Report - takipci-satinal.net/yon.php?url=https://bedfoundation.net/newwayforu/k4843/myloveforyouisstrongggnghhrhrjrjr/Y29sZUBmb3J0cmVzc3dlYWx0aGdyb3VwLmNvbQ==

Report Overview

Submitted URL
takipci-satinal.net/yon.php?url=https://bedfoundation.net/newwayforu/k4843/myloveforyouisstrongggnghhrhrjrjr/Y29sZUBmb3J0cmVzc3dlYWx0aGdyb3VwLmNvbQ==
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-03-28 22:06:26
Access
public
Website Title
042d3540dd7c26f589995e28134844b86605e9cef2cbd
Final URL
luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Tags
microsoft phishing outlook
urlquery detections
Phishing - Microsoft
Phishing - Microsoft Outlook

Detections

urlquery
14
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
luxuway.com	unknown	2023-12-19	2023-12-19	2024-03-28	12 kB	678 kB	172.67.221.192
takipci-satinal.net	unknown	2022-10-06	2017-07-22	2024-03-24	603 B	10 kB	188.114.97.1
challenges.cloudflare.com	unknown	2009-02-17	2021-10-20	2024-03-28	627 B	11 kB	104.17.2.184
unpkg.com	11693	2016-01-06	2016-01-08	2024-03-27	816 B	84 kB	104.16.124.175
bedfoundation.net	unknown	2022-10-08	2023-01-12	2024-03-26	563 B	394 B	103.191.241.46

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (28)

	URL	Size	First Seen	Last Seen
	luxuway.com/jq/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf0ede4	86 kB	2023-03-07	2024-04-27
Pretty URL luxuway.com/jq/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf0ede4 IP 172.67.221.192 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-04-27 20:27:07 Times Seen385175 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	unknown	37 B	2023-04-11	2024-04-27
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:31:25 Last Seen2024-04-27 21:03:14 Times Seen231959 Hash 29d0c84b9d1d8da446a6062c6a840ad9 6d6b3a6065667c7c50d92f3889c85ed65a9ad784 3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1 Loading...

	luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33	0 B	2023-03-07	2024-04-27
Pretty URL luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33 IP 172.67.221.192 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-27 21:04:44 Times Seen37128179 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	luxuway.com/boot/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf0ede9	51 kB	2023-03-07	2024-04-27
Pretty URL luxuway.com/boot/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf0ede9 IP 172.67.221.192 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:44 Last Seen2024-04-27 20:27:07 Times Seen244993 Hash 67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4 Loading...

	unpkg.com/axios/dist/axios.min.js	42 kB	2024-03-15	2024-04-27
Pretty URL unpkg.com/axios/dist/axios.min.js IP 104.16.124.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-15 17:36:33 Last Seen2024-04-27 20:27:07 Times Seen10032 Hash 3b5b3d36fde8ffe8ed76b1efbfc65410 d63107d0912fdb387530d5ce2d512c928d73d122 29d600462a30694efd15b9848b4ca42d178cd067009275c35a30580121114304 Loading...

	unknown	79 B	2023-04-11	2024-04-27
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:38:58 Last Seen2024-04-27 21:03:14 Times Seen124616 Hash aa049e2749b8531cb8f233c2f64fc2b2 b611a5a62c1813ae5b4763378b3a4a565556530a e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2 Loading...

	luxuway.com/jm/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf0edea	6.4 kB	2023-10-11	2024-04-27
Pretty URL luxuway.com/jm/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf0edea IP 172.67.221.192 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-11 19:03:08 Last Seen2024-04-27 20:27:06 Times Seen43809 Hash 82ff6e77e3b8f004b23294185e108264 03c685b50fd4587427495348cd1231882a8c48d0 0e230a53a5d5abd125c2a8e1cdd97b32ddd84a9f7fd07c23bff95413886b05fa Loading...

		Size	First Seen	Last Seen
	#1 Eval - 994ba64d4772cdb6abd0a9e74ef9e90e	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash 994ba64d4772cdb6abd0a9e74ef9e90e f57c8750249636197ac914e6f799e8c8aae174c7 a613930bf4352308b345efbc1bcf7e54da7dbfbcb520e1772cd278afde872a8b Loading...

	#2 Eval - b862f22203ff00d9d98f7c68527fad92	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash b862f22203ff00d9d98f7c68527fad92 16a2a5d8d86caa49477ade8c395557b56afba7d1 2f9b2544759c2b34f8b942eaa0f60cab631147fbaaccbd436916cf30f1f0b7a6 Loading...

	#3 Eval - a43f874869f7058a957b3b1755eec391	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash a43f874869f7058a957b3b1755eec391 0f56905bac2a7ad5f3150e63ab474d4eea70ef4b d9ba047cab2bffcd742e254c63d471df7a80337fdeb43b4b9970004075ccdf70 Loading...

	#4 Eval - 2d40ed5119ff3788b9ca2e15fd721c08	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash 2d40ed5119ff3788b9ca2e15fd721c08 e33dd4f1e7b6a1cc25069b678af8d735d5348963 e1052faec628163c954907463cf499daa9b09456830ff15bcc76f8866b1b274d Loading...

	#5 Eval - 445421dfd359ff599e90a7faee800ca7	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash 445421dfd359ff599e90a7faee800ca7 d4cd31f6f61d64007333f624dbd1fe27daf85a68 7d5b67de88a2a056fed86b6d37d91d879f419fe92f372ed18211d02d2ce0bc1e Loading...

	#6 Eval - 254c77c8eb5f7ba09d00368ce6f71534	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash 254c77c8eb5f7ba09d00368ce6f71534 ac3bba5de134a1cc3e06c74706acd18998c8a5da b5f8c296f70bf6456547290fd93857f09a5a6707127170cb5ebb45390fb5dc53 Loading...

	#7 Eval - e545a5c85897a407c4ab4bb6b5768ede	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash e545a5c85897a407c4ab4bb6b5768ede 1bb25c6469254013331d3910fb48542b880c9758 22ae4473341faef3e61c2e79c0a9150838940c99d50e8d66faede9f8a38154e8 Loading...

	#8 Eval - 9acc298fe4de1af13d17db05d959675b	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash 9acc298fe4de1af13d17db05d959675b ec65b0ef4920061e1284b283f31ee5314366be57 c3b0efb1ad0a43cb9ffb20cecf19cb95e019347fc156ba1ce54b8027362ec390 Loading...

	#9 Eval - 1af2a1435b070ff6709f4fb18afbe5bc	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash 1af2a1435b070ff6709f4fb18afbe5bc 6f8a7cf725c382ae8b14d28515358efe56cf21b2 02440f7254915ce69f293799de74f17dd39cf2d1cd039ed6a58f6ed42122f1fe Loading...

	#10 Eval - c94756ea44771de884677b325aa4a1a4	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash c94756ea44771de884677b325aa4a1a4 bc53bad6a6cd37215bd08ae02dcd4cab594b2132 a6724d01d4969aa0c3abbc27c182260a964640b505b91697d381efdca599e6ed Loading...

	#11 Eval - 59fa35bc37b2ed80dda2e830f1b61a70	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash 59fa35bc37b2ed80dda2e830f1b61a70 7c04aec291cdde86cec2a00f82414ee445a104d8 8f0c1120162b478463075dfca86590a5a6e3f4c3d5f5ee71c3ba4a5aceb7f26b Loading...

	#12 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07	2024-04-27
Pretty Observations First Seen2023-03-07 01:03:43 Last Seen2024-04-27 20:27:07 Times Seen350227 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

	#13 Eval - 190ef4edaf4aba9ce6829ea860b2cb65	61 B	2024-03-22	2024-04-04
Pretty Observations First Seen2024-03-22 10:35:33 Last Seen2024-04-04 15:56:11 Times Seen1815 Hash 190ef4edaf4aba9ce6829ea860b2cb65 84010fdde06dc04427d11aafdf4ba6495e14eff8 0334ef3ce9e77db17376ce3e320fe96b901743f1baa1096cc4066922ac672f8c Loading...

	#14 Eval - a4bd6068629e16004036647c68770928	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash a4bd6068629e16004036647c68770928 c5c91028fd2eee88bd7086e3c40843979683ae92 3aa2c2afef34b78ac72bb885c58c20847793db1b3be98ab7344b0a215b3cda40 Loading...

	#15 Eval - 0092757619c78cb40de9cbec2d0dd52e	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash 0092757619c78cb40de9cbec2d0dd52e 936d85c29d51428efe95cbc6ec50da21f7ed7fc3 a2342c616a12104dd3a6a07a3d32c339be4cd467decbca7102ea8b2f838dfb9e Loading...

	#16 Eval - 315f12aecb0703cbdb3468990de8a82f	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash 315f12aecb0703cbdb3468990de8a82f 6391aa7876d8093522da4ff66bee90d4c75fc71e b3478c76d8069868146476f4caaf84445a620f180dac6133f1005207bd04cabf Loading...

	#17 Eval - 6ae61ed65b988f82cbf58ed74d9f97dd	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash 6ae61ed65b988f82cbf58ed74d9f97dd b9084a95ae7ab24cb37039065df9f0569c5c149c 9223b252d5878bf9a7f0f43b1da32a2ef79a15a24dc9594bc2d0228a1cec4ad6 Loading...

	#18 Eval - d208a7bb3eafc64b405216c040cc89d6	1.1 kB	2024-02-20	2024-03-28
Pretty Observations First Seen2024-02-20 22:40:11 Last Seen2024-03-28 23:06:27 Times Seen6 Hash d208a7bb3eafc64b405216c040cc89d6 9cfc2393a36549fcca2bfac7a9011843d8731e90 79a27069bd6a2d94d13133eefa6b3175022486ef6789ca502ddaa85b5e309c30 Loading...

	#19 Eval - 042e64be97e6f38d6a91a7a1f3eec18b	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash 042e64be97e6f38d6a91a7a1f3eec18b ff16f9a43944cece1e60d970dbce5d95864243be 81412b8a9261f22c8087607ef5231e0f3d53e3867da75ea2269aedb72e2dbe29 Loading...

	#20 Eval - 100487e54c19416514125121312b531f	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash 100487e54c19416514125121312b531f 4717cba468c33d78ef64f91650f8ca1fad1d0add dbc9940defd59f4efeaebb4bc94334b3ce913ce71fb9ee45ab0bf300418c5d47 Loading...

	#21 Eval - d691c50931b9ccb49f79ba21cca76bc9	28 B	2024-03-28	2024-03-28
Pretty Observations First Seen2024-03-28 23:06:27 Last Seen2024-03-28 23:06:27 Times Seen1 Hash d691c50931b9ccb49f79ba21cca76bc9 442307d44829195684925caea2699684831a4ab0 75654efc61d5003683464fae34ddc191a5aed97f2752900db332d158e6fabece Loading...

HTTP Transactions (21)

URL IP Response Size

bedfoundation.net/newwayforu/k4843/myloveforyouisstrongggnghhrhrjrjr/Y29sZUBmb3J0cmVzc3dlYWx0aGdyb3VwLmNvbQ==

103.191.241.46

200 OK

0 B

URL User Request GET HTTP/2
bedfoundation.net/newwayforu/k4843/myloveforyouisstrongggnghhrhrjrjr/Y29sZUBmb3J0cmVzc3dlYWx0aGdyb3VwLmNvbQ==
IP
103.191.241.46:443
ASN
#150142 Wolast Technologies

Certificate
IssuerLet's Encrypt
Subjectbedfoundation.net
Fingerprint26:23:DC:62:CD:33:5A:65:56:BE:2D:66:E7:23:D8:E9:92:0A:A2:0B
ValidityTue, 13 Feb 2024 05:08:24 GMT - Mon, 13 May 2024 05:08:23 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /newwayforu/k4843/myloveforyouisstrongggnghhrhrjrjr/Y29sZUBmb3J0cmVzc3dlYWx0aGdyb3VwLmNvbQ== HTTP/1.1
Host: bedfoundation.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
refresh: 0;url=https://luxuway.com/Mcole@fortresswealthgroup.com
content-type: text/html; charset=UTF-8
content-length: 0
date: Thu, 28 Mar 2024 22:06:00 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

luxuway.com/favicon.ico

172.67.221.192

404 Not Found

14 kB

URL GET HTTP/3
luxuway.com/favicon.ico
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type
HTML document, ASCII text, with very long lines (15593), with no line terminators
Size
14 kB (13895 bytes)
Hash
986a0c540b4b4aeaf5139bf1bfe6fbe7
3381ff88bae7cccaa56ac98636a798c439488817
cf795f3b6958dd9bc058cbe80f1bbfa485ee82184de30f7c28a413c4646b0a4d

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://luxuway.com/Mcole@fortresswealthgroup.com?__cf_chl_rt_tk=1DGKsxUQUqSRHPcjkOqnuqW.1M5g7_wraH_3vWdc0FY-1711663561-0.0.1.1-1621
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
date: Thu, 28 Mar 2024 22:06:01 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: 1nM5x8BcZr/ljuTPYEOHe3PrCF1HeBnpiDr63XI1IwyDiYlH7vS1NFspp1ji/07NXXRyJUDR7VLd5AN6ZOkDJcF2fsUKjdHzkh9c/oyq6586f9GBpCbiBAfqCPx76K10bvxhEnDNtc50yek3A9Hqvg==$oQ47z4pbG7xd2ZKL+dJTgA==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7lB%2Fm7ishpBvGwB6XIoIEmbGcFDxisucSKXpy7cMqL02dAWZnh0AN5wl3so67RFeMsF5UzClhvKV4%2BdlveU88NPIkH1b4JAPC3wduzeAQG%2F1Wu%2BS2m7Eeo%2BtHEyJNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86baecca1a6f56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

takipci-satinal.net/yon.php?url=https://bedfoundation.net/newwayforu/k4843/myloveforyouisstrongggnghhrhrjrjr/Y29sZUBmb3J0cmVzc3dlYWx0aGdyb3VwLmNvbQ==

188.114.97.1

302 Found

9.6 kB

URL User Request GET HTTP/2
takipci-satinal.net/yon.php?url=https://bedfoundation.net/newwayforu/k4843/myloveforyouisstrongggnghhrhrjrjr/Y29sZUBmb3J0cmVzc3dlYWx0aGdyb3VwLmNvbQ==
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjecttakipci-satinal.net
FingerprintF7:99:FD:85:F9:84:76:C2:5F:01:52:BD:29:68:7E:C0:63:19:16:70
ValidityThu, 21 Mar 2024 07:50:52 GMT - Wed, 19 Jun 2024 07:50:51 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3
Size
9.6 kB (9643 bytes)
Hash
fcc92d9b46403376c2e433bcd0780246
b5bedfe72a2a89a8fb30da819f5cde839fa916f1
14eabe4fb2369b8a3e11648b15f4c14d8c7ce885b20a5b1bd43d286f964e6fd4

HTTP Headers

GET /yon.php?url=https://bedfoundation.net/newwayforu/k4843/myloveforyouisstrongggnghhrhrjrjr/Y29sZUBmb3J0cmVzc3dlYWx0aGdyb3VwLmNvbQ== HTTP/1.1
Host: takipci-satinal.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Thu, 28 Mar 2024 22:06:00 GMT
content-type: text/html; charset=UTF-8
location: https://bedfoundation.net/newwayforu/k4843/myloveforyouisstrongggnghhrhrjrjr/Y29sZUBmb3J0cmVzc3dlYWx0aGdyb3VwLmNvbQ==
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: MISS
x-server-powered-by: Engintron
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v7vXEblsLZr%2BMbTSRyZFQ%2FIE4WNwXm1AqhHatN8sJjJVDZbyc%2F8z4l9lOhZUxAQ7l4hPgNQ3MZGxleNEaHRa%2FIGoRgk17MTMVaONt%2BilkVNAqLJBBjn3WmO41%2FCuyv1LzCfyT6%2BE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0; includeSubDomains; preload
server: cloudflare
cf-ray: 86baecc2bf27b511-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/86baeccc0c07b529/1711663561924/4ArE-5w46iRvoje

104.17.2.184

11 kB

URL
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/86baeccc0c07b529/1711663561924/4ArE-5w46iRvoje
IP
104.17.2.184:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 56 x 55, 8-bit/color RGB, non-interlaced
Size
11 kB (10989 bytes)
Hash
043b55af07191063d4aef66228c44589
e3bbc258b7d796c408eae2395b707502dd61ba66
6c7494aafb79e122f7ecdf42b017f36dec5c464802561c234097ac4ebe7df961

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/i/86baeccc0c07b529/1711663561924/4ArE-5w46iRvoje HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/xpsff/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 22:06:02 GMT
content-type: image/png
server: cloudflare
cf-ray: 86baecd42d4eb529-OSL
alt-svc: h3=":443"; ma=86400

luxuway.com/ASSETS/img/LIMG-6605e9cfe5c49.css

172.67.221.192

200 OK

10 kB

URL GET HTTP/3
luxuway.com/ASSETS/img/LIMG-6605e9cfe5c49.css
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type
PNG image data, 108 x 24, 8-bit colormap, non-interlaced
Size
10 kB (10263 bytes)
Hash
2a32f847399051a081abc3612d70286e
216aa9b32e44bd19f1315bd23f52144b90987799
5d127c50a23a490e1d088dd336f74b6a96ef06b454bf605f83a915637a08cc13

HTTP Headers

GET /ASSETS/img/LIMG-6605e9cfe5c49.css HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=gKFCXTifdkAtFiJ.cEEPnLnqgeF2.7WZrYDbABiBZJ0-1711663561-1.0.1.1-7YFpfzBi7Aqnc4guuV2s2th68_k5in_9eFjjwccpOToZrozZO_dF_RemHYWlzfVc5y4dXOHjEesfYm82rwesNA; PHPSESSID=717c0540d03979cd6d2416ac403c2ad9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 22:06:09 GMT
content-type: image/png
last-modified: Thu, 28 Mar 2024 13:53:30 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DaJUhx7TjH42LHpB6zHVRYCP7eBD%2BVSJQTDBkgs5q6DQ79tH0cflrDmNCUV8s7LNhBLNqULvwT5f%2FlJXvXqMjfR9C2K0PQF9ohkcOIk1Q%2BKG0DRG2C13KXIVCSAnOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86baecf3db2456a2-OSL
alt-svc: h3=":443"; ma=86400

luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33

172.67.221.192

200 OK

5.5 kB

URL User Request GET HTTP/3
luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type
HTML document, ASCII text, with very long lines (5541), with no line terminators
Size
5.5 kB (5502 bytes)
Hash
d153b4667f15780035c6e05eeccda5c3
d462401f46ce92d286523e014e5f56c398f26472
9ef103110b4fd9e7c39632ecbe38b3569950dee432459fcb84016caeb47dc794

HTTP Headers

GET /beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33 HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://luxuway.com/Mcole@fortresswealthgroup.com?__cf_chl_tk=1DGKsxUQUqSRHPcjkOqnuqW.1M5g7_wraH_3vWdc0FY-1711663561-0.0.1.1-1621
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=gKFCXTifdkAtFiJ.cEEPnLnqgeF2.7WZrYDbABiBZJ0-1711663561-1.0.1.1-7YFpfzBi7Aqnc4guuV2s2th68_k5in_9eFjjwccpOToZrozZO_dF_RemHYWlzfVc5y4dXOHjEesfYm82rwesNA; PHPSESSID=717c0540d03979cd6d2416ac403c2ad9
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 22:06:07 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0yUvu6iDLHmeSmlnqpDLJiMPW6hcShIuOM2cYXzofLwd%2Bc%2FfVKP%2FcQ7NsNbOIh%2B1en2iI3bpoUoTDC9ux7mDA9trXNOUShYswaJAY16NPI3UJH0PAAcs%2BMm5mcLZ0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86baecedec3356a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

luxuway.com/jq/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf0ede4

172.67.221.192

200 OK

86 kB

URL GET HTTP/3
luxuway.com/jq/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf0ede4
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type
JavaScript source, ASCII text, with very long lines (32065)
Size
86 kB (85578 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /jq/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf0ede4 HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Cookie: cf_clearance=gKFCXTifdkAtFiJ.cEEPnLnqgeF2.7WZrYDbABiBZJ0-1711663561-1.0.1.1-7YFpfzBi7Aqnc4guuV2s2th68_k5in_9eFjjwccpOToZrozZO_dF_RemHYWlzfVc5y4dXOHjEesfYm82rwesNA; PHPSESSID=717c0540d03979cd6d2416ac403c2ad9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 22:06:07 GMT
content-type: text/javascript
last-modified: Thu, 28 Mar 2024 13:53:30 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=648qTsjAl6ZO2TQCaIjRNgBPXEM2lKLINqeJcRXyPXalbY3Lq67FvWvEVLbvmM5hGdfad2Ca7s2QD5mG%2FDijKxcE5yCjLzrogeb3GlndWdQFpaHRgEOj%2Bb3ymU%2BLBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86baeceebd3956a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

unpkg.com/axios/dist/axios.min.js

104.16.124.175

302 Found

42 kB

URL GET HTTP/2
unpkg.com/axios/dist/axios.min.js
IP
104.16.124.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT

File type

Size
42 kB (41481 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /axios/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxuway.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Thu, 28 Mar 2024 22:06:07 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.6.8/dist/axios.min.js
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01HT3HCJ6BCBDYHHKWK4803TG4-fra
cf-cache-status: HIT
age: 199
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 86baeceec80156c5-OSL
X-Firefox-Spdy: h2

luxuway.com/api-as1f?email=cole@fortresswealthgroup.com&data=background

172.67.221.192

200 OK

86 B

URL GET HTTP/3
luxuway.com/api-as1f?email=cole@fortresswealthgroup.com&data=background
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
86 B (86 bytes)
Hash
6d8a84a0e66532fa7c536562e2247920
87463f2f4ae7de9dd85f4784cfab2a73d28c1d9a
ce5fd4a86b9af53b3cc62a86c15af6ae46107c0683dd8d99251f724f37e4086f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft Outlook

HTTP Headers

GET /api-as1f?email=cole@fortresswealthgroup.com&data=background HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Cookie: cf_clearance=gKFCXTifdkAtFiJ.cEEPnLnqgeF2.7WZrYDbABiBZJ0-1711663561-1.0.1.1-7YFpfzBi7Aqnc4guuV2s2th68_k5in_9eFjjwccpOToZrozZO_dF_RemHYWlzfVc5y4dXOHjEesfYm82rwesNA; PHPSESSID=717c0540d03979cd6d2416ac403c2ad9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 22:06:08 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YPYAJPlfLbMppvruNjHbDtvO8o%2Fn3YMF9RvU2534evoH9yZyaf2vk4tZvc0mVKgX0nbLHnKPSI1y%2Fj88hv3GoaXbFlcX05%2FPPd3yp4tuTsrqeaE7pQJcJYnpdv9RFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86baecf1486c56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

luxuway.com/APP-JYMRSU/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf735f5

172.67.221.192

200 OK

105 kB

URL GET HTTP/3
luxuway.com/APP-JYMRSU/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf735f5
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
105 kB (105369 bytes)
Hash
8e6b0f88563f9c33f78bce65cf287df7
ef7765cd2a7d64ed27dd7344702597aff6f8c397
a7057bebfff43e7281ca31da00d40bd88c8d02d1576b9c45891dd56a3853269a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /APP-JYMRSU/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf735f5 HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Cookie: cf_clearance=gKFCXTifdkAtFiJ.cEEPnLnqgeF2.7WZrYDbABiBZJ0-1711663561-1.0.1.1-7YFpfzBi7Aqnc4guuV2s2th68_k5in_9eFjjwccpOToZrozZO_dF_RemHYWlzfVc5y4dXOHjEesfYm82rwesNA; PHPSESSID=717c0540d03979cd6d2416ac403c2ad9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 22:06:07 GMT
content-type: text/css
last-modified: Thu, 28 Mar 2024 13:53:30 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wP4GbOEJcZXwNQJLWRzEKPxD9tktc%2BhdCXHk%2FniH%2FOnQOI5iIC3iVKnqo4HqvvRZ8CFu3eh7RxUBZN1rk9BTPyAHFTCWRB7pTaOcDUwaATzm%2Bt9VMfaNTYu7YVVFGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86baecf1486d56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

luxuway.com/ASSETS/img/BIMG-6605e9d04ee35.css

172.67.221.192

200 OK

306 kB

URL GET HTTP/3
luxuway.com/ASSETS/img/BIMG-6605e9d04ee35.css
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
Size
306 kB (306493 bytes)
Hash
7d07c247e8dfd5bfaf9a7169b5c402bd
392cc7836ca5418f3e65cc67f5680b2a359399dc
345f500582fb5cfc20df5426c6b54bb0bcaa62eb0249a4a661dc9716a9edc006

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft
urlquery	phishing	Phishing - Microsoft Outlook

HTTP Headers

GET /ASSETS/img/BIMG-6605e9d04ee35.css HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=gKFCXTifdkAtFiJ.cEEPnLnqgeF2.7WZrYDbABiBZJ0-1711663561-1.0.1.1-7YFpfzBi7Aqnc4guuV2s2th68_k5in_9eFjjwccpOToZrozZO_dF_RemHYWlzfVc5y4dXOHjEesfYm82rwesNA; PHPSESSID=717c0540d03979cd6d2416ac403c2ad9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 22:06:09 GMT
content-type: image/png
last-modified: Thu, 28 Mar 2024 13:53:30 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zacFMjHrw2DpXu28PtdMOncCA0%2BsZQ8R%2BURKcVToeARINqNe4tffm%2FsPrZJ21%2B9HqqfpbIRblTc6X%2FMPSZ1CZVIyffFWxSBCssh70GarvD6ozeKIs0XSztbdtU87tQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86baecf64d7b56a2-OSL
alt-svc: h3=":443"; ma=86400

luxuway.com/e/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf73777

172.67.221.192

200 OK

513 B

URL GET HTTP/3
luxuway.com/e/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf73777
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type
SVG Scalable Vector Graphics image
Size
513 B (513 bytes)
Hash
adc405f5fd089662209870ca5d2106f7
3a8b776df84bf251afc6ddd802cc5bbeddfb0e36
e7bacc97751689afaae192e103fe9851664365c57c7d783560860ad456db7e49

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /e/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf73777 HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Cookie: cf_clearance=gKFCXTifdkAtFiJ.cEEPnLnqgeF2.7WZrYDbABiBZJ0-1711663561-1.0.1.1-7YFpfzBi7Aqnc4guuV2s2th68_k5in_9eFjjwccpOToZrozZO_dF_RemHYWlzfVc5y4dXOHjEesfYm82rwesNA; PHPSESSID=717c0540d03979cd6d2416ac403c2ad9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 22:06:07 GMT
content-type: image/svg+xml
last-modified: Thu, 28 Mar 2024 13:53:30 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zfnor5Nv0cOo2oz4zut%2B7R50xXrDcGWUIyPaRkyj%2FeAbuMs3cyH8SBjT%2B3KN0HdnOJk7k1MnkHyWMM2AUEVVH5V9PZ89XOpCqTjXqCSrcaRlKwAmj3Fg275eeBwneQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86baecf1485456a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

luxuway.com/api-as1f?email=cole@fortresswealthgroup.com&data=logo

172.67.221.192

200 OK

80 B

URL GET HTTP/3
luxuway.com/api-as1f?email=cole@fortresswealthgroup.com&data=logo
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
80 B (80 bytes)
Hash
eb0f516a7705b21b9a46aec0564e5328
86ef6a90a8aa87f395ae7d9d9e247e71e2006194
37c3b1a06cb91579dfaf0e8c4abdd49a9d668c2a1a28f8528f6c97141c65189d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft Outlook

HTTP Headers

GET /api-as1f?email=cole@fortresswealthgroup.com&data=logo HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Cookie: cf_clearance=gKFCXTifdkAtFiJ.cEEPnLnqgeF2.7WZrYDbABiBZJ0-1711663561-1.0.1.1-7YFpfzBi7Aqnc4guuV2s2th68_k5in_9eFjjwccpOToZrozZO_dF_RemHYWlzfVc5y4dXOHjEesfYm82rwesNA; PHPSESSID=717c0540d03979cd6d2416ac403c2ad9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 22:06:07 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X5IvtQHdXrjz3QUtiVhjOATioljmaP6D5qkxrCZbvnLb4tas04p8X2hUwbKjm4FNpy3uID4Ibd62Vn4cpLIhiC55YbMA1DFmad0kP08odMcr3A24ixwFYwJJ5fKzLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86baecf1486856a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

luxuway.com/ic/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf735eb

172.67.221.192

200 OK

17 kB

URL GET HTTP/3
luxuway.com/ic/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf735eb
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Size
17 kB (17174 bytes)
Hash
12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /ic/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf735eb HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Cookie: cf_clearance=gKFCXTifdkAtFiJ.cEEPnLnqgeF2.7WZrYDbABiBZJ0-1711663561-1.0.1.1-7YFpfzBi7Aqnc4guuV2s2th68_k5in_9eFjjwccpOToZrozZO_dF_RemHYWlzfVc5y4dXOHjEesfYm82rwesNA; PHPSESSID=717c0540d03979cd6d2416ac403c2ad9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 22:06:08 GMT
content-type: image/x-icon
last-modified: Thu, 28 Mar 2024 13:53:30 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0qXizgw6A9%2BAM2lZxtN4DMs0L8A4aM2c11wXm1CHb89jcgm%2B2ymjVFkbfeCbI%2FWK2P2arcZGc59uUaUyDJGSON0W%2BBNZZSzUWIQ4Oqph5DcnUM5U3crJEklt7bGq0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86baecf51c5256a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

luxuway.com/boot/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf0ede9

172.67.221.192

200 OK

51 kB

URL GET HTTP/3
luxuway.com/boot/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf0ede9
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type
JavaScript source, ASCII text, with very long lines (50758)
Size
51 kB (51039 bytes)
Hash
67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /boot/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf0ede9 HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Cookie: cf_clearance=gKFCXTifdkAtFiJ.cEEPnLnqgeF2.7WZrYDbABiBZJ0-1711663561-1.0.1.1-7YFpfzBi7Aqnc4guuV2s2th68_k5in_9eFjjwccpOToZrozZO_dF_RemHYWlzfVc5y4dXOHjEesfYm82rwesNA; PHPSESSID=717c0540d03979cd6d2416ac403c2ad9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 22:06:07 GMT
content-type: text/javascript
last-modified: Thu, 28 Mar 2024 13:53:30 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=klhMiUOhT8D6Jp9RSqS4GcSjy57Y8W3Hm6MY1gO648STLus%2FzQsvrXv5q3IRmNgg0ErjeW6U3pqurCrfcvUd%2FrZbkesWHZu5smA2zxdlwjHXJAYnJcJefiqsQ8aRvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86baeceebd3d56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

unpkg.com/axios@1.6.8/dist/axios.min.js

104.16.124.175

200 OK

42 kB

URL GET HTTP/2
unpkg.com/axios@1.6.8/dist/axios.min.js
IP
104.16.124.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (41442)
Size
42 kB (41481 bytes)
Hash
3b5b3d36fde8ffe8ed76b1efbfc65410
d63107d0912fdb387530d5ce2d512c928d73d122
29d600462a30694efd15b9848b4ca42d178cd067009275c35a30580121114304

HTTP Headers

GET /axios@1.6.8/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://luxuway.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 28 Mar 2024 22:06:07 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"a209-1jEH0JEv2zh1MNXOLVEsko1z0SI"
via: 1.1 fly.io
fly-request-id: 01HS1FGRYZKY14C0JK748EAY1W-arn
cf-cache-status: HIT
age: 1143009
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 86baeceed81456c5-OSL
content-encoding: br
X-Firefox-Spdy: h2

luxuway.com/2

172.67.221.192

200 OK

38 kB

URL GET HTTP/3
luxuway.com/2
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type

Size
38 kB (37952 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /2 HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Cookie: cf_clearance=gKFCXTifdkAtFiJ.cEEPnLnqgeF2.7WZrYDbABiBZJ0-1711663561-1.0.1.1-7YFpfzBi7Aqnc4guuV2s2th68_k5in_9eFjjwccpOToZrozZO_dF_RemHYWlzfVc5y4dXOHjEesfYm82rwesNA; PHPSESSID=717c0540d03979cd6d2416ac403c2ad9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 22:06:07 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ag4y%2BrZy7ppjp%2FKf6LuTpjnqRz0mdjRLG95FjbKAMUM3vmpxt3cxJnhDME4QC%2BcD7bhLrUvCUfKaAMSSgF%2Bsnz4jpi3kg51s6hN9FhtdFsLqe4yIAXZpg08CGFkyKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86baecf07f6656a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

luxuway.com/Mcole@fortresswealthgroup.com

172.67.221.192

403 Forbidden

17 kB

URL User Request GET HTTP/2
luxuway.com/Mcole@fortresswealthgroup.com
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type
HTML document, ASCII text, with very long lines (16631), with no line terminators
Size
17 kB (16631 bytes)
Hash
b74d1be942e6eb6949b225eebb46a1f9
9582c032f9cfc5fe4cb2b2daa33432ff72e8c0c8
162044247c99ef1fbc4ee0f6898ce1a8f11021e27e2dbe69c7e39562cbf2bf94

HTTP Headers

GET /Mcole@fortresswealthgroup.com HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Thu, 28 Mar 2024 22:06:01 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: vJHbOe5V3vDpUeHAZlxnP017I/LtJVK+a3JehQVsoU0QHa04qjSFYY0ksFlljDE/bzKDxJCsHduscIjyNelpNgwMSwcsrGVYZf20YRwfBtV4eK38P5PLkO3yAVedPw0W9k1nW1ufQUIse5kwzhRYWw==$Jc8D4Ay4bHKpJVuyXSZ+Dw==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zzVINQh6hyhkk6NAIjomkwgsq5y5qhwmpvJXdNmUrssi3Co37Y9TsXJUZIveEdx59Y80OmSCAGK14W0KXupkjxGV2pvPd6cAJ9OiiRV3ax6kA4ElD%2FIYbT42XeGnrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86baecc92b3256a5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

luxuway.com/Mcole@fortresswealthgroup.com

172.67.221.192

302 Found

5.5 kB

URL User Request POST HTTP/3
luxuway.com/Mcole@fortresswealthgroup.com
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type

Size
5.5 kB (5502 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /Mcole@fortresswealthgroup.com HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://luxuway.com/Mcole@fortresswealthgroup.com?__cf_chl_tk=1DGKsxUQUqSRHPcjkOqnuqW.1M5g7_wraH_3vWdc0FY-1711663561-0.0.1.1-1621
Content-Type: application/x-www-form-urlencoded
Content-Length: 5009
Origin: https://luxuway.com
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 302 Found
date: Thu, 28 Mar 2024 22:06:07 GMT
content-type: text/html; charset=UTF-8
location: ./beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: cf_clearance=gKFCXTifdkAtFiJ.cEEPnLnqgeF2.7WZrYDbABiBZJ0-1711663561-1.0.1.1-7YFpfzBi7Aqnc4guuV2s2th68_k5in_9eFjjwccpOToZrozZO_dF_RemHYWlzfVc5y4dXOHjEesfYm82rwesNA; path=/; expires=Fri, 28-Mar-25 22:06:06 GMT; domain=.luxuway.com; HttpOnly; Secure; SameSite=None
PHPSESSID=717c0540d03979cd6d2416ac403c2ad9; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ym%2Ffu0MhanJX4a%2FDg5x00FW2ytwHFlWU%2BwSMXlhff6wyzXnJVddFcIGeV5KgYDxO2Vm%2BRShwHNevX7oi3kBaLdaRS%2FgTXucSx6t%2FZCVNLlTjeqdFzoLoTKqJqe1NWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86baeceb595d56a2-OSL
alt-svc: h3=":443"; ma=86400

luxuway.com/jm/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf0edea

172.67.221.192

200 OK

6.4 kB

URL GET HTTP/3
luxuway.com/jm/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf0edea
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type
JavaScript source, ASCII text, with very long lines (6376), with no line terminators
Size
6.4 kB (6357 bytes)
Hash
1e07a363eef4b40ab4a38d5e4371da5c
7351be2a378540a016aec380141927221a45f19b
01ba4de80540981fd34be681b5c1fce8b205e341ac6fa73a61817068ff566510

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /jm/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf0edea HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Cookie: cf_clearance=gKFCXTifdkAtFiJ.cEEPnLnqgeF2.7WZrYDbABiBZJ0-1711663561-1.0.1.1-7YFpfzBi7Aqnc4guuV2s2th68_k5in_9eFjjwccpOToZrozZO_dF_RemHYWlzfVc5y4dXOHjEesfYm82rwesNA; PHPSESSID=717c0540d03979cd6d2416ac403c2ad9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 22:06:07 GMT
content-type: text/javascript
last-modified: Thu, 28 Mar 2024 13:53:30 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CoC%2Bzo7r75ZyX%2B9hfs5qcEEMzDnqb%2FszPTGmhsxGqyafeCZGTR3j%2F00y4gyp6DQ0kV7QXBO1GaSCLAhjMz7m3eaf042o9vOJ64exzj3yy%2Fp2e6uPEw0NQ5juF0X8DQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86baeceebd3e56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

luxuway.com/o/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf73770

172.67.221.192

200 OK

3.7 kB

URL GET HTTP/3
luxuway.com/o/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf73770
IP
172.67.221.192:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Certificate
IssuerGoogle Trust Services LLC
Subjectluxuway.com
FingerprintE7:AF:EF:DB:A3:3A:76:34:38:63:D2:53:50:A0:9B:70:EC:0A:07:9E
ValidityTue, 19 Mar 2024 20:01:57 GMT - Mon, 17 Jun 2024 20:01:56 GMT

File type
SVG Scalable Vector Graphics image
Size
3.7 kB (3651 bytes)
Hash
d633a913e6f3b1f45774b9874dfc85e0
5ba1344048578062c93cfddfdf8458477eaca476
c1fbfbd9a81fc4d9c9539a65bdfb4c6738926b8d4681b0346706196413e92714

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /o/d3a1d9e73b58f4ec57e7c2e4de2276a16605e9cf73770 HTTP/1.1
Host: luxuway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxuway.com/beebb091955c06fa68b3eb8afc0bae516605e9cef2f31PASbeebb091955c06fa68b3eb8afc0bae516605e9cef2f33
Cookie: cf_clearance=gKFCXTifdkAtFiJ.cEEPnLnqgeF2.7WZrYDbABiBZJ0-1711663561-1.0.1.1-7YFpfzBi7Aqnc4guuV2s2th68_k5in_9eFjjwccpOToZrozZO_dF_RemHYWlzfVc5y4dXOHjEesfYm82rwesNA; PHPSESSID=717c0540d03979cd6d2416ac403c2ad9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 22:06:07 GMT
content-type: image/svg+xml
last-modified: Thu, 28 Mar 2024 13:53:30 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FJalpFannYV6prfUamdMtPkfDrsGg0x9MfO%2F1Ja0DkWW%2FelohFharP%2B9WWjacQoCWyCFLU2ddzJBq6HfM2kLtEGva13J7KQI%2F4yDOSOFXLa29sgmDVWWeZZlH1kyXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86baecf1385056a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (28)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations