Overview

URL optus-billing-payment.com/login.php
IP35.203.55.109
ASNGOOGLE-CLOUD-PLATFORM
Location Canada
Report completed2022-07-07 01:04:06 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank
Added / Verified Severity Host Comment
2022-07-04 2 optus-billing-payment.com/login.php Other
Fortinet's Web Filter
Added / Verified Severity Host Comment
2022-07-07 2 optus-billing-payment.com/login.php Phishing
2022-07-07 2 optus-billing-payment.com/assets/index_2.html Phishing
2022-07-07 2 optus-billing-payment.com/assets/jquery.mask.js Phishing
2022-07-07 2 optus-billing-payment.com/assets/inputmask.min.js Phishing
2022-07-07 2 optus-billing-payment.com/assets/index_3.html Phishing
2022-07-07 2 optus-billing-payment.com/markpro-heavy.woff Phishing
2022-07-07 2 optus-billing-payment.com/markpro-bold.woff Phishing
2022-07-07 2 optus-billing-payment.com/markpro.woff Phishing
2022-07-07 2 optus-billing-payment.com/assets/e0fc48e548347c4ad5f98b1053b468f6-1.woff Phishing
2022-07-07 2 optus-billing-payment.com/markpro-heavy.ttf Phishing
2022-07-07 2 optus-billing-payment.com/markpro-bold.ttf Phishing
2022-07-07 2 optus-billing-payment.com/markpro.ttf Phishing
2022-07-07 2 optus-billing-payment.com/assets/b7b268c962e2855acf62186c96a55466.woff Phishing
2022-07-07 2 optus-billing-payment.com/assets/507b76aa0351c57ece90f02239b62ba3.woff Phishing
2022-07-07 2 optus-billing-payment.com/assets/ee10f7196c1b125a3b8222341465bf5e.woff Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS
Added / Verified Severity Host Comment
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed
2022-07-06 2 optus-billing-payment.com Sinkholed


Files

No files detected



Passive DNS (11)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
[Mnemonic Passive DNS] firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2020-05-25 20:01:47 UTC 54.230.111.65
[Mnemonic Passive DNS] content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-07-06 04:55:23 UTC 54.230.111.7
[Mnemonic Passive DNS] optus-billing-payment.com (22) 0 No data No data 35.203.55.109 Unknown ranking
[Mnemonic Passive DNS] ocsp.digicert.com (1) 86 2012-11-29 12:49:49 UTC 2022-07-06 19:05:02 UTC 93.184.220.29
[Mnemonic Passive DNS] cdnjs.cloudflare.com (1) 235 2014-04-23 07:31:51 UTC 2022-05-16 10:07:49 UTC 104.17.25.14
[Mnemonic Passive DNS] ocsp.pki.goog (2) 175 2017-06-14 07:23:31 UTC 2022-07-06 04:42:12 UTC 142.250.74.3
[Mnemonic Passive DNS] ajax.googleapis.com (1) 12905 2017-01-30 05:00:30 UTC 2019-10-16 05:01:16 UTC 142.250.74.42
[Mnemonic Passive DNS] r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-07-06 04:41:34 UTC 23.36.77.32
[Mnemonic Passive DNS] contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239
[Mnemonic Passive DNS] push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-07-06 04:47:23 UTC 35.83.91.138
[Mnemonic Passive DNS] img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-07-06 17:02:11 UTC 34.120.237.76


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 35.203.55.109

Date UQ / IDS / BL URL IP
2022-07-07 16:49:09 +0000
0 - 0 - 17 optus-billing-payment.com/login.php 35.203.55.109
2022-07-07 14:51:13 +0000
0 - 0 - 15 optus-billing-payment.com/login.php 35.203.55.109
2022-07-07 12:47:37 +0000
0 - 0 - 16 optus-billing-payment.com/login.php 35.203.55.109
2022-07-07 10:48:55 +0000
0 - 0 - 15 optus-billing-payment.com/login.php 35.203.55.109
2022-07-07 08:49:33 +0000
0 - 0 - 15 optus-billing-payment.com/login.php 35.203.55.109
2022-07-07 00:07:20 +0000
0 - 0 - 2 s-pankki-tili.com/ 35.203.55.109
2022-07-07 00:07:22 +0000
0 - 0 - 157 office-verify-info.com/ 35.203.55.109
2022-07-07 00:00:24 +0000
0 - 0 - 59 ee-updateinfo.com/ 35.203.55.109
2022-07-06 19:50:25 +0000
0 - 0 - 59 ee-updateinfo.com/ 35.203.55.109
2022-07-06 16:54:02 +0000
0 - 0 - 59 ee-updateinfo.com/ 35.203.55.109

Last 10 reports on ASN: GOOGLE-CLOUD-PLATFORM

Date UQ / IDS / BL URL IP
2022-08-19 03:07:45 +0000
0 - 0 - 0 https://u.nu/-hjg9 193.177.222.210
2022-08-19 03:03:22 +0000
0 - 0 - 2 host-file-host9.com/downloads/toolspab1.exe 34.92.142.46
2022-08-19 01:11:51 +0000
0 - 0 - 3 sparka-kundelehre.com/ 34.116.251.245
2022-08-18 22:02:09 +0000
0 - 0 - 2 host-file-host9.com/downloads/toolspab3.exe 34.92.142.46
2022-08-18 22:01:55 +0000
0 - 0 - 2 host-file-host9.com/downloads/toolspab2.exe 34.92.142.46
2022-08-18 21:44:56 +0000
0 - 0 - 2 host-file-host9.com/downloads/toolspab1.exe 34.92.142.46
2022-08-18 21:35:04 +0000
0 - 0 - 0 https://bit.ly/3vrs6rU 67.199.248.10
2022-08-18 21:18:22 +0000
0 - 0 - 4 shivrajengineering.in/qui-dolores/placeat.zip 34.66.135.39
2022-08-18 21:11:58 +0000
0 - 0 - 5 https://apex-university.netlify.app/ 34.159.58.69
2022-08-18 21:08:19 +0000
0 - 0 - 1 https://sgauth.practical-lovelace.34-125-203- (...) 34.125.203.80

Last 10 reports on domain: optus-billing-payment.com

Date UQ / IDS / BL URL IP
2022-07-10 06:49:35 +0000
0 - 0 - 5 optus-billing-payment.com/login.php 198.11.176.80
2022-07-10 01:58:00 +0000
0 - 0 - 15 optus-billing-payment.com/login.php 198.11.176.80
2022-07-09 01:42:21 +0000
0 - 0 - 40 optus-billing-payment.com/login.php 198.11.176.80
2022-07-08 09:09:04 +0000
0 - 0 - 15 optus-billing-payment.com/login.php 198.11.176.80
2022-07-08 07:57:52 +0000
0 - 0 - 15 optus-billing-payment.com/ 198.11.176.80
2022-07-08 03:13:16 +0000
0 - 0 - 16 optus-billing-payment.com/login.php 198.11.176.80
2022-07-08 01:19:11 +0000
0 - 0 - 15 optus-billing-payment.com/login.php 198.11.176.80
2022-07-07 16:49:09 +0000
0 - 0 - 17 optus-billing-payment.com/login.php 35.203.55.109
2022-07-07 14:51:13 +0000
0 - 0 - 15 optus-billing-payment.com/login.php 35.203.55.109
2022-07-07 12:47:37 +0000
0 - 0 - 16 optus-billing-payment.com/login.php 35.203.55.109


JavaScript

Executed Scripts (5)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (44)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "78A5DCFAF2D93D9C87CFB6DBC56100E9F22965D4500554BA65F71CB7D84DD666"
Last-Modified: Wed, 06 Jul 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9697
Expires: Thu, 07 Jul 2022 03:45:30 GMT
Date: Thu, 07 Jul 2022 01:03:53 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Backoff, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 07 Jul 2022 00:56:25 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: koqh63r2RjQIva9v4rN6cd5lm5h4Ecow7cdNg09V4MdAo2GyMjpsUg==
Age: 448


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    91dd975a7b17b2922dd23c0e49314e40
Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-08-10-12-10-21.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7
HTTP/2 200 OK
                                        
content-type: binary/octet-stream
content-length: 5348
last-modified: Tue, 21 Jun 2022 12:10:22 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 06 Jul 2022 03:26:46 GMT
etag: "581454acdd98f34fd3fbabd0977ade29"
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: B6kuQYbsDUZ6Gz8qemz_e7PgEcvPRmGgjfs1veH2x47yElfEUW-Lkg==
age: 77828
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    581454acdd98f34fd3fbabd0977ade29
Sha1:   d8d86c0b513137aeb85de01cea7b272c35eb6ab4
Sha256: e98f8f33ba5ed59c3cfdf2ae54957ed32652cf0899f3c8db4b5872e3ece1e4eb
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
                                        
server: nginx
date: Thu, 07 Jul 2022 01:03:53 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Content-Type, Last-Modified, Alert, Backoff, Pragma, Expires, Content-Length, Cache-Control
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 07 Jul 2022 00:34:56 GMT
Cache-Control: max-age=3600
Expires: Thu, 07 Jul 2022 01:11:40 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: OETjYGVqvhzixngnyqdzx6ojs5-2m6-z9Oa_kkQsY_abx5zHXlbWRQ==
Age: 1738


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /login.php HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         35.203.55.109
HTTP/1.1 302 Found
                                        
date: Thu, 07 Jul 2022 01:03:53 GMT
server: Apache
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af; path=/
location: index.php
transfer-encoding: chunked
content-type: text/html; charset=UTF-8


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1065)
Size:   12410
Md5:    5be26b8954c664da4b15e5b2beb055a0
Sha1:   bf6b9b54b19234cd765b27c68148bd41a32cf094
Sha256: 571a1bb64d3a6085bf17fd0fd69754db639cf059f90e7d66ace98d57f8f5d52d

Alerts:
  Blocklists:
    - phishtank: Other
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3641
Cache-Control: 'max-age=158059'
Date: Thu, 07 Jul 2022 01:03:54 GMT
Last-Modified: Thu, 07 Jul 2022 00:03:13 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MS1G5PmEf7kPXYNjK7Dozg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.83.91.138
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9kMfemP7cFjycD8a6YhK3E1aJiA=

                                        
                                            GET /login.php?sessionid=35b0bce9d250429df012c0426f88d0bd HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af
Upgrade-Insecure-Requests: 1

                                         
                                         35.203.55.109
HTTP/1.1 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:54 GMT
server: Apache
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
transfer-encoding: chunked
content-type: text/html; charset=UTF-8


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8386)
Size:   65136
Md5:    866f7cb2add67c2fb6dc59808f0f4c38
Sha1:   bec64d659abcb69c1af833c1155c020f062aa619
Sha256: 682c46e33d5bf1c357928c8faaefb865a2a24ee46a2bf0849ce456f2a17e0686

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /ajax/libs/jquery-validate/1.19.4/jquery.validate.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://optus-billing-payment.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 6982
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62866b7a-1b46"
last-modified: Thu, 19 May 2022 16:08:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2594735
expires: Tue, 27 Jun 2023 01:03:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CEbxhoXQ%2B6KCn6th8RjSyk1XJwB4bPIT8ppdm1p3DJLDkWo%2Fsu07GxmttO4gIzbPMb8BEEBNy7fvVfoDaU2g6mztambwZ%2F8NSwWzMjPa3cl2TUqsVsCYxl%2FY%2B836jVTG9LxflLx0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 726ca9bfce24b511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (24350)
Size:   6982
Md5:    2ea08661494600f2b846f2f2a0edf928
Sha1:   23dd30df766a846db627a3209b5d89d3bbb9a36a
Sha256: aa22efaecb862cd85da8683a5ab6a4ebcb3a58a83e9709e87e41b3668ce3a05b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Jul 2022 01:03:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://optus-billing-payment.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.42
HTTP/2 200 OK
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Jul 2022 13:48:54 GMT
expires: Tue, 04 Jul 2023 13:48:54 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
age: 213300
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   31021
Md5:    903bc7a7e510f87aa5d0201eb59a0832
Sha1:   ac9aa4dd94cde1bcba9037e94087138b127e41fc
Sha256: 41a7ac8150cc9f38421451d5143c1ffec7a1f1fafbf7a7fc0f51b98ad699cf8f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 07 Jul 2022 01:03:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /assets/clientlib-liveperson.min.ACSHASH2d9934bf1102475eedeea6f0ea3091e0.css HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://optus-billing-payment.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:55 GMT
server: Apache
last-modified: Thu, 19 May 2022 14:21:32 GMT
accept-ranges: bytes
content-length: 2158
content-type: text/css


--- Additional Info ---
Magic:  ASCII text, with very long lines (362)
Size:   2158
Md5:    2d9934bf1102475eedeea6f0ea3091e0
Sha1:   949157fd3a7280fc46f71cff600733f37d613381
Sha256: 617c92d6ec277c29dd660df4cda64907a2dc1f9214e5b751beb0f28ea338c1fb

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/index_2.html HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://optus-billing-payment.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af
Upgrade-Insecure-Requests: 1

                                         
                                         35.203.55.109
HTTP/1.1 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:55 GMT
server: Apache
last-modified: Thu, 19 May 2022 14:21:34 GMT
accept-ranges: bytes
content-length: 1038
content-type: text/html


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1038), with no line terminators
Size:   1038
Md5:    ed0c843ca535d918c38f3836fcdf9de0
Sha1:   4efdcde4e88a0a104b5c920c4bde8af0804d7fe8
Sha256: 122eb6c08707775634de7bdfcb01b8be9a08b2f22c836d342baec953f830df43

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /assets/jquery.mask.js HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://optus-billing-payment.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:55 GMT
server: Apache
last-modified: Sat, 13 Nov 2021 07:51:30 GMT
accept-ranges: bytes
content-length: 20661
content-type: application/javascript


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   20661
Md5:    504a4b0ce366d2d44eb3e92eb1ca9777
Sha1:   17a0b963c68c513d333624cce8387b3ada9da279
Sha256: 48ce47091a7f70176bcf4f56af6ef58b0625c7b68355c341a3d41e14a53a4fe9

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /assets/inputmask.min.js HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://optus-billing-payment.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:55 GMT
server: Apache
last-modified: Sun, 14 Nov 2021 03:05:40 GMT
accept-ranges: bytes
content-length: 20001
content-type: application/javascript


--- Additional Info ---
Magic:  ASCII text, with very long lines (20001), with no line terminators
Size:   20001
Md5:    b8d34a858720c3eead8a1a560dac2d92
Sha1:   029877145d5bb8385eed27b0035a84673bfa042a
Sha256: 86da86ca2e4470a03d378a4160164ba5c2d1fe340f695bab602ab97da20c87b8

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /assets/index_3.html HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://optus-billing-payment.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af
Upgrade-Insecure-Requests: 1

                                         
                                         35.203.55.109
HTTP/1.1 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:55 GMT
server: Apache
last-modified: Thu, 19 May 2022 14:21:36 GMT
accept-ranges: bytes
content-length: 398
content-type: text/html


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (398), with no line terminators
Size:   398
Md5:    9576f4ba650991c8c279e5a6be90b7af
Sha1:   8718132117d7be289c38e8bec6b515647f52731e
Sha256: f53ac21daaee0293d24f36b690b3dc5877989fd7e2385800a25651c4ff901460

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /assets/dc_pre=CMretLHt6_cCFc6T2AUdeWMBYw;src=3306388;type=optus004;cat=optus0;ord=7691410562399;gtm=2wg5b0;auiddc=_;u24=4350153.gif HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://optus-billing-payment.com/assets/index_2.html
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:55 GMT
server: Apache
last-modified: Thu, 19 May 2022 14:21:32 GMT
accept-ranges: bytes
content-length: 42
content-type: image/gif


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/lux.base.acb5d2bbb7283eded6b2df9cf2c5366d.css HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://optus-billing-payment.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:55 GMT
server: Apache
last-modified: Thu, 19 May 2022 14:21:34 GMT
accept-ranges: bytes
content-length: 505071
content-type: text/css


--- Additional Info ---
Magic:  ASCII text, with very long lines (55414)
Size:   505071
Md5:    a04d5d61397191e7d024c6d1c9cecef2
Sha1:   58d375fbbcbf3f23446d0e61d4836df3cdcdab8d
Sha256: 4dfc732b93730c443b13916539ec0004cc0db2aa474ab5240d9ee2a958c6796d

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/lux.645444d2bf6bb4e1331cdd6e4c180540.css HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://optus-billing-payment.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:55 GMT
server: Apache
last-modified: Sat, 28 May 2022 01:21:02 GMT
accept-ranges: bytes
content-length: 454031
content-type: text/css


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (64676), with no line terminators
Size:   454031
Md5:    5ea2d9d1a2e2871ce94a5552f5cdd141
Sha1:   6b6f260fa75df18c0045a680721e7d486e036f82
Sha256: 3e4baf763d6b037c3b1c6d36bdd5037e4eea8a8146278402f72d939b4b46bca7

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E96EA592111AAC8DB4D301EA1E1DEF1043D15D8774C4224D707FB21885E98909"
Last-Modified: Wed, 06 Jul 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5435
Expires: Thu, 07 Jul 2022 02:34:30 GMT
Date: Thu, 07 Jul 2022 01:03:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E96EA592111AAC8DB4D301EA1E1DEF1043D15D8774C4224D707FB21885E98909"
Last-Modified: Wed, 06 Jul 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5435
Expires: Thu, 07 Jul 2022 02:34:30 GMT
Date: Thu, 07 Jul 2022 01:03:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E96EA592111AAC8DB4D301EA1E1DEF1043D15D8774C4224D707FB21885E98909"
Last-Modified: Wed, 06 Jul 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5435
Expires: Thu, 07 Jul 2022 02:34:30 GMT
Date: Thu, 07 Jul 2022 01:03:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E96EA592111AAC8DB4D301EA1E1DEF1043D15D8774C4224D707FB21885E98909"
Last-Modified: Wed, 06 Jul 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5435
Expires: Thu, 07 Jul 2022 02:34:30 GMT
Date: Thu, 07 Jul 2022 01:03:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E96EA592111AAC8DB4D301EA1E1DEF1043D15D8774C4224D707FB21885E98909"
Last-Modified: Wed, 06 Jul 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5435
Expires: Thu, 07 Jul 2022 02:34:30 GMT
Date: Thu, 07 Jul 2022 01:03:55 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13136825-0301-44c6-8c81-faf21628fe4c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 6737
x-amzn-requestid: 9a9c33df-daa2-49fb-ba8e-fd5a3149828e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UeP9ZG93oAMFX6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62bbf9ef-248528170cf451be2662dbef;Sampled=0
x-amzn-remapped-date: Wed, 29 Jun 2022 07:06:23 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: GZWZ5vCdHbLeGN4FdZbd8ysfjqcGd-7MsBW_steUpJ38jyLd16JNtw==
via: 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 06 Jul 2022 03:53:29 GMT
age: 76226
etag: "5e2f835320ab350cdd1c3ad1ceb71db2bb27b84f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6737
Md5:    44f59062cacc44be268845c493de29de
Sha1:   5e2f835320ab350cdd1c3ad1ceb71db2bb27b84f
Sha256: c37305dfa7a241e526c7246a6eb71360dbfa2fe5d7f369f37ef7ddbfe1b97749
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce2fc71a-842c-433d-8506-e191aa0edcd6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 4243
x-amzn-requestid: 7529aa91-0ea7-442d-a0b7-c3c74f0d5d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UthU8HNdoAMFpUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c215b9-527e994b56eb0630557d6dd5;Sampled=0
x-amzn-remapped-date: Sun, 03 Jul 2022 22:18:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DQPLClNEQSPyiJJEq83p-1_lCk1cLIqpXQuPUQA2EzYd4kc0D9ILaw==
via: 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 06 Jul 2022 04:44:24 GMT
age: 73171
etag: "5f4a7a2dcc9ffbb5bb61859a6337ec9c8f11f1f3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4243
Md5:    4dadb5bd9157f2899ea250117bf6655e
Sha1:   5f4a7a2dcc9ffbb5bb61859a6337ec9c8f11f1f3
Sha256: 236f94db1ce5926743b6f0692509ab20c17fca595b5c062133a9d24fc80d6f0d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0584e039-a479-41c4-ad51-d842dbd32f7c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 5198
x-amzn-requestid: f56b5dea-3209-4e32-985e-fbcb45c70e71
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: U0xnWFKCIAMFe2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c4fc95-159a1632285a681d7478353a;Sampled=0
x-amzn-remapped-date: Wed, 06 Jul 2022 03:08:05 GMT
x-amz-cf-pop: SFO20-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jh8Cn-5251TNBafhSRsz0jUA8md-ZKQpjj_N1YYcUaVnJAYIdFAQ2A==
via: 1.1 21e2c668bb54ebb4456425e394c3356a.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 06 Jul 2022 03:19:59 GMT
age: 78236
etag: "76b2ac44ab4590c5345063d314975f483a61cb1f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5198
Md5:    cd4e7dda9491e473d4b36a87915a82df
Sha1:   76b2ac44ab4590c5345063d314975f483a61cb1f
Sha256: f1e7681478f46029c90d707def4755f3d91a9f0b1d3509008bfca84d84a9634a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf054370-6b80-40cd-a42e-91d4d8e3c37e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7271
x-amzn-requestid: 3fa97801-72ce-40f1-9609-10406e6d70ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UoS0BFjuoAMFw8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62bffe7f-103b3e9a2928a3ed39c62b1b;Sampled=0
x-amzn-remapped-date: Sat, 02 Jul 2022 08:14:55 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: TrgAb-pYFci7r56srzmwDp_mnZ6ApHI6KRaOyrHTYgJHmLcx6iNr1g==
via: 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 06 Jul 2022 21:50:30 GMT
age: 11605
etag: "949707b56fd4aa6464f5f4a5d52b18ab72d307ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7271
Md5:    1d4f4e3ad0f3ca501b797538d0f3aaac
Sha1:   949707b56fd4aa6464f5f4a5d52b18ab72d307ff
Sha256: 66cf72056531f6151e2e72d48f07f1ba063753316160fe165cb00e125efbca90
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1f48beb-da86-42f3-b5da-39fa82b568cb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7249
x-amzn-requestid: 74cbc653-182e-4ef0-9fe5-901ddaa4edaf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UoBIEGKqIAMFp8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62bfe233-383f73a750696511624ff453;Sampled=0
x-amzn-remapped-date: Sat, 02 Jul 2022 06:14:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BVo4WA3x-2hGSrOBQTIcT5yjiYcdzQby4NDOrnrWpREFtHG5x52Jzg==
via: 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Wed, 06 Jul 2022 09:18:45 GMT
age: 56710
etag: "2f79d1e28bb827f7fa60b6675dba8022c28a1a3d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7249
Md5:    5c958b0c904620aff5f5f8a74f80d9f9
Sha1:   2f79d1e28bb827f7fa60b6675dba8022c28a1a3d
Sha256: 8bba608d028bbb678f021eaca3364856f930069f44b647346e649eca4c383955
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb94470e3-8873-4e4e-909a-df8539096335.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 12294
x-amzn-requestid: e6b35bb1-bc6b-4b98-aa16-cff64cf3e4b9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Ua_AwHdPIAMFSzQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62baab9e-4659e88772f9e8551e06800a;Sampled=0
x-amzn-remapped-date: Tue, 28 Jun 2022 07:19:58 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: EWsndyPnvdV629tcpvI0HUzSA6Ocbb0acwQ6v5i0VWoEeGIKaF7fcw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 06 Jul 2022 21:59:49 GMT
age: 11046
etag: "7bb8eb688c64b18a63cd78ec3c59079a65e6f9b7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12294
Md5:    8b57e1aba0bce88ae13af9ccf60089bd
Sha1:   7bb8eb688c64b18a63cd78ec3c59079a65e6f9b7
Sha256: 84a48013d8c91a7ae77719feb3d5996409197bdafe93a9e6deb02dbeffe0cb4b
                                        
                                            GET /assets/ed70c162d70ee07a328dfd9bc4a3f1dad169dcaf.png HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://optus-billing-payment.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:56 GMT
server: Apache
last-modified: Thu, 19 May 2022 14:21:28 GMT
accept-ranges: bytes
content-length: 1463
content-type: image/png


--- Additional Info ---
Magic:  PNG image data, 82 x 16, 8-bit colormap, non-interlaced\012- data
Size:   1463
Md5:    a7f69fc350c45e2c32dca9b8f248896d
Sha1:   ed70c162d70ee07a328dfd9bc4a3f1dad169dcaf
Sha256: eea41981c12ea68bbb642bc6fccdcfce8ce0c6ac21f998c6621a486db6f8e004

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /markpro-heavy.woff HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://optus-billing-payment.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 404 Not Found
                                        
date: Thu, 07 Jul 2022 01:03:56 GMT
server: Apache
content-length: 315
content-type: text/html; charset=iso-8859-1


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /markpro-bold.woff HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://optus-billing-payment.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 404 Not Found
                                        
date: Thu, 07 Jul 2022 01:03:56 GMT
server: Apache
content-length: 315
content-type: text/html; charset=iso-8859-1


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /markpro.woff HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://optus-billing-payment.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 404 Not Found
                                        
date: Thu, 07 Jul 2022 01:03:56 GMT
server: Apache
content-length: 315
content-type: text/html; charset=iso-8859-1


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /assets/e0fc48e548347c4ad5f98b1053b468f6-1.woff HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://optus-billing-payment.com/assets/lux.645444d2bf6bb4e1331cdd6e4c180540.css
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:56 GMT
server: Apache
last-modified: Thu, 19 May 2022 14:21:32 GMT
accept-ranges: bytes
content-length: 58916
content-type: font/woff


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 58916, version 1.0\012- data
Size:   58916
Md5:    e0fc48e548347c4ad5f98b1053b468f6
Sha1:   af90dbb61db8aaa48cfc06667356e0abeda3c1b5
Sha256: b86ae83a755bce51821af5a1e5bf0854c483377d76b4add4b499f9578cb44d71

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /markpro-heavy.ttf HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://optus-billing-payment.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 404 Not Found
                                        
date: Thu, 07 Jul 2022 01:03:56 GMT
server: Apache
content-length: 315
content-type: text/html; charset=iso-8859-1


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /markpro-bold.ttf HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://optus-billing-payment.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 404 Not Found
                                        
date: Thu, 07 Jul 2022 01:03:56 GMT
server: Apache
content-length: 315
content-type: text/html; charset=iso-8859-1


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /markpro.ttf HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://optus-billing-payment.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 404 Not Found
                                        
date: Thu, 07 Jul 2022 01:03:56 GMT
server: Apache
content-length: 315
content-type: text/html; charset=iso-8859-1


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /assets/favicon.ico HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://optus-billing-payment.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:56 GMT
server: Apache
last-modified: Thu, 19 May 2022 14:21:32 GMT
accept-ranges: bytes
content-length: 1150
content-type: image/x-icon


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    561aef63797bc6880ddcadf9d01a9a34
Sha1:   52c78d882a8d1b9169f46183f7e5fffb1e3e27dd
Sha256: 019d09175f733541df3ce796866d8c6fca6f4d34fa800328c62d30eb7d5fbebb

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/b7b268c962e2855acf62186c96a55466.woff HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://optus-billing-payment.com/assets/lux.base.acb5d2bbb7283eded6b2df9cf2c5366d.css
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:56 GMT
server: Apache
last-modified: Thu, 19 May 2022 14:21:32 GMT
accept-ranges: bytes
content-length: 67808
content-type: font/woff


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 67808, version 7.504\012- data
Size:   67808
Md5:    b7b268c962e2855acf62186c96a55466
Sha1:   275e9deaae08bb9a056d55525ab1bb7934a28545
Sha256: 4447d75f8502cc1989762d2281eb12cf991055b71f94215ad2b3d6aca6295ab7

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /assets/507b76aa0351c57ece90f02239b62ba3.woff HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://optus-billing-payment.com/assets/lux.base.acb5d2bbb7283eded6b2df9cf2c5366d.css
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:56 GMT
server: Apache
last-modified: Thu, 19 May 2022 14:21:32 GMT
accept-ranges: bytes
content-length: 67824
content-type: font/woff


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 67824, version 7.504\012- data
Size:   67824
Md5:    507b76aa0351c57ece90f02239b62ba3
Sha1:   ed8f2b819f5e89eba31a38f405860c83a2578596
Sha256: 06e6ac46fef95be90de802cbf8f07aefa9d2c9416ea8e32bccef5d526bb96e5f

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /assets/ee10f7196c1b125a3b8222341465bf5e.woff HTTP/1.1 
Host: optus-billing-payment.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://optus-billing-payment.com/assets/lux.base.acb5d2bbb7283eded6b2df9cf2c5366d.css
Cookie: PHPSESSID=15afe2a702a215e60e9bdc26196892af

                                         
                                         35.203.55.109
HTTP/1.1 200 OK
                                        
date: Thu, 07 Jul 2022 01:03:56 GMT
server: Apache
last-modified: Thu, 19 May 2022 14:21:32 GMT
accept-ranges: bytes
content-length: 66552
content-type: font/woff


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 66552, version 7.504\012- data
Size:   66552
Md5:    ee10f7196c1b125a3b8222341465bf5e
Sha1:   58a1d6aeb83e74b3a9e0eda8ad4daf3f1f1f387f
Sha256: 7b1443ccd9f5702ad832d5f8f58cd7955da80b6be466208e37900863097dbb12

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed