Report - proundecimnetteamit.com/

Report Overview

Submitted URL
proundecimnetteamit.com/
IP
3.143.47.169
ASN
#16509 AMAZON-02
Submitted
2022-10-24 09:39:19
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
28

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-10T05:09:10Z	2.3 kB	6.2 kB	23.36.76.226
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-10T05:10:00Z	758 B	2.8 kB	143.204.55.35
ocsp.sca1b.amazontrust.com	1015	2017-03-03T16:20:51Z	2019-03-27T05:05:54Z	338 B	984 B	143.204.42.88
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-10T13:49:44Z	329 B	796 B	93.184.220.29
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-10T05:10:02Z	594 B	127 B	35.83.91.138
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-10T05:10:04Z	3.2 kB	69 kB	34.120.237.76
proundecimnetteamit.com	unknown			11 kB	1.6 MB	18.216.45.34
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-10T05:12:35Z	401 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-10T05:10:00Z	321 B	229 B	34.117.237.239

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-10-24	medium	proundecimnetteamit.com/	Phishing
2022-10-24	medium	proundecimnetteamit.com/	Phishing
2022-10-24	medium	proundecimnetteamit.com/js/app.81e4d832.js	Phishing
2022-10-24	medium	proundecimnetteamit.com/js/chunk-vendors.7b91992b.js	Phishing
2022-10-24	medium	proundecimnetteamit.com/js/chunk-9df6c36a.7f35be0d.js	Phishing
2022-10-24	medium	proundecimnetteamit.com/fonts/element-icons.535877f5.woff	Phishing
2022-10-24	medium	proundecimnetteamit.com/js/chunk-0e9dbfdc.6e8bc6f7.js	Phishing
2022-10-24	medium	proundecimnetteamit.com/js/chunk-14e6c0c4.02543dfb.js	Phishing
2022-10-24	medium	proundecimnetteamit.com/js/chunk-1bf0738c.ea182cc1.js	Phishing
2022-10-24	medium	proundecimnetteamit.com/js/chunk-503f8bdc.ee8bd8cd.js	Phishing
2022-10-24	medium	proundecimnetteamit.com/js/chunk-7db3c7cc.b5721111.js	Phishing
2022-10-24	medium	proundecimnetteamit.com/js/chunk-9df6c36a.7f35be0d.js	Phishing
2022-10-24	medium	proundecimnetteamit.com/js/chunk-012826f4.2fd2cb4d.js	Phishing
2022-10-24	medium	proundecimnetteamit.com/js/chunk-9d09e3cc.fd27c551.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	proundecimnetteamit.com/js/app.81e4d832.js	32 kB	2023-03-07	2023-03-14
Pretty URL proundecimnetteamit.com/js/app.81e4d832.js IP 3.143.47.169 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:22:26 Last Seen2023-03-14 03:52:29 Times Seen1 Hash ca3c8827d19b1404fa604fe34549f6c4 3fc956f7ee194e8e1adc3c25463e6d7c9fb68f38 1904298a7a11a42af221f8d2f6fef808c835f9daa6d3cb12917ee71d1182aa48 Loading...

	proundecimnetteamit.com/js/chunk-9df6c36a.7f35be0d.js	2.7 kB	2023-03-07	2023-03-14
Pretty URL proundecimnetteamit.com/js/chunk-9df6c36a.7f35be0d.js IP 3.143.47.169 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:22:26 Last Seen2023-03-14 03:52:29 Times Seen1 Hash e91a7fc887c1b32ce898a8b592d5a5cf d4f73f93958b682155efa844c89f92b6dd902fdf d4b64843fa6e7143adab4bbb3d1a45c46e8a649fafe4dd05bb13c4e7f7fedb3d Loading...

	proundecimnetteamit.com/js/chunk-vendors.7b91992b.js	1.2 MB	2023-03-07	2023-03-14
Pretty URL proundecimnetteamit.com/js/chunk-vendors.7b91992b.js IP 3.143.47.169 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:22:26 Last Seen2023-03-14 03:52:29 Times Seen1 Hash f1060abf502fdcbbf3d6d51ef4ba8279 2881376455dd9d20029230d63110fe42071643c7 38573b4a6f3400a0c677956b08043b81e64b67535fb139367d5ffa3b0b54277e Loading...

HTTP Transactions (46)

URL IP Response Size

proundecimnetteamit.com/

18.216.45.34

302 Found

216 B

URL HTTP/1.1
proundecimnetteamit.com/
IP
18.216.45.34:0
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
216 B (216 bytes)
Hash
fe29791bfb825de2cc5dda32d2ebafed
8f6417836e11b933650b25e71ca15d26a2a8b290
1718748282bf088dd9ca8befce6dafc5bca82f43754f53078f835f69f0094e43

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
Date: Mon, 24 Oct 2022 09:39:07 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 216
Connection: keep-alive
Server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
Location: https://proundecimnetteamit.com/

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b3537658770790ad6cf0d727f0c0acd2
8365cadda05ef27b2ebd627d545e31886b512bde
df992311f130f15459739841de925c7eec2604d5a68ca6b2a67b6dc8d229212c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF992311F130F15459739841DE925C7EEC2604D5A68CA6B2A67B6DC8D229212C"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3081
Expires: Mon, 24 Oct 2022 10:30:28 GMT
Date: Mon, 24 Oct 2022 09:39:07 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

143.204.55.35

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 24 Oct 2022 08:52:56 GMT
Expires: Mon, 24 Oct 2022 08:53:53 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9PQWrkZnLwR7wuRD6Qega9RacJJKJn-dwPSTqT11cSjiGoTBWAmsZQ==
Age: 2771

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ae56efd62a0d9249d98573172eb8b28b
5ff4e9959be677ad76c26ca73f9ef4feb9fa2f28
82d9ee4948fce839f7edb1f8490c4213cded3912464a4169b0bf6a61278694bd

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82D9EE4948FCE839F7EDB1F8490C4213CDED3912464A4169B0BF6A61278694BD"
Last-Modified: Sat, 22 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11389
Expires: Mon, 24 Oct 2022 12:48:56 GMT
Date: Mon, 24 Oct 2022 09:39:07 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: /XS77L0HnnGDDyXZZvZsZW8xtWMF/UkUPHl7KjJikrvUo83NDB8aQtU7yqyHnRg/rz7UfjRfxZg=
x-amz-request-id: QKQTHSWFVX2WYS8C
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 24 Oct 2022 09:08:27 GMT
age: 1840
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 09:39:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.35

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 24 Oct 2022 09:33:32 GMT
Cache-Control: max-age=3600
Expires: Mon, 24 Oct 2022 09:54:14 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: OrzZJFGBwMqNV60A4o1WIRqDviNG8J_nXrPQORXrgqrum7QW9TOcww==
Age: 335

ocsp.sca1b.amazontrust.com/

143.204.42.88

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.88:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
b69a595a11fbbf4aaae0b0715ef5f540
062d2d2503272a4bc6fe98f17dd30ea21104b0ff
3dd48cad07c86a710861c6e8738712ea07e978c6e905d0d2afa0af1a4959e95d

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=165122
Date: Mon, 24 Oct 2022 09:39:07 GMT
Etag: "63563f3d-1d7"
Expires: Wed, 26 Oct 2022 07:31:09 GMT
Last-Modified: Mon, 24 Oct 2022 07:31:09 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: V1PDBRgU2Ff3GkBzUZ3wfWZ6V0QMyWiJt83hOaoIvbNTQbA-ZFuIGw==

proundecimnetteamit.com/

3.143.47.169

200 OK

1.8 kB

URL HTTP/2
proundecimnetteamit.com/
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1807), with no line terminators
Size
1.8 kB (1807 bytes)
Hash
ba1e5e5b49df7831ea436d7a18f8d7bc
69e301dddeabb0e10c5c5f02c39ab810f97843d7
f389c67942c00658ebcdcf44389e348036233f767d7dbd27cf635f1c66a2dafa

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:07 GMT
content-type: text/html; charset=UTF-8
content-length: 1807
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97418
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"70f-17a9bf3c6a5"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
60d5d7cce6c32a6bdaf0d4c92ec93a1a
cd29edee660366b41749cfd206bdc08fb421449c
fb90c4cc44b32e4ca4a7d1533bbf4a2fd5c482dda5d232f1be2334f3cefbbb0e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5696
Cache-Control: max-age=86551
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 09:39:08 GMT
Etag: "6354f613-1d7"
Expires: Tue, 25 Oct 2022 09:41:39 GMT
Last-Modified: Sun, 23 Oct 2022 08:06:43 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

35.83.91.138

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.83.91.138:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AIYKKmWRKnN2jtSBgj3M3w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qxVCs6C+ch8usgZf5L3mfYSeUkQ=

proundecimnetteamit.com/css/chunk-vendors.a1d59a71.css

3.143.47.169

200 OK

2.8 kB

URL HTTP/2
proundecimnetteamit.com/css/chunk-vendors.a1d59a71.css
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (1843)
Size
2.8 kB (2841 bytes)
Hash
ef91aeb962aba426abe5490a0a23e4b1
09ebcbf7dcb1d3e8eef79d7acecee155c2c7733a
7953c6be4589a14f8655cfe5ee54479cd6d704e725aa49684f9ce1182d1e24f0

HTTP Headers

GET /css/chunk-vendors.a1d59a71.css HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:08 GMT
content-type: text/css; charset=UTF-8
content-length: 2841
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97415
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"b19-17a9bf3c6a5"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/js/app.81e4d832.js

3.143.47.169

200 OK

32 kB

URL HTTP/2
proundecimnetteamit.com/js/app.81e4d832.js
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (32185)
Size
32 kB (32226 bytes)
Hash
ca3c8827d19b1404fa604fe34549f6c4
3fc956f7ee194e8e1adc3c25463e6d7c9fb68f38
1904298a7a11a42af221f8d2f6fef808c835f9daa6d3cb12917ee71d1182aa48

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/app.81e4d832.js HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:08 GMT
content-type: application/javascript; charset=UTF-8
content-length: 32226
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97414
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"7de2-17a9bf3c679"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/css/app.733a7d81.css

3.143.47.169

200 OK

216 kB

URL HTTP/2
proundecimnetteamit.com/css/app.733a7d81.css
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (65536), with no line terminators
Size
216 kB (215821 bytes)
Hash
5bd4bf1e2f1e0f16d80400f8b726bb23
d98640fc181ef6b0a14fadd9bda7f132ef56e426
020f5985f375cc8a7f32471e992b80c8d23edf069fdbac53868ee699649507b2

HTTP Headers

GET /css/app.733a7d81.css HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:08 GMT
content-type: text/css; charset=UTF-8
content-length: 215821
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97416
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"34b0d-17a9bf3c679"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/js/chunk-vendors.7b91992b.js

3.143.47.169

200 OK

1.2 MB

URL HTTP/2
proundecimnetteamit.com/js/chunk-vendors.7b91992b.js
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
Unicode text, UTF-8 text, with very long lines (59318), with no line terminators
Size
1.2 MB (1193138 bytes)
Hash
f1060abf502fdcbbf3d6d51ef4ba8279
2881376455dd9d20029230d63110fe42071643c7
38573b4a6f3400a0c677956b08043b81e64b67535fb139367d5ffa3b0b54277e

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/chunk-vendors.7b91992b.js HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:08 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1193138
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97413
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"1234b2-17a9bf3c6a5"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/css/chunk-9df6c36a.07e9d1fc.css

3.143.47.169

200 OK

226 B

URL HTTP/2
proundecimnetteamit.com/css/chunk-9df6c36a.07e9d1fc.css
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
ASCII text, with no line terminators
Size
226 B (226 bytes)
Hash
3a900712f251739f328933d8632ca54f
4eeaff764d9df4fa9f69380904ac97c7744a9ac3
3904875792d9e7b730099ddd2755da9f87665103a78f00074e29f83b2349a394

HTTP Headers

GET /css/chunk-9df6c36a.07e9d1fc.css HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: text/css; charset=UTF-8
content-length: 226
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97411
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"e2-17a9bf3c6a5"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/js/chunk-9df6c36a.7f35be0d.js

3.143.47.169

200 OK

2.7 kB

URL HTTP/2
proundecimnetteamit.com/js/chunk-9df6c36a.7f35be0d.js
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
Unicode text, UTF-8 text, with very long lines (2620)
Size
2.7 kB (2684 bytes)
Hash
e91a7fc887c1b32ce898a8b592d5a5cf
d4f73f93958b682155efa844c89f92b6dd902fdf
d4b64843fa6e7143adab4bbb3d1a45c46e8a649fafe4dd05bb13c4e7f7fedb3d

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/chunk-9df6c36a.7f35be0d.js HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: application/javascript; charset=UTF-8
content-length: 2684
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97410
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"a7c-17a9bf3c6a5"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/favicon.ico

3.143.47.169

200 OK

4.3 kB

URL HTTP/2
proundecimnetteamit.com/favicon.ico
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Size
4.3 kB (4286 bytes)
Hash
1ba2ae710d927f13d483fd5d1e548c9b
c0605efed936ee2600284e6480521d06fa64f872
db74ab0b78338c1f778f8398c45f4103c99aea0e845a3118a7750b4eeafd3445

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: image/x-icon
content-length: 4286
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97408
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"10be-17a9bf3c6a5"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/fonts/element-icons.535877f5.woff

3.143.47.169

200 OK

28 kB

URL HTTP/2
proundecimnetteamit.com/fonts/element-icons.535877f5.woff
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
Web Open Font Format, TrueType, length 28200, version 1.0\012- data
Size
28 kB (28200 bytes)
Hash
535877f50039c0cb49a6196a5b7517cd
0000c4e27d38f9f8bbe4e58b5ce2477e589507a7
ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /fonts/element-icons.535877f5.woff HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://proundecimnetteamit.com/css/app.733a7d81.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: font/woff
content-length: 28200
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97407
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"6e28-17a9bf3c679"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/css/chunk-012826f4.8ccb45d6.css

3.143.47.169

200 OK

117 B

URL HTTP/2
proundecimnetteamit.com/css/chunk-012826f4.8ccb45d6.css
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
ASCII text, with no line terminators
Size
117 B (117 bytes)
Hash
524b49a7563a9d4a60da05a7d428eb84
1ce82400dd084fbe3d0cfcb5cb90453d9f482145
4a4062235073055b375164941d87a380356060e850d4af03636979ab48e91cf1

HTTP Headers

GET /css/chunk-012826f4.8ccb45d6.css HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: text/css; charset=UTF-8
content-length: 117
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97404
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"75-17a9bf3c685"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/css/chunk-0e9dbfdc.a6571dab.css

3.143.47.169

200 OK

1.9 kB

URL HTTP/2
proundecimnetteamit.com/css/chunk-0e9dbfdc.a6571dab.css
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (1918), with no line terminators
Size
1.9 kB (1918 bytes)
Hash
b9cccba953d5052e91a18eaa538b65a0
e99c79079a2c3784a80645bd80b47ddf0a7d5f55
c856e7906db90e38585f4d68f28d9d616aa4b6c6a682313c19ddd2fa6c46c930

HTTP Headers

GET /css/chunk-0e9dbfdc.a6571dab.css HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: text/css; charset=UTF-8
content-length: 1918
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97403
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"77e-17a9bf3c685"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/css/chunk-14e6c0c4.4462e9fc.css

3.143.47.169

200 OK

42 B

URL HTTP/2
proundecimnetteamit.com/css/chunk-14e6c0c4.4462e9fc.css
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
ASCII text, with no line terminators
Size
42 B (42 bytes)
Hash
5fc7cb488f1ec929a02432baa68f3686
83c4a8fac9ff34ea202ca0cdaa664526a24d352a
68eb1df8c21de3cffaa34b57bf883c85c5bc74d3cc4bc73d2f5dd938713a8f3f

HTTP Headers

GET /css/chunk-14e6c0c4.4462e9fc.css HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: text/css; charset=UTF-8
content-length: 42
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97402
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"2a-17a9bf3c685"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/css/chunk-1bf0738c.3ec2f718.css

3.143.47.169

200 OK

1.9 kB

URL HTTP/2
proundecimnetteamit.com/css/chunk-1bf0738c.3ec2f718.css
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (1855), with no line terminators
Size
1.9 kB (1855 bytes)
Hash
ae820457d35883ef22c92ad51482ab8a
c033e7e00c03fe013f82665e711091a644f11e6c
45fcda425ec4e0b8bfbea672f650c0429052834710b7362fdb83e14f56f90191

HTTP Headers

GET /css/chunk-1bf0738c.3ec2f718.css HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: text/css; charset=UTF-8
content-length: 1855
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97401
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"73f-17a9bf3c685"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3954
Expires: Mon, 24 Oct 2022 10:45:03 GMT
Date: Mon, 24 Oct 2022 09:39:09 GMT
Connection: keep-alive

proundecimnetteamit.com/css/chunk-503f8bdc.dc573170.css

3.143.47.169

200 OK

1.2 kB

URL HTTP/2
proundecimnetteamit.com/css/chunk-503f8bdc.dc573170.css
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (1170), with no line terminators
Size
1.2 kB (1170 bytes)
Hash
e5d4321515ff03db87a5348cb7418890
391b25239b9d439e7fafc265a979b9af9ba29551
10bd13fa41722b5e2b52d1d1a777203e052d8ccdaa8ef80dbec8ab9a0b342e0b

HTTP Headers

GET /css/chunk-503f8bdc.dc573170.css HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: text/css; charset=UTF-8
content-length: 1170
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97400
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"492-17a9bf3c685"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/css/chunk-7db3c7cc.980c2ae6.css

3.143.47.169

200 OK

48 B

URL HTTP/2
proundecimnetteamit.com/css/chunk-7db3c7cc.980c2ae6.css
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
ASCII text, with no line terminators
Size
48 B (48 bytes)
Hash
81f304252aacb5cae23e8c8971d6c8d1
698dbae087b26f40bae2aacf02b7ab1ff498544c
5a6971a623e09eec903f684892ec4360016a68714cd366fb977dca33ce079b57

HTTP Headers

GET /css/chunk-7db3c7cc.980c2ae6.css HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: text/css; charset=UTF-8
content-length: 48
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97399
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"30-17a9bf3c685"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3954
Expires: Mon, 24 Oct 2022 10:45:03 GMT
Date: Mon, 24 Oct 2022 09:39:09 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3954
Expires: Mon, 24 Oct 2022 10:45:03 GMT
Date: Mon, 24 Oct 2022 09:39:09 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3954
Expires: Mon, 24 Oct 2022 10:45:03 GMT
Date: Mon, 24 Oct 2022 09:39:09 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3954
Expires: Mon, 24 Oct 2022 10:45:03 GMT
Date: Mon, 24 Oct 2022 09:39:09 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21cfb8fe-4b68-43f0-a196-17c9a1dd3acb.png

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21cfb8fe-4b68-43f0-a196-17c9a1dd3acb.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10072 bytes)
Hash
af3d4b4d16ad8b30805be96afa6472e3
bceb257123711c43994e5a03e9caf22eeee16423
30d7fea8d87522ce3ba2abf2c47e0025af1b7c05d6b4ea9f26aaa1f06aff4a67

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21cfb8fe-4b68-43f0-a196-17c9a1dd3acb.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10072
x-amzn-requestid: 2f26fcdb-0540-49ea-be46-83c00182fcc3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelB0FKvoAMFVFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b53e-1be524647e3db4a211e4c4ff;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:22 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 28s2Fwd7CYJpmy57dsIok6owygvyqng_WwlfbKApRjznSlULtnSJqw==
via: 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:56:12 GMT
age: 42177
etag: "bceb257123711c43994e5a03e9caf22eeee16423"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c8789d-73b5-42b5-8b99-9a20d2d75944.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.9 kB (7889 bytes)
Hash
e1bb8b1b400a1ae9d33c235e6a338c4b
834ac948f07711ed1dfe30ed365ab6c68967d932
1ef29fa4db7b8a00df3a0df1494aa41f8737664828695a4294e3ec8c9e5711e4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c8789d-73b5-42b5-8b99-9a20d2d75944.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7889
x-amzn-requestid: d26a99e5-9968-4201-b15d-56b77bea6493
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aWA8qHTXoAMF-3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63524850-3487dcfd713681d230056e2a;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 07:20:48 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p6NHphNbTUfxXeo6h5srWFVAa7W3f1EUFm4uBUU9yc-wsYrHB7e1DA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 08:34:45 GMT
age: 3864
etag: "834ac948f07711ed1dfe30ed365ab6c68967d932"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3257320-582a-498d-9e0c-531ea65fbbe0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 772-513, spot sensor temperature 0.000000, unit celsius, color scheme 1, calibration: offset 0.000000, slope 241254190455726276608.000000\012- data
Size
14 kB (13962 bytes)
Hash
88436497b6fe5e22155afc45e9e8fe3e
5004575548d76d878a7f27bb3fc4a9a10e8f6909
304c2388dd96c82582d490cd473174b11eac53bf408a29ed78e23d77139ef243

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3257320-582a-498d-9e0c-531ea65fbbe0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13962
x-amzn-requestid: 84f8b505-da9d-421c-b00a-3d6407aac332
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelDQETqoAMFwxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b547-566c7abb12b09a565be85833;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: N-R8_VOQSIhikiT-qqPi0ABMoZnr234hdcdinyzBath9A8M6aUZ37A==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:54:05 GMT
age: 42304
etag: "5004575548d76d878a7f27bb3fc4a9a10e8f6909"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F456d7d5b-fd41-4fa5-8e9e-d89e82b0dc48.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.0 kB (8953 bytes)
Hash
7ad00d9f89cc4d7f29fd53f89b4545f3
c4dbc6b4b8b9cf4f8868ddc060ee731cf43153d7
6d8e82f5aced08627c83945bc8f011bbaea66789427624baaef5104858472ea2

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F456d7d5b-fd41-4fa5-8e9e-d89e82b0dc48.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8953
x-amzn-requestid: 5085f7ea-72de-43e0-a670-d221fc6af736
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelBzHcPIAMFpqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b53e-1c4bfd5c56b0af173eb43001;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:22 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: pCvtOb9B5beB4xJFbTvDQxO37bcXmPVCAwUOw7hOZLHTe_W-ii4T6Q==
via: 1.1 7dcaa43cd0535d889b549e6a30a57aa0.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 22:35:31 GMT
etag: "c4dbc6b4b8b9cf4f8868ddc060ee731cf43153d7"
content-type: image/jpeg
age: 39818
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b4612fa-9557-465f-8ec2-dc7a447daaac.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.5 kB (9495 bytes)
Hash
6b24b0e9eeeecd44eafc5957dc5450db
e071eb9837a242f41035da077dc6c9b0178d8f9f
33e9c9c03180d2855606be0605c894180d81e151e2f4b4b2bacf5325c11152d4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b4612fa-9557-465f-8ec2-dc7a447daaac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9495
x-amzn-requestid: f9246128-d6a3-49e0-982d-9f75d110aa2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelztGlqoAMFs8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b67d-7f04a07955c3c9a8644475a0;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:47:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: FDwmWmTCnCZt2aCUx9Tb3r4RJ4co-0A1dAbABurYrJNcyGa6ZMmONw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:56:13 GMT
age: 42176
etag: "e071eb9837a242f41035da077dc6c9b0178d8f9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13985f97-93f1-44be-8be0-92fb128d3c51.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11927 bytes)
Hash
5516af00c2c5dcb5a8c873b6f61ea0df
088236fab64197c530ba85242bf798f13669179e
c7a99982b8af0e2b28bab9cf5b24fc75b50ae172d5c529efec9161c7d436ff90

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13985f97-93f1-44be-8be0-92fb128d3c51.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11927
x-amzn-requestid: 78067be5-c9cf-4ee0-a5b0-86fd32baca38
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelCxGiFIAMFWHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b544-5df3064a5b15f2ee370e4016;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: tzYdJmmDsOLwZBBJ2z_RXL17am3WgRC372zZQ3Va8hBlsEC5bLvjdw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:46:36 GMT
age: 42753
etag: "088236fab64197c530ba85242bf798f13669179e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

proundecimnetteamit.com/css/chunk-9d09e3cc.dc573170.css

3.143.47.169

200 OK

1.2 kB

URL HTTP/2
proundecimnetteamit.com/css/chunk-9d09e3cc.dc573170.css
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (1170), with no line terminators
Size
1.2 kB (1170 bytes)
Hash
e5d4321515ff03db87a5348cb7418890
391b25239b9d439e7fafc265a979b9af9ba29551
10bd13fa41722b5e2b52d1d1a777203e052d8ccdaa8ef80dbec8ab9a0b342e0b

HTTP Headers

GET /css/chunk-9d09e3cc.dc573170.css HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: text/css; charset=UTF-8
content-length: 1170
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97398
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"492-17a9bf3c685"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/css/chunk-9df6c36a.07e9d1fc.css

3.143.47.169

304 Not Modified

0 B

URL HTTP/2
proundecimnetteamit.com/css/chunk-9df6c36a.07e9d1fc.css
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /css/chunk-9df6c36a.07e9d1fc.css HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Mon, 12 Jul 2021 18:21:22 GMT
If-None-Match: W/"e2-17a9bf3c6a5"
TE: trailers

HTTP/2 304 Not Modified
date: Mon, 24 Oct 2022 09:39:09 GMT
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97397
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"e2-17a9bf3c6a5"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/js/chunk-0e9dbfdc.6e8bc6f7.js

3.143.47.169

200 OK

20 kB

URL HTTP/2
proundecimnetteamit.com/js/chunk-0e9dbfdc.6e8bc6f7.js
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
Unicode text, UTF-8 text, with very long lines (19864)
Size
20 kB (19920 bytes)
Hash
7f2b986a002ccbe557300ef623e60526
7e6488ff8d4cb55f12d667587bc9573065d6502c
d2365dde6195a4793e226c17c12468ea10d92c42cdae250bcc92ef4444c657c1

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/chunk-0e9dbfdc.6e8bc6f7.js HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: application/javascript; charset=UTF-8
content-length: 19920
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97395
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"4dd0-17a9bf3c685"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/js/chunk-14e6c0c4.02543dfb.js

3.143.47.169

200 OK

5.3 kB

URL HTTP/2
proundecimnetteamit.com/js/chunk-14e6c0c4.02543dfb.js
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (5256)
Size
5.3 kB (5308 bytes)
Hash
35139b3785b937d181ef81023e73d404
8a2e5318ec13b5ca595586572578a685a51ad9ec
af2fb30e2a0d3117e1ee6bb7baa370e41b1bf5880788925bf21b3d95cab3f494

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/chunk-14e6c0c4.02543dfb.js HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: application/javascript; charset=UTF-8
content-length: 5308
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97394
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"14bc-17a9bf3c685"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/js/chunk-1bf0738c.ea182cc1.js

3.143.47.169

200 OK

3.6 kB

URL HTTP/2
proundecimnetteamit.com/js/chunk-1bf0738c.ea182cc1.js
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (3593)
Size
3.6 kB (3645 bytes)
Hash
0989f490b967534c69665703f793c7d5
c3750817f43a17b92e55bbc5457fad8d2874f5fc
e0dd2bfad79f046a6473e1dbd1b5d7bd22e4ba3b13e6fb503f4152b8da928a38

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/chunk-1bf0738c.ea182cc1.js HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: application/javascript; charset=UTF-8
content-length: 3645
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97393
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"e3d-17a9bf3c685"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/js/chunk-503f8bdc.ee8bd8cd.js

3.143.47.169

200 OK

19 kB

URL HTTP/2
proundecimnetteamit.com/js/chunk-503f8bdc.ee8bd8cd.js
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
Unicode text, UTF-8 text, with very long lines (18702)
Size
19 kB (18756 bytes)
Hash
a28affdd8d46dabbe52a3ef5ae1bda85
da222cad24d851c201fa9e82a64e9fb646f011bf
de1814f54ccd06aa293c172a5d6a40a61759050219651f26bf584bceff3857ee

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/chunk-503f8bdc.ee8bd8cd.js HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: application/javascript; charset=UTF-8
content-length: 18756
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97392
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"4944-17a9bf3c685"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/js/chunk-7db3c7cc.b5721111.js

3.143.47.169

200 OK

35 kB

URL HTTP/2
proundecimnetteamit.com/js/chunk-7db3c7cc.b5721111.js
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type
Unicode text, UTF-8 text, with very long lines (32543), with LF, NEL line terminators
Size
35 kB (34629 bytes)
Hash
63e1981368f8661e468974993c0a1f76
088203a2693f15b448b98ccf47522d8f45fb1911
0b8ac2d0e5705117eff1b23f043cfd4f0346ff226f160c34047b6b5e8843878b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/chunk-7db3c7cc.b5721111.js HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: application/javascript; charset=UTF-8
content-length: 34629
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97391
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"8745-17a9bf3c685"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/js/chunk-9df6c36a.7f35be0d.js

3.143.47.169

304 Not Modified

0 B

URL HTTP/2
proundecimnetteamit.com/js/chunk-9df6c36a.7f35be0d.js
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/chunk-9df6c36a.7f35be0d.js HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Mon, 12 Jul 2021 18:21:22 GMT
If-None-Match: W/"a7c-17a9bf3c6a5"
TE: trailers

HTTP/2 304 Not Modified
date: Mon, 24 Oct 2022 09:39:09 GMT
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97389
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"a7c-17a9bf3c6a5"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/js/chunk-012826f4.2fd2cb4d.js

3.143.47.169

200 OK

0 B

URL HTTP/2
proundecimnetteamit.com/js/chunk-012826f4.2fd2cb4d.js
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/chunk-012826f4.2fd2cb4d.js HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: application/javascript; charset=UTF-8
content-length: 859178
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97396
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"d1c2a-17a9bf3c685"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

proundecimnetteamit.com/js/chunk-9d09e3cc.fd27c551.js

3.143.47.169

200 OK

0 B

URL HTTP/2
proundecimnetteamit.com/js/chunk-9d09e3cc.fd27c551.js
IP
3.143.47.169:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/chunk-9d09e3cc.fd27c551.js HTTP/1.1
Host: proundecimnetteamit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://proundecimnetteamit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 24 Oct 2022 09:39:09 GMT
content-type: application/javascript; charset=UTF-8
content-length: 20969
server: Apache/2.4.48 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.33
x-ratelimit-limit: 100000
x-ratelimit-remaining: 97390
x-ratelimit-reset: 1666604707
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 12 Jul 2021 18:21:22 GMT
etag: W/"51e9-17a9bf3c685"
via: 1.1 mail4techsectoromega.com (Apache/2.4.48)
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (46)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type