Report - urlz.fr/k1vi

Report Overview

Submitted URL
urlz.fr/k1vi
IP
104.21.234.214
ASN
#13335 CLOUDFLARENET
Submitted
2022-12-05 10:55:27
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
32

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
urlz.fr	403707	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	784 B	1.4 kB	104.21.234.215
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	34.213.140.56
sitebuilder180945.dynadot.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	17 kB	306 kB	104.16.60.53
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	58 kB	34.120.237.76
d24naddg1rhy2p.cloudfront.net	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	2.0 MB	143.204.42.72
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	6.2 kB	23.36.77.32
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	3.3 kB	93.184.220.29
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-05	medium	urlz.fr/k1vi	Phishing
2022-12-05	medium	sitebuilder180945.dynadot.com/scripts/1670030138562all-site-script.min.js	Phishing
2022-12-05	medium	sitebuilder180945.dynadot.com/c/1670030138493lazysizes.min.js	Phishing
2022-12-05	medium	sitebuilder180945.dynadot.com/scripts/jquery-1.12.1.min.js	Phishing
2022-12-05	medium	sitebuilder180945.dynadot.com/c/1670030138494all-common.min.js	Phishing
2022-12-05	medium	sitebuilder180945.dynadot.com/nav_coastal.js	Phishing
2022-12-05	medium	sitebuilder180945.dynadot.com/hp_script.js	Phishing
2022-12-05	medium	sitebuilder180945.dynadot.com/fonts/Dancing_Script-normal-700.woff	Phishing
2022-12-05	medium	sitebuilder180945.dynadot.com/fonts/Open_Sans-normal-400.woff	Phishing
2022-12-05	medium	sitebuilder180945.dynadot.com/fonts/Raleway-normal-700.woff	Phishing
2022-12-05	medium	sitebuilder180945.dynadot.com/fonts/Raleway-normal-400.woff	Phishing
2022-12-05	medium	sitebuilder180945.dynadot.com/fonts/Raleway-normal-300.woff	Phishing
2022-12-05	medium	sitebuilder180945.dynadot.com/fonts/Open_Sans-normal-700.woff	Phishing
2022-12-05	medium	sitebuilder180945.dynadot.com/scripts/jquery.validate.js	Phishing
2022-12-05	medium	urlz.fr/k1vi	Phishing
2022-12-05	medium	sitebuilder180945.dynadot.com/	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	sitebuilder180945.dynadot.com/c/1670030138494all-common.min.js	11 kB	2023-03-07	2023-03-26
Pretty URL sitebuilder180945.dynadot.com/c/1670030138494all-common.min.js IP 104.16.60.53 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:14 Last Seen2023-03-26 07:54:33 Times Seen3 Hash 56c1a9a60fc7c06356edc0784e5bcfb1 971ad55d70cbab336c9bb5a5ab6f8ecac486dc76 282cac604837c89d3794f22b230b8cce0dff62a7f809b97d792451706261c82e Loading...

	sitebuilder180945.dynadot.com/c/1670030138493lazysizes.min.js	7.9 kB	2023-03-07	2024-04-23
Pretty URL sitebuilder180945.dynadot.com/c/1670030138493lazysizes.min.js IP 104.16.60.53 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:14 Last Seen2024-04-23 14:28:34 Times Seen294 Hash fd4f902b789f81baa379b0ba42c21acd 9f5c7f1b6e8151ed8d54c24a297b27177b38efb0 6e61be2f374a0122510025578940baf7ef8dbbcaf3ecc5f5535cfc81bd1cfd39 Loading...

	sitebuilder180945.dynadot.com/nav_coastal.js	9.0 kB	2023-03-07	2023-05-26
Pretty URL sitebuilder180945.dynadot.com/nav_coastal.js IP 104.16.60.53 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:14 Last Seen2023-05-26 20:35:18 Times Seen3 Hash 445c9096ef61c36d1d93672d78dd6f4a 95831b5f2f10954bd5c0d61f6302ce14f8208c91 c178dced8c0607a8966fc9c4b481d7dc049553035541ca282a8ae59c0aae148a Loading...

	sitebuilder180945.dynadot.com/hp_script.js	4.3 kB	2023-03-07	2024-04-04
Pretty URL sitebuilder180945.dynadot.com/hp_script.js IP 104.16.60.53 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:14 Last Seen2024-04-04 15:35:34 Times Seen190 Hash e3a38f9f90665f041fc2f74a7783d11f 36a00e17f15f30e9bb864d42acf2614f0a6085af 76b055d98452d34162573203254cbdaa9938774e55fae84d7e8a41b912522687 Loading...

	sitebuilder180945.dynadot.com/scripts/jquery.validate.js	39 kB	2023-03-07	2023-04-03
Pretty URL sitebuilder180945.dynadot.com/scripts/jquery.validate.js IP 104.16.60.53 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:14 Last Seen2023-04-03 23:58:05 Times Seen3 Hash 425188629b096ef1df760f72469f0d14 b37795541e607e482db9f34932dd02bcb2735875 8c7fb5ec9b28ef094c84dcc8ed5f802481ca8d85610e26829d56ec9b4405d0b7 Loading...

	sitebuilder180945.dynadot.com/scripts/jquery-1.12.1.min.js	97 kB	2023-03-07	2024-03-26
Pretty URL sitebuilder180945.dynadot.com/scripts/jquery-1.12.1.min.js IP 104.16.60.53 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:14 Last Seen2024-03-26 12:35:24 Times Seen1671 Hash 1d244cb043be8157f0050ce9e45c9ef2 f16bd01623fd56d1372ea2eb55cd52a28cd883f8 2359d383bf2d4ab65ebf7923bdf74ce40e4093f6e58251b395a64034b3c39772 Loading...

	sitebuilder180945.dynadot.com/scripts/1670030138562all-site-script.min.js	35 kB	2023-03-07	2023-03-17
Pretty URL sitebuilder180945.dynadot.com/scripts/1670030138562all-site-script.min.js IP 104.16.60.53 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:14 Last Seen2023-03-17 12:47:23 Times Seen1 Hash c706f564700d2173aa9e6da054be2603 87af3ea9264e0ccf38789814e1bc1a6d99d9a72b 5e0fe4340124c3fce9d6c653d66b4d5d2fac6e59ce0326ea9b474936da60bc79 Loading...

HTTP Transactions (66)

URL IP Response Size

urlz.fr/k1vi

104.21.234.215

301 Moved Permanently

0 B

URL HTTP/1.1
urlz.fr/k1vi
IP
104.21.234.215:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /k1vi HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Mon, 05 Dec 2022 10:55:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://urlz.fr/k1vi
Expires: Mon, 05 Dec 2022 10:56:16 GMT
Cache-Control: max-age=60
X-FastCGI-Cache: HIT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LxLaN%2FCEzAe025wgvq87Wlbl1X5UkOjNiEKt9KtBxLoc7f0UUsOGoj1EG3mIP2Khp%2FZcrI5mchVzn%2B70YBAR6Ks3Fy97LFu2wYWOxL%2FE0T2eNhcQRRVEvYsQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 774c3fa16f9b24d5-LHR
alt-svc: h2=":443"; ma=60

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11618
Expires: Mon, 05 Dec 2022 14:08:54 GMT
Date: Mon, 05 Dec 2022 10:55:16 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
ee088fab9b287e174cfd1f2c735a909f
25c3335b514a36ad1a24d00413d60c3d394f5161
494e96358ff12366213d7cc0f9197648c6c62ec14fa0d2c78732a683fa26b192

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 206
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 10:55:16 GMT
Last-Modified: Mon, 05 Dec 2022 10:51:50 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13054
Expires: Mon, 05 Dec 2022 14:32:50 GMT
Date: Mon, 05 Dec 2022 10:55:16 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 05 Dec 2022 10:18:29 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2207
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: WIliKGHn7rV6xVbGtlTUqZxD96akYmJt2eRNhDXBxbQthVwKJFttg0W8Tz8zDB4Kbgz0xzvNzVA=
x-amz-request-id: PA1S4RRQN2TXHXH5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 05 Dec 2022 10:47:57 GMT
age: 439
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 10:55:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
35c07d3458be295f55351c25ef54a079
c5d7c7327e3ac4575943b6dc5eb659de0be0ee14
db9ae1b9322e7c56e6250d464fa50b5b11feb8a6472572bc38f7a5111d2e684e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=114469
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 10:55:17 GMT
Etag: "638cea3a-117"
Expires: Tue, 06 Dec 2022 18:43:06 GMT
Last-Modified: Sun, 04 Dec 2022 18:43:06 GMT
Server: nginx
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
35c07d3458be295f55351c25ef54a079
c5d7c7327e3ac4575943b6dc5eb659de0be0ee14
db9ae1b9322e7c56e6250d464fa50b5b11feb8a6472572bc38f7a5111d2e684e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=114469
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 10:55:17 GMT
Etag: "638cea3a-117"
Expires: Tue, 06 Dec 2022 18:43:06 GMT
Last-Modified: Sun, 04 Dec 2022 18:43:06 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
aff775709afa1f38674979c82047107a
649728858e5fc0c65a90436357b9b7b3ee7a8703
b8f55af531e397e9051147de3fc4121d9f2bf5a7e8a0823e56437cc3883e72ee

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1006
Cache-Control: max-age=139970
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 10:55:17 GMT
Etag: "638d49e9-116"
Expires: Wed, 07 Dec 2022 01:48:07 GMT
Last-Modified: Mon, 05 Dec 2022 01:31:21 GMT
Server: ECS (amb/6B7D)
X-Cache: HIT
Content-Length: 278

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 05 Dec 2022 10:11:19 GMT
cache-control: public,max-age=3600
age: 2638
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
2b9d6a686aa3c4ea24568425e43a5221
d53bb4c9579bd1db78a0520619e888aec79f750f
c38734a8dbe51217d73896c0bf7f5c38c107fd79e0dee24b717f130377e9b5f7

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 184
Cache-Control: max-age=166479
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 10:55:17 GMT
Etag: "638db4ac-1d7"
Expires: Wed, 07 Dec 2022 09:09:56 GMT
Last-Modified: Mon, 05 Dec 2022 09:06:52 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

34.213.140.56

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.213.140.56:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: naivPxHfwGIalqaEEXVPDg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: VMuvmQvAJYUchlQymOrN4VSFRKk=

sitebuilder180945.dynadot.com/c/1670030138485common_new.css

104.16.60.53

200 OK

7.7 kB

URL HTTP/2
sitebuilder180945.dynadot.com/c/1670030138485common_new.css
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
7.7 kB (7680 bytes)
Hash
38d40ed866ec2de056792a6bc14a586b
7a176076f2bc307b096eeaac541aec0d8ca97eae
f22649551f002465ba2ed7f1a94e9f377b6ad5bbd079e8afac64c4fe4039c901

HTTP Headers

GET /c/1670030138485common_new.css HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: text/css
content-length: 7680
content-encoding: gzip
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 8:16:43 GMT
etag: 1670030138486
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fae9a3ab4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/t3/1670030131664responsive.css

104.16.60.53

200 OK

573 B

URL HTTP/2
sitebuilder180945.dynadot.com/t3/1670030131664responsive.css
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
573 B (573 bytes)
Hash
253306fcd6f1698def480f3040084799
8421b324a64c95b814766c155eb072a258531473
6921b9b94b4772e8e6d5f30e2fd22db42b57d0ba53c87ceb11f774249680335d

HTTP Headers

GET /t3/1670030131664responsive.css HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: text/css
content-length: 573
content-encoding: gzip
cache-control: max-age=1209600
expires: Sun, 18 Dec 2022 23:19:04 GMT
etag: 1670030131664
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fae9a42b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/1670030138559lightbox.css

104.16.60.53

200 OK

1.0 kB

URL HTTP/2
sitebuilder180945.dynadot.com/1670030138559lightbox.css
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
1.0 kB (1007 bytes)
Hash
eb1a0958e4dcf6eec27c4ed73d816d61
e56c01b098ce76709d66866ca32c9981a96205d4
6d195e21ec0cd2aeb17b799806b7ad528bae9265dcc89d7339ff186d54ee5c0c

HTTP Headers

GET /1670030138559lightbox.css HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: text/css
content-length: 1007
content-encoding: gzip
cache-control: max-age=1209600
expires: Sun, 18 Dec 2022 23:19:04 GMT
etag: 1670030138559
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fae9a3bb4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/scripts/1670030138562all-site-script.min.js

104.16.60.53

200 OK

8.7 kB

URL HTTP/2
sitebuilder180945.dynadot.com/scripts/1670030138562all-site-script.min.js
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (35417), with no line terminators
Size
8.7 kB (8699 bytes)
Hash
0e6720285d0fc9dab8ca337a2c33225d
77b53184da3957103f8e2e797884570ebc331294
eb7165389125f03c4c428821bbb0f09c67da9c7bd63378c13ee5e47d6b06e952

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /scripts/1670030138562all-site-script.min.js HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: application/x-javascript
content-length: 8699
content-encoding: gzip
cache-control: max-age=1209600
expires: Sun, 18 Dec 2022 23:19:04 GMT
etag: 1670030138562
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3faeaa48b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/fonts/fonts.min.css

104.16.60.53

200 OK

2.4 kB

URL HTTP/2
sitebuilder180945.dynadot.com/fonts/fonts.min.css
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (32317), with no line terminators
Size
2.4 kB (2421 bytes)
Hash
29ecb6ad3dadd1f110c8ae9ce71b3f22
6e9b279a7a1aee1db736c76a6a33984ecf44a5f1
654ab7a539a708b999201cfa6b208c0a7c46bc713edb3f480e092e5bcdb0f8c2

HTTP Headers

GET /fonts/fonts.min.css HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: text/css
content-length: 2421
content-encoding: gzip
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 7:06:41 GMT
etag: 1670030131139
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3faeaa4cb4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/1670030138583nav-coastal.css

104.16.60.53

200 OK

2.3 kB

URL HTTP/2
sitebuilder180945.dynadot.com/1670030138583nav-coastal.css
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
2.3 kB (2263 bytes)
Hash
d69c82f8dad52d1605b684df8bec858a
8aa8d10897d0ef06600b4e07f72ef064364c2a8a
a54b9a27f8372b3e6511b1b580a08bd91935bb8dbc763c19665d133aae4099fc

HTTP Headers

GET /1670030138583nav-coastal.css HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: text/css
content-length: 2263
content-encoding: gzip
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 6:28:33 GMT
etag: 1670030138584
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fae9a45b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/c/1670030138493lazysizes.min.js

104.16.60.53

200 OK

3.5 kB

URL HTTP/2
sitebuilder180945.dynadot.com/c/1670030138493lazysizes.min.js
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (7862)
Size
3.5 kB (3494 bytes)
Hash
984042b9bdaa0d2e19107087f35d4be3
ae186fff6ae365bd378034ef715d221bba2909d3
a51b12c04f5cda3cc0db8b568bfd23c944d10cda98b3bdfd729f915e3782cc90

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /c/1670030138493lazysizes.min.js HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: application/x-javascript
content-length: 3494
content-encoding: gzip
cache-control: max-age=1209600
expires: Sun, 18 Dec 2022 23:19:04 GMT
etag: 1670030138493
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3faeaa4db4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/c/1670030138493all-common.min.css

104.16.60.53

200 OK

6.3 kB

URL HTTP/2
sitebuilder180945.dynadot.com/c/1670030138493all-common.min.css
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (40136), with no line terminators
Size
6.3 kB (6278 bytes)
Hash
6e8b9555e3d12dd1f207eb84bdcc50ce
207435591147f3e5dad2cda9efb7d1fa4d5ba094
7de6d796661ee73369ff83350635fa283db683347b52efedbeb43e5b11c07911

HTTP Headers

GET /c/1670030138493all-common.min.css HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: text/css
content-length: 6278
content-encoding: gzip
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 8:16:43 GMT
etag: 1670030138494
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fae9a39b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/edit/fontawesome6/css/solid.min.css

104.16.60.53

200 OK

279 B

URL HTTP/2
sitebuilder180945.dynadot.com/edit/fontawesome6/css/solid.min.css
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (336)
Size
279 B (279 bytes)
Hash
8e913e257f9c3a033f705d6a5128126a
43154f4a80102c0ce206d88ffeee3bc8557abb50
ebe7182c2758a3552a33094c9c94a662efbb105c574a5f3b9b2c7d0e78fb68dc

HTTP Headers

GET /edit/fontawesome6/css/solid.min.css HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: text/css
content-length: 279
content-encoding: gzip
cache-control: max-age=1209600
expires: Sun, 18 Dec 2022 23:26:23 GMT
etag: 1670030128840
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3faeaa51b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/scripts/jquery-1.12.1.min.js

104.16.60.53

200 OK

34 kB

URL HTTP/2
sitebuilder180945.dynadot.com/scripts/jquery-1.12.1.min.js
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (32039)
Size
34 kB (33894 bytes)
Hash
1544328f961e33c6c52aea769c2e8bcd
ad4e2a03ec25b2a4218c5574d8c522beb69354ad
9991fdea6eae58efbedf24362b0e2f931b956d8ce8c35f504891c33d121f618c

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /scripts/jquery-1.12.1.min.js HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: application/x-javascript
content-length: 33894
content-encoding: gzip
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 7:07:55 GMT
etag: 1670030138546
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fae9a46b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/c/1670030138494all-common.min.js

104.16.60.53

200 OK

2.6 kB

URL HTTP/2
sitebuilder180945.dynadot.com/c/1670030138494all-common.min.js
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (11017), with no line terminators
Size
2.6 kB (2627 bytes)
Hash
d3efd648472b2fb3e18abdf6b42aa40d
ba7f648735753255c8a1ff10fbdc948cba538822
be6aa8f4ec63f7db560a89b1511bcebdddcb5832192c70ffe4f4d7d8c79278b6

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /c/1670030138494all-common.min.js HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: application/x-javascript
content-length: 2627
content-encoding: gzip
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 7:07:58 GMT
etag: 1670030138495
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3faeaa4bb4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/t3/1670030131531template_new.css

104.16.60.53

200 OK

5.2 kB

URL HTTP/2
sitebuilder180945.dynadot.com/t3/1670030131531template_new.css
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
5.2 kB (5197 bytes)
Hash
0bb6af0ce4f4151353df8a011a2ba8b0
be22a40f4a74b352b2a51a1972f0849683f7bca8
9b225b064a81ca421f45d84655fff1cdc5b7339937f5afc7476ee02e93850f2d

HTTP Headers

GET /t3/1670030131531template_new.css HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: text/css
content-length: 5197
content-encoding: gzip
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 7:07:52 GMT
etag: 1670030131532
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fae9a3cb4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/nav_coastal.js

104.16.60.53

200 OK

1.5 kB

URL HTTP/2
sitebuilder180945.dynadot.com/nav_coastal.js
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
1.5 kB (1500 bytes)
Hash
343631c54f4066d9b225f6fa678d2425
c3012cad30d957be0748788288640367985dbdcf
bd805bfb99a12cde931c0c54a57faab1954a187f534e519b6d99a522a17334d6

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /nav_coastal.js HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: application/x-javascript
content-length: 1500
content-encoding: gzip
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 8:32:50 GMT
etag: 1670030138587
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3faeaa5ab4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/edit/fontawesome6/css/brands.min.css

104.16.60.53

200 OK

4.3 kB

URL HTTP/2
sitebuilder180945.dynadot.com/edit/fontawesome6/css/brands.min.css
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (17634)
Size
4.3 kB (4272 bytes)
Hash
d92e99589f5b71105dac141e1a17b96c
5721fdc337de069764e2944cbdffcdc3e783c949
ed0f0419a1cadb174adf6390aefe0b78fd296b9acd96acc27562abd8598b0798

HTTP Headers

GET /edit/fontawesome6/css/brands.min.css HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: text/css
content-length: 4272
content-encoding: gzip
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 6:28:33 GMT
etag: 1670030128803
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3faeaa55b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/edit/fontawesome/css/font-awesome.min.css

104.16.60.53

200 OK

7.1 kB

URL HTTP/2
sitebuilder180945.dynadot.com/edit/fontawesome/css/font-awesome.min.css
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (30856)
Size
7.1 kB (7056 bytes)
Hash
35ac83599eb64def96a3920b53a90479
5ec41bba08b6422a5a6736555935cf3a35d53ec0
617185e5a78de0de1d6779f8dcebb4fbb1180875db1514121170da3156e4e630

HTTP Headers

GET /edit/fontawesome/css/font-awesome.min.css HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: text/css
content-length: 7056
content-encoding: gzip
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 8:03:22 GMT
etag: 1670030128621
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3faeaa58b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/hp_script.js

104.16.60.53

200 OK

1.7 kB

URL HTTP/2
sitebuilder180945.dynadot.com/hp_script.js
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (4289), with no line terminators
Size
1.7 kB (1689 bytes)
Hash
e34449c658b03e8a3c79fd9e1f3c2ceb
2f391d7b60e8ea82736a89540f8644925567c753
b34342bfc8819e0b1097172a192277d88f157543bfac447dd0bfefc76ae22b34

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /hp_script.js HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: application/x-javascript
content-length: 1689
content-encoding: gzip
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 8:03:22 GMT
etag: 1670227402620
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3faeaa5fb4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/t3/1670030131532blog.css

104.16.60.53

200 OK

536 B

URL HTTP/2
sitebuilder180945.dynadot.com/t3/1670030131532blog.css
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
536 B (536 bytes)
Hash
72859f0ea6a840ae4d885686060120c1
d10873af718c8375b3685f44f5a2da6195a37260
91d1506c90e4f05b76ffadb5a9606cd5d7b07b1cce804e07c2c393ab79c725a7

HTTP Headers

GET /t3/1670030131532blog.css HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: text/css
content-length: 536
content-encoding: gzip
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 6:28:33 GMT
etag: 1670030131532
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fae9a40b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/edit/fontawesome6/css/fontawesome.min.css

104.16.60.53

200 OK

31 kB

URL HTTP/2
sitebuilder180945.dynadot.com/edit/fontawesome6/css/fontawesome.min.css
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65360)
Size
31 kB (31157 bytes)
Hash
87f80d60a0763221a66aa1aed94f736c
4a06a99427f41922d2cf9f48f1b7ea0097af2da2
d276592c9fe5150cd1628bd25fb6153b78ba6d53937ca76aa39dc215e8c51248

HTTP Headers

GET /edit/fontawesome6/css/fontawesome.min.css HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: text/css
content-length: 31157
content-encoding: gzip
cache-control: max-age=1209599
expires: Sun, 18 Dec 2022 23:19:04 GMT
etag: 1670030128832
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3faeaa50b4eb-OSL
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10481
Expires: Mon, 05 Dec 2022 13:50:00 GMT
Date: Mon, 05 Dec 2022 10:55:19 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10481
Expires: Mon, 05 Dec 2022 13:50:00 GMT
Date: Mon, 05 Dec 2022 10:55:19 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10481
Expires: Mon, 05 Dec 2022 13:50:00 GMT
Date: Mon, 05 Dec 2022 10:55:19 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10481
Expires: Mon, 05 Dec 2022 13:50:00 GMT
Date: Mon, 05 Dec 2022 10:55:19 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10481
Expires: Mon, 05 Dec 2022 13:50:00 GMT
Date: Mon, 05 Dec 2022 10:55:19 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15537f94-1f24-4010-9d46-d70fec20ced3.jpeg

34.120.237.76

200 OK

6.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15537f94-1f24-4010-9d46-d70fec20ced3.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.8 kB (6827 bytes)
Hash
1be5ade2f8eb160f9974766374c9dd01
8d3d92355304ccfcd50ae96f55b2754220f05187
5087642c70cd92613c2a490b532fc7651c4b25f8712a59b4f7a178cc44cdf90f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15537f94-1f24-4010-9d46-d70fec20ced3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6827
x-amzn-requestid: d4dfc77c-65cc-46f1-b8a3-ea6cebd0976d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjKUYE2woAMFgPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638abdb5-639ca0813c23b9cb75ff24c8;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 03:08:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lhweRJZbG0P_lxekUIz506RXW5f9iVQ1Cvfg-k3gJTWHIrzTu2uenQ==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 04:50:04 GMT
age: 21915
etag: "8d3d92355304ccfcd50ae96f55b2754220f05187"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc619d7d-5f58-4402-a30a-fe05dd9e2922.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (13647 bytes)
Hash
6079166a1ed5bac7373183f03f33b84e
b0c9391b87a4560598e43d5084dda41e267974a9
3e2faccbc3e14a10da4a433d789068cdc3fb2d3e2a04a7e2b7ea5f6f6313dcd4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc619d7d-5f58-4402-a30a-fe05dd9e2922.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13647
x-amzn-requestid: 36276b12-9e02-4d00-a100-9aa5c794fc79
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_ueEWUoAMFj7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1329-7abb45a85c6bc2235c25d61e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oXeR8DTpEoK8E-BiI7gT4JEIdVBfiimfydNYIC62_rNLlTdem9Buig==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:45:46 GMT
age: 47373
etag: "b0c9391b87a4560598e43d5084dda41e267974a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10396 bytes)
Hash
24c69d7ef356b352956d6dcbc9f5df1d
2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9
94d068620c34652cb2d24ca8b3cf962febe9606e6d3a33d937fc9d99f176edef

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10396
x-amzn-requestid: b879fd2e-b6cf-4373-b780-2d97481c45f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cioNbH5KoAMFUsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a8722-6add7f8e225878473b20c015;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 23:15:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ir97GJKaFoW6BNXCcmMqp0JSUd5JhCACyUvLh5G-0BWCDVJsqs7XhQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 22:03:01 GMT
age: 46338
etag: "2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47f316c5-1381-4b6e-9e8d-f1956258ef3e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.8 kB (6826 bytes)
Hash
a349d02cce160f72cc93f6fb6e45fa46
a6f82481ea0a820da0f199e8f9051a4aa4013c82
ab320118577a2dcb6ab7ad904d6350e187501a94b39b71fdd70b31cbc8853b24

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47f316c5-1381-4b6e-9e8d-f1956258ef3e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6826
x-amzn-requestid: f0abdba6-14c8-4aae-ba3b-37ba0af2ff08
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_t2FsLIAMFekA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1325-3452be066acddb554f528cc3;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GS4yLzXiIZt-eL9T7gjbf2-vMu8i30WKPDmc2EQDxv0CELjdW1gMVA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:46:51 GMT
age: 47308
etag: "a6f82481ea0a820da0f199e8f9051a4aa4013c82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.3 kB (8315 bytes)
Hash
db1701b7b9d161a0c935bb6e10b17893
22a8c4bd58c729c1abcf794466e8f3231dfb034b
b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8315
x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMGVboAMFfxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8ugcixaNsXG-AIHYCfoyOWa5zowv2lb4qwWc8o5_7SQc_0w5HW4mBw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:52:48 GMT
age: 46951
etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.7 kB (5681 bytes)
Hash
43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Uz-wJTZjej3sjP-O68BQ4hB_kkAecG0o7GkeZUan90ZgV87g0Cg_ZA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:52:41 GMT
age: 46958
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/dyna-builder/user_images/hghjghjgh.png?img_id=6&sbid=180945&w=500

104.16.60.53

302 Found

0 B

URL HTTP/2
sitebuilder180945.dynadot.com/dyna-builder/user_images/hghjghjgh.png?img_id=6&sbid=180945&w=500
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /dyna-builder/user_images/hghjghjgh.png?img_id=6&sbid=180945&w=500 HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 302 Found
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: image/png
content-length: 0
location: https://d24naddg1rhy2p.cloudfront.net/180945/6/0/hghjghjgh.png
cache-control: max-age=604800
expires: Mon, 12 Dec 2022 8:52:26 GMT
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fb26ebfb4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/dyna-builder/user_images/hgjghj.png?img_id=5&sbid=180945

104.16.60.53

302 Found

0 B

URL HTTP/2
sitebuilder180945.dynadot.com/dyna-builder/user_images/hgjghj.png?img_id=5&sbid=180945
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /dyna-builder/user_images/hgjghj.png?img_id=5&sbid=180945 HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 302 Found
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: image/png
content-length: 0
location: https://d24naddg1rhy2p.cloudfront.net/180945/5/0/hgjghj.png
cache-control: max-age=604800
expires: Mon, 12 Dec 2022 8:52:26 GMT
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fb25ebcb4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/dyna-builder/user_images/dgdfgdfgdf.png?img_id=7&sbid=180945&w=1500

104.16.60.53

302 Found

0 B

URL HTTP/2
sitebuilder180945.dynadot.com/dyna-builder/user_images/dgdfgdfgdf.png?img_id=7&sbid=180945&w=1500
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /dyna-builder/user_images/dgdfgdfgdf.png?img_id=7&sbid=180945&w=1500 HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 302 Found
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: image/png
content-length: 0
location: https://d24naddg1rhy2p.cloudfront.net/180945/7/0/dgdfgdfgdf.png
cache-control: max-age=604800
expires: Mon, 12 Dec 2022 8:52:26 GMT
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fb26ec3b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/dyna-builder/custom-edit.css?page_id=4&INhT=S

104.16.60.53

200 OK

726 B

URL HTTP/2
sitebuilder180945.dynadot.com/dyna-builder/custom-edit.css?page_id=4&INhT=S
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (668)
Size
726 B (726 bytes)
Hash
1b7712e6a50842d020b56de6b849b749
934e190bd445485aa72eae771dfe2be5e2abd8fb
6ca37a52f8290a527def3a851e7e55191d364972ee8b143b2a6dc4ce24c3f0a1

HTTP Headers

GET /dyna-builder/custom-edit.css?page_id=4&INhT=S HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:20 GMT
content-type: text/css
content-length: 726
content-encoding: gzip
cache-control: private, no-cache, no-store, max-age=0
expires: Mon, 01 Jan 1990 0:00:00 GMT
last-modified: Mon, 05 Dec 2022 10:55:20 GMT
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3faeaa5db4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/fonts/Dancing_Script-normal-700.woff

104.16.60.53

200 OK

35 kB

URL HTTP/2
sitebuilder180945.dynadot.com/fonts/Dancing_Script-normal-700.woff
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format, TrueType, length 34724, version 1.1\012- data
Size
35 kB (34724 bytes)
Hash
9cc3e6c60c2fff01add1447f6f9923ff
a466010f2ef4df745bfba25fb8a415c8136c18e4
e98ff8686065f0467eaacd997a229dc256040cc632324c1a6999cb7a4ebba79a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /fonts/Dancing_Script-normal-700.woff HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/fonts/fonts.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:20 GMT
content-type: application/octet-stream
content-length: 34724
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 7:06:48 GMT
etag: 1670030130840
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fb23e73b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/fonts/Open_Sans-normal-400.woff

104.16.60.53

200 OK

20 kB

URL HTTP/2
sitebuilder180945.dynadot.com/fonts/Open_Sans-normal-400.woff
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format, TrueType, length 20248, version 1.1\012- data
Size
20 kB (20248 bytes)
Hash
ce659615885f33d928eb7fe276574106
84f97fc997632d2fffb788cd07c92241f178a9a1
819747b05df4938922997e60e199603ecb04f4d987331ba5c3f7db30a835c3bd

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /fonts/Open_Sans-normal-400.woff HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/fonts/fonts.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:20 GMT
content-type: application/octet-stream
content-length: 20248
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 7:21:00 GMT
etag: 1670030130943
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fb23e70b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/fonts/Raleway-normal-700.woff

104.16.60.53

200 OK

25 kB

URL HTTP/2
sitebuilder180945.dynadot.com/fonts/Raleway-normal-700.woff
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format, TrueType, length 25052, version 1.1\012- data
Size
25 kB (25052 bytes)
Hash
c864d841486ab4b3bac77d66c4d6fee6
19e60a32597acda59ac12f76b6ef6363a4d14c6a
705d2e6d05b8eba0f06df305e38e0342d9192d5d866f4ea70d577ba69023fa60

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /fonts/Raleway-normal-700.woff HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/fonts/fonts.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:20 GMT
content-type: application/octet-stream
content-length: 25052
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 7:07:57 GMT
etag: 1670030130969
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fb24e93b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/dyna-builder/user_images/home-header.png?img_id=0&sbid=180945

104.16.60.53

302 Found

0 B

URL HTTP/2
sitebuilder180945.dynadot.com/dyna-builder/user_images/home-header.png?img_id=0&sbid=180945
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /dyna-builder/user_images/home-header.png?img_id=0&sbid=180945 HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/dyna-builder/custom-edit.css?page_id=4&INhT=S
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 302 Found
date: Mon, 05 Dec 2022 10:55:20 GMT
content-type: image/png
content-length: 0
location: https://d24naddg1rhy2p.cloudfront.net/180945/0/0/home-header.png
cache-control: max-age=604800
expires: Mon, 12 Dec 2022 8:52:25 GMT
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fba186db4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/prev.png

104.16.60.53

200 OK

1.4 kB

URL HTTP/2
sitebuilder180945.dynadot.com/prev.png
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced\012- data
Size
1.4 kB (1360 bytes)
Hash
84b76dee6b27b795e89e3649078a11c2
6640a3432f7ba7aea6129cdf7a5d3eabd47c295c
7fd9273f20fdb1229c224341271a119020a5eee74ccf6b4605730917c864caf2

HTTP Headers

GET /prev.png HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/1670030138559lightbox.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:20 GMT
content-type: image/png
content-length: 1360
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 7:06:56 GMT
etag: 1670030138578
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fba2875b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/loading.gif

104.16.60.53

200 OK

8.5 kB

URL HTTP/2
sitebuilder180945.dynadot.com/loading.gif
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 32 x 32\012- data
Size
8.5 kB (8476 bytes)
Hash
2299ad0b3f63413f026dfec20c205b8f
cf720b50cf8dde0e1a84ce1c6a77788bfc5882d5
225aa88b6ab02c06222ec9468d62e15fa188e39cdb9431d1f55401ad380753ed

HTTP Headers

GET /loading.gif HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/1670030138559lightbox.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:20 GMT
content-type: image/gif
content-length: 8476
cache-control: max-age=1209600
expires: Sun, 18 Dec 2022 23:26:27 GMT
etag: 1670030138578
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fba287bb4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/next.png

104.16.60.53

200 OK

1.4 kB

URL HTTP/2
sitebuilder180945.dynadot.com/next.png
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced\012- data
Size
1.4 kB (1350 bytes)
Hash
31f15875975aab69085470aabbfec802
777e92c050f600b4519299c3d786b8f2f459fea4
15b869b02c6fbaa8c6c26445a2dd2d9bad80fd27b1409f8179e5dd89dc89d90a

HTTP Headers

GET /next.png HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/1670030138559lightbox.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:20 GMT
content-type: image/png
content-length: 1350
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 8:11:04 GMT
etag: 1670030138578
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fba2876b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/close.png

104.16.60.53

200 OK

280 B

URL HTTP/2
sitebuilder180945.dynadot.com/close.png
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 27 x 27, 8-bit colormap, non-interlaced\012- data
Size
280 B (280 bytes)
Hash
d9d2d0b1308cb694aa8116915592e2a9
3ca48361cfe0e41163023d03c26296f375bb3eac
5d62e6c90005bfb71f6abb440f9e4753681cb23bbd5e60477ab6f442d2f0e69c

HTTP Headers

GET /close.png HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/1670030138559lightbox.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:20 GMT
content-type: image/png
content-length: 280
cache-control: max-age=1209600
expires: Sun, 18 Dec 2022 23:19:05 GMT
etag: 1670030138578
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fba2881b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/fonts/Raleway-normal-400.woff

104.16.60.53

200 OK

25 kB

URL HTTP/2
sitebuilder180945.dynadot.com/fonts/Raleway-normal-400.woff
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format, TrueType, length 24788, version 1.1\012- data
Size
25 kB (24788 bytes)
Hash
290ee38e3393e0064027cf7cfd8007cd
b856077dcedd4153172925439edd0bd32e999218
de815057e0d9ef161312a40685e68a19678b0998965c28adb4e7d93bc671bc13

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /fonts/Raleway-normal-400.woff HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/fonts/fonts.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:21 GMT
content-type: application/octet-stream
content-length: 24788
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 7:07:57 GMT
etag: 1670030130969
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fb23e76b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/fonts/Raleway-normal-300.woff

104.16.60.53

200 OK

25 kB

URL HTTP/2
sitebuilder180945.dynadot.com/fonts/Raleway-normal-300.woff
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format, TrueType, length 24884, version 1.1\012- data
Size
25 kB (24884 bytes)
Hash
78dd5abd38ebf8f2bb8fe69b06242769
1f2acd3c819194becc765f5deb3dd24c5985ea27
1760973b4eb3d68919c7016096f92168d7cb677947e734d09022b85c40036443

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /fonts/Raleway-normal-300.woff HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/fonts/fonts.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:21 GMT
content-type: application/octet-stream
content-length: 24884
cache-control: max-age=1209600
expires: Sun, 18 Dec 2022 23:19:05 GMT
etag: 1670030130968
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fb23e79b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/fonts/Open_Sans-normal-700.woff

104.16.60.53

200 OK

21 kB

URL HTTP/2
sitebuilder180945.dynadot.com/fonts/Open_Sans-normal-700.woff
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format, TrueType, length 21028, version 1.1\012- data
Size
21 kB (21028 bytes)
Hash
72862e7cf19603ad24f26baf86dd0e08
4bd3f3f26f7a8eb357a09da8636390a28a21f826
16c11e59500457a4d210e5584e57cdce82015483c1199119b562120e6510a67a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /fonts/Open_Sans-normal-700.woff HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/fonts/fonts.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:21 GMT
content-type: application/octet-stream
content-length: 21028
cache-control: max-age=1209600
expires: Sun, 18 Dec 2022 23:19:06 GMT
etag: 1670030130943
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fb25ebbb4eb-OSL
X-Firefox-Spdy: h2

d24naddg1rhy2p.cloudfront.net/180945/6/0/hghjghjgh.png

143.204.42.72

200 OK

1.8 kB

URL HTTP/2
d24naddg1rhy2p.cloudfront.net/180945/6/0/hghjghjgh.png
IP
143.204.42.72:0
ASN
#16509 AMAZON-02

File type
PNG image data, 225 x 225, 8-bit colormap, non-interlaced\012- data
Size
1.8 kB (1812 bytes)
Hash
f59650c843d9c620b1ffc210403cd2e2
13966f8d1ce4d43ab2c02cbc16a5da2906c9198f
2d142fc5dd797d0b5b8e9a7ca65091aad0f306f516ccc98a5d3208ec92cafaae

HTTP Headers

GET /180945/6/0/hghjghjgh.png HTTP/1.1
Host: d24naddg1rhy2p.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sitebuilder180945.dynadot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1812
date: Mon, 05 Dec 2022 10:55:22 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 25 Oct 2022 11:37:05 GMT
etag: "f59650c843d9c620b1ffc210403cd2e2"
x-amz-version-id: JMVAp58QmaOKVyOy7IrVd23TOkBhDK41
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: smg5XzVckj4lPfjyHu_f-f2CW8I9GsFuBDGsXVRTcnKy8hcP0SFvZw==
X-Firefox-Spdy: h2

d24naddg1rhy2p.cloudfront.net/180945/7/0/dgdfgdfgdf.png

143.204.42.72

200 OK

11 kB

URL HTTP/2
d24naddg1rhy2p.cloudfront.net/180945/7/0/dgdfgdfgdf.png
IP
143.204.42.72:0
ASN
#16509 AMAZON-02

File type
PNG image data, 1250 x 103, 8-bit/color RGBA, non-interlaced\012- data
Size
11 kB (11113 bytes)
Hash
dd02f03a50377fe5d62b0459a8741e3a
f6126765fc11b65732ffae67340cb8dabfb340fe
3c926d1b75d39f894baca795cb40fecef9e2a0af67b366e93b0207e668bb483c

HTTP Headers

GET /180945/7/0/dgdfgdfgdf.png HTTP/1.1
Host: d24naddg1rhy2p.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sitebuilder180945.dynadot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 11113
date: Mon, 05 Dec 2022 10:55:22 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 25 Oct 2022 11:37:05 GMT
etag: "dd02f03a50377fe5d62b0459a8741e3a"
x-amz-version-id: nkMPRa89EyVRTrE2uh2eQ9lhptJiAUE0
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VH0GRV4ubCCo2MRISXZwZ2KakYJKkPImV8gZdYhuzDFvb4FFX1udOw==
X-Firefox-Spdy: h2

d24naddg1rhy2p.cloudfront.net/180945/5/0/hgjghj.png

143.204.42.72

200 OK

2.5 kB

URL HTTP/2
d24naddg1rhy2p.cloudfront.net/180945/5/0/hgjghj.png
IP
143.204.42.72:0
ASN
#16509 AMAZON-02

File type
PNG image data, 224 x 225, 8-bit colormap, non-interlaced\012- data
Size
2.5 kB (2501 bytes)
Hash
20160407e7f0d24f965bbe3d5b7df647
5ed93c66826d15765ab75d6ef168dddd897afc0b
2fd4fc7c3613a01d4a93a7a6d037a8337ba5a73f724aea84c3dd3b572887028b

HTTP Headers

GET /180945/5/0/hgjghj.png HTTP/1.1
Host: d24naddg1rhy2p.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sitebuilder180945.dynadot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 2501
date: Mon, 05 Dec 2022 10:55:22 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 25 Oct 2022 11:37:05 GMT
etag: "20160407e7f0d24f965bbe3d5b7df647"
x-amz-version-id: YyelS64YkRMydcQa9DlNPoP9KOyIa5TS
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZqW21N9rkE5_qPS0FkUE69gfdNjT-k4ccUUfT8aRdfQv40T1fINauQ==
X-Firefox-Spdy: h2

d24naddg1rhy2p.cloudfront.net/180945/0/0/home-header.png

143.204.42.72

200 OK

1.9 MB

URL HTTP/2
d24naddg1rhy2p.cloudfront.net/180945/0/0/home-header.png
IP
143.204.42.72:0
ASN
#16509 AMAZON-02

File type
PNG image data, 1860 x 536, 8-bit/color RGBA, non-interlaced\012- data
Size
1.9 MB (1934681 bytes)
Hash
aea21d7642acca40c3cacc85c6091e2d
56fd77ab97eaee454d141a7d63499b2f47e96404
82d4edfafd15076ee5d214bc737fbe70373f5741322893b4c97e430573759b36

HTTP Headers

GET /180945/0/0/home-header.png HTTP/1.1
Host: d24naddg1rhy2p.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sitebuilder180945.dynadot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1934681
date: Mon, 05 Dec 2022 10:55:22 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 25 Oct 2022 11:12:05 GMT
etag: "aea21d7642acca40c3cacc85c6091e2d"
x-amz-version-id: 98DeoaNBNcJxv00ETDNKR9MmFjk26Co1
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9m4DmFTYGaQd-tnB4Ke7MPidseEdYXSsB4p6CSM0q_8keHfyt52v-w==
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/favicon.ico

104.16.60.53

200 OK

0 B

URL HTTP/2
sitebuilder180945.dynadot.com/favicon.ico
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:23 GMT
content-type: image/x-icon
content-length: 0
cache-control: private, no-cache, no-store, max-age=0
expires: Mon, 01 Jan 1990 0:00:00 GMT
last-modified: Mon, 05 Dec 2022 10:55:22 GMT
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fbd1ca8b4eb-OSL
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/scripts/jquery.validate.js

104.16.60.53

200 OK

10 kB

URL HTTP/2
sitebuilder180945.dynadot.com/scripts/jquery.validate.js
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type
Non-ISO extended-ASCII text, with very long lines (1239)
Size
10 kB (10001 bytes)
Hash
a1f62951e60547c6981310211b849237
9eceaf9eef1014a4bc8ab8bb226be252dc43ba31
f123ebecf6f9e5fccfc5bafbccd36293cd2420c46680fd2e3b80d7fa6deca647

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /scripts/jquery.validate.js HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:23 GMT
content-type: application/x-javascript
content-length: 10001
content-encoding: gzip
cache-control: max-age=1209600
expires: Mon, 19 Dec 2022 7:07:03 GMT
etag: 1670030138554
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fcae8a7b4eb-OSL
X-Firefox-Spdy: h2

urlz.fr/k1vi

104.21.234.215

302 Found

0 B

URL HTTP/2
urlz.fr/k1vi
IP
104.21.234.215:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /k1vi HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 302 Found
date: Mon, 05 Dec 2022 10:55:17 GMT
content-type: text/html; charset=UTF-8
location: https://sitebuilder180945.dynadot.com/
expires: Mon, 05 Dec 2022 10:56:17 GMT
cache-control: max-age=60
x-fastcgi-cache: HIT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m7lyZq1LWKt8LGpE7kkLimRzKjlya2TfEVqd1qN7WKQnv%2BHChvSDd6oAUZxN%2FVR805SdLHqFyWCo2hAl1q71SOK9W4PXkoaj20tN5hJHcA7zVrWr1YFfvAiA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774c3fa53e207759-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/

104.16.60.53

200 OK

0 B

URL HTTP/2
sitebuilder180945.dynadot.com/
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:18 GMT
content-type: text/html; charset=utf-8
cache-control: private, no-cache, no-store, max-age=0
expires: Mon, 01 Jan 1990 0:00:00 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 774c3fa62deab4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

sitebuilder180945.dynadot.com/1670030138560dyna-site.css

104.16.60.53

200 OK

0 B

URL HTTP/2
sitebuilder180945.dynadot.com/1670030138560dyna-site.css
IP
104.16.60.53:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /1670030138560dyna-site.css HTTP/1.1
Host: sitebuilder180945.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sitebuilder180945.dynadot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 05 Dec 2022 10:55:19 GMT
content-type: text/css
cache-control: max-age=1209600
expires: Sun, 18 Dec 2022 23:19:03 GMT
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 774c3fae9a38b4eb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (66)

URL HTTP/1.1

IP

ASN

File type

Size