Report - batterystore.bluehorse.in/

Report Overview

Submitted URL
batterystore.bluehorse.in/
IP
162.241.194.56
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2022-11-15 00:11:18
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-10T05:10:04Z	3.2 kB	61 kB	34.120.237.76
code.ionicframework.com	14473	2014-02-05T18:09:16Z	2023-03-10T13:26:25Z	417 B	1.1 kB	104.26.6.173
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-10T13:49:44Z	1.4 kB	2.8 kB	93.184.220.29
batterystore.bluehorse.in	unknown			8.8 kB	295 kB	162.241.194.56
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-10T05:10:00Z	782 B	2.4 kB	34.102.187.140
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-10T05:10:00Z	333 B	229 B	34.117.237.239
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-10T05:11:10Z	1.4 kB	2.8 kB	142.250.74.35
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-10T05:10:02Z	606 B	127 B	34.215.56.181
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-10T05:09:10Z	2.4 kB	6.2 kB	23.36.76.226
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-10T05:12:35Z	413 B	5.8 kB	34.160.144.191
fonts.googleapis.com	8877	2013-06-10T22:14:26Z	2023-03-10T12:25:49Z	422 B	2.0 kB	142.250.74.10
fonts.gstatic.com	unknown	2014-09-09T02:40:21Z	2023-03-10T14:37:36Z	1.0 kB	28 kB	216.58.207.195

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-15	medium	batterystore.bluehorse.in/	Phishing
2022-11-15	medium	batterystore.bluehorse.in/Design-admin/dist/js/adminlte.min.js	Phishing
2022-11-15	medium	batterystore.bluehorse.in/Design-admin/plugins/bootstrap/js/bootstrap.bundle.min.js	Phishing
2022-11-15	medium	batterystore.bluehorse.in/Design-admin/plugins/jquery/jquery.min.js	Phishing
2022-11-15	medium	batterystore.bluehorse.in/Design-admin/plugins/fontawesome-free/webfonts/fa-solid-900.woff2	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	batterystore.bluehorse.in/Design-admin/dist/js/adminlte.min.js	50 kB	2023-03-11	2023-03-11
Pretty URL batterystore.bluehorse.in/Design-admin/dist/js/adminlte.min.js IP 162.241.194.56 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:09:53 Last Seen2023-03-11 12:09:53 Times Seen1 Hash ae504939703e27ad9659f415a74a10be 4eb9000101d5448d2b96bde50f6df35167aa9423 d9986a3c8df45d302357d72bfb613685de9a6c38f585252895b9e2380232322d Loading...

	batterystore.bluehorse.in/Design-admin/plugins/bootstrap/js/bootstrap.bundle.min.js	87 kB	2023-03-11	2023-03-11
Pretty URL batterystore.bluehorse.in/Design-admin/plugins/bootstrap/js/bootstrap.bundle.min.js IP 162.241.194.56 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:09:53 Last Seen2023-03-11 12:09:53 Times Seen1 Hash 66e696ddce64d214ae56984e527ad4f0 6ac9c432a3944e24fcf91c94dff0e5d5dde027ca c495f4bf0fdbbdd3f60e86ffcd2ac749c9a1c62fbcc75cdd5c83ebf296961268 Loading...

	batterystore.bluehorse.in/Design-admin/plugins/jquery/jquery.min.js	93 kB	2023-03-11	2023-03-11
Pretty URL batterystore.bluehorse.in/Design-admin/plugins/jquery/jquery.min.js IP 162.241.194.56 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:09:53 Last Seen2023-03-11 12:09:53 Times Seen1 Hash 3eca7cce1390b64a55e3c0e1b623779a 421e233264dedebed28e92f822b40135924a3076 e0e0107a23f7c509f7eacfcff60c1ec8dd2e9841eca5c29dd7830e41150d6a77 Loading...

HTTP Transactions (39)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7786cd9bd97e024b3a1d16215defaad2
786ddbb74b0b6bd9270622dbe0258d6caee407c1
9c297ccfd178eec7e472fb64a6b2e34d4c7a6dec32870f49982353e590196ba0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C297CCFD178EEC7E472FB64A6B2E34D4C7A6DEC32870F49982353E590196BA0"
Last-Modified: Mon, 14 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16412
Expires: Tue, 15 Nov 2022 04:44:39 GMT
Date: Tue, 15 Nov 2022 00:11:07 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
832aecaba9f06ee2d39d4d4bea65f13c
7195d6ffadfdbc6fc8e92c63ae28d4a3038a72dc
a437509314a97065de6c7b9e5e2b4b61f0234b45f5f5bf2649cbdf499577bfd3

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5135
Cache-Control: max-age=128745
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 00:11:07 GMT
Etag: "637218f5-1d7"
Expires: Wed, 16 Nov 2022 11:56:52 GMT
Last-Modified: Mon, 14 Nov 2022 10:31:17 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

batterystore.bluehorse.in/

162.241.194.56

200 OK

1.0 kB

URL HTTP/1.1
batterystore.bluehorse.in/
IP
162.241.194.56:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size
1.0 kB (1029 bytes)
Hash
35eee5ef91abba83916c7139828ae1ab
c46849960d0a17a7535626e05c23a9bf3511e49f
92481acecf961147c5bac295500473b1d2b3ebf65ccaf7de588c0870f677d224

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: batterystore.bluehorse.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 00:11:07 GMT
Server: Apache
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6InBRd2xvNTdsNmRsNENITlppRGtGZkE9PSIsInZhbHVlIjoiaDBXRytkSHhuMEZ5NzNtK3FTb1Yrb21QSjlxXC9OeUd3VkQ1WStCU2Nuc2pkdThtd2dKWnlaKzZQaWhlODZPbUwwSlpudzdSWStVOGJuMEhDYWg0NHRzdUcxMnFyTkZYcUIrOHJTZ29qM3ZBVDJkZ0dIcVRYMGRNZWZLOHBuYnF2IiwibWFjIjoiY2YzYTYyM2M5OTYxZGU3MTBlZDgxNjkzMDBiYjcyYmE1NGViZjAzNGQzMjY0MzcxZGRhODdjYjM4MTdlMjYxMiJ9; expires=Tue, 15-Nov-2022 02:11:07 GMT; Max-Age=7200; path=/
laravel_session=eyJpdiI6IkFqeFJ2ZVRwOExnMWs4aGpJUDdmanc9PSIsInZhbHVlIjoiTWc0Y25qVjIzSXc4d1gxa1JyME9GNmJBREZjK0ZwV0RaTmR4T2N1MWMwQXYxdHhUUncxdlJTQ3l2dEJTY3JuRk9qNkNMdFh3UUZOQXZRNWViSVlxc0txYUpxc1pHQUxWa3h5cFpSN2o5WGdhREoyUkhnNEw2SXZNanZCSFczckEiLCJtYWMiOiJmMTFkMTU5OTdhNmY1N2M4YzVkMzY5ZjEwODUzYTY5NjVjZmUxZTFmYTE5NDA0YmIyZjM0MGFlNTE4ZmRiMGIzIn0%3D; expires=Tue, 15-Nov-2022 02:11:07 GMT; Max-Age=7200; path=/; httponly
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1029
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8c15cef160d1514fc977ed4c4e97086c
ffe4ce3199658a1fc7a45d1607df40ef3911621d
db1a82d8a2bacc0257b87efec0c365c1b769700fa27ce928321e082505f1d72a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB1A82D8A2BACC0257B87EFEC0C365C1B769700FA27CE928321E082505F1D72A"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5766
Expires: Tue, 15 Nov 2022 01:47:13 GMT
Date: Tue, 15 Nov 2022 00:11:07 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 14 Nov 2022 23:44:16 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1611
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 00:11:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 4EseA0ri2Yu9JbbW60I40MN1fJjqcEtOtgd4H/RoEQ76udQBry8oiL7MdqDC3WtmFzeFXkTCYT4=
x-amz-request-id: C08C3N84MFA46H17
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 14 Nov 2022 23:51:18 GMT
age: 1189
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
464b2db66b46382f3bf76715bacd0bbc
099937d295ed5a2ca3099311260ed9265e192fa8
d20dfc6b46c864af3cc6cdee37dd2a2bfe449f261e959d9b8b2537d4dcb6ec1f

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 579
Cache-Control: max-age=91430
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 00:11:08 GMT
Etag: "637198ff-116"
Expires: Wed, 16 Nov 2022 01:34:58 GMT
Last-Modified: Mon, 14 Nov 2022 01:25:19 GMT
Server: ECS (amb/6BB4)
X-Cache: HIT
Content-Length: 278

ocsp.pki.goog/gts1c3

142.250.74.35

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
b2d6aeeb303eaefc4cc6900e30da3b1b
4c3c027013211aa1b987006d0eb6c72f18c6a657
f542eab7c032d6c5f59710ee8993a01537e0fa2bf3882a6a699de85bba020999

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 00:11:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
464b2db66b46382f3bf76715bacd0bbc
099937d295ed5a2ca3099311260ed9265e192fa8
d20dfc6b46c864af3cc6cdee37dd2a2bfe449f261e959d9b8b2537d4dcb6ec1f

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 579
Cache-Control: max-age=91430
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 00:11:08 GMT
Etag: "637198ff-116"
Expires: Wed, 16 Nov 2022 01:34:58 GMT
Last-Modified: Mon, 14 Nov 2022 01:25:19 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 278

batterystore.bluehorse.in/Design-admin/plugins/icheck-bootstrap/icheck-bootstrap.min.css

162.241.194.56

200 OK

1.6 kB

URL HTTP/1.1
batterystore.bluehorse.in/Design-admin/plugins/icheck-bootstrap/icheck-bootstrap.min.css
IP
162.241.194.56:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (12293), with CRLF line terminators
Size
1.6 kB (1568 bytes)
Hash
72f14ecce1c11c99c471c6d8df0ebed0
ce1cecc2e07543e8483c2fa2531d41be8ec156f4
c542199e0990e81bd267b87781471b2f463e762fa3a618a1f539902fa3c46014

HTTP Headers

GET /Design-admin/plugins/icheck-bootstrap/icheck-bootstrap.min.css HTTP/1.1
Host: batterystore.bluehorse.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://batterystore.bluehorse.in/
Cookie: XSRF-TOKEN=eyJpdiI6InBRd2xvNTdsNmRsNENITlppRGtGZkE9PSIsInZhbHVlIjoiaDBXRytkSHhuMEZ5NzNtK3FTb1Yrb21QSjlxXC9OeUd3VkQ1WStCU2Nuc2pkdThtd2dKWnlaKzZQaWhlODZPbUwwSlpudzdSWStVOGJuMEhDYWg0NHRzdUcxMnFyTkZYcUIrOHJTZ29qM3ZBVDJkZ0dIcVRYMGRNZWZLOHBuYnF2IiwibWFjIjoiY2YzYTYyM2M5OTYxZGU3MTBlZDgxNjkzMDBiYjcyYmE1NGViZjAzNGQzMjY0MzcxZGRhODdjYjM4MTdlMjYxMiJ9; laravel_session=eyJpdiI6IkFqeFJ2ZVRwOExnMWs4aGpJUDdmanc9PSIsInZhbHVlIjoiTWc0Y25qVjIzSXc4d1gxa1JyME9GNmJBREZjK0ZwV0RaTmR4T2N1MWMwQXYxdHhUUncxdlJTQ3l2dEJTY3JuRk9qNkNMdFh3UUZOQXZRNWViSVlxc0txYUpxc1pHQUxWa3h5cFpSN2o5WGdhREoyUkhnNEw2SXZNanZCSFczckEiLCJtYWMiOiJmMTFkMTU5OTdhNmY1N2M4YzVkMzY5ZjEwODUzYTY5NjVjZmUxZTFmYTE5NDA0YmIyZjM0MGFlNTE4ZmRiMGIzIn0%3D

HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 00:11:08 GMT
Server: Apache
Last-Modified: Sat, 30 Apr 2022 08:39:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1568
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css

batterystore.bluehorse.in/Design-admin/plugins/fontawesome-free/css/all.min.css

162.241.194.56

200 OK

13 kB

URL HTTP/1.1
batterystore.bluehorse.in/Design-admin/plugins/fontawesome-free/css/all.min.css
IP
162.241.194.56:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (59119)
Size
13 kB (12852 bytes)
Hash
b0f8e87e9981af1674b7eaa9c70b9385
0eb6e98f3c168af517091717c2704470ca77e2a5
8f20f3d4b106ffd48712adf2fc7394dce546d73b3d48e3485308f977c621981a

HTTP Headers

GET /Design-admin/plugins/fontawesome-free/css/all.min.css HTTP/1.1
Host: batterystore.bluehorse.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://batterystore.bluehorse.in/
Cookie: XSRF-TOKEN=eyJpdiI6InBRd2xvNTdsNmRsNENITlppRGtGZkE9PSIsInZhbHVlIjoiaDBXRytkSHhuMEZ5NzNtK3FTb1Yrb21QSjlxXC9OeUd3VkQ1WStCU2Nuc2pkdThtd2dKWnlaKzZQaWhlODZPbUwwSlpudzdSWStVOGJuMEhDYWg0NHRzdUcxMnFyTkZYcUIrOHJTZ29qM3ZBVDJkZ0dIcVRYMGRNZWZLOHBuYnF2IiwibWFjIjoiY2YzYTYyM2M5OTYxZGU3MTBlZDgxNjkzMDBiYjcyYmE1NGViZjAzNGQzMjY0MzcxZGRhODdjYjM4MTdlMjYxMiJ9; laravel_session=eyJpdiI6IkFqeFJ2ZVRwOExnMWs4aGpJUDdmanc9PSIsInZhbHVlIjoiTWc0Y25qVjIzSXc4d1gxa1JyME9GNmJBREZjK0ZwV0RaTmR4T2N1MWMwQXYxdHhUUncxdlJTQ3l2dEJTY3JuRk9qNkNMdFh3UUZOQXZRNWViSVlxc0txYUpxc1pHQUxWa3h5cFpSN2o5WGdhREoyUkhnNEw2SXZNanZCSFczckEiLCJtYWMiOiJmMTFkMTU5OTdhNmY1N2M4YzVkMzY5ZjEwODUzYTY5NjVjZmUxZTFmYTE5NDA0YmIyZjM0MGFlNTE4ZmRiMGIzIn0%3D

HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 00:11:08 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 30 Apr 2022 08:39:56 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12852
Keep-Alive: timeout=5, max=75
Content-Type: text/css

fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,400i,700

142.250.74.10

200 OK

1.2 kB

URL HTTP/2
fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,400i,700
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type
data
Size
1.2 kB (1229 bytes)
Hash
ac06ad9b04394f88f0b09c50ca0887dd
7d026918e6cbb172cb2d343f97b0a918016fa6d3
730d5150de120e863e1bf83b96ea25edbf1a6a83d270534108aea376e27ee252

HTTP Headers

GET /css?family=Source+Sans+Pro:300,400,400i,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://batterystore.bluehorse.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 15 Nov 2022 00:11:08 GMT
date: Tue, 15 Nov 2022 00:11:08 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

batterystore.bluehorse.in/Design-admin/dist/js/adminlte.min.js

162.241.194.56

200 OK

17 kB

URL HTTP/1.1
batterystore.bluehorse.in/Design-admin/dist/js/adminlte.min.js
IP
162.241.194.56:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (46141)
Size
17 kB (17084 bytes)
Hash
8bc2729c3de65fccc1bdc6d783b9ae63
231fb533b4279c82e04f8cfeb10f8bcc14155d27
75be15fa83d66276e0eb4cde2190a1bf8bda07a33b812ce57421fd383b24006b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Design-admin/dist/js/adminlte.min.js HTTP/1.1
Host: batterystore.bluehorse.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://batterystore.bluehorse.in/
Cookie: XSRF-TOKEN=eyJpdiI6InBRd2xvNTdsNmRsNENITlppRGtGZkE9PSIsInZhbHVlIjoiaDBXRytkSHhuMEZ5NzNtK3FTb1Yrb21QSjlxXC9OeUd3VkQ1WStCU2Nuc2pkdThtd2dKWnlaKzZQaWhlODZPbUwwSlpudzdSWStVOGJuMEhDYWg0NHRzdUcxMnFyTkZYcUIrOHJTZ29qM3ZBVDJkZ0dIcVRYMGRNZWZLOHBuYnF2IiwibWFjIjoiY2YzYTYyM2M5OTYxZGU3MTBlZDgxNjkzMDBiYjcyYmE1NGViZjAzNGQzMjY0MzcxZGRhODdjYjM4MTdlMjYxMiJ9; laravel_session=eyJpdiI6IkFqeFJ2ZVRwOExnMWs4aGpJUDdmanc9PSIsInZhbHVlIjoiTWc0Y25qVjIzSXc4d1gxa1JyME9GNmJBREZjK0ZwV0RaTmR4T2N1MWMwQXYxdHhUUncxdlJTQ3l2dEJTY3JuRk9qNkNMdFh3UUZOQXZRNWViSVlxc0txYUpxc1pHQUxWa3h5cFpSN2o5WGdhREoyUkhnNEw2SXZNanZCSFczckEiLCJtYWMiOiJmMTFkMTU5OTdhNmY1N2M4YzVkMzY5ZjEwODUzYTY5NjVjZmUxZTFmYTE5NDA0YmIyZjM0MGFlNTE4ZmRiMGIzIn0%3D

HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 00:11:08 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 16 May 2022 11:41:13 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17084
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript

batterystore.bluehorse.in/Design-admin/plugins/bootstrap/js/bootstrap.bundle.min.js

162.241.194.56

200 OK

34 kB

URL HTTP/1.1
batterystore.bluehorse.in/Design-admin/plugins/bootstrap/js/bootstrap.bundle.min.js
IP
162.241.194.56:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (65299)
Size
34 kB (33707 bytes)
Hash
cc1c061cc83147c47a2561cd9dffa6e2
bb070cfb95e4d4057c36d33d61bf0fa17c445ee1
cc04e5a58319e9cc88f306e0cbf9dc8889ce2cfd3ae9ce6d7f72991231238330

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Design-admin/plugins/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1
Host: batterystore.bluehorse.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://batterystore.bluehorse.in/
Cookie: XSRF-TOKEN=eyJpdiI6InBRd2xvNTdsNmRsNENITlppRGtGZkE9PSIsInZhbHVlIjoiaDBXRytkSHhuMEZ5NzNtK3FTb1Yrb21QSjlxXC9OeUd3VkQ1WStCU2Nuc2pkdThtd2dKWnlaKzZQaWhlODZPbUwwSlpudzdSWStVOGJuMEhDYWg0NHRzdUcxMnFyTkZYcUIrOHJTZ29qM3ZBVDJkZ0dIcVRYMGRNZWZLOHBuYnF2IiwibWFjIjoiY2YzYTYyM2M5OTYxZGU3MTBlZDgxNjkzMDBiYjcyYmE1NGViZjAzNGQzMjY0MzcxZGRhODdjYjM4MTdlMjYxMiJ9; laravel_session=eyJpdiI6IkFqeFJ2ZVRwOExnMWs4aGpJUDdmanc9PSIsInZhbHVlIjoiTWc0Y25qVjIzSXc4d1gxa1JyME9GNmJBREZjK0ZwV0RaTmR4T2N1MWMwQXYxdHhUUncxdlJTQ3l2dEJTY3JuRk9qNkNMdFh3UUZOQXZRNWViSVlxc0txYUpxc1pHQUxWa3h5cFpSN2o5WGdhREoyUkhnNEw2SXZNanZCSFczckEiLCJtYWMiOiJmMTFkMTU5OTdhNmY1N2M4YzVkMzY5ZjEwODUzYTY5NjVjZmUxZTFmYTE5NDA0YmIyZjM0MGFlNTE4ZmRiMGIzIn0%3D

HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 00:11:08 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 30 Apr 2022 08:39:34 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: application/javascript

batterystore.bluehorse.in/Design-admin/plugins/jquery/jquery.min.js

162.241.194.56

200 OK

40 kB

URL HTTP/1.1
batterystore.bluehorse.in/Design-admin/plugins/jquery/jquery.min.js
IP
162.241.194.56:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (65447)
Size
40 kB (40464 bytes)
Hash
58aebe76b432a6c950e1fb4f55926fe1
76dc804f949afb33948e266099673501cbfb2603
3197eb5a910522cf1da12e17722d2e56a305329154a5381b27a12e032b88ba29

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Design-admin/plugins/jquery/jquery.min.js HTTP/1.1
Host: batterystore.bluehorse.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://batterystore.bluehorse.in/
Cookie: XSRF-TOKEN=eyJpdiI6InBRd2xvNTdsNmRsNENITlppRGtGZkE9PSIsInZhbHVlIjoiaDBXRytkSHhuMEZ5NzNtK3FTb1Yrb21QSjlxXC9OeUd3VkQ1WStCU2Nuc2pkdThtd2dKWnlaKzZQaWhlODZPbUwwSlpudzdSWStVOGJuMEhDYWg0NHRzdUcxMnFyTkZYcUIrOHJTZ29qM3ZBVDJkZ0dIcVRYMGRNZWZLOHBuYnF2IiwibWFjIjoiY2YzYTYyM2M5OTYxZGU3MTBlZDgxNjkzMDBiYjcyYmE1NGViZjAzNGQzMjY0MzcxZGRhODdjYjM4MTdlMjYxMiJ9; laravel_session=eyJpdiI6IkFqeFJ2ZVRwOExnMWs4aGpJUDdmanc9PSIsInZhbHVlIjoiTWc0Y25qVjIzSXc4d1gxa1JyME9GNmJBREZjK0ZwV0RaTmR4T2N1MWMwQXYxdHhUUncxdlJTQ3l2dEJTY3JuRk9qNkNMdFh3UUZOQXZRNWViSVlxc0txYUpxc1pHQUxWa3h5cFpSN2o5WGdhREoyUkhnNEw2SXZNanZCSFczckEiLCJtYWMiOiJmMTFkMTU5OTdhNmY1N2M4YzVkMzY5ZjEwODUzYTY5NjVjZmUxZTFmYTE5NDA0YmIyZjM0MGFlNTE4ZmRiMGIzIn0%3D

HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 00:11:08 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 30 Apr 2022 08:39:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: application/javascript

batterystore.bluehorse.in/Design-admin/dist/css/adminlte.min.css

162.241.194.56

200 OK

106 kB

URL HTTP/1.1
batterystore.bluehorse.in/Design-admin/dist/css/adminlte.min.css
IP
162.241.194.56:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (65141)
Size
106 kB (106294 bytes)
Hash
47941f6eaf53fc46f8ab8572eb3ceec8
3b5e9c0adf8fceb74f6722fa4f48d47c2e92c6c1
c778ea9fe51671b1a59981226c2f693fa4699d068cbfda7bc06ce74602f2ef51

HTTP Headers

GET /Design-admin/dist/css/adminlte.min.css HTTP/1.1
Host: batterystore.bluehorse.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://batterystore.bluehorse.in/
Cookie: XSRF-TOKEN=eyJpdiI6InBRd2xvNTdsNmRsNENITlppRGtGZkE9PSIsInZhbHVlIjoiaDBXRytkSHhuMEZ5NzNtK3FTb1Yrb21QSjlxXC9OeUd3VkQ1WStCU2Nuc2pkdThtd2dKWnlaKzZQaWhlODZPbUwwSlpudzdSWStVOGJuMEhDYWg0NHRzdUcxMnFyTkZYcUIrOHJTZ29qM3ZBVDJkZ0dIcVRYMGRNZWZLOHBuYnF2IiwibWFjIjoiY2YzYTYyM2M5OTYxZGU3MTBlZDgxNjkzMDBiYjcyYmE1NGViZjAzNGQzMjY0MzcxZGRhODdjYjM4MTdlMjYxMiJ9; laravel_session=eyJpdiI6IkFqeFJ2ZVRwOExnMWs4aGpJUDdmanc9PSIsInZhbHVlIjoiTWc0Y25qVjIzSXc4d1gxa1JyME9GNmJBREZjK0ZwV0RaTmR4T2N1MWMwQXYxdHhUUncxdlJTQ3l2dEJTY3JuRk9qNkNMdFh3UUZOQXZRNWViSVlxc0txYUpxc1pHQUxWa3h5cFpSN2o5WGdhREoyUkhnNEw2SXZNanZCSFczckEiLCJtYWMiOiJmMTFkMTU5OTdhNmY1N2M4YzVkMzY5ZjEwODUzYTY5NjVjZmUxZTFmYTE5NDA0YmIyZjM0MGFlNTE4ZmRiMGIzIn0%3D

HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 00:11:08 GMT
Server: Apache
Last-Modified: Thu, 05 May 2022 06:19:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Cache-Control, Retry-After, Content-Length, Expires, ETag, Pragma, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 14 Nov 2022 23:44:48 GMT
cache-control: public,max-age=3600
age: 1580
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
3200044057cb585f1a435c0efece61c8
8305d5b5891288aa9996b4b4ca6fce2265413194
df45704534a24928e7659a6d8cd1b5ac9ffa9b224b02b34a2d6aed5ef69fd586

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5239
Cache-Control: max-age=123792
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 00:11:08 GMT
Etag: "63720535-1d7"
Expires: Wed, 16 Nov 2022 10:34:20 GMT
Last-Modified: Mon, 14 Nov 2022 09:07:01 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

ocsp.pki.goog/gts1c3

142.250.74.35

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
35ad471bf7f157abedbe322e59bb00ae
6f8c57f1c20377b6a1f74fd06849705a6370e291
b51251f347677a52f08a4a7c0d9ff0effed121992b6dc7fa709e33c400042e63

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 00:11:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2

216.58.207.195

200 OK

13 kB

URL HTTP/2
fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 13036, version 1.0\012- data
Size
13 kB (13036 bytes)
Hash
0ad032b3d07aaf33b160ac4799dda40f
06b931e0d0bf37f5037d9e66d6feedfddd21c0ba
c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0

HTTP Headers

GET /s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://batterystore.bluehorse.in
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13036
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 19:26:57 GMT
expires: Thu, 09 Nov 2023 19:26:57 GMT
cache-control: public, max-age=31536000
age: 449051
last-modified: Wed, 27 Apr 2022 16:04:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.35

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
35ad471bf7f157abedbe322e59bb00ae
6f8c57f1c20377b6a1f74fd06849705a6370e291
b51251f347677a52f08a4a7c0d9ff0effed121992b6dc7fa709e33c400042e63

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 00:11:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2

216.58.207.195

200 OK

13 kB

URL HTTP/2
fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 12956, version 1.0\012- data
Size
13 kB (12956 bytes)
Hash
1c772d9d0531b187db80bcfc199c1786
c0c04fb334190e10dffed0dcc5c817c2a6041a15
122854df4f39cf922db317714c2ff0eccab27a1028c14a5aa2211f48b7e0eade

HTTP Headers

GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://batterystore.bluehorse.in
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12956
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 19:28:31 GMT
expires: Thu, 09 Nov 2023 19:28:31 GMT
cache-control: public, max-age=31536000
age: 448957
last-modified: Wed, 27 Apr 2022 16:54:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.35

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
6ea606a3c83b6b14b9375c84e37870d8
d73a898c2f3eba8e71d6d4f675c47107df0a5795
0dc0268899f946356be887d4ee84b411136f373200ce90464b331697b6cd9487

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 00:11:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

batterystore.bluehorse.in/Design-admin/plugins/fontawesome-free/webfonts/fa-solid-900.woff2

162.241.194.56

200 OK

78 kB

URL HTTP/1.1
batterystore.bluehorse.in/Design-admin/plugins/fontawesome-free/webfonts/fa-solid-900.woff2
IP
162.241.194.56:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196\012- data
Size
78 kB (78268 bytes)
Hash
d824df7eb2e268626a2dd9a6a741ac4e
0ccb2c814a7e4ca12c4778821633809cb0361eaa
9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Design-admin/plugins/fontawesome-free/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: batterystore.bluehorse.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://batterystore.bluehorse.in/Design-admin/plugins/fontawesome-free/css/all.min.css
Cookie: XSRF-TOKEN=eyJpdiI6InBRd2xvNTdsNmRsNENITlppRGtGZkE9PSIsInZhbHVlIjoiaDBXRytkSHhuMEZ5NzNtK3FTb1Yrb21QSjlxXC9OeUd3VkQ1WStCU2Nuc2pkdThtd2dKWnlaKzZQaWhlODZPbUwwSlpudzdSWStVOGJuMEhDYWg0NHRzdUcxMnFyTkZYcUIrOHJTZ29qM3ZBVDJkZ0dIcVRYMGRNZWZLOHBuYnF2IiwibWFjIjoiY2YzYTYyM2M5OTYxZGU3MTBlZDgxNjkzMDBiYjcyYmE1NGViZjAzNGQzMjY0MzcxZGRhODdjYjM4MTdlMjYxMiJ9; laravel_session=eyJpdiI6IkFqeFJ2ZVRwOExnMWs4aGpJUDdmanc9PSIsInZhbHVlIjoiTWc0Y25qVjIzSXc4d1gxa1JyME9GNmJBREZjK0ZwV0RaTmR4T2N1MWMwQXYxdHhUUncxdlJTQ3l2dEJTY3JuRk9qNkNMdFh3UUZOQXZRNWViSVlxc0txYUpxc1pHQUxWa3h5cFpSN2o5WGdhREoyUkhnNEw2SXZNanZCSFczckEiLCJtYWMiOiJmMTFkMTU5OTdhNmY1N2M4YzVkMzY5ZjEwODUzYTY5NjVjZmUxZTFmYTE5NDA0YmIyZjM0MGFlNTE4ZmRiMGIzIn0%3D

HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 00:11:08 GMT
Server: Apache
Last-Modified: Sat, 30 Apr 2022 08:39:56 GMT
Accept-Ranges: bytes
Content-Length: 78268
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: font/woff2

push.services.mozilla.com/

34.215.56.181

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.215.56.181:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lHhTtBZOgiIjSFiP9Cg/mg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vWP1tBkadevSBo0LGfZUaTTNxYk=

batterystore.bluehorse.in/favicon.ico

162.241.194.56

200 OK

0 B

URL HTTP/1.1
batterystore.bluehorse.in/favicon.ico
IP
162.241.194.56:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: batterystore.bluehorse.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://batterystore.bluehorse.in/
Cookie: XSRF-TOKEN=eyJpdiI6InBRd2xvNTdsNmRsNENITlppRGtGZkE9PSIsInZhbHVlIjoiaDBXRytkSHhuMEZ5NzNtK3FTb1Yrb21QSjlxXC9OeUd3VkQ1WStCU2Nuc2pkdThtd2dKWnlaKzZQaWhlODZPbUwwSlpudzdSWStVOGJuMEhDYWg0NHRzdUcxMnFyTkZYcUIrOHJTZ29qM3ZBVDJkZ0dIcVRYMGRNZWZLOHBuYnF2IiwibWFjIjoiY2YzYTYyM2M5OTYxZGU3MTBlZDgxNjkzMDBiYjcyYmE1NGViZjAzNGQzMjY0MzcxZGRhODdjYjM4MTdlMjYxMiJ9; laravel_session=eyJpdiI6IkFqeFJ2ZVRwOExnMWs4aGpJUDdmanc9PSIsInZhbHVlIjoiTWc0Y25qVjIzSXc4d1gxa1JyME9GNmJBREZjK0ZwV0RaTmR4T2N1MWMwQXYxdHhUUncxdlJTQ3l2dEJTY3JuRk9qNkNMdFh3UUZOQXZRNWViSVlxc0txYUpxc1pHQUxWa3h5cFpSN2o5WGdhREoyUkhnNEw2SXZNanZCSFczckEiLCJtYWMiOiJmMTFkMTU5OTdhNmY1N2M4YzVkMzY5ZjEwODUzYTY5NjVjZmUxZTFmYTE5NDA0YmIyZjM0MGFlNTE4ZmRiMGIzIn0%3D

HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 00:11:09 GMT
Server: Apache
Last-Modified: Wed, 19 Feb 2020 04:06:20 GMT
Accept-Ranges: bytes
Content-Length: 0
Cache-Control: max-age=604800
Expires: Tue, 22 Nov 2022 00:11:09 GMT
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/x-icon

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2524
Expires: Tue, 15 Nov 2022 00:53:14 GMT
Date: Tue, 15 Nov 2022 00:11:10 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2524
Expires: Tue, 15 Nov 2022 00:53:14 GMT
Date: Tue, 15 Nov 2022 00:11:10 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2524
Expires: Tue, 15 Nov 2022 00:53:14 GMT
Date: Tue, 15 Nov 2022 00:11:10 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2524
Expires: Tue, 15 Nov 2022 00:53:14 GMT
Date: Tue, 15 Nov 2022 00:11:10 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2524
Expires: Tue, 15 Nov 2022 00:53:14 GMT
Date: Tue, 15 Nov 2022 00:11:10 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f047d91-bab3-43d1-86ce-a778be041877.jpeg

34.120.237.76

200 OK

9.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f047d91-bab3-43d1-86ce-a778be041877.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.6 kB (9616 bytes)
Hash
44c3cfa4f4a4580bdca406de6f5a6714
6c8c93c6e73aa3a8473b6b5f0bae92f09f46b0dd
660faaadae34008977bb7efcc0ed42c6c2b542dbbefe9608942b8f6e1f357cca

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f047d91-bab3-43d1-86ce-a778be041877.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9616
x-amzn-requestid: e041b4a7-ccd8-4517-b58a-cb8d111916f4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bd8heFPxoAMF0uQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636f0e09-286cf1ce28c1b9851b40fd7f;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 03:07:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Db4Ssf23epKK93EKnA3iqEYggGom2pTkDiTTEMRcF7WLbE9hPawTjw==
via: 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 05:40:51 GMT
age: 66619
etag: "6c8c93c6e73aa3a8473b6b5f0bae92f09f46b0dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c0c0f21-d8ce-4a68-96de-3d9fe7f62af1.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12049 bytes)
Hash
d8a88adfc74554dbc851f24a004ec884
e4e4d9c1fd4c32b7ce7a9b14fbe132ef91214c46
99bfddf63d54da3cb418fb5bfe97f20b18ac62c49eb26fa9b1f67e122b5abc13

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c0c0f21-d8ce-4a68-96de-3d9fe7f62af1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12049
x-amzn-requestid: f62fd1a1-7dea-48ca-b174-c0f56a33b400
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bOAeRGLAoAMFW4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6368adf4-62d5d59331ce02cf7376c3d3;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 07:04:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KntPkXVNR3GvWadM22GeNsjKHgX8x3gKRonQGudnaudoIXrWrIT9iw==
via: 1.1 599f04a365a179d553682d476509c388.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 03:38:12 GMT
age: 73978
etag: "e4e4d9c1fd4c32b7ce7a9b14fbe132ef91214c46"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4cc31a8-ba2e-4cc0-bf6e-0daaf01962d2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.5 kB (7504 bytes)
Hash
9459d8c5ec4b22476e1470e5476f70f7
78118517bfffe997c85f08bd9b7b7ac9270d9b02
647d0898ed6a38191ff91ca316e90a72d9a5ce563c3602a8d4c477c64f096be4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4cc31a8-ba2e-4cc0-bf6e-0daaf01962d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7504
x-amzn-requestid: 553a2ee3-9dcb-44ac-b0e1-e8ea660eedcc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bOAmqGAyoAMFv5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6368ae2a-7af9fba56c5ae9ca5f513668;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 07:05:14 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rRrM6hW5gFH8bLxrzQv5emBacEQrqldwEfD1M0YycB4XphG-XXwRuA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 05:03:47 GMT
age: 68843
etag: "78118517bfffe997c85f08bd9b7b7ac9270d9b02"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11715 bytes)
Hash
cd5bdc050716bb76afe8090fc81617e7
5109c156b180727767fc03c411190ccc0d3fb5fc
9b13e7838946c6654dda17886c2ca8d42de934acb93f4bddb1008dfa1bd1ea99

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 20e508bd-6568-4225-9bee-c683a49d44f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUHkpIAMFfJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-7dc726b94a37fc667e2e6646;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: X3SUo1LP97TxraRav0ftskBhzWkTJInHaS44PW26yloF-dgD-bHBuA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 21:45:57 GMT
age: 8713
etag: "5109c156b180727767fc03c411190ccc0d3fb5fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F818b8415-26b4-4768-a1f1-8eafa6e11c16.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.4 kB (7414 bytes)
Hash
b76f3ae29d447b9c8938462c4adb6463
f22e89c145d1ede9e3d731e6748bfe338c1a0d6b
b5bf1a0416425ffef9f3b0954c7c4659e33ab1dacfb812e8308e2095dd1bc409

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F818b8415-26b4-4768-a1f1-8eafa6e11c16.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7414
x-amzn-requestid: ff411645-d77f-4ef2-a175-c534bcd21f28
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bM2cjFwqIAMFxgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63683783-552038846aadb8be53bb3ea1;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 22:38:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ivVEyCNKURmHSP1rbwcmv3mUrpIJ13B7LGsFzYYufJIMx2I5aZXY3g==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 06:40:52 GMT
age: 63018
etag: "f22e89c145d1ede9e3d731e6748bfe338c1a0d6b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F040363e6-40a3-4d68-bf2e-ca83ac195dcc.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.3 kB (6318 bytes)
Hash
4af82634a56d0978c9b4689c8b7eb8ae
4b40ef08bd37cabfcb937053dd58012abdd6620f
476a9f850cfbe41adea1d699fdf4f04424674c53b268681fa6fc0e226bed0797

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F040363e6-40a3-4d68-bf2e-ca83ac195dcc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6318
x-amzn-requestid: 6469c84d-fc45-470e-a438-2fb81dae70c2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bhPtyHpXoAMFfWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63705ff1-53ab9291301773c048f69696;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 03:09:37 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wqcEh0RSwy9RNH7gsYRXlweR2UEaMMHPH4zIg-kY58Lfsx2wVcOKBA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 03:45:17 GMT
age: 73553
etag: "4b40ef08bd37cabfcb937053dd58012abdd6620f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

code.ionicframework.com/ionicons/2.0.1/css/ionicons.min.css

104.26.6.173

200 OK

0 B

URL HTTP/2
code.ionicframework.com/ionicons/2.0.1/css/ionicons.min.css
IP
104.26.6.173:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /ionicons/2.0.1/css/ionicons.min.css HTTP/1.1
Host: code.ionicframework.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://batterystore.bluehorse.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Tue, 15 Nov 2022 00:11:08 GMT
content-type: text/css; charset=utf-8
x-origin-cache: HIT
last-modified: Fri, 28 Oct 2022 02:55:05 GMT
access-control-allow-origin: *
etag: W/"635b4489-c854"
expires: Sun, 13 Nov 2022 03:49:12 GMT
cache-control: max-age=31536000
x-proxy-cache: HIT
x-github-request-id: BECA:C002:2FFF1F7:3178493:63706752
via: 1.1 varnish
age: 31360
x-served-by: cache-bma1671-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1668439708.454147,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: f5b143427e82883ef0e8f4c11c2e18a7bce737ae
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rvUEmv%2FHE2T1ZbPFtlAjSzkIWNT7LRGYBbGvKVE8K6NwkmlKITQWzwB7nPdKSscTZwC3k3Q25XdDtLC%2FrMYeTYNVPCDhN%2FrgjQateiab07lDGzRbIrd9e9tKMx1v9Ie1S2%2FfHdhvJlbU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a3c48fdcd2b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (39)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type