Report - intipupdate.com/poral/PASS.php

Report Overview

URL

intipupdate.com/poral/PASS.php
IP

103.146.203.123

ASN

#136052 PT Cloud Hosting Indonesia
Submitted

2023-05-29T10:50:23Z

Access

public
Tags

bancolombia financial phishing
urlquery detections

Phishing - Bancolombia

Detections

urlquery

16
Network Intrusion Detection

0
Threat Detection Systems

10

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
intipupdate.com (16)	unknown	2020-11-02 16:30:14	2023-05-29 10:40:31	7184	262738	103.146.203.123
ocsp.godaddy.com (1)	698	2012-05-20 21:28:57	2023-05-28 05:12:11	330	2286	192.124.249.22
images-cdn.info (1)	528156	2020-06-20 01:31:03	2023-05-28 09:38:25	426	227	54.86.140.52
kit.fontawesome.com (1)	1868	2019-12-16 20:51:31	2023-05-28 05:15:32	441	12100	104.18.23.52
ka-f.fontawesome.com (4)	3598	2019-12-17 07:36:13	2023-05-28 14:12:37	1943	137115	172.64.202.28

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-05-28	medium	intipupdate.com/poral/PASS.php

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator
2023-05-29	medium	intipupdate.com/poral/PASS.php
2023-05-29	medium	intipupdate.com/
2023-05-29	medium	intipupdate.com/poral/js/jquery-3.6.0.min.js
2023-05-29	medium	intipupdate.com/poral/js/jquery.jclock-min.js
2023-05-29	medium	intipupdate.com/poral/js/functions.js
2023-05-29	medium	intipupdate.com/poral/img/logo.svg
2023-05-29	medium	intipupdate.com/
2023-05-29	medium	intipupdate.com/poral/fonts/opensans/OpenSans-Regular.ttf
2023-05-29	medium	intipupdate.com/poral/fonts/opensans/CIBFontSans-Light.ttf

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

HTTP Transactions (23)

URL IP Response Size

intipupdate.com/poral/PASS.php

103.146.203.123

200 OK

2200

URL User Request GET HTTP/2

intipupdate.com/poral/PASS.php
IP

103.146.203.123:443
ASN

#136052 PT Cloud Hosting Indonesia

Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with CRLF line terminators

Size

2200
Hash

bd53c9d06303d9b9d5f30f730c34b073

83d4f30681ccd610e4676c3a832acf219f2452b9

5f2ac549f214877efeadd4f17b2f11fe53f20fe60ab6140108e6a56242bba9b3

Detections

Analyzer	Verdict	Alert
openphish	Bancolombia
fortinet	Phishing

HTTP Headers

                                        GET /poral/PASS.php HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
content-length: 2200
content-encoding: br
vary: Accept-Encoding
date: Mon, 29 May 2023 10:50:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

intipupdate.com/

103.146.203.123

707

URL

intipupdate.com/
IP

103.146.203.123:0
ASN

#136052 PT Cloud Hosting Indonesia

Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators

Size

707
Hash

1304294c0823ca486542ba408ed761e3

b2a70fb2d810ca13985882e6981f33998823e83e

3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Bancolombia
fortinet	Phishing

HTTP Headers

                                        GET / HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Mon, 29 May 2023 10:50:10 GMT
server: LiteSpeed
location: https://intipupdate.com/

intipupdate.com/poral/css/style.css

103.146.203.123

200 OK

1291

URL GET HTTP/2

intipupdate.com/poral/css/style.css
IP

103.146.203.123:443
ASN

#136052 PT Cloud Hosting Indonesia

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

assembler source, ASCII text, with CRLF line terminators

Size

1291
Hash

72479bd20c38e802443cb174a470cbc9

2d9d08213047e1f765e40f8e35cc634042fe6a92

51aa53f23ba2b51e83eca02fdb47b2212252e7b5088a6c42b8b15431168fd15c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Bancolombia

HTTP Headers

                                        GET /poral/css/style.css HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intipupdate.com/poral/PASS.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=28800
expires: Mon, 29 May 2023 18:50:13 GMT
content-type: text/css
last-modified: Wed, 15 Jun 2022 06:41:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1291
date: Mon, 29 May 2023 10:50:12 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

intipupdate.com/poral/css/stylesheet.css

103.146.203.123

200 OK

410

URL GET HTTP/2

intipupdate.com/poral/css/stylesheet.css
IP

103.146.203.123:443
ASN

#136052 PT Cloud Hosting Indonesia

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

ASCII text, with very long lines (360)

Size

410
Hash

a310982fb888be050fb3ab09d40d7ffc

b4a86966fec0a29c9bae72c1279a762cc009bf21

f27f79e97e6af6f6003291117a51ded4ac0271248d26e5acf840f666d12d38b2

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Bancolombia

HTTP Headers

                                        GET /poral/css/stylesheet.css HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intipupdate.com/poral/PASS.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=28800
expires: Mon, 29 May 2023 18:50:14 GMT
content-type: text/css
last-modified: Mon, 13 Jun 2022 03:37:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 410
date: Mon, 29 May 2023 10:50:12 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

intipupdate.com/poral/js/jquery-3.6.0.min.js

103.146.203.123

200 OK

30267

URL GET HTTP/2

intipupdate.com/poral/js/jquery-3.6.0.min.js
IP

103.146.203.123:443
ASN

#136052 PT Cloud Hosting Indonesia

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

ASCII text, with very long lines (65447)

Size

30267
Hash

8fb8fee4fcc3cc86ff6c724154c49c42

b82d238d4e31fdf618bae8ac11a6c812c03dd0d4

ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Bancolombia
fortinet	Phishing

HTTP Headers

                                        GET /poral/js/jquery-3.6.0.min.js HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intipupdate.com/poral/PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=28800
expires: Mon, 29 May 2023 18:50:14 GMT
content-type: application/javascript
last-modified: Tue, 10 Aug 2021 22:21:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30267
date: Mon, 29 May 2023 10:50:12 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

intipupdate.com/poral/js/jquery.jclock-min.js

103.146.203.123

200 OK

1259

URL GET HTTP/2

intipupdate.com/poral/js/jquery.jclock-min.js
IP

103.146.203.123:443
ASN

#136052 PT Cloud Hosting Indonesia

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

ASCII text, with very long lines (2957), with CRLF line terminators

Size

1259
Hash

71722c7314fed201941f23bc1fe9604e

1d1c35c3b25ea4056bd39ba290523e70bd2f8038

93bf1714fd8d4cad23861f0017d5b3335f8b009f59d2bd654dcf0c29b7f36031

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Bancolombia
fortinet	Phishing

HTTP Headers

                                        GET /poral/js/jquery.jclock-min.js HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intipupdate.com/poral/PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=28800
expires: Mon, 29 May 2023 18:50:14 GMT
content-type: application/javascript
last-modified: Thu, 24 Jun 2021 01:34:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1259
date: Mon, 29 May 2023 10:50:12 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

intipupdate.com/poral/js/functions.js

103.146.203.123

200 OK

691

URL GET HTTP/2

intipupdate.com/poral/js/functions.js
IP

103.146.203.123:443
ASN

#136052 PT Cloud Hosting Indonesia

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

ASCII text, with CRLF line terminators

Size

691
Hash

98382917530a7c8d3a64699810c6307c

d5eaeb16ff19f3e1698f7274edc2740bf748290f

6255012e39477d4eebe9a4e921126e7c54762ed62dc4ef65b1579efff2ed2571

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Bancolombia
fortinet	Phishing

HTTP Headers

                                        GET /poral/js/functions.js HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intipupdate.com/poral/PASS.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=28800
expires: Mon, 29 May 2023 18:50:14 GMT
content-type: application/javascript
last-modified: Thu, 16 Jun 2022 03:29:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 691
date: Mon, 29 May 2023 10:50:12 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

intipupdate.com/poral/img/logo.svg

103.146.203.123

200 OK

2479

URL GET HTTP/2

intipupdate.com/poral/img/logo.svg
IP

103.146.203.123:443
ASN

#136052 PT Cloud Hosting Indonesia

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (667)

Size

2479
Hash

c049dccd21049cb237daabdb645ec648

e29af3f65a8312efd3ea4c3b66d4bd86657dde1b

2c7a6ea74a49a6adc3fad622078895e9b2589448214913d8c035764148aca7d0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Bancolombia
fortinet	Phishing

HTTP Headers

                                        GET /poral/img/logo.svg HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intipupdate.com/poral/PASS.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=28800
expires: Mon, 29 May 2023 18:50:14 GMT
content-type: image/svg+xml
last-modified: Mon, 13 Jun 2022 02:11:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2479
date: Mon, 29 May 2023 10:50:12 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

intipupdate.com/poral/img/error.jpg

103.146.203.123

200 OK

5363

URL GET HTTP/2

intipupdate.com/poral/img/error.jpg
IP

103.146.203.123:443
ASN

#136052 PT Cloud Hosting Indonesia

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 195x194, components 3\012- data

Size

5363
Hash

845eeed3b61d4c19ed0059c42fa7fc2e

ace747921c0b92d8451a1562759c867296c31b44

f68c633109e951014c6c401f878be7196c8894f6723215afb18388dbbbb83f1d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Bancolombia

HTTP Headers

                                        GET /poral/img/error.jpg HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intipupdate.com/poral/PASS.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=28800
expires: Mon, 29 May 2023 18:50:14 GMT
content-type: image/jpeg
last-modified: Wed, 15 Jun 2022 03:46:18 GMT
accept-ranges: bytes
content-length: 5363
date: Mon, 29 May 2023 10:50:12 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

intipupdate.com/poral/img/info.jpg

103.146.203.123

200 OK

3438

URL GET HTTP/2

intipupdate.com/poral/img/info.jpg
IP

103.146.203.123:443
ASN

#136052 PT Cloud Hosting Indonesia

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 62x61, components 3\012- data

Size

3438
Hash

72f07f88a708281bb165235fb88649ee

d2e7284036b30a170dc68c2ad476d664234ed66c

13df691e5ad1109013261983ff6272aa37353f3b28525a9e8b0b29355a1ebec4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Bancolombia

HTTP Headers

                                        GET /poral/img/info.jpg HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intipupdate.com/poral/PASS.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=28800
expires: Mon, 29 May 2023 18:50:14 GMT
content-type: image/jpeg
last-modified: Tue, 14 Jun 2022 09:14:56 GMT
accept-ranges: bytes
content-length: 3438
date: Mon, 29 May 2023 10:50:12 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

intipupdate.com/poral/img/con-a.gif

103.146.203.123

200 OK

2716

URL GET HTTP/2

intipupdate.com/poral/img/con-a.gif
IP

103.146.203.123:443
ASN

#136052 PT Cloud Hosting Indonesia

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

GIF image data, version 89a, 105 x 45\012- data

Size

2716
Hash

f872304fe2a107a6173de48cb5933423

1b56bc602990ab48a25e40f07bfc1521c4235918

37f886a70c0f7e4dbf8b28312144c971b1da50ebae35b3527656703c8e7c8475

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Bancolombia

HTTP Headers

                                        GET /poral/img/con-a.gif HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intipupdate.com/poral/PASS.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=28800
expires: Mon, 29 May 2023 18:50:14 GMT
content-type: image/gif
last-modified: Thu, 24 Jun 2021 02:30:28 GMT
accept-ranges: bytes
content-length: 2716
date: Mon, 29 May 2023 10:50:12 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

intipupdate.com/

103.146.203.123

60959

URL

intipupdate.com/
IP

103.146.203.123:0
ASN

#136052 PT Cloud Hosting Indonesia

Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (4414)

Size

60959
Hash

3d1dec359f643ff701004d5628713da6

e5d6d824945ff9bd4b5f349862104aa121ad65e0

b2bd8280868f0b938802fc45c02777eb79a3a9b15e9637ae3181cf9d68149368

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET / HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
x-powered-by: PHP/7.4.33
x-dns-prefetch-control: on
content-type: text/html; charset=UTF-8
link: <https://intipupdate.com/wp-json/>; rel="https://api.w.org/", <https://intipupdate.com/wp-json/wp/v2/pages/152>; rel="alternate"; type="application/json", <https://intipupdate.com/>; rel=shortlink
etag: "25677-1685320937;br"
x-litespeed-cache: hit
content-encoding: br
vary: Accept-Encoding
content-length: 60959
date: Mon, 29 May 2023 10:50:12 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

ocsp.godaddy.com/

192.124.249.22

1778

URL

ocsp.godaddy.com/
IP

192.124.249.22:0
ASN

#30148 SUCURI-SEC

Magic

data

Size

1778
Hash

a00ba5dc07b4b3b72208addbaa6a4164

d225c9291829d5732dbc38f3c0f53fb62075ab30

c36c152e25f0c73e1fcf5b33cfcf57c97df0b3edece212e46d1060438b9d63bb

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 29 May 2023 10:50:14 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 29 May 2023 00:02:31 GMT
Expires: Tue, 30 May 2023 00:02:31 GMT
ETag: "d225c9291829d5732dbc38f3c0f53fb62075ab30"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

images-cdn.info/444/image.gif

54.86.140.52

200 OK

URL GET HTTP/1.1

images-cdn.info/444/image.gif
IP

54.86.140.52:443
ASN

#14618 AMAZON-AES

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuerGoDaddy.com, Inc.

Subjectimages-cdn.info

Fingerprint9B:95:3E:E4:E8:F5:63:C3:BC:A0:E0:3A:CA:BD:74:8D:50:61:82:2E

ValiditySun, 30 Apr 2023 18:08:05 GMT - Fri, 31 May 2024 18:08:05 GMT

Magic

GIF image data, version 89a, 1 x 1\012- data

Size

43
Hash

ad4b0f606e0f8465bc4c4c170b37e1a3

50b30fd5f87c85fe5cba2635cb83316ca71250d7

cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Bancolombia

HTTP Headers

                                        GET /444/image.gif HTTP/1.1
Host: images-cdn.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intipupdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Date: Mon, 29 May 2023 10:50:14 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive

intipupdate.com/poral/fonts/opensans/OpenSans-Regular.ttf

103.146.203.123

200 OK

82652

URL GET HTTP/2

intipupdate.com/poral/fonts/opensans/OpenSans-Regular.ttf
IP

103.146.203.123:443
ASN

#136052 PT Cloud Hosting Indonesia

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

TrueType Font data, digitally signed, 19 tables, 1st "DSIG", 26 names, Macintosh, Digitized data copyright \251 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-R\012- data

Size

82652
Hash

d7d5d4588a9f50c99264bc12e4892a7c

513966e260bb7610d47b2329dba194143831893e

13c03e22a633919beb2847c58c8285fb8a735ee97097d7c48fd403f8294b05f8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Bancolombia
fortinet	Phishing

HTTP Headers

                                        GET /poral/fonts/opensans/OpenSans-Regular.ttf HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intipupdate.com/poral/css/stylesheet.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=28800
expires: Mon, 29 May 2023 18:50:15 GMT
content-type: font/ttf
last-modified: Thu, 24 Jun 2021 01:39:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 82652
date: Mon, 29 May 2023 10:50:12 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

intipupdate.com/poral/fonts/opensans/CIBFontSans-Light.ttf

103.146.203.123

200 OK

52943

URL GET HTTP/2

intipupdate.com/poral/fonts/opensans/CIBFontSans-Light.ttf
IP

103.146.203.123:443
ASN

#136052 PT Cloud Hosting Indonesia

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 33 names, Macintosh, Copyright (c) 2019 by Vasava Studio. All rights reserved.\011CIBFont SansLight1.300;UKWN;CIBFont\012- data

Size

52943
Hash

69096387df83ff65381f8ee25006b0aa

89689ed7f7547a3815d9fa2d0a2c11513480086e

decf1c3cb09b3e38d867e0d5cf648220584404c9cf8d18a6c51bdfa2af5047cc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Bancolombia
fortinet	Phishing

HTTP Headers

                                        GET /poral/fonts/opensans/CIBFontSans-Light.ttf HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intipupdate.com/poral/css/stylesheet.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=28800
expires: Mon, 29 May 2023 18:50:15 GMT
content-type: font/ttf
last-modified: Thu, 24 Jun 2021 01:38:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 52943
date: Mon, 29 May 2023 10:50:12 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

intipupdate.com/poral/img/logo.png

103.146.203.123

200 OK

9489

URL GET HTTP/2

intipupdate.com/poral/img/logo.png
IP

103.146.203.123:443
ASN

#136052 PT Cloud Hosting Indonesia

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

PNG image data, 521 x 520, 8-bit/color RGBA, non-interlaced\012- data

Size

9489
Hash

2903c67701750d246b77ee1c1c9188f1

028e6e88d6563e81eb77807c38f401cf5e7f2be0

c2fd3f9e79070fdbcb7ed3270a428a6ecd22ae089ab6e573eb4dfe91079c41fb

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Bancolombia

HTTP Headers

                                        GET /poral/img/logo.png HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intipupdate.com/poral/PASS.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=28800
expires: Mon, 29 May 2023 18:50:18 GMT
content-type: image/png
last-modified: Thu, 06 Jan 2022 02:33:06 GMT
accept-ranges: bytes
content-length: 9489
date: Mon, 29 May 2023 10:50:17 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

intipupdate.com/poral/img/lock.png

103.146.203.123

200 OK

465

URL GET HTTP/2

intipupdate.com/poral/img/lock.png
IP

103.146.203.123:443
ASN

#136052 PT Cloud Hosting Indonesia

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuercPanel, Inc.

Subjectintipupdate.com

FingerprintD3:DE:54:F8:6E:4F:DD:5E:0C:F2:9B:06:CC:CE:57:D9:6F:58:B3:E1

ValidityWed, 03 May 2023 00:00:00 GMT - Tue, 01 Aug 2023 23:59:59 GMT

Magic

PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data

Size

465
Hash

e1fbae1c7cbb958401b23cc26991631b

51fc2948568be9ac415bb8d48171534c674d309d

022574e92ba7b69dd3e8f5da1882b053a893b97cf6bfe441753799dcc91655b6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Bancolombia

HTTP Headers

                                        GET /poral/img/lock.png HTTP/1.1
Host: intipupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intipupdate.com/poral/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=28800
expires: Mon, 29 May 2023 18:50:18 GMT
content-type: image/png
last-modified: Tue, 14 Jun 2022 00:00:38 GMT
accept-ranges: bytes
content-length: 465
date: Mon, 29 May 2023 10:50:17 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

kit.fontawesome.com/45b9078c9f.js

104.18.23.52

200 OK

11447

URL GET HTTP/2

kit.fontawesome.com/45b9078c9f.js
IP

104.18.23.52:443
ASN

#13335 CLOUDFLARENET

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuerDigiCert Inc

Subject*.fontawesome.com

Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E

ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT

Magic

ASCII text, with very long lines (11018)

Size

11447
Hash

46718f089e12e17bd2807cc2b8bf6bfb

dc5970ab5f46c72ef6fb8c80bce20eff184ae915

a24ec9deb5a81c70bdfdb743dd49f8c75ce7b3d30d75d0d1fd9b8a69b87774b1

HTTP Headers

                                        GET /45b9078c9f.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://intipupdate.com
DNT: 1
Connection: keep-alive
Referer: https://intipupdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Mon, 29 May 2023 10:50:09 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F2OC7yRyiUislsRqcZXC
cf-cache-status: HIT
age: 24
server: cloudflare
cf-ray: 7cee2cc2a9520afe-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.4.0/css/free-v4-font-face.min.css?token=45b9078c9f

172.64.202.28

200 OK

1775

URL GET HTTP/2

ka-f.fontawesome.com/releases/v6.4.0/css/free-v4-font-face.min.css?token=45b9078c9f
IP

172.64.202.28:443
ASN

#13335 CLOUDFLARENET

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuerCloudflare, Inc.

Subjectsni.cloudflaressl.com

Fingerprint49:14:F2:7A:2C:AE:36:01:38:B7:F7:3D:DB:44:3E:3F:5C:FB:6B:15

ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

Magic

ASCII text, with very long lines (1803), with no line terminators

Size

1775
Hash

97b548129a2bcf8588519009187c2c39

945ad038ab7f6ddaee01dda882fc07dbf3c56af0

7792fc000372bac02c70b61f4e98f5c0af19f74a07176bb2ff117cacf7752d81

HTTP Headers

                                        GET /releases/v6.4.0/css/free-v4-font-face.min.css?token=45b9078c9f HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://intipupdate.com/
Origin: https://intipupdate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Mon, 29 May 2023 10:50:09 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 23 Mar 2023 21:29:20 GMT
etag: W/"9e7f9f634ace089bcdacc3fcc5f23ce5"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0014cc5ed6f7d7422fe78da5a10aa120.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: pVzZMFxJDsc5pZ3OxsJtbyrDtr5wGUCB1vWFxL2TAvgggBJ5TqLvWw==
age: 40175
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hDhIdQzVblu3IJXhFqEdju38%2FsLNeQDMjRTms40nEtiCSFFVVgr1haoVBRVeyUm5G2z1%2BNIW%2B3EH7GDxLdmU1dmVBtrZNmLyxkRlTn9B9HfyvpbipC4jD2gSuZA2pxTOBOUL%2Bkv0Kg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cee2cc3de4388c2-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.4.0/css/free-v4-shims.min.css?token=45b9078c9f

172.64.202.28

200 OK

27592

URL GET HTTP/2

ka-f.fontawesome.com/releases/v6.4.0/css/free-v4-shims.min.css?token=45b9078c9f
IP

172.64.202.28:443
ASN

#13335 CLOUDFLARENET

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuerCloudflare, Inc.

Subjectsni.cloudflaressl.com

Fingerprint49:14:F2:7A:2C:AE:36:01:38:B7:F7:3D:DB:44:3E:3F:5C:FB:6B:15

ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

Magic

ASCII text, with very long lines (27377)

Size

27592
Hash

5193a6de5225940ae4ef5f7c82126be9

fa2c2bdb52e9923ccf3387c5908459c9d11bff63

425741cc35824b5b3b18d4135fbef6afca30662d23638366af151f7e74ba2575

HTTP Headers

                                        GET /releases/v6.4.0/css/free-v4-shims.min.css?token=45b9078c9f HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://intipupdate.com/
Origin: https://intipupdate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Mon, 29 May 2023 10:50:09 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 23 Mar 2023 21:29:20 GMT
etag: W/"5193a6de5225940ae4ef5f7c82126be9"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 905eac6c91c9858bd0f20b56e9c842d4.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: -uegUhoDi7Sl48ab9osM0u6fovdQAPCnvNqGXpCdGm8BEdL-gDrSkQ==
age: 40175
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FfUkZctSsfpPkwWvP73a%2FhSClHy7BtpGkJcH%2BNNsHSudavwxgVXBkJWX66JpfZhSoS6ruOBb%2F6mxh5WLh30My74vREgGN%2B6%2FzVTaPVrBvrC9A2eyUlkVCSkjJWLciWRMoPlZF7au%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cee2cc3ee4688c2-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.4.0/css/free-v5-font-face.min.css?token=45b9078c9f

172.64.202.28

200 OK

823

URL GET HTTP/2

ka-f.fontawesome.com/releases/v6.4.0/css/free-v5-font-face.min.css?token=45b9078c9f
IP

172.64.202.28:443
ASN

#13335 CLOUDFLARENET

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuerCloudflare, Inc.

Subjectsni.cloudflaressl.com

Fingerprint49:14:F2:7A:2C:AE:36:01:38:B7:F7:3D:DB:44:3E:3F:5C:FB:6B:15

ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

Magic

ASCII text, with very long lines (845), with no line terminators

Size

823
Hash

2294fec50bebe1dc04d4936722c3c08e

05902d67eb724a4569ceeadb7b4e1eef75c0efee

1a0aefc152cf12c1e6ea5027b3449b301fddc172a581b382ff69216cd2c26781

HTTP Headers

                                        GET /releases/v6.4.0/css/free-v5-font-face.min.css?token=45b9078c9f HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://intipupdate.com/
Origin: https://intipupdate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Mon, 29 May 2023 10:50:09 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 23 Mar 2023 21:29:20 GMT
etag: W/"5856e3f07fbc36fc4d430a95a577a87f"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 24639548230786af4bba1a9e26c6080e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: IB6PHiR28IzogVXuVR0_peu6btMDkf5ox-tjPspdU-mW7zcBnsLLkA==
age: 40175
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PMb2KVcmzDepsp3RHj9a1%2Bzmyy%2FWb%2B5LWBdTkvx8D9pHqzCdR3CfxZuSFO%2BB79dSwfcHmLDrad4HEE1Awok8OqBtABQisPbJsR9EhnrIyDne80r0PtQokjxXbORNWGatDuacBmDcUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cee2cc3de3688c2-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.4.0/css/free.min.css?token=45b9078c9f

172.64.202.28

200 OK

102557

URL GET HTTP/2

ka-f.fontawesome.com/releases/v6.4.0/css/free.min.css?token=45b9078c9f
IP

172.64.202.28:443
ASN

#13335 CLOUDFLARENET

Requested by

https://intipupdate.com/poral/PASS.php
Certificate

IssuerCloudflare, Inc.

Subjectsni.cloudflaressl.com

Fingerprint49:14:F2:7A:2C:AE:36:01:38:B7:F7:3D:DB:44:3E:3F:5C:FB:6B:15

ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT

Magic

ASCII text, with very long lines (65321)

Size

102557
Hash

5febfb939e2fc4ddf14fffae53b72cf0

e0e62217708a9cfd0b78a8574e07a66d95cf1344

fd28ebf7bdffb45da731413ed6e6940dc60123aa120bfa5a3909a40b2a2ba7e1

HTTP Headers

                                        GET /releases/v6.4.0/css/free.min.css?token=45b9078c9f HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://intipupdate.com/
Origin: https://intipupdate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Mon, 29 May 2023 10:50:09 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 23 Mar 2023 21:29:21 GMT
etag: W/"5febfb939e2fc4ddf14fffae53b72cf0"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2fe8f7f5aca4ab098dc7bad8e97a06dc.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: RSluTIsU92jhGWrU-u-9RIv3W0xWIyoOIvhqh10Yag20NBiINNZivA==
age: 55372
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=63Zy0lMmTbv3WQha0tDvpy9Z1roABdMzPM5MPqw67cqJNk0MZOuIiQ0sE2WcimQER28tPfiFYiABth4KCMFTIUvFiqy%2F4MgQ29W2f%2FpjpwB87uUiLT6PLLDSG0H27O47wxpD7iMKhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cee2cc3de3b88c2-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

#1 JS:Script (size: 11447)

#2 JS:Script (size: 89501)

#3 JS:Script (size: 3337)

#4 JS:Script (size: 73)

#5 JS:Script (size: 2737)

#6 JS:Script (size: 0)

HTTP Transactions (23)

URL User Request GET HTTP/2

IP

ASN

Certificate

Magic

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

Certificate

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2