=Thu, 05-Jun-2025 14:22:09 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Tue, 06 Jun 2023 14:22:09 GMT
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://mossadams.com&size=64
200 OK 990 B URL GET HTTP/2 t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://mossadams.com&size=64
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 645a02c6e443ab7833e8025db7c92066
77a257397aaa05dadc3dacb26f95aaec48bef786
c1d1a9b3472e3779f1cbb399d5dcae76dad56277544e2f357ae12c438d4fb365
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://mossadams.com&size=64 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hh1iil-web-app.translate.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-location: https://www.mossadams.com/mossadams/favicons/apple-touch-icon.png?v=zXvdJaWW6G
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 990
date: Tue, 06 Jun 2023 14:22:00 GMT
expires: Tue, 13 Jun 2023 14:22:00 GMT
cache-control: public, max-age=604800
last-modified: Sun, 30 Aug 2020 16:30:06 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.mossadams.com/home
200 OK 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoDaddy.com, Inc.
Subjectmossadams.com
Fingerprint5C:4C:40:F0:49:D5:CF:4A:19:8C:12:A9:A9:F8:D6:E0:F7:AE:CE:DA
ValidityMon, 13 Feb 2023 16:40:57 GMT - Thu, 07 Mar 2024 01:24:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /home HTTP/1.1
Host: www.mossadams.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hh1iil-web-app.translate.goog/
DNT: 1
Connection: keep-alive
Cookie: ARRAffinitySameSite=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 34554
Content-Type: text/html; charset=utf-8
Date: Tue, 06 Jun 2023 14:22:02 GMT
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: Request-Context
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Expires: -1
Pragma: no-cache
Set-Cookie: CMSPreferredCulture=en-US; expires=Thu, 06-Jun-2024 14:22:02 GMT; path=/; HttpOnly
CMSCsrfCookie=FJre2injjPuRNPWtfORqkSfaRgsvP6fjNsPaEOQi; path=/; HttpOnly
ASP.NET_SessionId=x2jg013wyo5bmsoiukltzr1f; path=/; HttpOnly; SameSite=Lax
VisitorStatus=11063694302; expires=Sat, 06-Jun-2043 14:22:02 GMT; path=/; HttpOnly
UrlReferrer=https://hh1iil-web-app.translate.goog/; expires=Wed, 07-Jun-2023 14:22:02 GMT; path=/; HttpOnly
CMSUserPage={"TimeStamp":"2023-06-06T14:22:02.6591714+00:00","LastPageDocumentID":3894,"LastPageNodeID":4334,"Identifier":"2ced437e-1b8d-4c4d-9cf8-6f4ebfced254"}; expires=Tue, 06-Jun-2023 14:42:02 GMT; path=/; HttpOnly
PersonalizedIndustry=Industry=; expires=Wed, 07-Jun-2023 14:22:02 GMT; path=/; HttpOnly
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=edge
X-AspNet-Version: 4.0.30319
Request-Context: appId=cid-v1:e18830c3-7ccc-45f4-827c-976e1ceeca31
X-Powered-By: ASP.NET
use.fontawesome.com/3fa6ba2462.js
200 OK 9.5 kB URL GET HTTP/2 use.fontawesome.com/3fa6ba2462.js
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectuse.fontawesome.com
FingerprintC8:38:F5:E2:7C:CE:53:71:EB:92:1D:71:F5:78:FE:7C:C4:4D:65:BC
ValiditySat, 06 May 2023 03:15:52 GMT - Fri, 04 Aug 2023 03:15:51 GMT
File type Unicode text, UTF-8 text, with very long lines (9731), with no line terminators
Hash 2e68c502f1109090f57f3b813de69194
c2c2e7198d23dff69dd34e1e5b3ef4f3aee6d160
b3be0e7544aa8801f5d3d0384fe7b422393ee2a1ca170872ea29b76d9f6a2eda
GET /3fa6ba2462.js HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 14:21:55 GMT
content-type: text/javascript
x-amz-id-2: NqCQ1TraUJ5Xb0KBQGsvuoyEfTAkTJ71wCqXgT9XeBFbQqTuxO7IikUlC+d1JZ8EDjo+4sBDsRs=
x-amz-request-id: SCP4ZXDN8MP98SR2
last-modified: Wed, 30 Jun 2021 18:35:04 GMT
etag: W/"bdfa9d3207034749e3bfc269c11d9a97"
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B3qwuP3Wa01SRtn7eFB7F7GU5amD4uc%2FoGt4AiMV4yg5IA3Q8BEb0y99yafNhW1vq7AbfLVXyA%2BJZsXcOpIyn%2Bvb19WOkybvtQm%2FTsMI%2BuYtToDpDtVq9BHHMAhdktniYIl6UXsE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d314df5494a24f2-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
translate.google.com/gen204?sl=QOOMOEVZ&tl=DLbcFcQK&textlen=147&ttt=801&ttl=393&sr=1&nca=te_time&client=wt_lib&logld=vTE_20230604
204 No Content 0 B URL GET HTTP/3 translate.google.com/gen204?sl=QOOMOEVZ&tl=DLbcFcQK&textlen=147&ttt=801&ttl=393&sr=1&nca=te_time&client=wt_lib&logld=vTE_20230604
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gen204?sl=QOOMOEVZ&tl=DLbcFcQK&textlen=147&ttt=801&ttl=393&sr=1&nca=te_time&client=wt_lib&logld=vTE_20230604 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: image/gif; charset=us-ascii
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Jun 2023 14:22:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-RxFFXnskNIWOl6Mfp5OocA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: same-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: __Secure-ENID=12.SE=goD1usRqhWyF9zCtHgwabZnewBKv9-fxI258I_oZ2OX7DvAdp4k4gH4RoyoKBVlTuxoCuVA0av6TzJ7xxzrzr-k93CJ-Tjqam26-Jz8g1otiGH_9biimuVqHauKEKd7NOiYl4xpeyqq6UHCRi7QuchqKLbdu72EuNcwxsityttM; expires=Sat, 06-Jul-2024 06:40:18 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
hh1iil.web.app/images/barracuda.png
0 B URL GET hh1iil.web.app/images/barracuda.png
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/barracuda.png HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "78e6824de70ecc7ce4aa3fe87476eda41423c305c03623ee1cf0d7ebcd61df31-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.104847,VS0,VE12
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 21958
X-Firefox-Spdy: h2
www.mossadams.com/home
200 OK 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoDaddy.com, Inc.
Subjectmossadams.com
Fingerprint5C:4C:40:F0:49:D5:CF:4A:19:8C:12:A9:A9:F8:D6:E0:F7:AE:CE:DA
ValidityMon, 13 Feb 2023 16:40:57 GMT - Thu, 07 Mar 2024 01:24:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /home HTTP/1.1
Host: www.mossadams.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hh1iil-web-app.translate.goog/
DNT: 1
Connection: keep-alive
Cookie: ARRAffinitySameSite=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 34554
Content-Type: text/html; charset=utf-8
Date: Tue, 06 Jun 2023 14:22:02 GMT
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: Request-Context
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Expires: -1
Pragma: no-cache
Set-Cookie: CMSPreferredCulture=en-US; expires=Thu, 06-Jun-2024 14:22:02 GMT; path=/; HttpOnly
CMSCsrfCookie=eR6bXHbjHobJftTWCrgGhD9XWYRYNpHnrh3Idxkq; path=/; HttpOnly
ASP.NET_SessionId=wven0zx15t102p0cf2kel4d1; path=/; HttpOnly; SameSite=Lax
VisitorStatus=11063694302; expires=Sat, 06-Jun-2043 14:22:02 GMT; path=/; HttpOnly
UrlReferrer=https://hh1iil-web-app.translate.goog/; expires=Wed, 07-Jun-2023 14:22:02 GMT; path=/; HttpOnly
CMSUserPage={"TimeStamp":"2023-06-06T14:22:02.6591714+00:00","LastPageDocumentID":3894,"LastPageNodeID":4334,"Identifier":"b7df7dbe-dfd5-4f4d-b15e-ec56eb1ae9ef"}; expires=Tue, 06-Jun-2023 14:42:02 GMT; path=/; HttpOnly
PersonalizedIndustry=Industry=; expires=Wed, 07-Jun-2023 14:22:02 GMT; path=/; HttpOnly
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=edge
X-AspNet-Version: 4.0.30319
Request-Context: appId=cid-v1:e18830c3-7ccc-45f4-827c-976e1ceeca31
X-Powered-By: ASP.NET
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
200 OK 23 kB URL GET HTTP/3 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (23228), with no line terminators
Hash edf649e1b11a33833272345187bd4eec
73427e2ab282e5f89021e1c7d20f83eaf9830283
553d768412bca504a0c8771705f681dad359370bdcea637298ca5aa486017a06
GET /_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 4205
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 21:45:55 GMT
expires: Fri, 31 May 2024 21:45:55 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 12 Mar 2023 00:11:57 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 405364
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
use.fontawesome.com/releases/v4.7.0/css/font-awesome-css.min.css
200 OK 30 kB URL GET HTTP/3 use.fontawesome.com/releases/v4.7.0/css/font-awesome-css.min.css
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectuse.fontawesome.com
FingerprintC8:38:F5:E2:7C:CE:53:71:EB:92:1D:71:F5:78:FE:7C:C4:4D:65:BC
ValiditySat, 06 May 2023 03:15:52 GMT - Fri, 04 Aug 2023 03:15:51 GMT
File type ASCII text, with very long lines (30343)
Hash 36082410df2ef7f83932219089dc1443
7961402d7d01e19387fe609a38454b0bc8c6cca4
5b9573e1023da775390e9284ec0eb1c606df9b468a28980055b4a6aa804f4350
GET /releases/v4.7.0/css/font-awesome-css.min.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/3fa6ba2462.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 06 Jun 2023 14:21:59 GMT
content-type: text/css
x-amz-id-2: RAkyvhHQr3kZzH2E3IqPxCxX0YBW3mYxGlDbdSB9VOzb/4d+PoJVDJAwN667c0HpakEv7GxZvJM=
x-amz-request-id: 7VHTKHB9QRMTQTM1
last-modified: Wed, 30 Jun 2021 15:26:48 GMT
etag: W/"36082410df2ef7f83932219089dc1443"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 162234
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LW1UhZNwEkq1M2N%2Fu%2BOoIkhaAYwu9XBZ93PUqjb20gB7PQgC4QL0Rd6460UvplpLDVz8FCvMAK4O31ZEqEVBBoe5cDMxTlgY%2F7p%2B4o8g28kR1oHZCiUvmBHTrSoZ3JGYDJi4oQM9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d314e0f286024e4-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.mossadams.com/home
200 OK 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoDaddy.com, Inc.
Subjectmossadams.com
Fingerprint5C:4C:40:F0:49:D5:CF:4A:19:8C:12:A9:A9:F8:D6:E0:F7:AE:CE:DA
ValidityMon, 13 Feb 2023 16:40:57 GMT - Thu, 07 Mar 2024 01:24:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /home HTTP/1.1
Host: www.mossadams.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hh1iil-web-app.translate.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 34554
Content-Type: text/html; charset=utf-8
Date: Tue, 06 Jun 2023 14:22:01 GMT
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: Request-Context
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Expires: -1
Pragma: no-cache
Set-Cookie: CMSPreferredCulture=en-US; expires=Thu, 06-Jun-2024 14:22:01 GMT; path=/; HttpOnly
CMSCsrfCookie=r1KN167Syq1UxtIOHbbVwST0UbCE8i5PTTgdwkd1; path=/; HttpOnly
ASP.NET_SessionId=keioee31dzbugs3rup0f1qk2; path=/; HttpOnly; SameSite=Lax
VisitorStatus=11063694302; expires=Sat, 06-Jun-2043 14:22:01 GMT; path=/; HttpOnly
UrlReferrer=https://hh1iil-web-app.translate.goog/; expires=Wed, 07-Jun-2023 14:22:01 GMT; path=/; HttpOnly
CMSUserPage={"TimeStamp":"2023-06-06T14:22:01.3298334+00:00","LastPageDocumentID":3894,"LastPageNodeID":4334,"Identifier":"1d60cdff-5fbe-4280-be55-77c537f7f912"}; expires=Tue, 06-Jun-2023 14:42:01 GMT; path=/; HttpOnly
PersonalizedIndustry=Industry=; expires=Wed, 07-Jun-2023 14:22:01 GMT; path=/; HttpOnly
ARRAffinity=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8;Path=/;HttpOnly;Secure;Domain=www.mossadams.com
ARRAffinitySameSite=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.mossadams.com
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=edge
X-AspNet-Version: 4.0.30319
Request-Context: appId=cid-v1:e18830c3-7ccc-45f4-827c-976e1ceeca31
X-Powered-By: ASP.NET
www.mossadams.com/home
200 OK 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoDaddy.com, Inc.
Subjectmossadams.com
Fingerprint5C:4C:40:F0:49:D5:CF:4A:19:8C:12:A9:A9:F8:D6:E0:F7:AE:CE:DA
ValidityMon, 13 Feb 2023 16:40:57 GMT - Thu, 07 Mar 2024 01:24:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /home HTTP/1.1
Host: www.mossadams.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hh1iil-web-app.translate.goog/
DNT: 1
Connection: keep-alive
Cookie: ARRAffinitySameSite=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 34552
Content-Type: text/html; charset=utf-8
Date: Tue, 06 Jun 2023 14:22:02 GMT
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: Request-Context
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Expires: -1
Pragma: no-cache
Set-Cookie: CMSPreferredCulture=en-US; expires=Thu, 06-Jun-2024 14:22:02 GMT; path=/; HttpOnly
CMSCsrfCookie=kPvEANULw+SrrGIY6PKHnMRNkglynWKCn0S3g3wr; path=/; HttpOnly
ASP.NET_SessionId=hmr5wryexlsrhmri3xd0pjvc; path=/; HttpOnly; SameSite=Lax
VisitorStatus=11063694302; expires=Sat, 06-Jun-2043 14:22:02 GMT; path=/; HttpOnly
UrlReferrer=https://hh1iil-web-app.translate.goog/; expires=Wed, 07-Jun-2023 14:22:02 GMT; path=/; HttpOnly
CMSUserPage={"TimeStamp":"2023-06-06T14:22:02.6748016+00:00","LastPageDocumentID":3894,"LastPageNodeID":4334,"Identifier":"49f77e4e-09b5-41ca-8517-a2f069822e0a"}; expires=Tue, 06-Jun-2023 14:42:02 GMT; path=/; HttpOnly
PersonalizedIndustry=Industry=; expires=Wed, 07-Jun-2023 14:22:02 GMT; path=/; HttpOnly
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=edge
X-AspNet-Version: 4.0.30319
Request-Context: appId=cid-v1:e18830c3-7ccc-45f4-827c-976e1ceeca31
X-Powered-By: ASP.NET
hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK
200 OK 401 kB URL User Request GET HTTP/2 hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintAC:83:32:AA:E9:4D:2F:A2:F2:C9:F0:F3:7B:98:49:1B:5B:DE:7E:44
ValidityFri, 19 May 2023 12:57:31 GMT - Fri, 11 Aug 2023 12:57:30 GMT
Size 401 kB (400722 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK HTTP/1.1
Host: hh1iil-web-app.translate.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p1ai.translate.xn--c1ac4bxc.xn--p1ai/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
x-robots-tag: none
content-security-policy: frame-ancestors *.translate.goog
content-type: text/html; charset=utf-8
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
content-encoding: gzip
date: Tue, 06 Jun 2023 14:21:54 GMT
server: ESF
cache-control: private
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+572; expires=Thu, 05-Jun-2025 14:21:54 GMT; path=/; domain=.translate.goog; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Tue, 06 Jun 2023 14:21:54 GMT
X-Firefox-Spdy: h2
www.mossadams.com/home
200 OK 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoDaddy.com, Inc.
Subjectmossadams.com
Fingerprint5C:4C:40:F0:49:D5:CF:4A:19:8C:12:A9:A9:F8:D6:E0:F7:AE:CE:DA
ValidityMon, 13 Feb 2023 16:40:57 GMT - Thu, 07 Mar 2024 01:24:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /home HTTP/1.1
Host: www.mossadams.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hh1iil-web-app.translate.goog/
DNT: 1
Connection: keep-alive
Cookie: ARRAffinitySameSite=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 34553
Content-Type: text/html; charset=utf-8
Date: Tue, 06 Jun 2023 14:22:02 GMT
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: Request-Context
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Expires: -1
Pragma: no-cache
Set-Cookie: CMSPreferredCulture=en-US; expires=Thu, 06-Jun-2024 14:22:02 GMT; path=/; HttpOnly
CMSCsrfCookie=Ad/AH2ze55SSJ1I7YPz6Ve4aGu8xZjeWJgCZzrck; path=/; HttpOnly
ASP.NET_SessionId=so311j02wakladb1lsshj02a; path=/; HttpOnly; SameSite=Lax
VisitorStatus=11063694302; expires=Sat, 06-Jun-2043 14:22:02 GMT; path=/; HttpOnly
UrlReferrer=https://hh1iil-web-app.translate.goog/; expires=Wed, 07-Jun-2023 14:22:02 GMT; path=/; HttpOnly
CMSUserPage={"TimeStamp":"2023-06-06T14:22:02.6591714+00:00","LastPageDocumentID":3894,"LastPageNodeID":4334,"Identifier":"9c0e9450-bb8b-43e1-98c7-48e539d4ae75"}; expires=Tue, 06-Jun-2023 14:42:02 GMT; path=/; HttpOnly
PersonalizedIndustry=Industry=; expires=Wed, 07-Jun-2023 14:22:02 GMT; path=/; HttpOnly
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=edge
X-AspNet-Version: 4.0.30319
Request-Context: appId=cid-v1:e18830c3-7ccc-45f4-827c-976e1ceeca31
X-Powered-By: ASP.NET
translate.google.com/translate_a/element.js?cb=gtElInit&hl&client=wt
200 OK 80 kB URL GET HTTP/2 translate.google.com/translate_a/element.js?cb=gtElInit&hl&client=wt
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type ASCII text, with very long lines (2586)
Hash 61a4494ad7c617b34ee9e61b5f97d00f
81b42380fafa83c076b198afe11b95c8741cc7b0
25c6a7e95b6d1ecbb095d248a6a2698c97d0e89bc315d6e566454c7af7bfed15
GET /translate_a/element.js?cb=gtElInit&hl&client=wt HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Jun 2023 14:21:57 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+227; expires=Thu, 05-Jun-2025 14:21:57 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
200 OK 98 kB URL GET HTTP/3 www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (2323)
Hash f11683619060562ac167884ad81a8042
a1ccb30a0dc72de01bebf6823996b56e172c1b90
47320728cc0affc16116768c6663a7fdfd68e0af8746a77b902bdca14d96909a
GET /feedback/js/help/prod/service/lazy.min.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/product-feedback-gathering
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="product-feedback-gathering"
report-to: {"group":"product-feedback-gathering","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/product-feedback-gathering"}]}
content-length: 34064
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Jun 2023 13:51:59 GMT
expires: Tue, 06 Jun 2023 14:41:59 GMT
cache-control: public, max-age=3000
last-modified: Thu, 01 Jun 2023 18:20:18 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 1799
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/s2/favicons?sz=64&domain_url=mossadams.com
301 Moved Permanently 990 B URL GET HTTP/2 www.google.com/s2/favicons?sz=64&domain_url=mossadams.com
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintA8:95:C3:CB:D6:3F:BC:0A:7D:FF:36:72:5E:2F:56:26:9F:EB:77:0E
ValidityFri, 19 May 2023 12:58:13 GMT - Fri, 11 Aug 2023 12:58:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s2/favicons?sz=64&domain_url=mossadams.com HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://mossadams.com&size=64
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 06 Jun 2023 14:21:59 GMT
expires: Tue, 06 Jun 2023 14:51:59 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 333
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hh1iil.web.app/images/webmail-logo.svg
200 OK 5.4 kB URL GET HTTP/2 hh1iil.web.app/images/webmail-logo.svg
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5399), with no line terminators
Hash cee06fa7dfef6504f3065215314f3cf4
3c58459e2db34fa9b09c1b334e44355cd311ce0c
4c1e8e4c6c479613376a92c819249dc3f1845846e4c44171ae00a12f856cc48c
Analyzer Verdict Alert phishtank Other
quad9 Sinkholed
GET /images/webmail-logo.svg HTTP/1.1
Host: hh1iil.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: "42dcf5b70e5baa7d04395a36651eb6c3371cd7791c16969d535407d76c7acef6-br"
last-modified: Wed, 05 Apr 2023 11:04:59 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 06 Jun 2023 14:21:55 GMT
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1686061315.189587,VS0,VE4
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2112
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
200 OK 27 kB URL GET HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint49:14:F2:7A:2C:AE:36:01:38:B7:F7:3D:DB:44:3E:3F:5C:FB:6B:15
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (26500)
Hash 76f34b71fc9fb641507ff6a822cc07f5
73ed2f8f21cd40fb496e61306acbb5849d4dbff4
6dea47458a4cd7cd7312cc780a53c62e0c8b3ccc8d0b13c1ac0ea6e3dfcecea8
GET /releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hh1iil-web-app.translate.goog/
Origin: https://hh1iil-web-app.translate.goog
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 14:21:57 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 7309328e91f012108061822748228b68.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: SpKD0YZxMHVzZrCGxp4vZltjoBURnUwa-n3tAsJYxwzgsf5uYziy0A==
age: 174254
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zm%2B7wWtD7vb8mj0f%2F%2BLB1T%2B8eyTH%2BkEaktlmbAp04Q4v0V%2BQiVYYwlQMs%2Bv%2BjvaBl53%2FbSJ2eQMPFdOoARR7uNCGihWTwpW1HVSvi08DCQObLvLHLkSIRusbFfbCKuEI2SVjjagONg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d314e026a45419d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js
200 OK 37 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (32033)
Hash 5869c96cc8f19086aee625d670d741f9
430a443d74830fe9be26efca431f448c1b3740f9
53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef
GET /bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hh1iil-web-app.translate.goog
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 14:21:55 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"5869c96cc8f19086aee625d670d741f9"
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 11/15/2022 10:30:01
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1053
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 654367db159aefda2e3ff8c68c8d89b2
cdn-cache: HIT
cf-cache-status: HIT
age: 9611
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7d314df43bbd0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
kit.fontawesome.com/585b051251.js
200 OK 12 kB URL GET HTTP/2 kit.fontawesome.com/585b051251.js
IP
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E
ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (11213)
Hash 4ec685b1e2c1ca5fd6d56e2f4cb0569d
a41e1f45db2fbc59562390ba8567ec3373d69510
cac5a0bd86eba50bf4a83d4dc43fe38b759ed39cc8397fdbbaa7ea68b9c63cfa
GET /585b051251.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hh1iil-web-app.translate.goog
DNT: 1
Connection: keep-alive
Referer: https://hh1iil-web-app.translate.goog/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 14:21:55 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F2WVuqPMTINui7cLKP-C
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 7d314df2efc5b524-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.mossadams.com/home
200 OK 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hh1iil-web-app.translate.goog/host:-webmail.mossadams.com:4628?+&_x_tr_sl=QOOMOEVZ&_x_tr_tl=DLbcFcQK#bWFyay53ZWJlckBtb3NzYWRhbXMuY29t:cHJvb2Zwb2ludHxUbTl5ZDJGNU9rNVA=
Certificate IssuerGoDaddy.com, Inc.
Subjectmossadams.com
Fingerprint5C:4C:40:F0:49:D5:CF:4A:19:8C:12:A9:A9:F8:D6:E0:F7:AE:CE:DA
ValidityMon, 13 Feb 2023 16:40:57 GMT - Thu, 07 Mar 2024 01:24:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /home HTTP/1.1
Host: www.mossadams.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hh1iil-web-app.translate.goog/
DNT: 1
Connection: keep-alive
Cookie: ARRAffinitySameSite=b4776fafc40ea6d6aa8dcdee7fb487fd074760c20dd66b91540d1a37e1b2fad8
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 34554
Content-Type: text/html; charset=utf-8
Date: Tue, 06 Jun 2023 14:22:02 GMT
Server: Microsoft-IIS/10.0
Access-Control-Expose-Headers: Request-Context
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Expires: -1
Pragma: no-cache
Set-Cookie: CMSPreferredCulture=en-US; expires=Thu, 06-Jun-2024 14:22:02 GMT; path=/; HttpOnly
CMSCsrfCookie=TU28JaaMQDBJ475+1fhDTXgB2oxeM2eNv5PQKO8U; path=/; HttpOnly
ASP.NET_SessionId=02fjccavqenegzvl1svypyd4; path=/; HttpOnly; SameSite=Lax
VisitorStatus=11063694302; expires=Sat, 06-Jun-2043 14:22:02 GMT; path=/; HttpOnly
UrlReferrer=https://hh1iil-web-app.translate.goog/; expires=Wed, 07-Jun-2023 14:22:02 GMT; path=/; HttpOnly
CMSUserPage={"TimeStamp":"2023-06-06T14:22:02.6279194+00:00","LastPageDocumentID":3894,"LastPageNodeID":4334,"Identifier":"8d002bec-4395-4fce-8b67-73783bd444f0"}; expires=Tue, 06-Jun-2023 14:42:02 GMT; path=/; HttpOnly
PersonalizedIndustry=Industry=; expires=Wed, 07-Jun-2023 14:22:02 GMT; path=/; HttpOnly
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=edge
X-AspNet-Version: 4.0.30319
Request-Context: appId=cid-v1:e18830c3-7ccc-45f4-827c-976e1ceeca31
X-Powered-By: ASP.NET
142.250.74.33
104.18.11.207
0.0.0.0