Report - dunwell.seenseen.co/mail/BIbAZTGkMv4385/

Report Overview

Visited public
2023-10-27 13:02:12
Tags
URL
dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Finishing URL
dunwell.seenseen.co/mail/BIbAZTGkMv4385/
IP / ASN
188.114.97.1
#13335 CLOUDFLARENET
Title
dunwell.seenseen.co/mail/BIbAZTGkMv4385/

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ajax.googleapis.com	12905	2005-01-25	2013-08-16 11:51:31	2023-10-26 19:19:47	436 B	32 kB	216.58.207.202
dunwell.seenseen.co	unknown	2018-08-27	2022-04-04 04:08:52	2023-10-21 03:37:14	4.5 kB	106 kB	188.114.97.1
ocsp.r2m01.amazontrust.com	unknown	2007-05-11	2022-10-12 22:43:53	2023-10-26 19:25:34	340 B	942 B	143.204.53.97
kit-free.fontawesome.com	22974	2012-10-18	2019-05-10 14:34:22	2023-10-27 00:01:16	1.6 kB	218 kB	104.21.51.18
s3-us-west-2.amazonaws.com	unknown	2005-08-18	2017-01-29 12:21:01	2023-10-26 20:31:45	445 B	177 kB	52.218.228.8
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15 22:36:43	2023-10-26 18:27:57	494 B	161 kB	104.18.10.207
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-10-26 18:58:41	1.5 kB	113 kB	104.17.25.14
ocsp.pki.goog	175	2016-06-13	2018-07-01 08:43:07	2023-10-26 18:12:02	666 B	1.4 kB	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-10-26	medium	dunwell.seenseen.co/mail/BIbAZTGkMv4385/	Chronopost International

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	From	Size	First Seen	Last Seen
	dunwell.seenseen.co/mail/BIbAZTGkMv4385/	ScriptElement	0 B	0001-01-01	2025-05-11
Pretty URL dunwell.seenseen.co/mail/BIbAZTGkMv4385/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-11 13:18 Times Seen4654578 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js	ScriptElement	88 kB	2023-03-07	2025-05-11
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js IP 216.58.207.202 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-11 12:29 Times Seen68231 Hash 220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a Loading...

	dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/chronopost_if.js	ScriptElement	3.5 kB	2023-06-05	2024-08-21
Pretty URL dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/chronopost_if.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-05 13:54 Last Seen2024-08-21 09:39 Times Seen46 Hash 21957f9bede9d7664aef92b0fdea4248 58b39f2376e4efaeac4d07770d1f3debfb2b0426 aca86b9641b8ebaba7d7cf4d2804211ff136c473fd2b7b848190dfa71b4bae5a Loading...

	dunwell.seenseen.co/mail/BIbAZTGkMv4385/	ScriptElement	0 B	0001-01-01	2025-05-11
Pretty URL dunwell.seenseen.co/mail/BIbAZTGkMv4385/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-11 13:18 Times Seen4654578 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/3.1.1/jquery.min.js	ScriptElement	87 kB	2023-03-07	2025-05-11
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.1.1/jquery.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-11 12:42 Times Seen112281 Hash e071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf Loading...

	s3-us-west-2.amazonaws.com/s.cdpn.io/3/jquery.inputmask.bundle.js	ScriptElement	176 kB	2023-03-07	2025-05-10
Pretty URL s3-us-west-2.amazonaws.com/s.cdpn.io/3/jquery.inputmask.bundle.js IP 52.218.228.8 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07 Last Seen2025-05-10 17:58 Times Seen299 Hash f0b02d9f2d3c6679556e63935ac23320 384bb74cdb2840da6eaa9400242faf4a2fac3daa f708ad894d421f32ed297a914632db6bc1577841d1c210b34f1a0821ea0aaa4b Loading...

HTTP Transactions (21)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css

104.17.25.14

200 OK

5.6 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (30837)
Size
5.6 kB (5631 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dunwell.seenseen.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 27 Oct 2023 13:01:54 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 759751
expires: Wed, 16 Oct 2024 13:01:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zuuinhgWLGTHihsEEQn9kC9V7jMWAyikUnV%2Fd3X9RMJ%2Fq5Arapkcn9BjFpQHvy8zuCNQjgHTVfGDT0ALqPHONQTE51CL1MvwUzFNfvculCMGSqaHTu8Ep1Q%2BI%2Fi%2BjCPmKXrznDfy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 81cb2160aee4b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery/3.1.1/jquery.min.js

104.17.25.14

200 OK

27 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.1.1/jquery.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (32030)
Size
27 kB (27192 bytes)
Hash
e071abda8fe61194711cfc2ab99fe104
f647a6d37dc4ca055ced3cf64bbc1f490070acba
85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

HTTP Headers

GET /ajax/libs/jquery/3.1.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dunwell.seenseen.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 27 Oct 2023 13:01:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 27192
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-152b5"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 12228706
expires: Wed, 16 Oct 2024 13:01:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xpx9cCMqiOELXz1Ygo5STVFV1%2BLXYt9dh6%2Bvh%2FNKDSmI1pukSCSQfu2ZmjrOa3BDxxzhDUdvKtyi02yXd0lWyxQFDsvy%2FKiVCaP6R6XcjCRyqtQ376ehtq%2FMwl5q9X2Awu5ZLthE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 81cb2160bef0b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
7e2768f801fb06f29501d0e86ab0c63a
d60b99ecccc374278489937e20bda1ce9b4c1c7d
f6986fdec0e0720c4630d79c3a063cf9f7365a21d916f7ff85cebac555a1940f

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Oct 2023 13:01:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js

216.58.207.202

200 OK

31 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP
216.58.207.202:443
ASN
#15169 GOOGLE

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint87:BD:C2:71:54:40:3F:F2:18:79:1A:89:F5:E9:BC:63:E5:EC:57:64
ValidityMon, 09 Oct 2023 08:10:33 GMT - Mon, 01 Jan 2024 08:10:32 GMT

File type
ASCII text, with very long lines (65451)
Size
31 kB (30774 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dunwell.seenseen.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Oct 2023 19:17:13 GMT
expires: Tue, 22 Oct 2024 19:17:13 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 323081
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
7e2768f801fb06f29501d0e86ab0c63a
d60b99ecccc374278489937e20bda1ce9b4c1c7d
f6986fdec0e0720c4630d79c3a063cf9f7365a21d916f7ff85cebac555a1940f

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Oct 2023 13:01:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/img/Capture.png

188.114.97.1

200 OK

1.9 kB

URL GET HTTP/3
dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/img/Capture.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerGoogle Trust Services LLC
Subjectseenseen.co
FingerprintDB:FF:99:4C:DE:84:98:A2:64:09:6C:CE:D5:5B:11:EE:01:92:DA:C6
ValidityThu, 05 Oct 2023 13:14:48 GMT - Wed, 03 Jan 2024 13:14:47 GMT

File type
PNG image data, 194 x 34, 8-bit/color RGBA, non-interlaced\012- data
Size
1.9 kB (1948 bytes)
Hash
e42b8fc7b9b5f270f844353a5945fef5
72e19086fcdb5d15bd1501f999532c460846132f
b5bd9e64eea624aa2343f918af01f093ec4f2df1ca74b77eb1e10eecd596b336

HTTP Headers

GET /mail/BIbAZTGkMv4385/sourceApp/img/Capture.png HTTP/1.1
Host: dunwell.seenseen.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 27 Oct 2023 13:01:54 GMT
content-type: image/png
content-length: 1948
last-modified: Sat, 16 Sep 2023 06:37:58 GMT
etag: "65054d46-79c"
cache-control: public, max-age=2592000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FeMyE%2BTltWw54SbEspG6Pxbal7puOGJOzor%2B%2BuyTi44Lkm7wWtYUBhCy6jB7qr8wQBcxOFee2HTj8yaGsVyWV84tzWELoOWj%2F7Ne6bp2rkTMsYsMZHomm3mNapB%2FdiGhk%2BaReJde"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81cb21608e73568d-OSL
alt-svc: h3=":443"; ma=86400

ocsp.r2m01.amazontrust.com/

143.204.53.97

471 B

URL
ocsp.r2m01.amazontrust.com/
IP
143.204.53.97:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
dba322da73d000fb43478878aae4efd2
850a55f279876592d6608bc4d03cc641da99c367
1deff89efc946ab5f255ab3ecb2754e2b3c4af6e67bcd213d4dc15c4ee459a66

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 27 Oct 2023 13:01:55 GMT
Last-Modified: Fri, 27 Oct 2023 12:16:18 GMT
Server: ECAcc (ska/F757)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _leeWbP0-0Yna8HgXfikWaUWDnFlxWtCucqo5ckB4FyGUiOt-9-UEA==
Age: 2737

dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/img/chronopost_logo_small.png

188.114.97.1

200 OK

6.7 kB

URL GET HTTP/3
dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/img/chronopost_logo_small.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerGoogle Trust Services LLC
Subjectseenseen.co
FingerprintDB:FF:99:4C:DE:84:98:A2:64:09:6C:CE:D5:5B:11:EE:01:92:DA:C6
ValidityThu, 05 Oct 2023 13:14:48 GMT - Wed, 03 Jan 2024 13:14:47 GMT

File type
PNG image data, 170 x 39, 8-bit/color RGBA, non-interlaced\012- data
Size
6.7 kB (6690 bytes)
Hash
83844a55b0719c2c568323edcc3aa72f
904ae759c546c8055bc558670db715c03d5d5e3b
277b3d7509e18a5853b95de911547f1453ad45c201bee91ccdc814d8441ddf11

HTTP Headers

GET /mail/BIbAZTGkMv4385/sourceApp/img/chronopost_logo_small.png HTTP/1.1
Host: dunwell.seenseen.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 27 Oct 2023 13:01:55 GMT
content-type: image/png
content-length: 6690
last-modified: Sat, 16 Sep 2023 06:37:58 GMT
etag: "65054d46-1a22"
cache-control: public, max-age=2592000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=th3BHY2xWITkqC15xDXqcM%2BEQfdgZcy2qA2GtPfyoF6kDRSrU45M4P6yMxNdHbdBL0V9ZWYzthR3pwR%2B70Dbou1imzTNV1OS6z67FKfka0kzE871e0MebSIsS99LJMRQDwHJ4uEU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81cb21609e84568d-OSL
alt-svc: h3=":443"; ma=86400

dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/img/dpd-logo.png

188.114.97.1

200 OK

3.3 kB

URL GET HTTP/3
dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/img/dpd-logo.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerGoogle Trust Services LLC
Subjectseenseen.co
FingerprintDB:FF:99:4C:DE:84:98:A2:64:09:6C:CE:D5:5B:11:EE:01:92:DA:C6
ValidityThu, 05 Oct 2023 13:14:48 GMT - Wed, 03 Jan 2024 13:14:47 GMT

File type
PNG image data, 128 x 33, 8-bit/color RGB, non-interlaced\012- data
Size
3.3 kB (3305 bytes)
Hash
f34de078547c6cb96064a9b2ea61c251
267eec3f02fd2f6ec8ce0218f812ad1c8f517aee
bc5fa15b90d078322fac07419dbce0372e156a38d69c6b3abc38bf29ad476b32

HTTP Headers

GET /mail/BIbAZTGkMv4385/sourceApp/img/dpd-logo.png HTTP/1.1
Host: dunwell.seenseen.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 27 Oct 2023 13:01:55 GMT
content-type: image/png
content-length: 3305
last-modified: Tue, 24 Oct 2023 01:46:04 GMT
etag: "653721dc-ce9"
cache-control: public, max-age=2592000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DbFsLe%2FfJ8yaFEDUoX1FWEnz939fIS0Ie4i3aoJdSs2CdQF6TLvn3RW1wMLzjLNvxtbZldplqDNJ8DAXNYA83slZmJFa%2BnZyn3nHh0bmbzEoseft%2FS8UkaZA5H4sV6I88cInXwsZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81cb21608e75568d-OSL
alt-svc: h3=":443"; ma=86400

dunwell.seenseen.co/mail/BIbAZTGkMv4385/

188.114.97.1

200 OK

19 kB

URL User Request GET HTTP/2
dunwell.seenseen.co/mail/BIbAZTGkMv4385/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectseenseen.co
FingerprintDB:FF:99:4C:DE:84:98:A2:64:09:6C:CE:D5:5B:11:EE:01:92:DA:C6
ValidityThu, 05 Oct 2023 13:14:48 GMT - Wed, 03 Jan 2024 13:14:47 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
19 kB (18975 bytes)
Hash
dbec6282ed68285a030717885a4fafca
4736b4305b83af5e10d33de2ff7065f9ef5f834e
99bee1fa302643a0857eb21c9098d776dfeed05cb891a4dbf5bf4907b01ab4e3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Chronopost International

HTTP Headers

GET /mail/BIbAZTGkMv4385/ HTTP/1.1
Host: dunwell.seenseen.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 27 Oct 2023 13:01:54 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
age: 4159
x-cache: HIT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=je43Btdw4D5FS8xdLOcIogbDxLpUXB2HT8fpSnRlXWiCjsE97eQF6TsZMJtsjIKwsigWpHEAO1WaGK8Bq3TiaYPFUEw34ubveePSNIv5X1%2FfRezfo04lAUUFY8qIIB8GhCvz9Wu3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81cb215a3b0956c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/img/chronopost_tours_03712200_113425863.jpg

188.114.97.1

200 OK

14 kB

URL GET HTTP/3
dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/img/chronopost_tours_03712200_113425863.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerGoogle Trust Services LLC
Subjectseenseen.co
FingerprintDB:FF:99:4C:DE:84:98:A2:64:09:6C:CE:D5:5B:11:EE:01:92:DA:C6
ValidityThu, 05 Oct 2023 13:14:48 GMT - Wed, 03 Jan 2024 13:14:47 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x250, components 3\012- data
Size
14 kB (14094 bytes)
Hash
df1086e658818d5b7ac4d7e8af7ed2c6
621741b6c59d7703ea055f3598d6b03a86829140
2309a3b42db8684ed57dce9e29ed418477acb7740b979a15004f3e1f28b5e5ca

HTTP Headers

GET /mail/BIbAZTGkMv4385/sourceApp/img/chronopost_tours_03712200_113425863.jpg HTTP/1.1
Host: dunwell.seenseen.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 27 Oct 2023 13:01:55 GMT
content-type: image/jpeg
content-length: 14094
last-modified: Tue, 24 Oct 2023 01:46:04 GMT
etag: "653721dc-370e"
cache-control: public, max-age=2592000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sB5STo3sU8r%2BSRfk0eGUo0usadW55ImuNXDtAnNLF7QUAwJ2T7V1pQ%2FKSKFIwVmWAGmuE%2BgvktJCtklnd2606OocOlTs5n7XuCJzDzp6xkDU8la5d8EvITzjepclinsi8ZNoctfO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81cb21608e6c568d-OSL
alt-svc: h3=":443"; ma=86400

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0

104.17.25.14

200 OK

77 kB

URL GET HTTP/3
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dunwell.seenseen.co
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 27 Oct 2023 13:01:55 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 315918
expires: Wed, 16 Oct 2024 13:01:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gjAyRM8w3K7goXlbp%2FQVkC4wSFwVjrh1pd05ziK5dcyDPIhEXF%2FPyfde%2F1zaDU6NNoblJuVvRH9vcQYdIZTzid095fI2o1IzrH5HjTMtVJjkKnpP%2FZFvcCNuTTyJfp54Bfa0avr%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 81cb21665cd70b55-OSL
alt-svc: h3=":443"; ma=86400

kit-free.fontawesome.com/releases/latest/webfonts/free-fa-brands-400.woff2

104.21.51.18

200 OK

77 kB

URL GET HTTP/3
kit-free.fontawesome.com/releases/latest/webfonts/free-fa-brands-400.woff2
IP
104.21.51.18:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerLet's Encrypt
Subjectkit-free.fontawesome.com
FingerprintA0:5C:CE:0F:B2:16:6D:7D:D7:2F:CC:92:4A:29:C9:D6:D2:AA:4D:BA
ValiditySat, 02 Sep 2023 06:15:13 GMT - Fri, 01 Dec 2023 06:15:12 GMT

File type
Web Open Font Format (Version 2), TrueType, length 76736, version 331.-31196\012- data
Size
77 kB (76736 bytes)
Hash
4f5ec865a8274ab291b6a42b5f70639e
6f00f8c75208b96e585646824c4011093446acd2
b5be0732ab1cc16692e165a7950810f0c772e400f6a2f63e1026a0b938016813

HTTP Headers

GET /releases/latest/webfonts/free-fa-brands-400.woff2 HTTP/1.1
Host: kit-free.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dunwell.seenseen.co
DNT: 1
Connection: keep-alive
Referer: https://kit-free.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 27 Oct 2023 13:01:55 GMT
content-type: font/woff2
content-length: 76736
x-amz-id-2: 7BpDwjsZIVm1NOSaeI46Kn1sRUzsDMJ6utdV8Kt2sIAMXFHAILM+8IBflaD6iTHQTzncZr8Ts1I=
x-amz-request-id: XHST4K3T980RQ1VD
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 04 Aug 2021 21:26:53 GMT
etag: "4f5ec865a8274ab291b6a42b5f70639e"
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L22InuFgdIQ8dTvOOQmYQ%2FFUFuWJnx5A4%2FwnGQrR2NOwh4AHMkWrYuvm2Dpp5pVAl9BW0NcQpMWfMHmTM1aPljKhlla1s4V6RV45OSu1T3T7kCt4DxJV2isWPWBsH8u0ks72Qrlm3PxmbYI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81cb216638bcb4fa-OSL
alt-svc: h3=":443"; ma=86400

s3-us-west-2.amazonaws.com/s.cdpn.io/3/jquery.inputmask.bundle.js

52.218.228.8

200 OK

176 kB

URL GET HTTP/1.1
s3-us-west-2.amazonaws.com/s.cdpn.io/3/jquery.inputmask.bundle.js
IP
52.218.228.8:443
ASN
#16509 AMAZON-02

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerAmazon
Subject*.s3-us-west-2.amazonaws.com
Fingerprint29:D7:48:C0:C9:57:6E:93:C1:56:5D:91:7F:98:4A:4F:63:B5:CA:1D
ValidityTue, 10 Oct 2023 00:00:00 GMT - Sat, 03 Aug 2024 23:59:59 GMT

File type
ASCII text, with very long lines (544)
Size
176 kB (176433 bytes)
Hash
f0b02d9f2d3c6679556e63935ac23320
384bb74cdb2840da6eaa9400242faf4a2fac3daa
f708ad894d421f32ed297a914632db6bc1577841d1c210b34f1a0821ea0aaa4b

HTTP Headers

GET /s.cdpn.io/3/jquery.inputmask.bundle.js HTTP/1.1
Host: s3-us-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dunwell.seenseen.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: G+4m+nZ2sc46c7z6GzWDzEPulpYrjk9G21kBojm1IUAq/5PuPzceyG79AHN4sjDkVfl12eUk8a8=
x-amz-request-id: RSJ1FH9R94E5EMF9
Date: Fri, 27 Oct 2023 13:01:56 GMT
Last-Modified: Wed, 30 Nov 2016 13:28:36 GMT
ETag: "f0b02d9f2d3c6679556e63935ac23320"
Cache-Control: public
Expires: Mon, 30 Nov 2026 13:28:34 GMT
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Content-Length: 176433

kit-free.fontawesome.com/releases/latest/webfonts/free-fa-solid-900.woff2

104.21.51.18

200 OK

78 kB

URL GET HTTP/3
kit-free.fontawesome.com/releases/latest/webfonts/free-fa-solid-900.woff2
IP
104.21.51.18:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerLet's Encrypt
Subjectkit-free.fontawesome.com
FingerprintA0:5C:CE:0F:B2:16:6D:7D:D7:2F:CC:92:4A:29:C9:D6:D2:AA:4D:BA
ValiditySat, 02 Sep 2023 06:15:13 GMT - Fri, 01 Dec 2023 06:15:12 GMT

File type
Web Open Font Format (Version 2), TrueType, length 78168, version 331.-31196\012- data
Size
78 kB (78168 bytes)
Hash
a9fd1225fb2cd32320e2b931dca01089
44ec5c6a868b4ce62350d9f040ed8e18f7a1d128
c5dd43f53f3af822cbf17b1fb75f46192cdbd51724f277acf6cf0dacb3fd57e7

HTTP Headers

GET /releases/latest/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: kit-free.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dunwell.seenseen.co
DNT: 1
Connection: keep-alive
Referer: https://kit-free.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 27 Oct 2023 13:01:56 GMT
content-type: font/woff2
content-length: 78168
x-amz-id-2: va+k+Lo0E+vX06ox7TD2xBjl+QQH7jdDDOgoqIBM73BGlL9EzZXjObrAGPkfK9Kr/39dd4oOEQM=
x-amz-request-id: RSJ9887DJ3RRG6F4
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 04 Aug 2021 21:26:53 GMT
etag: "a9fd1225fb2cd32320e2b931dca01089"
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BAbi15FpeKy9qEgAxnMMGueFVm7sOve9zJMhDYbE0Uh2GoJZTORu0VOluS3ROwFisYFfyN3%2BY5lsKHmb7Uf%2FMRp%2Baxxlj2nHxs9xctYifQfx6LX%2FA9NsTkBnwp4E2N1vUvzJR5SHAi795G4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81cb21660883b4fa-OSL
alt-svc: h3=":443"; ma=86400

kit-free.fontawesome.com/releases/latest/css/free.min.css

104.21.51.18

200 OK

60 kB

URL GET HTTP/2
kit-free.fontawesome.com/releases/latest/css/free.min.css
IP
104.21.51.18:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerLet's Encrypt
Subjectkit-free.fontawesome.com
FingerprintA0:5C:CE:0F:B2:16:6D:7D:D7:2F:CC:92:4A:29:C9:D6:D2:AA:4D:BA
ValiditySat, 02 Sep 2023 06:15:13 GMT - Fri, 01 Dec 2023 06:15:12 GMT

File type
ASCII text, with very long lines (60130)
Size
60 kB (60312 bytes)
Hash
a12ec7ebe75a4d59a5dd6b79e2ba2e16
28f5dcc595ee6d4163481ef64170180502c8629b
fc5128dfdcdfa0c3a9967a6d2f19399d7bf1aaae6ad7571b96b03915a1f30dda

HTTP Headers

GET /releases/latest/css/free.min.css HTTP/1.1
Host: kit-free.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dunwell.seenseen.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 27 Oct 2023 13:01:54 GMT
content-type: text/css
x-amz-id-2: nl+7k5oyt+Rf4rIOq9kmQK2MlrYYcJWsDIgI4SWVhIvetwA8BzImJuqi20Mvq/cHLJdRDf1bjIg=
x-amz-request-id: F2K9DDWSW12EBF8G
last-modified: Wed, 04 Aug 2021 21:22:50 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=1800
cf-cache-status: HIT
age: 746
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Kxi9tuuBMzmAw35xWVrun8fHTr0jsJjMRqiNShJc9%2F1%2Fp%2F9pZI0GXBSeK32SnkrI%2BtjybkzIc%2Fv2bCjf2eKmPruLHqu%2FTd9oq%2F7jL7tvyk8J0dlYXfKa%2BBS0og46BW10I6O8GoRwV4CYYPk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81cb2160fb0456c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/img/chronopost_logo.png

188.114.97.1

200 OK

17 kB

URL GET HTTP/3
dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/img/chronopost_logo.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerGoogle Trust Services LLC
Subjectseenseen.co
FingerprintDB:FF:99:4C:DE:84:98:A2:64:09:6C:CE:D5:5B:11:EE:01:92:DA:C6
ValidityThu, 05 Oct 2023 13:14:48 GMT - Wed, 03 Jan 2024 13:14:47 GMT

File type
PNG image data, 339 x 77, 8-bit/color RGBA, non-interlaced\012- data
Size
17 kB (16564 bytes)
Hash
c33a8f71f937b74aa1c92c074bc57e30
8cedfc20a2e9b83a7478a2f88ee90e226faa5a4b
a1d4dc7ed12cbd39ab6e8d1f572312c75c1051047a0c5b40b78721c6f6f4f934

HTTP Headers

GET /mail/BIbAZTGkMv4385/sourceApp/img/chronopost_logo.png HTTP/1.1
Host: dunwell.seenseen.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 27 Oct 2023 13:01:55 GMT
content-type: image/png
content-length: 16564
last-modified: Tue, 24 Oct 2023 01:46:04 GMT
etag: "653721dc-40b4"
cache-control: public, max-age=2592000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S17OXKB%2Buj517a5aShuo6Psrag5XIFBf1ISshUtNjj4tCFaT8xVamRQ3ci4N8qx2LdfAki%2Bd2PZ%2Bm2QPLMRgAbw355t73MmSf8kwq%2Btne2b7cnCuxWnzVvhChuQgt0xPPDtLm4xC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81cb21608e6b568d-OSL
alt-svc: h3=":443"; ma=86400

dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/chronopost_if.js

188.114.97.1

200 OK

3.5 kB

URL GET HTTP/3
dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/chronopost_if.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerGoogle Trust Services LLC
Subjectseenseen.co
FingerprintDB:FF:99:4C:DE:84:98:A2:64:09:6C:CE:D5:5B:11:EE:01:92:DA:C6
ValidityThu, 05 Oct 2023 13:14:48 GMT - Wed, 03 Jan 2024 13:14:47 GMT

File type
ASCII text, with very long lines (3869), with no line terminators
Size
3.5 kB (3483 bytes)
Hash
239c06d8e5ac9f3dc90ef441505f1e69
643482843c7e84884e3f8fe6597b767b99674ad1
04993dd0e1e54c7270ff67475c659dac01d6eaa244643f7274473ba2ffded4a5

HTTP Headers

GET /mail/BIbAZTGkMv4385/sourceApp/chronopost_if.js HTTP/1.1
Host: dunwell.seenseen.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 27 Oct 2023 13:01:55 GMT
content-type: application/javascript
last-modified: Tue, 24 Oct 2023 01:46:04 GMT
vary: Accept-Encoding
etag: W/"653721dc-d9b"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CU%2Bu3qMMaznNwBvWgnpOq3Rq4D6c8t0mHivedtn4GSKft7QtYrqDSalco9KiggFYGUaKNFQ1JJortxO%2BhSQDtQ7VCYU9Fd7BByolkjQ21q1pdmcbxhIuq4ZJZ996AFg25ocy3XzE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81cb21608e71568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/img/favicon.ico

188.114.97.1

200 OK

32 kB

URL GET HTTP/3
dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/img/favicon.ico
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerGoogle Trust Services LLC
Subjectseenseen.co
FingerprintDB:FF:99:4C:DE:84:98:A2:64:09:6C:CE:D5:5B:11:EE:01:92:DA:C6
ValidityThu, 05 Oct 2023 13:14:48 GMT - Wed, 03 Jan 2024 13:14:47 GMT

File type
MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size
32 kB (32038 bytes)
Hash
dcab71ebc93152daf929fb28339ed0fe
ffe045a4c0bf1f17083bb3458146bd9017cb5781
9fe9ceea600ac587b9df4e87ac5099ae40f7957965743bc500231b466557e041

HTTP Headers

GET /mail/BIbAZTGkMv4385/sourceApp/img/favicon.ico HTTP/1.1
Host: dunwell.seenseen.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 27 Oct 2023 13:01:56 GMT
content-type: image/x-icon
last-modified: Tue, 24 Oct 2023 01:46:04 GMT
vary: Accept-Encoding
etag: W/"653721dc-7d26"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F3G6dFKwGXnuGz8fMXNLCoy8PRl8vSpYObV2bQO%2B9kiWeTKmfYIhMW680Ql7wsTnnqbgILz6dK7b6EPYKfC47lw645E5N2Vuyj%2FFlNFe4iN%2F3%2F%2BvSR0HrBMvIvUJSYQFAmgH79hM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81cb21696f05568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css

104.18.10.207

200 OK

160 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT

File type
ASCII text, with very long lines (65324)
Size
160 kB (160403 bytes)
Hash
3afe15e976734d9daac26310110c4594
4f14a09a606c99a11f8fda15564ef66f70402826
680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c

HTTP Headers

GET /bootstrap/4.5.0/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dunwell.seenseen.co
DNT: 1
Connection: keep-alive
Referer: https://dunwell.seenseen.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 27 Oct 2023 13:01:54 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"3afe15e976734d9daac26310110c4594"
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 07/28/2023 09:37:52
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 1fcb29f32bcb0b94ca8cf268a01263e1
cdn-cache: HIT
cf-cache-status: HIT
age: 517460
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 81cb2160acacb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/style.css

188.114.97.1

200 OK

2.8 kB

URL GET HTTP/3
dunwell.seenseen.co/mail/BIbAZTGkMv4385/sourceApp/style.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Certificate
IssuerGoogle Trust Services LLC
Subjectseenseen.co
FingerprintDB:FF:99:4C:DE:84:98:A2:64:09:6C:CE:D5:5B:11:EE:01:92:DA:C6
ValidityThu, 05 Oct 2023 13:14:48 GMT - Wed, 03 Jan 2024 13:14:47 GMT

File type
ASCII text, with very long lines (3122), with no line terminators
Size
2.8 kB (2762 bytes)
Hash
30d411c75502aa389386cdb5f60f6e93
f2c685f9be1053e68fb7b53eb5ef727debf03da9
e9ab32e0b557bbcdf6354a6bd20453a10aade2ee06b63effeda45e8ff345629a

HTTP Headers

GET /mail/BIbAZTGkMv4385/sourceApp/style.css HTTP/1.1
Host: dunwell.seenseen.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dunwell.seenseen.co/mail/BIbAZTGkMv4385/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 27 Oct 2023 13:01:55 GMT
content-type: text/css
last-modified: Tue, 24 Oct 2023 01:46:04 GMT
vary: Accept-Encoding
etag: W/"653721dc-aca"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O64tN6Qj2NRKAhceywuKbdRNc7tRdrsU7gMnImS11BtjbJKKGlVhDuHcnxdwQM8LF0fNM75LVn%2FjehvyBsWsvpOFjR8cQEFxyF%2BNcanccPM0psBfzWI6gMJWbDd5exZjBrCKdoU3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81cb21607e61568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (21)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash