r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8182
Expires: Sat, 03 Dec 2022 13:18:03 GMT
Date: Sat, 03 Dec 2022 11:01:41 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7439fb99a444b66db1e68ffbfaa38451
4b7742d7956485906f1c392c478515ff89a46184
636327ce88f733e5a1d39af212f97242717a39ce20edaef330fafea238e3a309
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5978
Cache-Control: max-age=90552
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 11:01:41 GMT
Etag: "6389d3f3-1d7"
Expires: Sun, 04 Dec 2022 12:10:53 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:15 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6855
Expires: Sat, 03 Dec 2022 12:55:56 GMT
Date: Sat, 03 Dec 2022 11:01:41 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 10:18:15 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2606
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: fWNnALuSb2l2pwYtD4E+IPqAzcPchmE84oOFNg5wLauAIAfJUO5xaO4zJPERT08+9cJRuT7wNOU=
x-amz-request-id: NPBD7AEXDVA0BJAV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 10:47:05 GMT
age: 876
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 11:01:41 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
pqeoma.com/cl/f574734be5dbbade
104.21.47.111302 Found 654 B URL HTTP/1.1 pqeoma.com/cl/f574734be5dbbade
IP 104.21.47.111:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b2e8ed0444d127661f2b449c6867d843
aa9d5bdc2b9a2398d7cb6c7fefbf8440e3cadc71
783d97833eb9acfb6d55cee716d94b38808b1ad2d53d64d0d3525794b854e947
Analyzer Verdict Alert fortinet Phishing
GET /cl/f574734be5dbbade HTTP/1.1
Host: pqeoma.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sat, 03 Dec 2022 11:01:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.1.13
Cache-Control: no-cache
Location: https://digitaltechnology.co/campaign/no/?cid=8&ref=affgg&click_id=4161301855&source=28773
X-Frame-Options: DENY
Set-Cookie: sbcf574734be5dbbade=eyJpdiI6InRqdmFwZWV1SkQ1QWYvaWRjOUhFcVE9PSIsInZhbHVlIjoiUFVCV24yL0xHMjJSU1dKa290MldUZz09IiwibWFjIjoiOTZhNDQ1ZDNmOTU5Y2EzYjNkNGI4MWY0NzljY2NmYThiNDA4OGY5NTViZjU2N2Q5YmYzYjkwMjI3NTAyYjFlMSIsInRhZyI6IiJ9; expires=Sat, 03 Dec 2022 12:01:41 GMT; Max-Age=3600; path=/; httponly; samesite=lax
vis=eyJpdiI6Imp5T3I4VURmcytJSmlJTk9FbWtYSXc9PSIsInZhbHVlIjoielNuYVkzRXhRcFdsUHhvYmg5UmhSdz09IiwibWFjIjoiMmUyNjk4ZGY5M2E5Y2VmZmUxNWJmZjYxODFjN2YwZWE2N2FhMDI4YjQ4YjE4NDFhZGRiMjhhZGFmMWQ2ZjFhYSIsInRhZyI6IiJ9; expires=Fri, 03 Mar 2023 11:01:41 GMT; Max-Age=7776000; path=/; httponly; samesite=lax
Expires: Thu, 01 Jan 1970 00:00:01 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GkE4erf2%2Fqd4lfHTsh1IORtY7kYJnucM0DYjSBYjfTE2p2sFfheuNinyKB1O8eHgrhurIE6E2jvPBeEkCXzk0DNaR43gEBbHeUIjsL9a6uJqckVhHaFoi35%2B1mP0"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 773bce44ed57b50b-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 10:11:17 GMT
cache-control: public,max-age=3600
age: 3024
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a151c326c67e1abb747847c1427db76f
80885d30ef8ba867bf33c40b861976958a27493a
de2b573ee1c8af980e593352e0c331b2595f62bd4499300ace30821d20814760
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5976
Cache-Control: max-age=171885
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 11:01:42 GMT
Etag: "638b11ab-1d7"
Expires: Mon, 05 Dec 2022 10:46:27 GMT
Last-Modified: Sat, 03 Dec 2022 09:06:51 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.88.220.109101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.88.220.109:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: PSOE7aLxVDOUQaciLZc+BA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: sOhEriGcViEBJthcknPKprXsDbs=
digitaltechnology.co/campaign/no/?cid=8&ref=affgg&click_id=4161301855&source=28773
188.165.202.101200 OK 248 B URL HTTP/1.1 digitaltechnology.co/campaign/no/?cid=8&ref=affgg&click_id=4161301855&source=28773
IP 188.165.202.101:0
File type HTML document text\012- exported SGML document, ASCII text
Hash acadb63892787c2dd9b9ec5d4213260b
d84ec8dc8e63094c752c4b900376d1332ef4e0a2
7518776bf60502c2b385cae58a4539c3f0055ce0647a7037ef3ae32ae7c24d3b
GET /campaign/no/?cid=8&ref=affgg&click_id=4161301855&source=28773 HTTP/1.1
Host: digitaltechnology.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 11:01:42 GMT
Server: Apache/2.4.37 (centos)
X-Powered-By: PHP/7.2.24
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: : 1;mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Feature-Policy: self
Set-Cookie: LSW_WEB01=LSW_WEB01; path=/
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13272
Expires: Sat, 03 Dec 2022 14:42:55 GMT
Date: Sat, 03 Dec 2022 11:01:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13272
Expires: Sat, 03 Dec 2022 14:42:55 GMT
Date: Sat, 03 Dec 2022 11:01:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13272
Expires: Sat, 03 Dec 2022 14:42:55 GMT
Date: Sat, 03 Dec 2022 11:01:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13272
Expires: Sat, 03 Dec 2022 14:42:55 GMT
Date: Sat, 03 Dec 2022 11:01:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13272
Expires: Sat, 03 Dec 2022 14:42:55 GMT
Date: Sat, 03 Dec 2022 11:01:43 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
34.120.237.76200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XvG2dAUeB914GQ1qJwQRHovAtra8OSjG-CsXeR8UOBq5r8qVjEbPBQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 05:02:08 GMT
age: 21575
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg
34.120.237.76200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1e74254b3fdce7d6b84a71a7aff43789
65c8b4abf957f9b54d99d0f78559e639adb29efb
f278c3cc6734da7188862a8c651c803e7ac1fda82234e191761453cb1359d3ee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5354
x-amzn-requestid: 3d58ffea-3433-4c5c-a60b-17f6de3a33e5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cSsnvG44oAMFfyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638427ca-63b375f04189b7ce7d84cd5d;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 03:15:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -AurmlKwF0QgfsWBsV3ZN9ZyDhw1Zo82zUqrpkBbvbCfh0j7evV2Tg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 11:01:04 GMT
age: 39
etag: "65c8b4abf957f9b54d99d0f78559e639adb29efb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 00:57:24 GMT
age: 36259
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3abdcce275bb9723b4ac1d0c38cc8891
91f0d888c38db0899f106b652e3dcac062648099
ff411fc0d5abaf519d6600961ec51ad71ad9a02e23cc02ad818e27f0324b3d1e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7657
x-amzn-requestid: c0dbd862-41cf-4fa8-ab6b-256763c63fbf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZN1Fo6IAMF9EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f25-554ffbc83fd70c557437120f;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: V_7_ohQr9ENIjOvdvy65ZpJqg2OI9gzRdiuxCTJzl4qwXe2Nmu_tAQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:49:27 GMT
etag: "91f0d888c38db0899f106b652e3dcac062648099"
content-type: image/jpeg
age: 47536
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45182367fd4f8b6dd234eef1022acdb1
d4b3052021ff3ad1dc4134fa25eb12a98e7c17da
a57fadaf74db2fb457cfe761314d56f021d22146f5bdb6a8bf11b6519e8a558d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9715
x-amzn-requestid: c8102cfa-78dc-4d81-ad6a-e16b9132e238
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZO2HQKIAMF8IA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f2b-350c586b568e6565763376bd;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0QkVKyYm9UwlF5FEeli9UsRAQwEi3-c3bMR-QSJxIKRQe7WWT76dGQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:51:06 GMT
age: 47437
etag: "d4b3052021ff3ad1dc4134fa25eb12a98e7c17da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20049904-a818-4d1c-9585-79edf76dcc61.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20049904-a818-4d1c-9585-79edf76dcc61.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9b77186d0d93f7ccfe729edd9d184af3
458aa485b9abef3b72427d308a172d1c24eceabd
8bed5a8e56e8c43fcbdc807245c2b651d014a06368574e57a25b718399a4a701
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20049904-a818-4d1c-9585-79edf76dcc61.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6966
x-amzn-requestid: 2b40c185-e050-4bfd-9b08-bb70e6f89824
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfAb7Ev3oAMFnrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6389144c-65301ace20da6f580ed77e82;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 20:53:32 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xBRZ6xulfveO7b5ZY8ApNbQJ1Sz8LbzEAb3YqxOEaZGYem-ZRaar_Q==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 05:56:31 GMT
age: 18312
etag: "458aa485b9abef3b72427d308a172d1c24eceabd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
prod.digitaltechnology.co/consent/request?productId=1176&responseUrl=https%3A%2F%2Fnorway.docubay.com%2F%3Fmsisdn%3D47xxxxxxx&trafficSource=ADV&trxid=a0e46dcf271145e8e6c636d267226e0e
151.80.42.60302 0 B URL HTTP/1.1 prod.digitaltechnology.co/consent/request?productId=1176&responseUrl=https%3A%2F%2Fnorway.docubay.com%2F%3Fmsisdn%3D47xxxxxxx&trafficSource=ADV&trxid=a0e46dcf271145e8e6c636d267226e0e
IP 151.80.42.60:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
GET /consent/request?productId=1176&responseUrl=https%3A%2F%2Fnorway.docubay.com%2F%3Fmsisdn%3D47xxxxxxx&trafficSource=ADV&trxid=a0e46dcf271145e8e6c636d267226e0e HTTP/1.1
Host: prod.digitaltechnology.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://digitaltechnology.co/campaign/no/?cid=8&ref=affgg&click_id=4161301855&source=28773
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/1.1 302
Location: http://checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http%3A%2F%2Fprod.digitaltechnology.co%2Fv1%2Fredirect%2Fno%2Ftelnor%3Ftransaction_id%3Dl4sQybWc05Xu
Content-Language: en-US
Content-Length: 0
Date: Sat, 03 Dec 2022 11:01:43 GMT
Connection: close
Server: TEST
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: : 1;mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Feature-Policy: self
Set-Cookie: JSESSIONID=2D44750B3213C6A1F677CBA04085B589; Path=/; HttpOnly
LSW_WEB01=LSW_WEB01; path=/
checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http%3A%2F%2Fprod.digitaltechnology.co%2Fv1%2Fredirect%2Fno%2Ftelnor%3Ftransaction_id%3Dl4sQybWc05Xu
54.72.64.105302 Found 364 B URL HTTP/1.1 checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http%3A%2F%2Fprod.digitaltechnology.co%2Fv1%2Fredirect%2Fno%2Ftelnor%3Ftransaction_id%3Dl4sQybWc05Xu
IP 54.72.64.105:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (364), with no line terminators
Hash 4a7c2b9afd04c33a1a726a228a7a1951
dda1cd7824550fe272fd5c3b727aa5b5a662dacd
3f1d383b4aee394a0fe2ce0630e8ed0c585556567b4bb30ad75367df97419a17
GET /purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http%3A%2F%2Fprod.digitaltechnology.co%2Fv1%2Fredirect%2Fno%2Ftelnor%3Ftransaction_id%3Dl4sQybWc05Xu HTTP/1.1
Host: checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sat, 03 Dec 2022 11:01:43 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.21.4
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Location: https://telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
Cache-Control: no-cache
X-Request-Id: da6ffbf7-45ce-4eb9-860f-600c1a70a823
X-Runtime: 0.010687
Vary: Origin
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash fa4a53b59cc84154bd5c9e5dd3a055b4
d0c7ff91078ca984c841e7a97b5adf62d8793487
b3a3251ea86e807f50bf847806e8a2f6191c674a93aebf59702b43ad70f0b6f4
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 03 Dec 2022 11:01:43 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 02 Dec 2022 21:09:12 GMT
Expires: Sat, 03 Dec 2022 21:09:12 GMT
ETag: "d0c7ff91078ca984c841e7a97b5adf62d8793487"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
telenor.checkout.sla-alacrity.com/assets/tailwind-f9b7d004f09d04874f4228e500e0a5ac1ec12899ff30c3c7d6a635b8a3011e67.css
52.17.1.48200 OK 2.5 kB URL HTTP/2 telenor.checkout.sla-alacrity.com/assets/tailwind-f9b7d004f09d04874f4228e500e0a5ac1ec12899ff30c3c7d6a635b8a3011e67.css
IP 52.17.1.48:0
File type ASCII text, with very long lines (10270)
Hash c04b0ab99213ae3642beae2ac7f87a86
8f4523383fd4f2f9255d4ecbc0438aefb1dce209
041905d0d38c16faf840fb9254f1844515c1464fca446c17f17f121158a3e1cb
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
GET /assets/tailwind-f9b7d004f09d04874f4228e500e0a5ac1ec12899ff30c3c7d6a635b8a3011e67.css HTTP/1.1
Host: telenor.checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
Connection: keep-alive
Cookie: _checkout_telenor_session=3O5awqL%2BN8vk%2BBGBpij%2BPMvWxEY9ImPZB3%2BLKU0oesVMEt9JplRLkheIOaVhD0MRAzuUkF7NdVKcTSEVzVGcItYNTeprWseSBRE71SK7lbIXL1tOoV0z%2FOD9PEwWkpnwJh3C2A1d4E0z8NVQzQ3i50CExCl4sdx1f6MLHUHikPCaqEouoA07%2F6mLsyFuGa4UmIjWPuLATB9eZQg2hyYtEl8ZM6AX0slVTLCJdat6l4eqQW1M2nL0gC6wQBm5yYmuCyS%2B16gx75H4O9hipB87wc6mL3NV6PwQgQ20HPLl%2Fee%2F--dqoms%2FaGSU5fHN4t--H1VCZFc%2BYXr%2Bby4G3Z7Chg%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: text/css
content-length: 2537
server: nginx/1.21.4
last-modified: Tue, 22 Nov 2022 10:57:39 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
telenor.checkout.sla-alacrity.com/assets/application-e659e1a0d2dcc91d56eddcca4f93f92fd0442b4faecd20fde43719c7bd4fc36b.css
52.17.1.48200 OK 706 B URL HTTP/2 telenor.checkout.sla-alacrity.com/assets/application-e659e1a0d2dcc91d56eddcca4f93f92fd0442b4faecd20fde43719c7bd4fc36b.css
IP 52.17.1.48:0
Hash 92dc36d696640dd370a24bd0d38e8a57
30a3942a3d18e53b6db56ef36bf372df5d5e8989
5d575ad602719a85301374d7c27bd6784fa10c9dae170b5cb33f1c9a40087340
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
GET /assets/application-e659e1a0d2dcc91d56eddcca4f93f92fd0442b4faecd20fde43719c7bd4fc36b.css HTTP/1.1
Host: telenor.checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
Connection: keep-alive
Cookie: _checkout_telenor_session=3O5awqL%2BN8vk%2BBGBpij%2BPMvWxEY9ImPZB3%2BLKU0oesVMEt9JplRLkheIOaVhD0MRAzuUkF7NdVKcTSEVzVGcItYNTeprWseSBRE71SK7lbIXL1tOoV0z%2FOD9PEwWkpnwJh3C2A1d4E0z8NVQzQ3i50CExCl4sdx1f6MLHUHikPCaqEouoA07%2F6mLsyFuGa4UmIjWPuLATB9eZQg2hyYtEl8ZM6AX0slVTLCJdat6l4eqQW1M2nL0gC6wQBm5yYmuCyS%2B16gx75H4O9hipB87wc6mL3NV6PwQgQ20HPLl%2Fee%2F--dqoms%2FaGSU5fHN4t--H1VCZFc%2BYXr%2Bby4G3Z7Chg%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: text/css
content-length: 706
server: nginx/1.21.4
last-modified: Tue, 22 Nov 2022 10:57:39 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
telenor.checkout.sla-alacrity.com/assets/inter-font-8c3e82affb176f4bca9616b838d906343d1251adc8408efe02cf2b1e4fcf2bc4.css
52.17.1.48200 OK 1.6 kB URL HTTP/2 telenor.checkout.sla-alacrity.com/assets/inter-font-8c3e82affb176f4bca9616b838d906343d1251adc8408efe02cf2b1e4fcf2bc4.css
IP 52.17.1.48:0
File type ASCII text, with very long lines (519)
Hash 86745b2429e4866652f5186e30be3203
4086aecd5d9e56d814480d6fae63d8b1937994bf
8e91248ae998ad184472e2c069e27e6799fefccc86b080a0e38b77d8005d2a90
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
GET /assets/inter-font-8c3e82affb176f4bca9616b838d906343d1251adc8408efe02cf2b1e4fcf2bc4.css HTTP/1.1
Host: telenor.checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
Connection: keep-alive
Cookie: _checkout_telenor_session=3O5awqL%2BN8vk%2BBGBpij%2BPMvWxEY9ImPZB3%2BLKU0oesVMEt9JplRLkheIOaVhD0MRAzuUkF7NdVKcTSEVzVGcItYNTeprWseSBRE71SK7lbIXL1tOoV0z%2FOD9PEwWkpnwJh3C2A1d4E0z8NVQzQ3i50CExCl4sdx1f6MLHUHikPCaqEouoA07%2F6mLsyFuGa4UmIjWPuLATB9eZQg2hyYtEl8ZM6AX0slVTLCJdat6l4eqQW1M2nL0gC6wQBm5yYmuCyS%2B16gx75H4O9hipB87wc6mL3NV6PwQgQ20HPLl%2Fee%2F--dqoms%2FaGSU5fHN4t--H1VCZFc%2BYXr%2Bby4G3Z7Chg%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: text/css
content-length: 1607
server: nginx/1.21.4
last-modified: Tue, 22 Nov 2022 10:57:39 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
telenor.checkout.sla-alacrity.com/assets/es-module-shims.min-00d63bab8ac9742a4abcbecf1d17a40754778ee14aa2bcde069754c5265053e9.js
52.17.1.48200 OK 11 kB URL HTTP/2 telenor.checkout.sla-alacrity.com/assets/es-module-shims.min-00d63bab8ac9742a4abcbecf1d17a40754778ee14aa2bcde069754c5265053e9.js
IP 52.17.1.48:0
File type ASCII text, with very long lines (31512)
Hash ffc905f143a2582f0e569cb9a2d2074a
bae4fef1e3c2e90eeea4f19f01abbf981e3a8a02
d3a6cdd18e3135b2cdcc17e09d35bb02ca8f0c64120f6e111ad3a457a9946b22
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
GET /assets/es-module-shims.min-00d63bab8ac9742a4abcbecf1d17a40754778ee14aa2bcde069754c5265053e9.js HTTP/1.1
Host: telenor.checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
Connection: keep-alive
Cookie: _checkout_telenor_session=3O5awqL%2BN8vk%2BBGBpij%2BPMvWxEY9ImPZB3%2BLKU0oesVMEt9JplRLkheIOaVhD0MRAzuUkF7NdVKcTSEVzVGcItYNTeprWseSBRE71SK7lbIXL1tOoV0z%2FOD9PEwWkpnwJh3C2A1d4E0z8NVQzQ3i50CExCl4sdx1f6MLHUHikPCaqEouoA07%2F6mLsyFuGa4UmIjWPuLATB9eZQg2hyYtEl8ZM6AX0slVTLCJdat6l4eqQW1M2nL0gC6wQBm5yYmuCyS%2B16gx75H4O9hipB87wc6mL3NV6PwQgQ20HPLl%2Fee%2F--dqoms%2FaGSU5fHN4t--H1VCZFc%2BYXr%2Bby4G3Z7Chg%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: application/javascript
content-length: 10867
server: nginx/1.21.4
last-modified: Tue, 22 Nov 2022 10:57:39 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
telenor.checkout.sla-alacrity.com/assets/Inter-roman.latin.var-4b87a3d384ea557b10afa9570b753eda868b12b5e51eea0977ffa6e641998f6a.woff2
52.17.1.48200 OK 52 kB URL HTTP/2 telenor.checkout.sla-alacrity.com/assets/Inter-roman.latin.var-4b87a3d384ea557b10afa9570b753eda868b12b5e51eea0977ffa6e641998f6a.woff2
IP 52.17.1.48:0
File type Web Open Font Format (Version 2), TrueType, length 51896, version 3.983\012- data
Hash dec25f4c0751dfa3830eb3d9edbdc8ba
f4cf732763710b1578dcb10fada6484284e39ac3
5156501c82759bb0891d4a37c4eb6bce023623d762572a946c56a17d8ae37bd8
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
GET /assets/Inter-roman.latin.var-4b87a3d384ea557b10afa9570b753eda868b12b5e51eea0977ffa6e641998f6a.woff2 HTTP/1.1
Host: telenor.checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://telenor.checkout.sla-alacrity.com/assets/inter-font-8c3e82affb176f4bca9616b838d906343d1251adc8408efe02cf2b1e4fcf2bc4.css
Cookie: _checkout_telenor_session=3O5awqL%2BN8vk%2BBGBpij%2BPMvWxEY9ImPZB3%2BLKU0oesVMEt9JplRLkheIOaVhD0MRAzuUkF7NdVKcTSEVzVGcItYNTeprWseSBRE71SK7lbIXL1tOoV0z%2FOD9PEwWkpnwJh3C2A1d4E0z8NVQzQ3i50CExCl4sdx1f6MLHUHikPCaqEouoA07%2F6mLsyFuGa4UmIjWPuLATB9eZQg2hyYtEl8ZM6AX0slVTLCJdat6l4eqQW1M2nL0gC6wQBm5yYmuCyS%2B16gx75H4O9hipB87wc6mL3NV6PwQgQ20HPLl%2Fee%2F--dqoms%2FaGSU5fHN4t--H1VCZFc%2BYXr%2Bby4G3Z7Chg%3D%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: application/font-woff2
content-length: 51896
server: nginx/1.21.4
last-modified: Tue, 22 Nov 2022 10:57:39 GMT
X-Firefox-Spdy: h2
telenor.checkout.sla-alacrity.com/assets/application-37f365cbecf1fa2810a8303f4b6571676fa1f9c56c248528bc14ddb857531b95.js
52.17.1.48200 OK 133 B URL HTTP/2 telenor.checkout.sla-alacrity.com/assets/application-37f365cbecf1fa2810a8303f4b6571676fa1f9c56c248528bc14ddb857531b95.js
IP 52.17.1.48:0
Hash c4a9268b0368b4ce02f757b73d288a50
916dbd2a596ebfff11f317c2e5ef0ba399dd3578
fff6df124e67b779fdea9075763d3639491669469c90d5c5ebdf54e435f06912
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
GET /assets/application-37f365cbecf1fa2810a8303f4b6571676fa1f9c56c248528bc14ddb857531b95.js HTTP/1.1
Host: telenor.checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
Connection: keep-alive
Cookie: _checkout_telenor_session=3O5awqL%2BN8vk%2BBGBpij%2BPMvWxEY9ImPZB3%2BLKU0oesVMEt9JplRLkheIOaVhD0MRAzuUkF7NdVKcTSEVzVGcItYNTeprWseSBRE71SK7lbIXL1tOoV0z%2FOD9PEwWkpnwJh3C2A1d4E0z8NVQzQ3i50CExCl4sdx1f6MLHUHikPCaqEouoA07%2F6mLsyFuGa4UmIjWPuLATB9eZQg2hyYtEl8ZM6AX0slVTLCJdat6l4eqQW1M2nL0gC6wQBm5yYmuCyS%2B16gx75H4O9hipB87wc6mL3NV6PwQgQ20HPLl%2Fee%2F--dqoms%2FaGSU5fHN4t--H1VCZFc%2BYXr%2Bby4G3Z7Chg%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: application/javascript
content-length: 133
server: nginx/1.21.4
last-modified: Tue, 22 Nov 2022 10:57:39 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
telenor.checkout.sla-alacrity.com/assets/turbo.min-e5023178542f05fc063cd1dc5865457259cc01f3fba76a28454060d33de6f429.js
52.17.1.48200 OK 19 kB URL HTTP/2 telenor.checkout.sla-alacrity.com/assets/turbo.min-e5023178542f05fc063cd1dc5865457259cc01f3fba76a28454060d33de6f429.js
IP 52.17.1.48:0
File type Unicode text, UTF-8 text, with very long lines (42217)
Hash 72d37262df99bd369d4120aeb944c766
e3f0c0426809a65bfa93a713498b289b81f8f244
9ce0dcf8ae798076d65aa4d1e084e9ef934a2cbe7a6c846c20714e5ce0200914
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
GET /assets/turbo.min-e5023178542f05fc063cd1dc5865457259cc01f3fba76a28454060d33de6f429.js HTTP/1.1
Host: telenor.checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
Connection: keep-alive
Cookie: _checkout_telenor_session=3O5awqL%2BN8vk%2BBGBpij%2BPMvWxEY9ImPZB3%2BLKU0oesVMEt9JplRLkheIOaVhD0MRAzuUkF7NdVKcTSEVzVGcItYNTeprWseSBRE71SK7lbIXL1tOoV0z%2FOD9PEwWkpnwJh3C2A1d4E0z8NVQzQ3i50CExCl4sdx1f6MLHUHikPCaqEouoA07%2F6mLsyFuGa4UmIjWPuLATB9eZQg2hyYtEl8ZM6AX0slVTLCJdat6l4eqQW1M2nL0gC6wQBm5yYmuCyS%2B16gx75H4O9hipB87wc6mL3NV6PwQgQ20HPLl%2Fee%2F--dqoms%2FaGSU5fHN4t--H1VCZFc%2BYXr%2Bby4G3Z7Chg%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: application/javascript
content-length: 19356
server: nginx/1.21.4
last-modified: Tue, 22 Nov 2022 10:57:39 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
telenor.checkout.sla-alacrity.com/assets/stimulus-loading-1fc59770fb1654500044afd3f5f6d7d00800e5be36746d55b94a2963a7a228aa.js
52.17.1.48200 OK 1.0 kB URL HTTP/2 telenor.checkout.sla-alacrity.com/assets/stimulus-loading-1fc59770fb1654500044afd3f5f6d7d00800e5be36746d55b94a2963a7a228aa.js
IP 52.17.1.48:0
Hash c9f11aa7251f0b44271cf8ed2deba1a9
84bd099b6f9c87c64cffb84a286c62812c9d2efa
f20bba5234871dfeada88408971fbe4c044ddb9ab78fa386dc974901bd32c355
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
GET /assets/stimulus-loading-1fc59770fb1654500044afd3f5f6d7d00800e5be36746d55b94a2963a7a228aa.js HTTP/1.1
Host: telenor.checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
Connection: keep-alive
Cookie: _checkout_telenor_session=3O5awqL%2BN8vk%2BBGBpij%2BPMvWxEY9ImPZB3%2BLKU0oesVMEt9JplRLkheIOaVhD0MRAzuUkF7NdVKcTSEVzVGcItYNTeprWseSBRE71SK7lbIXL1tOoV0z%2FOD9PEwWkpnwJh3C2A1d4E0z8NVQzQ3i50CExCl4sdx1f6MLHUHikPCaqEouoA07%2F6mLsyFuGa4UmIjWPuLATB9eZQg2hyYtEl8ZM6AX0slVTLCJdat6l4eqQW1M2nL0gC6wQBm5yYmuCyS%2B16gx75H4O9hipB87wc6mL3NV6PwQgQ20HPLl%2Fee%2F--dqoms%2FaGSU5fHN4t--H1VCZFc%2BYXr%2Bby4G3Z7Chg%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: application/javascript
content-length: 1011
server: nginx/1.21.4
last-modified: Tue, 22 Nov 2022 10:57:39 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
telenor.checkout.sla-alacrity.com/assets/stimulus.min-900648768bd96f3faeba359cf33c1bd01ca424ca4d2d05f36a5d8345112ae93c.js
52.17.1.48200 OK 8.4 kB URL HTTP/2 telenor.checkout.sla-alacrity.com/assets/stimulus.min-900648768bd96f3faeba359cf33c1bd01ca424ca4d2d05f36a5d8345112ae93c.js
IP 52.17.1.48:0
File type ASCII text, with very long lines (33070)
Hash 904d12fdfd3780aceb6e1d81bb6ecd9d
63de560bf831a4c9da5e1990cb47ab9b5aee779a
aab9267b75f462b2b5714cbc6097f9759acece340cc246cf512c13381809b20c
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
GET /assets/stimulus.min-900648768bd96f3faeba359cf33c1bd01ca424ca4d2d05f36a5d8345112ae93c.js HTTP/1.1
Host: telenor.checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
Connection: keep-alive
Cookie: _checkout_telenor_session=3O5awqL%2BN8vk%2BBGBpij%2BPMvWxEY9ImPZB3%2BLKU0oesVMEt9JplRLkheIOaVhD0MRAzuUkF7NdVKcTSEVzVGcItYNTeprWseSBRE71SK7lbIXL1tOoV0z%2FOD9PEwWkpnwJh3C2A1d4E0z8NVQzQ3i50CExCl4sdx1f6MLHUHikPCaqEouoA07%2F6mLsyFuGa4UmIjWPuLATB9eZQg2hyYtEl8ZM6AX0slVTLCJdat6l4eqQW1M2nL0gC6wQBm5yYmuCyS%2B16gx75H4O9hipB87wc6mL3NV6PwQgQ20HPLl%2Fee%2F--dqoms%2FaGSU5fHN4t--H1VCZFc%2BYXr%2Bby4G3Z7Chg%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: application/javascript
content-length: 8385
server: nginx/1.21.4
last-modified: Tue, 22 Nov 2022 10:57:39 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
telenor.checkout.sla-alacrity.com/favicon.ico
52.17.1.48200 OK 0 B URL HTTP/2 telenor.checkout.sla-alacrity.com/favicon.ico
IP 52.17.1.48:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
GET /favicon.ico HTTP/1.1
Host: telenor.checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
Connection: keep-alive
Cookie: _checkout_telenor_session=3O5awqL%2BN8vk%2BBGBpij%2BPMvWxEY9ImPZB3%2BLKU0oesVMEt9JplRLkheIOaVhD0MRAzuUkF7NdVKcTSEVzVGcItYNTeprWseSBRE71SK7lbIXL1tOoV0z%2FOD9PEwWkpnwJh3C2A1d4E0z8NVQzQ3i50CExCl4sdx1f6MLHUHikPCaqEouoA07%2F6mLsyFuGa4UmIjWPuLATB9eZQg2hyYtEl8ZM6AX0slVTLCJdat6l4eqQW1M2nL0gC6wQBm5yYmuCyS%2B16gx75H4O9hipB87wc6mL3NV6PwQgQ20HPLl%2Fee%2F--dqoms%2FaGSU5fHN4t--H1VCZFc%2BYXr%2Bby4G3Z7Chg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: image/vnd.microsoft.icon
content-length: 0
server: nginx/1.21.4
last-modified: Tue, 22 Nov 2022 10:56:51 GMT
X-Firefox-Spdy: h2
telenor.checkout.sla-alacrity.com/assets/controllers/index-2db729dddcc5b979110e98de4b6720f83f91a123172e87281d5a58410fc43806.js
52.17.1.48200 OK 254 B URL HTTP/2 telenor.checkout.sla-alacrity.com/assets/controllers/index-2db729dddcc5b979110e98de4b6720f83f91a123172e87281d5a58410fc43806.js
IP 52.17.1.48:0
Hash 5601c6895557594c6abed971289c6000
35d0edc26c442fb04e797102c4f8d8a275fdedaa
eeca187559acb390809e997f40958bdc82a7758fc906ec4f21f868c92092c440
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
GET /assets/controllers/index-2db729dddcc5b979110e98de4b6720f83f91a123172e87281d5a58410fc43806.js HTTP/1.1
Host: telenor.checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
Connection: keep-alive
Cookie: _checkout_telenor_session=3O5awqL%2BN8vk%2BBGBpij%2BPMvWxEY9ImPZB3%2BLKU0oesVMEt9JplRLkheIOaVhD0MRAzuUkF7NdVKcTSEVzVGcItYNTeprWseSBRE71SK7lbIXL1tOoV0z%2FOD9PEwWkpnwJh3C2A1d4E0z8NVQzQ3i50CExCl4sdx1f6MLHUHikPCaqEouoA07%2F6mLsyFuGa4UmIjWPuLATB9eZQg2hyYtEl8ZM6AX0slVTLCJdat6l4eqQW1M2nL0gC6wQBm5yYmuCyS%2B16gx75H4O9hipB87wc6mL3NV6PwQgQ20HPLl%2Fee%2F--dqoms%2FaGSU5fHN4t--H1VCZFc%2BYXr%2Bby4G3Z7Chg%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: application/javascript
content-length: 254
server: nginx/1.21.4
last-modified: Tue, 22 Nov 2022 10:57:39 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
telenor.checkout.sla-alacrity.com/assets/controllers/application-368d98631bccbf2349e0d4f8269afb3fe9625118341966de054759d96ea86c7e.js
52.17.1.48200 OK 159 B URL HTTP/2 telenor.checkout.sla-alacrity.com/assets/controllers/application-368d98631bccbf2349e0d4f8269afb3fe9625118341966de054759d96ea86c7e.js
IP 52.17.1.48:0
Hash f55be6778815e69dcb1a136e124d5e1b
bb4b7e2cf3b9c5805653636f013f554c3c1030ac
e4d8c29a3bb8ba082793dd5b02b2c441799b0b85654a3d3104061ba47378b22d
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
GET /assets/controllers/application-368d98631bccbf2349e0d4f8269afb3fe9625118341966de054759d96ea86c7e.js HTTP/1.1
Host: telenor.checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
Connection: keep-alive
Cookie: _checkout_telenor_session=3O5awqL%2BN8vk%2BBGBpij%2BPMvWxEY9ImPZB3%2BLKU0oesVMEt9JplRLkheIOaVhD0MRAzuUkF7NdVKcTSEVzVGcItYNTeprWseSBRE71SK7lbIXL1tOoV0z%2FOD9PEwWkpnwJh3C2A1d4E0z8NVQzQ3i50CExCl4sdx1f6MLHUHikPCaqEouoA07%2F6mLsyFuGa4UmIjWPuLATB9eZQg2hyYtEl8ZM6AX0slVTLCJdat6l4eqQW1M2nL0gC6wQBm5yYmuCyS%2B16gx75H4O9hipB87wc6mL3NV6PwQgQ20HPLl%2Fee%2F--dqoms%2FaGSU5fHN4t--H1VCZFc%2BYXr%2Bby4G3Z7Chg%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: application/javascript
content-length: 159
server: nginx/1.21.4
last-modified: Tue, 22 Nov 2022 10:57:39 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
telenor.checkout.sla-alacrity.com/assets/controllers/purchase_controller-408936cd1bc6228f93e5d0bbb058a6f7e777a4303d6857c1c251797b3378ab02.js
52.17.1.48200 OK 701 B URL HTTP/2 telenor.checkout.sla-alacrity.com/assets/controllers/purchase_controller-408936cd1bc6228f93e5d0bbb058a6f7e777a4303d6857c1c251797b3378ab02.js
IP 52.17.1.48:0
Hash fd7154baae382391cd57e8c13f53ad23
73799cc12cec2b12926afcb40a0abd127503d044
f0906a38c720bec79078d96661c0dbf38a80b35ae33a1763353ecf486d8cd7a1
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
GET /assets/controllers/purchase_controller-408936cd1bc6228f93e5d0bbb058a6f7e777a4303d6857c1c251797b3378ab02.js HTTP/1.1
Host: telenor.checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
Connection: keep-alive
Cookie: _checkout_telenor_session=3O5awqL%2BN8vk%2BBGBpij%2BPMvWxEY9ImPZB3%2BLKU0oesVMEt9JplRLkheIOaVhD0MRAzuUkF7NdVKcTSEVzVGcItYNTeprWseSBRE71SK7lbIXL1tOoV0z%2FOD9PEwWkpnwJh3C2A1d4E0z8NVQzQ3i50CExCl4sdx1f6MLHUHikPCaqEouoA07%2F6mLsyFuGa4UmIjWPuLATB9eZQg2hyYtEl8ZM6AX0slVTLCJdat6l4eqQW1M2nL0gC6wQBm5yYmuCyS%2B16gx75H4O9hipB87wc6mL3NV6PwQgQ20HPLl%2Fee%2F--dqoms%2FaGSU5fHN4t--H1VCZFc%2BYXr%2Bby4G3Z7Chg%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: application/javascript
content-length: 701
server: nginx/1.21.4
last-modified: Tue, 22 Nov 2022 10:57:39 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
fd.sla-alacrity.com/88y4xxf50hh8.js
52.211.232.145200 OK 8.2 kB URL HTTP/2 fd.sla-alacrity.com/88y4xxf50hh8.js
IP 52.211.232.145:0
File type ASCII text, with very long lines (8175), with no line terminators
Hash 5a7ad528eb707f924b6b54855a9de6cd
798703781bee62fc01627873314670494944fef8
54a53c0c7a7f27653bb962d0dfe61a0e46a0c3cdeaa764c4582ea08109cfbf46
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
GET /88y4xxf50hh8.js HTTP/1.1
Host: fd.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/
Origin: https://telenor.checkout.sla-alacrity.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: application/javascript
content-length: 8175
server: nginx/1.21.4
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD
access-control-expose-headers:
access-control-max-age: 7200
last-modified: Tue, 22 Nov 2022 10:39:14 GMT
vary: Origin
X-Firefox-Spdy: h2
fd.sla-alacrity.com/token?partner=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&ref=
52.211.232.145200 OK 30 kB URL HTTP/2 fd.sla-alacrity.com/token?partner=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&ref=
IP 52.211.232.145:0
Hash 396a3d3bd764083fbc1384f56f69e05d
07f7f5f4f6dd061e978c1b7acbe8a64eb81c2f3e
2a95cf42a24109d0d2d6716b2fd052b24becc0f4dd0f0270a02a64601e23fa99
GET /token?partner=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&ref= HTTP/1.1
Host: fd.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/
Origin: https://telenor.checkout.sla-alacrity.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: text/plain; charset=utf-8
server: nginx/1.21.4
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-expose-headers:
access-control-max-age: 1728000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
access-control-allow-headers: Origin,Accept,Content-Type,X-Requested-With,X-CSRF-Token
vary: Accept, Origin
etag: W/"1ffcfe903f6b901f3ea022c8ae93b40f"
cache-control: max-age=0, private, must-revalidate
x-request-id: 6024542b-2f09-4fcc-87ac-cac0822d6cad
x-runtime: 0.179181
content-encoding: gzip
X-Firefox-Spdy: h2
telenor.checkout.sla-alacrity.com/update/token
52.17.1.48204 No Content 0 B URL HTTP/2 telenor.checkout.sla-alacrity.com/update/token
IP 52.17.1.48:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
POST /update/token HTTP/1.1
Host: telenor.checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
Content-Type: application/json
Origin: https://telenor.checkout.sla-alacrity.com
Content-Length: 100
Connection: keep-alive
Cookie: _checkout_telenor_session=3O5awqL%2BN8vk%2BBGBpij%2BPMvWxEY9ImPZB3%2BLKU0oesVMEt9JplRLkheIOaVhD0MRAzuUkF7NdVKcTSEVzVGcItYNTeprWseSBRE71SK7lbIXL1tOoV0z%2FOD9PEwWkpnwJh3C2A1d4E0z8NVQzQ3i50CExCl4sdx1f6MLHUHikPCaqEouoA07%2F6mLsyFuGa4UmIjWPuLATB9eZQg2hyYtEl8ZM6AX0slVTLCJdat6l4eqQW1M2nL0gC6wQBm5yYmuCyS%2B16gx75H4O9hipB87wc6mL3NV6PwQgQ20HPLl%2Fee%2F--dqoms%2FaGSU5fHN4t--H1VCZFc%2BYXr%2Bby4G3Z7Chg%3D%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 03 Dec 2022 11:01:45 GMT
server: nginx/1.21.4
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: no-cache
x-request-id: b392fc92-6750-4ff5-9f9b-f623b3769e2b
x-runtime: 0.013179
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash e9d45e973c92820be521dc49708e7800
71583dfea67636415f80c74df2567790d347e1bb
0aae90c502faec1e2ac84a85f3c589ab5cf36948deb8b75b072221e808fff93f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=142538
Date: Sat, 03 Dec 2022 11:01:46 GMT
Etag: "638ab664-1d7"
Expires: Mon, 05 Dec 2022 02:37:24 GMT
Last-Modified: Sat, 03 Dec 2022 02:37:24 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zCrZsSgjz5zl3eOYtaQqf40tFdxqHFnRtyvEu8u7kgd0hna-Hk2p-Q==
dob.payment.io/v3/consent?token=a79ce1b6-170b-4373-88d9-0001c29ed25f&errorUrl=https%3A%2F%2Ftelenor.checkout.sla-alacrity.com%2Fcallback%2Ferror%3Fid%3D5ea4877647b3e75efe06a36ed2807c7a
108.129.63.247200 OK 223 kB URL HTTP/2 dob.payment.io/v3/consent?token=a79ce1b6-170b-4373-88d9-0001c29ed25f&errorUrl=https%3A%2F%2Ftelenor.checkout.sla-alacrity.com%2Fcallback%2Ferror%3Fid%3D5ea4877647b3e75efe06a36ed2807c7a
IP 108.129.63.247:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (54939), with NEL line terminators
Size 223 kB (222646 bytes)
Hash db6663d6fd0224c84c54db8ee94f2ce7
da8e07f302d551983e60ec3fcb195f57e3b13de1
564aa4baef7e9563fe0399baebc7ad1f9d3a29c6388ca4347c3e901c8c67b3fe
GET /v3/consent?token=a79ce1b6-170b-4373-88d9-0001c29ed25f&errorUrl=https%3A%2F%2Ftelenor.checkout.sla-alacrity.com%2Fcallback%2Ferror%3Fid%3D5ea4877647b3e75efe06a36ed2807c7a HTTP/1.1
Host: dob.payment.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:46 GMT
content-type: text/html
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
content-security-policy: base-uri 'none'; object-src 'none'; script-src 'nonce-a8a0eb45cd5a4962b226a1bc6f81a6a5'; style-src 'nonce-a8a0eb45cd5a4962b226a1bc6f81a6a5' https://fonts.googleapis.com 'nonce-a8a0eb45cd5a4962b226a1bc6f81a6a5'; font-src https://fonts.gstatic.com data:; default-src 'none'; img-src data:; connect-src 'self'; form-action 'none'; frame-ancestors 'none'; report-uri /csp-violation-report
set-cookie: sessionId=72504e086f814bb798db0201523a4d72;Version=1;Path=/;HttpOnly
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
dob.payment.io/v2/log
108.129.63.247200 OK 0 B IP 108.129.63.247:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
POST /v2/log HTTP/1.1
Host: dob.payment.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dob.payment.io/v3/consent?token=a79ce1b6-170b-4373-88d9-0001c29ed25f&errorUrl=https%3A%2F%2Ftelenor.checkout.sla-alacrity.com%2Fcallback%2Ferror%3Fid%3D5ea4877647b3e75efe06a36ed2807c7a
Content-Type: text/plain;charset=UTF-8
Origin: https://dob.payment.io
Content-Length: 25
Connection: keep-alive
Cookie: sessionId=72504e086f814bb798db0201523a4d72
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:46 GMT
content-length: 0
set-cookie: sessionId=72504e086f814bb798db0201523a4d72;Version=1;Path=/;HttpOnly
vary: Accept-Encoding
X-Firefox-Spdy: h2
dob.payment.io/v2/log
108.129.63.247200 OK 0 B IP 108.129.63.247:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
POST /v2/log HTTP/1.1
Host: dob.payment.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dob.payment.io/v3/consent?token=a79ce1b6-170b-4373-88d9-0001c29ed25f&errorUrl=https%3A%2F%2Ftelenor.checkout.sla-alacrity.com%2Fcallback%2Ferror%3Fid%3D5ea4877647b3e75efe06a36ed2807c7a
Content-Type: text/plain;charset=UTF-8
Origin: https://dob.payment.io
Content-Length: 19
Connection: keep-alive
Cookie: sessionId=72504e086f814bb798db0201523a4d72
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:46 GMT
content-length: 0
set-cookie: sessionId=72504e086f814bb798db0201523a4d72;Version=1;Path=/;HttpOnly
vary: Accept-Encoding
X-Firefox-Spdy: h2
dob.payment.io/web-vitals
108.129.63.247200 OK 0 B URL HTTP/2 dob.payment.io/web-vitals
IP 108.129.63.247:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
POST /web-vitals HTTP/1.1
Host: dob.payment.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 150
Origin: https://dob.payment.io
Connection: keep-alive
Referer: https://dob.payment.io/v3/consent?token=a79ce1b6-170b-4373-88d9-0001c29ed25f&errorUrl=https%3A%2F%2Ftelenor.checkout.sla-alacrity.com%2Fcallback%2Ferror%3Fid%3D5ea4877647b3e75efe06a36ed2807c7a
Cookie: sessionId=72504e086f814bb798db0201523a4d72
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:46 GMT
content-length: 0
set-cookie: sessionId=72504e086f814bb798db0201523a4d72;Version=1;Path=/;HttpOnly
vary: Accept-Encoding
X-Firefox-Spdy: h2
dob.payment.io/web-vitals
108.129.63.247200 OK 0 B URL HTTP/2 dob.payment.io/web-vitals
IP 108.129.63.247:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
POST /web-vitals HTTP/1.1
Host: dob.payment.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 151
Origin: https://dob.payment.io
Connection: keep-alive
Referer: https://dob.payment.io/v3/consent?token=a79ce1b6-170b-4373-88d9-0001c29ed25f&errorUrl=https%3A%2F%2Ftelenor.checkout.sla-alacrity.com%2Fcallback%2Ferror%3Fid%3D5ea4877647b3e75efe06a36ed2807c7a
Cookie: sessionId=72504e086f814bb798db0201523a4d72
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:46 GMT
content-length: 0
set-cookie: sessionId=72504e086f814bb798db0201523a4d72;Version=1;Path=/;HttpOnly
vary: Accept-Encoding
X-Firefox-Spdy: h2
dob.payment.io/consent-vitals
108.129.63.247200 OK 0 B URL HTTP/2 dob.payment.io/consent-vitals
IP 108.129.63.247:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery Phishing - Telenor
urlquery Phishing - Telenor
POST /consent-vitals HTTP/1.1
Host: dob.payment.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 169
Origin: https://dob.payment.io
Connection: keep-alive
Referer: https://dob.payment.io/v3/consent?token=a79ce1b6-170b-4373-88d9-0001c29ed25f&errorUrl=https%3A%2F%2Ftelenor.checkout.sla-alacrity.com%2Fcallback%2Ferror%3Fid%3D5ea4877647b3e75efe06a36ed2807c7a
Cookie: sessionId=72504e086f814bb798db0201523a4d72
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:46 GMT
content-length: 0
set-cookie: sessionId=72504e086f814bb798db0201523a4d72;Version=1;Path=/;HttpOnly
vary: Accept-Encoding
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F652bfe35-9b09-4fba-b7b5-c6bd90cccdbe.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F652bfe35-9b09-4fba-b7b5-c6bd90cccdbe.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ffa12df550123f63b20f67437cd8a04
398fd2d837c73f54c4591b69cd683f29bdf9184a
fd9ac4396488098923c27531295e64475047dd008a901e59915109a73a69f305
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F652bfe35-9b09-4fba-b7b5-c6bd90cccdbe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6119
x-amzn-requestid: cac5842e-2b57-4eda-9b09-27ec8a0b1bf8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMiE7Hq0oAMFzHg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381b085-151f123551f999a918de8a3a;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 06:21:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mrS561ug59NStQyD3cH4ndqGvY3QiLVeMFOoC86ktj52PghNjeYa5w==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 20:55:39 GMT
age: 50771
etag: "398fd2d837c73f54c4591b69cd683f29bdf9184a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fd.sla-alacrity.com/token/fingerprint?token=78931ee6-7659-4f8a-b268-414fb55fcd08&fingerprint=9e4947f35751465411fd1a4f5c358c78
52.211.232.145200 OK 0 B URL HTTP/2 fd.sla-alacrity.com/token/fingerprint?token=78931ee6-7659-4f8a-b268-414fb55fcd08&fingerprint=9e4947f35751465411fd1a4f5c358c78
IP 52.211.232.145:0
POST /token/fingerprint?token=78931ee6-7659-4f8a-b268-414fb55fcd08&fingerprint=9e4947f35751465411fd1a4f5c358c78 HTTP/1.1
Host: fd.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telenor.checkout.sla-alacrity.com/
Origin: https://telenor.checkout.sla-alacrity.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:45 GMT
content-type: text/plain; charset=utf-8
server: nginx/1.21.4
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-expose-headers:
access-control-max-age: 1728000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
access-control-allow-headers: Origin,Accept,Content-Type,X-Requested-With,X-CSRF-Token
vary: Accept, Origin
etag: W/"2689367b205c16ce32ed4200942b8b8b"
cache-control: max-age=0, private, must-revalidate
x-request-id: 04d5cab2-038d-4a88-ada7-129da9df9301
x-runtime: 0.169499
content-encoding: gzip
X-Firefox-Spdy: h2
telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
52.17.1.48200 OK 0 B URL HTTP/2 telenor.checkout.sla-alacrity.com/purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu
IP 52.17.1.48:0
GET /purchase?correlator=l4sQybWc05Xu&merchant=partner:a0dfd008377a0dc98ff2e28b18cf12fd8f912bc2&service=campaign:d078d24ebb8575b50f1090890b2c0c446bb36c30&redirect_url=http://prod.digitaltechnology.co/v1/redirect/no/telnor?transaction_id=l4sQybWc05Xu HTTP/1.1
Host: telenor.checkout.sla-alacrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 11:01:44 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.4
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
link: </assets/tailwind-f9b7d004f09d04874f4228e500e0a5ac1ec12899ff30c3c7d6a635b8a3011e67.css>; rel=preload; as=style; nopush,</assets/inter-font-8c3e82affb176f4bca9616b838d906343d1251adc8408efe02cf2b1e4fcf2bc4.css>; rel=preload; as=style; nopush,</assets/application-e659e1a0d2dcc91d56eddcca4f93f92fd0442b4faecd20fde43719c7bd4fc36b.css>; rel=preload; as=style; nopush,</assets/es-module-shims.min-00d63bab8ac9742a4abcbecf1d17a40754778ee14aa2bcde069754c5265053e9.js>; rel=preload; as=script; nopush
etag: W/"76a9c08487f417c07f57a9d948c74386"
cache-control: max-age=0, private, must-revalidate
set-cookie: _checkout_telenor_session=3O5awqL%2BN8vk%2BBGBpij%2BPMvWxEY9ImPZB3%2BLKU0oesVMEt9JplRLkheIOaVhD0MRAzuUkF7NdVKcTSEVzVGcItYNTeprWseSBRE71SK7lbIXL1tOoV0z%2FOD9PEwWkpnwJh3C2A1d4E0z8NVQzQ3i50CExCl4sdx1f6MLHUHikPCaqEouoA07%2F6mLsyFuGa4UmIjWPuLATB9eZQg2hyYtEl8ZM6AX0slVTLCJdat6l4eqQW1M2nL0gC6wQBm5yYmuCyS%2B16gx75H4O9hipB87wc6mL3NV6PwQgQ20HPLl%2Fee%2F--dqoms%2FaGSU5fHN4t--H1VCZFc%2BYXr%2Bby4G3Z7Chg%3D%3D; path=/; HttpOnly; SameSite=Lax
x-request-id: efba6205-1078-4e2e-a96c-a6469c8fbc4a
x-runtime: 0.059055
content-encoding: gzip
X-Firefox-Spdy: h2