aula.ula.edu.mx/login/forgot_password.php
301 Moved Permanently 167 B URL HTTP/1.1 aula.ula.edu.mx/login/forgot_password.php
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
Analyzer Verdict Alert openphish Westpac Institutional Banking
GET /login/forgot_password.php HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 13 Jan 2023 20:33:02 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://aula.ula.edu.mx/login/forgot_password.php
X-Cache: Redirect from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: p_YOJfwoZoTgmDqOXf7exnG9NlFWc4sRx0rZJ_Q0rljKLUwXRJviaw==
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8b4f1afb0e830b797238d34ab9254aa
e011acef3d05c959a65205d53b651ecd18a889fe
f7ceff5b4fda083c7449b7298c232224cf48a632dcb87233b646790de207d49c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16867
Expires: Sat, 14 Jan 2023 01:14:10 GMT
Date: Fri, 13 Jan 2023 20:33:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cab5b63e128895128726181aff42e42e
d39c36237554fcd41addec0664d7fe7f7d157c06
18e82a5b82eb8f2d8b49df824c336015f19367c5a05467ad139a56db59f88852
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E82A5B82EB8F2D8B49DF824C336015F19367C5A05467AD139A56DB59F88852"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5517
Expires: Fri, 13 Jan 2023 22:05:00 GMT
Date: Fri, 13 Jan 2023 20:33:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0f4ecf4f26be1ba09e61135b1b488bf4
f16b8277e00033bc990a8bcce54b693cb3c87d62
3018c2a228f0a894d217e8e8b0b8dd060527f06879cd2f469bac6c8766acbbf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3018C2A228F0A894D217E8E8B0B8DD060527F06879CD2F469BAC6C8766ACBBF8"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3452
Expires: Fri, 13 Jan 2023 21:30:35 GMT
Date: Fri, 13 Jan 2023 20:33:03 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 13 Jan 2023 19:48:52 GMT
content-type: application/json
age: 2651
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: dLYVL8LV6D/cfz+vi/VmOpdXsXMrxyjt4O7yUBpjSENfNWC8qfmjHFuDo6JKooUaRQwB2X5C8oQ=
x-amz-request-id: 04W5V1F6EZKKC2E3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 13 Jan 2023 19:43:26 GMT
age: 2977
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 20:33:03 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ba2bbee2f0bd472a7ddda4f41dfe6332
1a10dbeaa1cd2e95b4fd114d37f90319a354e366
d8887106d4ba4c6cfb7a6f43dcff2ae5c61c50f5e29e2919ae1775472547406f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123352
Date: Fri, 13 Jan 2023 20:33:03 GMT
Etag: "63c0fed7-1d7"
Expires: Sun, 15 Jan 2023 06:48:55 GMT
Last-Modified: Fri, 13 Jan 2023 06:48:55 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: U9n_Msz_O8oudpVeZ44_2w6YGXpZgTsik-xQgsco1-1O73-g-c4S4g==
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 13 Jan 2023 19:33:45 GMT
age: 3558
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b1e3535cab3c1ac295b1412126a9325c
d1bdf1b8663817ae34b6182db29d6b20666779e7
90c4ecd4b0782647fd78110b5bacfb73d2b05aae4de789a90318574407dfb565
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5306
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 20:33:03 GMT
Etag: "63c11f26-1d7"
Last-Modified: Fri, 13 Jan 2023 19:04:37 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 709dbdc77e1779e7c77865fa27f2573a
8781ced82c5109fbe49e8897844c7c1b89f4c340
8b02e05fc2de10b7aa4115870138f3b4e2a1f79a844924d7c50072b002405dc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 20:33:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7SheGY9OvEbbxHnLDwwkbg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 37dfcrfrbxHiWp2/TrONRKpSbEQ=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b5628887325331ad3d660f7208e1995c
9e4bf04468a7aed126488ccb5552a8e02610f6dd
5cd181d6728fc5f0f4d88407b97af61db39c5a38feebdeb2c21335cf4402fca4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 20:33:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
aula.ula.edu.mx/theme/moove/pix/moodle-logo-white.png
200 OK 85 kB URL HTTP/2 aula.ula.edu.mx/theme/moove/pix/moodle-logo-white.png
IP
File type PNG image data, 4010 x 1023, 8-bit/color RGBA, non-interlaced\012- data
Hash fe66c91006a29f3bf35b82245ee2edaa
972b0f822c3bff1cf50ea3f0149eed48034de16e
f74bd584a21d5a2034780a503a39bac18216324dc49b56a454c2f7531ed3d6db
Analyzer Verdict Alert openphish Westpac Institutional Banking
GET /theme/moove/pix/moodle-logo-white.png HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/login/forgot_password.php
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 85223
date: Fri, 13 Jan 2023 20:33:04 GMT
server: nginx/1.21.4
last-modified: Sun, 07 Nov 2021 01:41:40 GMT
etag: "61872ed4-14ce7"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OnmZ32umm-mwSJKKY41nmS2uUAYpTyVpyE_FvQKVfnzItschrVROEg==
X-Firefox-Spdy: h2
aula.ula.edu.mx/docs/Nunito-Regular.ttf
200 OK 153 kB URL HTTP/2 aula.ula.edu.mx/docs/Nunito-Regular.ttf
IP
File type TrueType Font data, 17 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2014 The Nunito Project Authors (https://github.com/googlefonts/nunito)NunitoRegular3.\012- data
Size 153 kB (152932 bytes)
Hash d8de52e6c5df1a987ef6b9126a70cfcc
07822103331d2ebc7756a0746d8f34a7210a68ed
9e2747806c4a30f0d4f39596a13dd97dc5484b96845d945d90b300e1bbdebc72
Analyzer Verdict Alert openphish Westpac Institutional Banking
GET /docs/Nunito-Regular.ttf HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/theme/styles.php/moove/1671172015_1/all
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 152932
date: Fri, 13 Jan 2023 20:33:04 GMT
server: nginx/1.21.4
last-modified: Sun, 12 Aug 2012 00:00:00 GMT
etag: "5026f200-25564"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dEnOFFPWxh0ZXnB--7Rq__44rVJe0-XaK7RlvpyJUuq2bWb0DtRcbw==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4636
Expires: Fri, 13 Jan 2023 21:50:21 GMT
Date: Fri, 13 Jan 2023 20:33:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4636
Expires: Fri, 13 Jan 2023 21:50:21 GMT
Date: Fri, 13 Jan 2023 20:33:05 GMT
Connection: keep-alive
aula.ula.edu.mx/lib/javascript.php/1671172015/lib/requirejs/require.min.js
200 OK 7.2 kB URL HTTP/2 aula.ula.edu.mx/lib/javascript.php/1671172015/lib/requirejs/require.min.js
IP
Hash 9abdd8106153053b912a0ee31d280105
a0c83eb9551858fa387c947eabe7f34fe51dd7d2
91d4c7928868ff9e8cdbad4a385d4adbf7ac2a5cd4bb0ebb73181c8a245ed833
Analyzer Verdict Alert openphish Westpac Institutional Banking
GET /lib/javascript.php/1671172015/lib/requirejs/require.min.js HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/login/forgot_password.php
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 13 Jan 2023 20:33:04 GMT
server: nginx/1.21.4
etag: "ba2c6fe1d8f53486f0d325516d2e7910926df0f1"
content-disposition: inline; filename="javascript.php"
last-modified: Fri, 16 Dec 2022 23:00:14 GMT
expires: Thu, 13 Apr 2023 20:33:04 GMT
pragma:
cache-control: public, max-age=7776000, immutable
accept-ranges: none
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tq2ULlM11qKHdvFmqv0bchqDq9hOTQjuSwWvEjZL-mnV7s-60SX0yw==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4636
Expires: Fri, 13 Jan 2023 21:50:21 GMT
Date: Fri, 13 Jan 2023 20:33:05 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa56e9680-25b8-493c-8831-f933aca26e52.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa56e9680-25b8-493c-8831-f933aca26e52.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e514f1b711f68a1699f9d0d269ca9a8a
71621fabcc4ae2a8c3180e22e63fac1217c4032f
cc10cadc4477cc6faa1973343b9019b1b4bc94e5ec9fab114a4b755f24872f35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa56e9680-25b8-493c-8831-f933aca26e52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9697
x-amzn-requestid: 8ddac5a8-5cab-44fc-9706-b97e1ae49330
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eoXRyEfoIAMFg4g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c005a4-496708b278b5629672c73223;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 13:05:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1ILOk1G4LPzNuLV1y463WAyAVpuosyMCEelNeymdH5rtl91xJ3E98w==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 05:53:40 GMT
age: 52765
etag: "71621fabcc4ae2a8c3180e22e63fac1217c4032f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a23d61d610c7b55d943fcb2636a01b65
82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065
28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9539
x-amzn-requestid: 9f388939-cfb7-432e-a921-e9188736bb45
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eTw5QGZ6oAMFxQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b7c83b-4f9d5bfc30e5ee126333d54e;Sampled=0
x-amzn-remapped-date: Fri, 06 Jan 2023 07:05:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KYm3Isapf3670wIeWAet4FHx_jth_lxT3hNJONRFP-fyEUdrxL4-8w==
via: 1.1 1f6e68152880a39d72e6bf2996cd6a60.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 12:37:32 GMT
age: 28533
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
aula.ula.edu.mx/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js
200 OK 94 kB URL HTTP/2 aula.ula.edu.mx/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js
IP
Hash 221f0a601d11ae6f412d63b2fa759dcb
9176f2f4a25f577f59ebe75c9f27b679a3714b7f
4150f5551728793bb0d705095f5e7e7af0fcc5b2d49ea87260d8914122d52216
GET /theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/login/forgot_password.php
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 13 Jan 2023 20:33:04 GMT
server: nginx/1.21.4
content-disposition: inline; filename="combo"
last-modified: Mon, 19 Jul 2021 16:26:15 GMT
expires: Mon, 08 Jan 2024 20:33:04 GMT
pragma:
cache-control: public, max-age=31104000, immutable
accept-ranges: none
etag: "78581a0bac8a932effb32db3e91e0f2f2b47c08e"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: w0j4aoSaOmD4O_CdA2yK_Yzecs-Hy3R5xL_GtXK1Q4hN1QY4wlx2rA==
X-Firefox-Spdy: h2
aula.ula.edu.mx/pluginfile.php/1/theme_moove/logo/1671172015/aula-by-ula.svg
200 OK 10 kB URL HTTP/2 aula.ula.edu.mx/pluginfile.php/1/theme_moove/logo/1671172015/aula-by-ula.svg
IP
Hash 128714e9fda339d70d8bd6b892433e3a
67802cb4b8489d618a78eb3a4653022da2f49c90
6999a49d534ce5b283138a451856e9a3236051b5ce20b1e093591bbad5bcaf97
Analyzer Verdict Alert openphish Westpac Institutional Banking
GET /pluginfile.php/1/theme_moove/logo/1671172015/aula-by-ula.svg HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/login/forgot_password.php
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
vary: Accept-Encoding
date: Fri, 13 Jan 2023 20:33:04 GMT
server: nginx/1.21.4
last-modified: Mon, 14 Mar 2022 11:53:10 GMT
content-disposition: inline; filename="aula-by-ula.svg"
cache-control: public, max-age=5184000, no-transform
expires: Tue, 14 Mar 2023 20:33:04 GMT
accept-ranges: bytes
etag: W/"622f2ca6-2647"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1rsa-IVojbrAkzJ0lxvFnVRgCE9B4aweQPWFxv_zpAkY3NSdRV60ZA==
X-Firefox-Spdy: h2
aula.ula.edu.mx/lib/javascript.php/1671172015/lib/polyfills/polyfill.js
200 OK 13 kB URL HTTP/2 aula.ula.edu.mx/lib/javascript.php/1671172015/lib/polyfills/polyfill.js
IP
Hash 5d15fcc52105b7deb4189c42821e32bf
bc1b5ce7b18e8dd1fb5b883c5d746f554f65aef7
46f2d137826efab0683833b8eb386311faf8d652cfe4096382305faa0d8293a9
Analyzer Verdict Alert openphish Westpac Institutional Banking
GET /lib/javascript.php/1671172015/lib/polyfills/polyfill.js HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/login/forgot_password.php
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 13 Jan 2023 20:33:04 GMT
server: nginx/1.21.4
etag: "ec4cebbc3227918e4ebcb1a01c75c419dca07e7e"
content-disposition: inline; filename="javascript.php"
last-modified: Fri, 16 Dec 2022 23:00:14 GMT
expires: Thu, 13 Apr 2023 20:33:04 GMT
pragma:
cache-control: public, max-age=7776000, immutable
accept-ranges: none
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XRlrN90TvxYCQRvMDT3vORUEwn49-t9GaXiz5q3NCR4VLvMKEJDJ-w==
X-Firefox-Spdy: h2
aula.ula.edu.mx/login/forgot_password.php
200 OK 26 kB URL HTTP/2 aula.ula.edu.mx/login/forgot_password.php
IP
Hash 4f0921f044e18f1ed72a9283308c0e7b
5cd3ae369a561ae580cc4f6190ade30a3fc3bafe
31686c395a259679ad4537a24269acbffdae6f64142192e47331342fbc5e11c7
Analyzer Verdict Alert openphish Westpac Institutional Banking
GET /login/forgot_password.php HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Fri, 13 Jan 2023 20:33:03 GMT
server: nginx/1.21.4
set-cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i; path=/; secure; HttpOnly
content-language: en-us
content-script-type: text/javascript
content-style-type: text/css
x-ua-compatible: IE=edge
cache-control: private, pre-check=0, post-check=0, max-age=0, no-transform
pragma: no-cache
expires:
accept-ranges: none
x-frame-options: sameorigin
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gsmxGJEdtNOm7S0yp2bgb58gQ8IpaTJ45oPutZ8QET6TBtN1CnjkQQ==
X-Firefox-Spdy: h2
aula.ula.edu.mx/pluginfile.php/1/theme_moove/favicon/1671172015/favicon%20%281%29.ico
200 OK 1.2 kB URL HTTP/2 aula.ula.edu.mx/pluginfile.php/1/theme_moove/favicon/1671172015/favicon%20%281%29.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash de2735526769da38bee892f921db3a76
2b9c551bf65a44f99a09155e8630b25098204efd
7dea92d980a55486b3191f24065ebaa1ece1f5823dca0927d049c0b1948f6f08
Analyzer Verdict Alert openphish Westpac Institutional Banking
GET /pluginfile.php/1/theme_moove/favicon/1671172015/favicon%20%281%29.ico HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/login/forgot_password.php
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 1150
date: Fri, 13 Jan 2023 20:33:05 GMT
server: nginx/1.21.4
last-modified: Fri, 12 Nov 2021 16:38:22 GMT
content-disposition: inline; filename="favicon (1).ico"
cache-control: public, max-age=5184000, no-transform
expires: Tue, 14 Mar 2023 20:33:05 GMT
etag: "618e987e-47e"
accept-ranges: bytes, bytes
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fwG_S6xnDBYU63e2a0pNP-3M61M7vaWyX0j2k-St82FCGmERixkFSw==
X-Firefox-Spdy: h2
vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash e0652b84b7b3b650769c759fc520c3f8
0b55d6e28613350c7f41b88f19e726e6751ad03b
94b4c240f83065223dcacdd3f8b69cb229d0616edc3e2041eef3e270d859fc3d
GET /box-5e66f98b4ee957db209dc6f63e3d59dd.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Sat, 03 Dec 2022 04:42:02 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "e0652b84b7b3b650769c759fc520c3f8"
last-modified: Thu, 01 Dec 2022 13:36:28 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xDRFSHq1xogAm_up980BfXlI4lm4b2bRU0grAe4bEJ8LYQWnQU_p5Q==
age: 3599463
X-Firefox-Spdy: h2
aula.ula.edu.mx/docs/materialdesignicons-webfont.ttf
200 OK 1.0 MB URL HTTP/2 aula.ula.edu.mx/docs/materialdesignicons-webfont.ttf
IP
File type TrueType Font data, 11 tables, 1st "GSUB", 16 names, Macintosh, type 1 string, Material Design IconsRegularMaterial Design IconsMaterial Design IconsVersion 1.0MaterialDesignI\012- data
Size 1.0 MB (1026176 bytes)
Hash 174c02fc4609e8fc4389f5d21f16a296
9e47ec85012dc304ad412ffa78c54c196ff156a1
c14484cf2d706d2359867a07cca665f83e4c3b0868fddde44c92c48a212d7841
Analyzer Verdict Alert openphish Westpac Institutional Banking
GET /docs/materialdesignicons-webfont.ttf HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/theme/styles.php/moove/1671172015_1/all
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1026176
date: Fri, 13 Jan 2023 20:33:05 GMT
server: nginx/1.21.4
last-modified: Tue, 20 Jul 2021 09:37:52 GMT
etag: "60f69970-fa880"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZSpX-ltbQgq5XD_Zaa7al1E9SuLOaqXwkZbgEnij4tI-TxhBTcbt4g==
X-Firefox-Spdy: h2
script.hotjar.com/modules.0a5831f9446624640839.js
200 OK 69 kB URL HTTP/2 script.hotjar.com/modules.0a5831f9446624640839.js
IP
File type Unicode text, UTF-8 text, with very long lines (47958)
Hash c190d47cd0259bc45c4cf36c6c1a261a
a4d82aab61799b506dcaa84753e481eea33547ad
8593a0bee7b36326e5243a3eb4f70618a602a1d3646e732567ce05f7cda2c7cb
GET /modules.0a5831f9446624640839.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68992
date: Thu, 12 Jan 2023 12:30:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "c190d47cd0259bc45c4cf36c6c1a261a"
last-modified: Thu, 12 Jan 2023 12:29:16 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SHk70tdpTYzStqacfVSHXv5-UvZiTrcfUQ715wNg15894n3NPk7TIA==
age: 115379
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-2789290.js?sv=6
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-2789290.js?sv=6
IP
GET /c/hotjar-2789290.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Fri, 13 Jan 2023 20:33:05 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/0684b30979c6f33948c2010d5810b9e5
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TpBn74PF6WFfOpANe8qtP2RIvclIlNq5jmHiyYiNm14pwgfkGleV2w==
X-Firefox-Spdy: h2
aula.ula.edu.mx/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css
200 OK 0 B URL HTTP/2 aula.ula.edu.mx/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css
IP
GET /theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/login/forgot_password.php
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css;charset=UTF-8
date: Fri, 13 Jan 2023 20:33:04 GMT
server: nginx/1.21.4
content-disposition: inline; filename="combo"
last-modified: Mon, 19 Jul 2021 16:26:15 GMT
expires: Mon, 08 Jan 2024 20:33:04 GMT
pragma:
cache-control: public, max-age=31104000, immutable
accept-ranges: none
etag: "b9bc567c469e2872cf3bbb14603342a72de2509b"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qkdRGz4MixHYxmAsQS6c55pQBcpz9M2Z6EWOqd2hSRhzSJnCSlQEzQ==
X-Firefox-Spdy: h2
aula.ula.edu.mx/lib/ajax/service-nologin.php?info=6-method-calls
200 OK 0 B URL HTTP/2 aula.ula.edu.mx/lib/ajax/service-nologin.php?info=6-method-calls
IP
POST /lib/ajax/service-nologin.php?info=6-method-calls HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 775
Origin: https://aula.ula.edu.mx
Connection: keep-alive
Referer: https://aula.ula.edu.mx/login/forgot_password.php
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i; _hjSessionUser_2789290=eyJpZCI6IjBmYTM4YjhhLTU4YzYtNWUxZS04N2VmLWVlODJiOTNmZTc2NyIsImNyZWF0ZWQiOjE2NzM2NDE5Njk5NjksImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2789290=eyJpZCI6IjcxOGJiNDU1LTg0NDctNDMxOC1hYzBlLWMzM2I3MWU0YzE3MiIsImNyZWF0ZWQiOjE2NzM2NDE5NzAwMzQsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Fri, 13 Jan 2023 20:33:07 GMT
server: nginx/1.21.4
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: jh1Nm5M2iq3gMLj2jVnXXLI82IWH5wGQdmlhZXlWMWMqQS9GmaggWA==
X-Firefox-Spdy: h2
aula.ula.edu.mx/theme/styles.php/moove/1671172015_1/all
200 OK 0 B URL HTTP/2 aula.ula.edu.mx/theme/styles.php/moove/1671172015_1/all
IP
Analyzer Verdict Alert openphish Westpac Institutional Banking
GET /theme/styles.php/moove/1671172015_1/all HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/login/forgot_password.php
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
date: Fri, 13 Jan 2023 20:33:04 GMT
server: nginx/1.21.4
etag: "a956c2b59dd74bc88f6712a9a6bd7ee57d35a7ce"
content-disposition: inline; filename="styles.php"
last-modified: Fri, 13 Jan 2023 19:49:40 GMT
expires: Thu, 13 Apr 2023 20:33:04 GMT
pragma:
cache-control: public, max-age=7776000, immutable
accept-ranges: none
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aJmt6AXFGlITWeJuxpg3ky-RCQ2LsMeAsOxddc_HxjoqGJIX-2hCwQ==
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Poppins
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Poppins
IP
GET /css?family=Poppins HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 13 Jan 2023 20:33:04 GMT
date: Fri, 13 Jan 2023 20:33:04 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
aula.ula.edu.mx/lib/javascript.php/1671172015/lib/jquery/jquery-3.5.1.min.js
200 OK 0 B URL HTTP/2 aula.ula.edu.mx/lib/javascript.php/1671172015/lib/jquery/jquery-3.5.1.min.js
IP
Analyzer Verdict Alert openphish Westpac Institutional Banking
GET /lib/javascript.php/1671172015/lib/jquery/jquery-3.5.1.min.js HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/login/forgot_password.php
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i; _hjSessionUser_2789290=eyJpZCI6IjBmYTM4YjhhLTU4YzYtNWUxZS04N2VmLWVlODJiOTNmZTc2NyIsImNyZWF0ZWQiOjE2NzM2NDE5Njk5NjksImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2789290=eyJpZCI6IjcxOGJiNDU1LTg0NDctNDMxOC1hYzBlLWMzM2I3MWU0YzE3MiIsImNyZWF0ZWQiOjE2NzM2NDE5NzAwMzQsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 13 Jan 2023 20:33:06 GMT
server: nginx/1.21.4
etag: "afe76f48a63b7e00a3d3978b6d6cca21f8fb90ea"
content-disposition: inline; filename="javascript.php"
last-modified: Fri, 16 Dec 2022 23:00:16 GMT
expires: Thu, 13 Apr 2023 20:33:06 GMT
pragma:
cache-control: public, max-age=7776000, immutable
accept-ranges: none
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bBDsN8hFHFftFy7Zt4_s3f7m-xn7WibMXsKqr5Ohv1pRVzCg20XG4Q==
X-Firefox-Spdy: h2
aula.ula.edu.mx/lib/javascript.php/1671172015/lib/babel-polyfill/polyfill.min.js
200 OK 0 B URL HTTP/2 aula.ula.edu.mx/lib/javascript.php/1671172015/lib/babel-polyfill/polyfill.min.js
IP
Analyzer Verdict Alert openphish Westpac Institutional Banking
GET /lib/javascript.php/1671172015/lib/babel-polyfill/polyfill.min.js HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/login/forgot_password.php
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 13 Jan 2023 20:33:04 GMT
server: nginx/1.21.4
etag: "fd55e25aee2d0edde6476ca57113733ab97fa9e4"
content-disposition: inline; filename="javascript.php"
last-modified: Fri, 16 Dec 2022 23:00:14 GMT
expires: Thu, 13 Apr 2023 20:33:04 GMT
pragma:
cache-control: public, max-age=7776000, immutable
accept-ranges: none
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AqcnV1xDsXbQVtCmq0E4wS9n_3pXK44_PiXWJFjJZ5yOo6H79PLD_Q==
X-Firefox-Spdy: h2
aula.ula.edu.mx/theme/yui_combo.php?m/1671172015/core/event/event-min.js&m/1671172015/filter_mathjaxloader/loader/loader-min.js
200 OK 0 B URL HTTP/2 aula.ula.edu.mx/theme/yui_combo.php?m/1671172015/core/event/event-min.js&m/1671172015/filter_mathjaxloader/loader/loader-min.js
IP
GET /theme/yui_combo.php?m/1671172015/core/event/event-min.js&m/1671172015/filter_mathjaxloader/loader/loader-min.js HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/login/forgot_password.php
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 13 Jan 2023 20:33:05 GMT
server: nginx/1.21.4
content-disposition: inline; filename="combo"
last-modified: Mon, 19 Jul 2021 16:26:15 GMT
expires: Mon, 08 Jan 2024 20:33:05 GMT
pragma:
cache-control: public, max-age=31104000, immutable
accept-ranges: none
etag: "b813963db75596d0441876898ef47a4215d6b28d"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1hPXgMqj8dvcFM8byrr0RF6DBKDBxR1-_AchkMQQT4Tz4CmOfoSslA==
X-Firefox-Spdy: h2
aula.ula.edu.mx/lib/ajax/service-nologin.php?info=8-method-calls&cachekey=1671172015
200 OK 0 B URL HTTP/2 aula.ula.edu.mx/lib/ajax/service-nologin.php?info=8-method-calls&cachekey=1671172015
IP
POST /lib/ajax/service-nologin.php?info=8-method-calls&cachekey=1671172015 HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 1303
Origin: https://aula.ula.edu.mx
Connection: keep-alive
Referer: https://aula.ula.edu.mx/login/forgot_password.php
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i; _hjSessionUser_2789290=eyJpZCI6IjBmYTM4YjhhLTU4YzYtNWUxZS04N2VmLWVlODJiOTNmZTc2NyIsImNyZWF0ZWQiOjE2NzM2NDE5Njk5NjksImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2789290=eyJpZCI6IjcxOGJiNDU1LTg0NDctNDMxOC1hYzBlLWMzM2I3MWU0YzE3MiIsImNyZWF0ZWQiOjE2NzM2NDE5NzAwMzQsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Fri, 13 Jan 2023 20:33:07 GMT
server: nginx/1.21.4
expires: Thu, 13 Apr 2023 20:33:07 GMT
pragma:
cache-control: public, max-age=7776000, immutable
accept-ranges: none
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: au_VU2h3-AjlE198EOBXTjphoUpWova74TF5kHrnjfuX5ZmrrmiFOw==
X-Firefox-Spdy: h2
aula.ula.edu.mx/lib/requirejs.php/1671172015/core/first.js
200 OK 0 B URL HTTP/2 aula.ula.edu.mx/lib/requirejs.php/1671172015/core/first.js
IP
Analyzer Verdict Alert openphish Westpac Institutional Banking
GET /lib/requirejs.php/1671172015/core/first.js HTTP/1.1
Host: aula.ula.edu.mx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aula.ula.edu.mx/login/forgot_password.php
Cookie: MoodleSessionmdl_ula=1rs7hh5qkvougvm3vpoamc0r0i
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 13 Jan 2023 20:33:05 GMT
server: nginx/1.21.4
etag: "fd9b090755deb132f1066cffc042d7e18ea910b3"
content-disposition: inline; filename="requirejs.php"
last-modified: Fri, 16 Dec 2022 23:00:15 GMT
expires: Thu, 13 Apr 2023 20:33:05 GMT
pragma:
cache-control: public, max-age=7776000, immutable
accept-ranges: none
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pAv2pIKqKeakzGS2g90EesXYdNzafN_y02FoXkNeoUhCJ4ooBpIzsw==
X-Firefox-Spdy: h2
143.204.55.23
23.33.119.27
93.184.220.29
0.0.0.0