{"report_id":"b5a0096b-6fa2-483c-a248-2841e2c15d63","version":0,"status":"done","tags":[],"date":"2026-07-12T17:21:35Z","url":{"schema":"http","addr":"awgtm.com","fqdn":"awgtm.com","domain":"awgtm.com","tld":"com"},"ip":{"addr":"198.252.106.116","port":0,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"awgtm.com/mobile/login.php","fqdn":"awgtm.com","domain":"awgtm.com","tld":"com"},"title":"Effiqs - Login","dom":{"size":19100,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (384)","md5":"87b8155461a98493cacfea3f538bc600","sha1":"de71aeb286efe72165b04fe3288800001e55f10f","sha256":"c8ce5208aa7cf862625a715508c21557c47ce58abbeebe78fe062d6be683b0d1","sha512":"e13c54d7d4780818a51ae1cfab1865a353e5a1f4cc6564e5f3bcab3238cd7b79ad1022780b2cc3216e1298b295f2e2003047922638da14fecbdc06882ca77b6a","ssdeep":"192:sVEpBkaGBkKEaJ7Ky4RXSrcPq0WYYiDKOPdCkFGtBST5Jpy3rQyHHZr0fhXr0oir:sbWXSrcPqxiOfkFGmQq1l8kBK4FeT","tlshash":"f282c63526f200266153805527b7671b7b78c117c605cc18b6ec8ba98fdaec2f8bb79c","dom_hash":"domhash4f1bff2dcadc6fda0e2783f5d2f10a47","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"awgtm.com","fqdn":"awgtm.com","domain":"awgtm.com","tld":"com"},"ip":{"addr":"198.252.106.116","port":0,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T17:21:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"awgtm.com","ip":{"addr":"198.252.106.116","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"domain_registered":"2026-03-28","domain_rank":0,"first_seen":"2026-07-12T13:52:42.532994Z","last_seen":"2026-07-12T13:52:42.532994Z","alert_count":0,"request_count":7,"received_data":184961,"sent_data":3610,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"awgtm.com/mobile/js/login.js","fqdn":"awgtm.com","domain":"awgtm.com","tld":"com"},"ip":{"addr":"198.252.106.116","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef7ff7c06b13c9a1377c102ba039ba54","sha1":"a3d75771121ea9499ac5a891b2131dd45edd488f","sha256":"a7436cf20023ff64f0db409ce1fb8d67776aca8e38115097a5da987a4962e7f3","sha512":"8f1310d5bede94da645137feeaa505d349f24ae89a417d98b995d38903719f1a169e5958d8f3f8291d4d443d288d20813336853c3c87ba9b5d1e46ab1e619590","ssdeep":"96:1YiE6r0HlhP44wSjbc9fFfvetfAi0SrQnjyifrNCfR/EpBkaGBkKEatY:1nE64HfPyS3cPxi0zyCNSEpBkaGBkKEh","tlshash":"ceb1416e34f710955b63b0ba53ab52883237900b3c16de153edf03a09f84ba87793799","size":5531,"data":"","first_seen":"2026-07-12T13:52:47.182137Z","last_seen":"2026-07-12T17:21:35.87064Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awgtm.com/mobile/login.php","fqdn":"awgtm.com","domain":"awgtm.com","tld":"com"},"ip":{"addr":"198.252.106.116","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e14add08dfb6228938b2c4a9f515569b","sha1":"dd9a5b80854c744c4fc46d79bb9003eeb93c92b5","sha256":"81afd3f025287f411349d8c163f7d98b1d2ca4c89982093d3f7dda75308d5065","sha512":"a5608fae15ee1c229e5bce49004ea17877c63ef0bb80ad1fa7b68122645c57d047c2592edf31e0cc738c5f0b0bccbd48b04db0798e80e2574d03a8e1a61535ad","ssdeep":"96:5qJcilu8f4XL5rbwiKoYohSh4iKnPbwgnG6ZFCLSBS2S7NSjz:5Kcilu8kFIdoYohSh4ZnjwgG6Zsew37K","tlshash":"77c122667af711319697302b173f960672644127d500ec24b84cd6a99fe4f90f9fbbc8","size":5971,"data":"","first_seen":"2026-07-12T13:52:47.18431Z","last_seen":"2026-07-12T17:21:35.873455Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"awgtm.com/mobile/login.php","fqdn":"awgtm.com","domain":"awgtm.com","tld":"com"},"ip":{"addr":"198.252.106.116","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T17:21:07.049Z","timestamp":1783876867049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"awgtm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 13:28:01 GMT","end":"Sat, 10 Oct 2026 13:28:00 GMT"},"fingerprint":{"sha1":"5A:42:B5:CF:16:E7:AA:E2:0F:1A:C4:79:BE:E4:5C:E2:22:71:F7:7A","sha256":"6A:CD:5B:DB:CB:98:73:40:32:4F:F6:CE:15:E3:6C:D7:19:BF:B4:FE:E8:E5:41:72:39:80:23:EC:11:6E:83:97"}}},"request":{"raw":"GET /mobile/login.php HTTP/1.1\r\nHost: awgtm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 17:22:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=vaqah7av9i1hhlbvvq0si4m8vv; expires=Mon, 13-Jul-2026 05:22:50 GMT; Max-Age=43200; path=/; secure; HttpOnly; SameSite=Lax\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; frame-src 'self' https://onchat.itosuitcase.com/agent; child-src 'self' https://onchat.itosuitcase.com/agent; img-src 'self' data: https://api.qrserver.com https://chart.googleapis.com https://quickchart.io; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self';\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18587,"size_decoded":5531,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (384)","md5":"a6c853105fe04b10a730e64ddc6ed191","sha1":"9f0d98a1428c6e7b2b64ac3193ce5cf7890315e4","sha256":"1b0f2fa35668f9864795fb2fa319be1fd14452da8d686f2536b8638ee0e6138e","sha512":"2761560b4f35df92bbce56567bc044ec316f3fba9ee9e20735b48bc861d07ddd57c54019d795a6a8c587fbadaa03c285e9fd56b2a05dd9eea9ca0621eb7f208d","ssdeep":"192:aZKy4RXSrcPq0NnxiDKOPdCkFGtBST5Jpy3rQyHHZr0fhXr0oiJqKcilu8kFIdo4:aZWXSrcPqEiOfkFGmQq1l8kBK4Fe3","tlshash":"6482c53526f200366563805637b7671b7b69c113c605dc18b6ec8ba84fdaec2f8b769c","first_seen":"2026-07-12T17:21:35.867629Z","last_seen":"2026-07-12T17:21:35.867629Z","times_seen":1,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awgtm.com/mobile/css/styles.css","fqdn":"awgtm.com","domain":"awgtm.com","tld":"com"},"ip":{"addr":"198.252.106.116","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://awgtm.com/mobile/login.php","date":"2026-07-12T17:21:07.485Z","timestamp":1783876867485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"awgtm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 13:28:01 GMT","end":"Sat, 10 Oct 2026 13:28:00 GMT"},"fingerprint":{"sha1":"5A:42:B5:CF:16:E7:AA:E2:0F:1A:C4:79:BE:E4:5C:E2:22:71:F7:7A","sha256":"6A:CD:5B:DB:CB:98:73:40:32:4F:F6:CE:15:E3:6C:D7:19:BF:B4:FE:E8:E5:41:72:39:80:23:EC:11:6E:83:97"}}},"request":{"raw":"GET /mobile/css/styles.css HTTP/1.1\r\nHost: awgtm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://awgtm.com/mobile/login.php\r\nCookie: PHPSESSID=vaqah7av9i1hhlbvvq0si4m8vv\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 17:22:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 09 May 2026 02:19:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fe99c8-57a1\"\r\nexpires: Mon, 13 Jul 2026 05:22:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22433,"size_decoded":5058,"mime_type":"text/css","magic":"ASCII text","md5":"51db5096460efa1f3a9d518df19645aa","sha1":"f0a58c5042d32e4ce5381fae428f49fa0de9555f","sha256":"47edd3ca3872947c1d7e877932b00a5affeb0d93de1462513ba6390bce1b27e7","sha512":"1a364b9084e9e172a79e4e3abea6d5590e711b93797637add974fdfe0506c860cd2cacc81e67dda989ebb9dec60dad282df17d2e705e1e362bd80827497af5ed","ssdeep":"384:2ramaua1o+3FBiceH4zCsbbIfNHn1M/R0MUxrA9morhrDE:Rua1o+3FBLeYzCsbbIfBn1M/R0NrG1t4","tlshash":"8da2745c5ab21204782fd5a826b78bc9732d8005de0fce3c7bd721589f8d2b86573b89","first_seen":"2026-07-12T13:52:47.178936Z","last_seen":"2026-07-12T17:21:35.868571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awgtm.com/mobile/css/login.css","fqdn":"awgtm.com","domain":"awgtm.com","tld":"com"},"ip":{"addr":"198.252.106.116","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://awgtm.com/mobile/login.php","date":"2026-07-12T17:21:07.487Z","timestamp":1783876867487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"awgtm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 13:28:01 GMT","end":"Sat, 10 Oct 2026 13:28:00 GMT"},"fingerprint":{"sha1":"5A:42:B5:CF:16:E7:AA:E2:0F:1A:C4:79:BE:E4:5C:E2:22:71:F7:7A","sha256":"6A:CD:5B:DB:CB:98:73:40:32:4F:F6:CE:15:E3:6C:D7:19:BF:B4:FE:E8:E5:41:72:39:80:23:EC:11:6E:83:97"}}},"request":{"raw":"GET /mobile/css/login.css HTTP/1.1\r\nHost: awgtm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://awgtm.com/mobile/login.php\r\nCookie: PHPSESSID=vaqah7av9i1hhlbvvq0si4m8vv\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 17:22:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 May 2026 08:00:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a02de0e-bc5\"\r\nexpires: Mon, 13 Jul 2026 05:22:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3013,"size_decoded":1468,"mime_type":"text/css","magic":"ASCII text","md5":"9a22b096ef1f567817b476019597d048","sha1":"939063b0516955106eef1290f37174f5f9b23826","sha256":"939e5779a713623a69a23aed536843495903ab163d9d042080d292662d997ed0","sha512":"da75ea6be1c5bdb75f2060d0a7b1969c47002b3cb5e6b58ae7d41df1d3688048101220d6de840be400f50aa0021dbb9aac0f9922fa20bda383f9d5c41d69c7d3","ssdeep":"","tlshash":"5b51124c0a335554a8778559365a8ac9a33a90085f0bde3efadb0948cfce29c7573bcc","first_seen":"2026-07-12T13:52:47.180243Z","last_seen":"2026-07-12T17:21:35.869549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awgtm.com/mobile/js/login.js","fqdn":"awgtm.com","domain":"awgtm.com","tld":"com"},"ip":{"addr":"198.252.106.116","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://awgtm.com/mobile/login.php","date":"2026-07-12T17:21:07.490Z","timestamp":1783876867490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"awgtm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 13:28:01 GMT","end":"Sat, 10 Oct 2026 13:28:00 GMT"},"fingerprint":{"sha1":"5A:42:B5:CF:16:E7:AA:E2:0F:1A:C4:79:BE:E4:5C:E2:22:71:F7:7A","sha256":"6A:CD:5B:DB:CB:98:73:40:32:4F:F6:CE:15:E3:6C:D7:19:BF:B4:FE:E8:E5:41:72:39:80:23:EC:11:6E:83:97"}}},"request":{"raw":"GET /mobile/js/login.js HTTP/1.1\r\nHost: awgtm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://awgtm.com/mobile/login.php\r\nCookie: PHPSESSID=vaqah7av9i1hhlbvvq0si4m8vv\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 17:22:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 May 2026 18:56:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0377e5-159b\"\r\nexpires: Mon, 13 Jul 2026 05:22:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5531,"size_decoded":2608,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ef7ff7c06b13c9a1377c102ba039ba54","sha1":"a3d75771121ea9499ac5a891b2131dd45edd488f","sha256":"a7436cf20023ff64f0db409ce1fb8d67776aca8e38115097a5da987a4962e7f3","sha512":"8f1310d5bede94da645137feeaa505d349f24ae89a417d98b995d38903719f1a169e5958d8f3f8291d4d443d288d20813336853c3c87ba9b5d1e46ab1e619590","ssdeep":"96:1YiE6r0HlhP44wSjbc9fFfvetfAi0SrQnjyifrNCfR/EpBkaGBkKEatY:1nE64HfPyS3cPxi0zyCNSEpBkaGBkKEh","tlshash":"ceb1416e34f710955b63b0ba53ab52883237900b3c16de153edf03a09f84ba87793799","first_seen":"2026-07-12T13:52:47.182137Z","last_seen":"2026-07-12T17:21:35.87064Z","times_seen":2,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awgtm.com/mobile/images/logo.png","fqdn":"awgtm.com","domain":"awgtm.com","tld":"com"},"ip":{"addr":"198.252.106.116","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://awgtm.com/mobile/login.php","date":"2026-07-12T17:21:07.706Z","timestamp":1783876867706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"awgtm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 13:28:01 GMT","end":"Sat, 10 Oct 2026 13:28:00 GMT"},"fingerprint":{"sha1":"5A:42:B5:CF:16:E7:AA:E2:0F:1A:C4:79:BE:E4:5C:E2:22:71:F7:7A","sha256":"6A:CD:5B:DB:CB:98:73:40:32:4F:F6:CE:15:E3:6C:D7:19:BF:B4:FE:E8:E5:41:72:39:80:23:EC:11:6E:83:97"}}},"request":{"raw":"GET /mobile/images/logo.png HTTP/1.1\r\nHost: awgtm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://awgtm.com/mobile/login.php\r\nCookie: PHPSESSID=vaqah7av9i1hhlbvvq0si4m8vv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 17:22:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 May 2026 18:17:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a036ec6-11eb0\"\r\nexpires: Tue, 11 Aug 2026 17:22:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73392,"size_decoded":70223,"mime_type":"image/png","magic":"PNG image data, 712 x 769, 8-bit/color RGBA, non-interlaced","md5":"f49ad92e8449a7dc14dad95c11e0b2cb","sha1":"e62bf1dabe51e3fecbfe83b344e944c7f0c7cd20","sha256":"0c1d21b99802aead4c58c4d858a5823d9c13fef40ce423a72802b0943d203f55","sha512":"fc847d269902bdbf9f401b6adf2dcc05d9c5582c6abd50f209ec05adc5f8c584952aa06449973823ff1aac93b0899cc04c1e7d67d6d07b7a6d6a0ecaadc6fc48","ssdeep":"1536:UQpQvbVUHh2WPa6xqo35ZMgt+6cE2nQ0xAKpubkJAo2Ep/ucW7zvJ:UoQvb2h2Ia6Ph+S2Q0x38kJAonkcWnx","tlshash":"8173f152518675b3f92eaf3e5e815c89354930405ae8d328ed6c530fa0dbe74bc772e8","first_seen":"2026-07-12T13:52:47.183236Z","last_seen":"2026-07-12T17:21:35.871591Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awgtm.com/favicon.ico","fqdn":"awgtm.com","domain":"awgtm.com","tld":"com"},"ip":{"addr":"198.252.106.116","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://awgtm.com/mobile/login.php","date":"2026-07-12T17:21:07.807Z","timestamp":1783876867807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"awgtm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 13:28:01 GMT","end":"Sat, 10 Oct 2026 13:28:00 GMT"},"fingerprint":{"sha1":"5A:42:B5:CF:16:E7:AA:E2:0F:1A:C4:79:BE:E4:5C:E2:22:71:F7:7A","sha256":"6A:CD:5B:DB:CB:98:73:40:32:4F:F6:CE:15:E3:6C:D7:19:BF:B4:FE:E8:E5:41:72:39:80:23:EC:11:6E:83:97"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: awgtm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://awgtm.com/mobile/login.php\r\nCookie: PHPSESSID=vaqah7av9i1hhlbvvq0si4m8vv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 17:22:51 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"68ebda33-e3b8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58296,"size_decoded":44116,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"cbb42513032d6c09e496731ac16c20a9","sha1":"c92f38a701aad58408451d24dd4c47b05f158cf0","sha256":"d189695b2f3bb92369881f2428fa861dca9d9a94c638d9bdc4e2fa747d6f315b","sha512":"3d76f1018afceaba7cbb4083f4a5b5758966ec2aa5d5c6b07d72361782809f7ed4bd34ed9e0c4154d01a2db7192155de8251e5a834dd90b8d9823d916e1b7285","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:cmDD6oeFUycwpk06hWp1b99c7VM","tlshash":"8443021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1e9","first_seen":"2024-11-25T13:26:01.204756Z","last_seen":"2026-07-19T23:40:26.758912Z","times_seen":13163,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awgtm.com/","fqdn":"awgtm.com","domain":"awgtm.com","tld":"com"},"ip":{"addr":"198.252.106.116","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T17:21:06.102Z","timestamp":1783876866102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"awgtm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 13:28:01 GMT","end":"Sat, 10 Oct 2026 13:28:00 GMT"},"fingerprint":{"sha1":"5A:42:B5:CF:16:E7:AA:E2:0F:1A:C4:79:BE:E4:5C:E2:22:71:F7:7A","sha256":"6A:CD:5B:DB:CB:98:73:40:32:4F:F6:CE:15:E3:6C:D7:19:BF:B4:FE:E8:E5:41:72:39:80:23:EC:11:6E:83:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: awgtm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 17:22:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: mobile/login.php\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T23:20:45.924304Z","times_seen":17378225,"resource_available":true,"data":null}},"time_used":935,"timings":{"blocked":-1,"dns":284,"connect":161,"send":0,"wait":161,"receive":0,"ssl":329},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}