r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 666c7f3c3342b2fdca31a2355ee20bea
09bd5cbacba34412f5fff9d44f97e46c8c76d001
cb3a380fc71bc65dfde35069f0fc441400974afcf28c0fbb6fec8f41e16f70c8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CB3A380FC71BC65DFDE35069F0FC441400974AFCF28C0FBB6FEC8F41E16F70C8"
Last-Modified: Sat, 25 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20410
Expires: Mon, 27 Feb 2023 10:30:35 GMT
Date: Mon, 27 Feb 2023 04:50:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash bc3cacbc6c565bf2955b507302b8fb41
7b773e19aff1d4904cec328c456513e80f917ba4
b45c582b42efef5e8bd5744333a137f13e94a93cafbaace39b36cfa1eeb041bd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B45C582B42EFEF5E8BD5744333A137F13E94A93CAFBAACE39B36CFA1EEB041BD"
Last-Modified: Sat, 25 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16277
Expires: Mon, 27 Feb 2023 09:21:42 GMT
Date: Mon, 27 Feb 2023 04:50:25 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 7f03faaba3392caae6dae54467bfdf6d
57ea1f14e8bfbcca8190c706d708c9fda12442c1
02ac551ba61fcbc6b04f244df065948b181a8a258db5c2e197aae66fdfcea8ee
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 27 Feb 2023 04:07:55 GMT
content-type: application/json
age: 2550
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 29cfccb9238759ed21dbb0d92cae75f8
f41ad1b02e353cd2b33af7618c71cc16fae2886e
91e392e78e584e8a82762dab0d5615aa1af3893237d601db3d45bb6fad488580
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "91E392E78E584E8A82762DAB0D5615AA1AF3893237D601DB3D45BB6FAD488580"
Last-Modified: Sat, 25 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19376
Expires: Mon, 27 Feb 2023 10:13:21 GMT
Date: Mon, 27 Feb 2023 04:50:25 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: RfjeXE66J/U1jxHUEVUS5s4o8jFTCMM4jnSANEmlHwljLqKHeJRXCUF36SHgCKgW3nQ2mffbS9A=
x-amz-request-id: 75G7550BF290BR1G
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 27 Feb 2023 04:13:59 GMT
age: 2186
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
email.mycloudemail.co.uk/
45.8.227.100301 Moved Permanently 0 B URL HTTP/1.1 email.mycloudemail.co.uk/
IP 45.8.227.100:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert openphish Webmail Providers
fortinet Phishing
GET / HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
content-length: 0
location: https://email.mycloudemail.co.uk/
x-via: LHR2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 27 Feb 2023 04:50:25 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash a8e010a8d206eb026348e93e74a07486
db9351c5ecbfe4b7fce9ff94209c55a22e7ddabe
8edddb4c4a70518b1ddc2834c48b68835007e372870131d69c3eb9afe9e6d066
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EDDDB4C4A70518B1DDC2834C48B68835007E372870131D69C3EB9AFE9E6D066"
Last-Modified: Fri, 24 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21586
Expires: Mon, 27 Feb 2023 10:50:11 GMT
Date: Mon, 27 Feb 2023 04:50:25 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Expires, Last-Modified, Cache-Control, ETag, Backoff, Content-Type, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 27 Feb 2023 04:12:25 GMT
age: 2281
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 85cbb48f071581b644dd200623699bd6
0c9d7c3ca38562a97a4a6af3fb96f68982027594
d83caa4c6791e3b475a8ae8c255b84dc0bf0a8d06b65e5e6195af4f66e47eb86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D83CAA4C6791E3B475A8AE8C255B84DC0BF0A8D06B65E5E6195AF4F66E47EB86"
Last-Modified: Sat, 25 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14890
Expires: Mon, 27 Feb 2023 08:58:36 GMT
Date: Mon, 27 Feb 2023 04:50:26 GMT
Connection: keep-alive
push.services.mozilla.com/
54.149.219.22101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.149.219.22:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: W547kc7eIhYJ3AGAlgKuSQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: APePPMOOdlDYZ5kVHhcnBlEP1Cs=
email.mycloudemail.co.uk/
45.8.227.100200 OK 2.3 kB URL HTTP/2 email.mycloudemail.co.uk/
IP 45.8.227.100:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (823)
Hash f8f43fd1b3a6ed89592f2fe6e950a95d
84c85423ec44dbe8f980cf8a4c6594329ef37b63
54b7f53bede5122d12a7c3fdc9fcd0a158a6240f97edc70da1754e5712e24d43
Analyzer Verdict Alert openphish Webmail Providers
fortinet Phishing
GET / HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 27 Feb 2023 04:50:25 GMT
server: Apache
x-powered-by: PHP/7.0.33
expires: Mon, 27 Feb 2023 04:50:26 GMT
cache-control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
content-language: en
set-cookie: roundcube_sessid=a6posme3agl6jjgjmf2gbee115; path=/; secure; HttpOnly
last-modified: Mon, 27 Feb 2023 04:50:26 GMT
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
x-frame-options: sameorigin, SAMEORIGIN
x-content-type-options: nosniff
content-length: 2285
content-type: text/html; charset=UTF-8
x-via: LHR1
X-Firefox-Spdy: h2
email.mycloudemail.co.uk/skins/elastic/styles/styles.min.css?s=1656275218
45.8.227.100200 OK 24 kB URL HTTP/2 email.mycloudemail.co.uk/skins/elastic/styles/styles.min.css?s=1656275218
IP 45.8.227.100:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4ad0946c83db9a07644de49c394e9597
3da61aaff05515ff5bd2ddf5a2ce25a94971c78b
a5a353acec0160dba894212f5ce6342379291daaf0f9217681eb05897ea6e7ee
Analyzer Verdict Alert openphish Webmail Providers
fortinet Phishing
GET /skins/elastic/styles/styles.min.css?s=1656275218 HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.mycloudemail.co.uk/
Cookie: roundcube_sessid=a6posme3agl6jjgjmf2gbee115
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Feb 2023 04:50:26 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 20:26:58 GMT
etag: "1d320-5e25fa004e880-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 29 Mar 2023 04:50:26 GMT
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-length: 23866
content-type: text/css
x-via: LHR1
X-Firefox-Spdy: h2
email.mycloudemail.co.uk/program/js/common.min.js?s=1656275218
45.8.227.100200 OK 5.0 kB URL HTTP/2 email.mycloudemail.co.uk/program/js/common.min.js?s=1656275218
IP 45.8.227.100:0
File type ASCII text, with very long lines (11625)
Hash 25839bcd34cac11fc4b24b3c16922f37
022d63c464012cf2d03ec04e0053891ef451382b
1405f5b824fcc56d7b331f98c87324db5e38fc6dd03007cccbd45c9ccc1f4bc3
Analyzer Verdict Alert openphish Webmail Providers
fortinet Phishing
GET /program/js/common.min.js?s=1656275218 HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.mycloudemail.co.uk/
Cookie: roundcube_sessid=a6posme3agl6jjgjmf2gbee115
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Feb 2023 04:50:26 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 20:26:58 GMT
etag: "31d9-5e25fa004e880-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 29 Mar 2023 04:50:26 GMT
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-length: 4960
content-type: application/javascript
x-via: LHR1
X-Firefox-Spdy: h2
email.mycloudemail.co.uk/plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1656275217
45.8.227.100200 OK 7.7 kB URL HTTP/2 email.mycloudemail.co.uk/plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1656275217
IP 45.8.227.100:0
File type ASCII text, with very long lines (26514)
Hash d50ee624ebaf05ea514fe90bd2a10e22
08ae1a8a67ef390026d078422626bbd8ced17e87
185064791a81f86dc42d0a725ffa803f5eb6c710e77f0d22755c4094455d6f2a
GET /plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1656275217 HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.mycloudemail.co.uk/
Cookie: roundcube_sessid=a6posme3agl6jjgjmf2gbee115
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Feb 2023 04:50:26 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 20:26:57 GMT
etag: "730c-5e25f9ff5a640-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 29 Mar 2023 04:50:26 GMT
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-length: 7696
content-type: text/css
x-via: LHR1
X-Firefox-Spdy: h2
email.mycloudemail.co.uk/program/js/jquery.min.js?s=1656275221
45.8.227.100200 OK 33 kB URL HTTP/2 email.mycloudemail.co.uk/program/js/jquery.min.js?s=1656275221
IP 45.8.227.100:0
File type ASCII text, with very long lines (64001)
Hash 93652b3f089dddcbd879491453adf65c
bfc8c838fc12be4d3375d56f473d3d559bfbdaf4
79eb1882870e83f0226c587ec5f04c74c9b5e705ebd9d536d193954117e0f5e5
Analyzer Verdict Alert openphish Webmail Providers
fortinet Phishing
GET /program/js/jquery.min.js?s=1656275221 HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.mycloudemail.co.uk/
Cookie: roundcube_sessid=a6posme3agl6jjgjmf2gbee115
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Feb 2023 04:50:26 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 20:27:01 GMT
etag: "1632e-5e25fa032af40-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 29 Mar 2023 04:50:26 GMT
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-length: 32861
content-type: application/javascript
x-via: LHR1
X-Firefox-Spdy: h2
email.mycloudemail.co.uk/skins/elastic/images/logo.svg?s=1656275218
45.8.227.100200 OK 397 B URL HTTP/2 email.mycloudemail.co.uk/skins/elastic/images/logo.svg?s=1656275218
IP 45.8.227.100:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash 7812717105e1a9aaae73203f3b5afb9d
00c9c9a72b47703f06aec2254eba77104cf92f8c
164941f16b0ca6acb94525efd66ed57d727661a4edbc6ccf039dccfbffd186bb
Analyzer Verdict Alert openphish Webmail Providers
fortinet Phishing
GET /skins/elastic/images/logo.svg?s=1656275218 HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.mycloudemail.co.uk/
Cookie: roundcube_sessid=a6posme3agl6jjgjmf2gbee115
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Feb 2023 04:50:26 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 20:26:58 GMT
etag: "378-5e25fa004e880-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 29 Mar 2023 04:50:26 GMT
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-length: 397
content-type: image/svg+xml
x-via: LHR1
X-Firefox-Spdy: h2
email.mycloudemail.co.uk/program/js/jstz.min.js?s=1656275222
45.8.227.100200 OK 5.1 kB URL HTTP/2 email.mycloudemail.co.uk/program/js/jstz.min.js?s=1656275222
IP 45.8.227.100:0
File type ASCII text, with very long lines (12309)
Hash 9be472b6e4f2605904925e186873e35f
cf3918c1c63882ca4dc646a82997b5186c0b00cb
ee2d2e005d31761b39188d06c388558b69d56af5343e0c4c1c90ba50fb9e7570
GET /program/js/jstz.min.js?s=1656275222 HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.mycloudemail.co.uk/
Cookie: roundcube_sessid=a6posme3agl6jjgjmf2gbee115
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Feb 2023 04:50:26 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 20:27:02 GMT
etag: "360b-5e25fa041f180-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 29 Mar 2023 04:50:26 GMT
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-length: 5140
content-type: application/javascript
x-via: LHR1
X-Firefox-Spdy: h2
email.mycloudemail.co.uk/skins/elastic/deps/bootstrap.bundle.min.js?s=1656275233
45.8.227.100200 OK 23 kB URL HTTP/2 email.mycloudemail.co.uk/skins/elastic/deps/bootstrap.bundle.min.js?s=1656275233
IP 45.8.227.100:0
File type ASCII text, with very long lines (65299)
Hash fed2d5cf0ccb8102ec8210c3512cc834
99645dc280d642cb77589b0c3331a2e3b39dd39b
3f4d3e59c778a3dec4384bd6cdf51924817e8308b9bed773fae0f32e50cfc6be
Analyzer Verdict Alert openphish Webmail Providers
fortinet Phishing
GET /skins/elastic/deps/bootstrap.bundle.min.js?s=1656275233 HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.mycloudemail.co.uk/
Cookie: roundcube_sessid=a6posme3agl6jjgjmf2gbee115
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Feb 2023 04:50:26 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 20:27:13 GMT
etag: "14888-5e25fa0e9ca40-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 29 Mar 2023 04:50:26 GMT
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-length: 23047
content-type: application/javascript
x-via: LHR1
X-Firefox-Spdy: h2
email.mycloudemail.co.uk/skins/elastic/deps/bootstrap.min.css?s=1656275233
45.8.227.100200 OK 26 kB URL HTTP/2 email.mycloudemail.co.uk/skins/elastic/deps/bootstrap.min.css?s=1656275233
IP 45.8.227.100:0
File type ASCII text, with very long lines (65326)
Hash 2a23e65ce5a02ad34d6df913a6356577
a560415f927aa5fd65ec9be4c90501276761bb53
278aa5ad79a74c19754999f19b094da1a5aea71fe3c8560d9d551b9493ec2431
Analyzer Verdict Alert openphish Webmail Providers
fortinet Phishing
GET /skins/elastic/deps/bootstrap.min.css?s=1656275233 HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.mycloudemail.co.uk/
Cookie: roundcube_sessid=a6posme3agl6jjgjmf2gbee115
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Feb 2023 04:50:26 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 20:27:13 GMT
etag: "2725b-5e25fa0e9ca40-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 29 Mar 2023 04:50:26 GMT
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-length: 25872
content-type: text/css
x-via: LHR1
X-Firefox-Spdy: h2
email.mycloudemail.co.uk/program/js/app.min.js?s=1656275218
45.8.227.100200 OK 51 kB URL HTTP/2 email.mycloudemail.co.uk/program/js/app.min.js?s=1656275218
IP 45.8.227.100:0
File type ASCII text, with very long lines (64152)
Hash e6a76d911f43f40efdcd3af5154c6995
73a5c53fb2eae69e01661b7b86ce89b4667db744
6540bd0bb17704ce8ce8c2da258b5b5fab9c73fc2da53544bdd1b42939f0f16c
Analyzer Verdict Alert openphish Webmail Providers
fortinet Phishing
GET /program/js/app.min.js?s=1656275218 HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.mycloudemail.co.uk/
Cookie: roundcube_sessid=a6posme3agl6jjgjmf2gbee115
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Feb 2023 04:50:26 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 20:26:58 GMT
etag: "2a921-5e25fa004e880-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 29 Mar 2023 04:50:26 GMT
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-length: 51395
content-type: application/javascript
x-via: LHR1
X-Firefox-Spdy: h2
email.mycloudemail.co.uk/skins/elastic/ui.min.js?s=1656275218
45.8.227.100200 OK 20 kB URL HTTP/2 email.mycloudemail.co.uk/skins/elastic/ui.min.js?s=1656275218
IP 45.8.227.100:0
File type ASCII text, with very long lines (60466)
Hash 252cc85d311c89cffad95d7d2a89ddc7
281fd351406e52cc8492638c339677b06578e787
8898a5e0f7d9af6370b8baec2c9dac4c267b45da8d0b7bde4444665836802ec8
Analyzer Verdict Alert openphish Webmail Providers
fortinet Phishing
GET /skins/elastic/ui.min.js?s=1656275218 HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.mycloudemail.co.uk/
Cookie: roundcube_sessid=a6posme3agl6jjgjmf2gbee115
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Feb 2023 04:50:26 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 20:26:58 GMT
etag: "ee19-5e25fa004e880-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 29 Mar 2023 04:50:26 GMT
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-length: 20326
content-type: application/javascript
x-via: LHR1
X-Firefox-Spdy: h2
email.mycloudemail.co.uk/skins/elastic/fonts/roboto-v19-regular.woff2
45.8.227.100200 OK 51 kB URL HTTP/2 email.mycloudemail.co.uk/skins/elastic/fonts/roboto-v19-regular.woff2
IP 45.8.227.100:0
File type Web Open Font Format (Version 2), TrueType, length 51116, version 1.0\012- data
Hash 9549360090baf2eb8b25d3a9708fc19d
3229ae839d33696d39c89dc0d3e193fe985f1da4
a7bf1f115e60e0c8f3b335df66d4d77baaae4eb11d2cea2cf7c5b4693403a46f
Analyzer Verdict Alert openphish Webmail Providers
fortinet Phishing
GET /skins/elastic/fonts/roboto-v19-regular.woff2 HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://email.mycloudemail.co.uk/skins/elastic/styles/styles.min.css?s=1656275218
Cookie: roundcube_sessid=a6posme3agl6jjgjmf2gbee115
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Feb 2023 04:50:26 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 20:26:58 GMT
etag: "c7ac-5e25fa004e880"
accept-ranges: bytes
content-length: 51116
cache-control: max-age=2592000
expires: Wed, 29 Mar 2023 04:50:26 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-type: font/woff2
x-via: LHR1
X-Firefox-Spdy: h2
email.mycloudemail.co.uk/skins/elastic/fonts/fa-solid-900.woff2
45.8.227.100200 OK 75 kB URL HTTP/2 email.mycloudemail.co.uk/skins/elastic/fonts/fa-solid-900.woff2
IP 45.8.227.100:0
File type Web Open Font Format (Version 2), TrueType, length 75440, version 329.-1049\012- data
Hash b5cf8ae26748570d8fb95a47f46b69e1
07bed153d47f9129a944ee54dd72952deed074c8
cd398be1a91817126cef10224738e624358edf6f08043abad7e60c1aaeccc8d0
Analyzer Verdict Alert openphish Webmail Providers
fortinet Phishing
GET /skins/elastic/fonts/fa-solid-900.woff2 HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://email.mycloudemail.co.uk/skins/elastic/styles/styles.min.css?s=1656275218
Cookie: roundcube_sessid=a6posme3agl6jjgjmf2gbee115
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Feb 2023 04:50:27 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 20:26:58 GMT
etag: "126b0-5e25fa004e880"
accept-ranges: bytes
content-length: 75440
cache-control: max-age=2592000
expires: Wed, 29 Mar 2023 04:50:27 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-type: font/woff2
x-via: LHR1
X-Firefox-Spdy: h2
email.mycloudemail.co.uk/skins/elastic/images/favicon.ico?s=1656275218
45.8.227.100200 OK 1.9 kB URL HTTP/2 email.mycloudemail.co.uk/skins/elastic/images/favicon.ico?s=1656275218
IP 45.8.227.100:0
File type MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel\012- data
Hash eced943c758a1bcde4f1efd2b14a32df
598279420b4a095f1c0d5689ac833635eee540ab
2f2c41b1b1de1af13333dfbbe37c3a2d02478cfc85ad08f18e32f34c6a9fb3a3
Analyzer Verdict Alert openphish Webmail Providers
fortinet Phishing
GET /skins/elastic/images/favicon.ico?s=1656275218 HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.mycloudemail.co.uk/
Cookie: roundcube_sessid=a6posme3agl6jjgjmf2gbee115
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Feb 2023 04:50:27 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 20:26:58 GMT
etag: "423e-5e25fa004e880-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 29 Mar 2023 04:50:27 GMT
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-length: 1865
content-type: image/x-icon
x-via: LHR1
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 5d5cf3f527452c87e71b812f75d18aff
e5c41bc319d5831248d3b855ceedf0f9fcede64b
f6a19fa64c95712fdbcf654cc999a244f79fb0dc38b66745a08afad747f9e69c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6A19FA64C95712FDBCF654CC999A244F79FB0DC38B66745A08AFAD747F9E69C"
Last-Modified: Sat, 25 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6194
Expires: Mon, 27 Feb 2023 06:33:41 GMT
Date: Mon, 27 Feb 2023 04:50:27 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36bd1287-b32c-4603-9360-89332f5a1691.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36bd1287-b32c-4603-9360-89332f5a1691.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 98b2f7c8e759e559d28d0e2b15651bf5
dbe61e9ed7cd1f187a1b7cd24708b05c8c3b9e7e
c1d34f17f7642871ca63cb65d3fd7a33592b53e03c282ca60d9e22ecde5afdb9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36bd1287-b32c-4603-9360-89332f5a1691.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6868
x-amzn-requestid: cf613d6f-8c37-434c-b467-565409889ee9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A91zAE8zIAMFhog=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fbd012-5f358161034e44d50766c19d;Sampled=0
x-amzn-remapped-date: Sun, 26 Feb 2023 21:33:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: HjL7q58a3oDSGcYoniT_tEMLriVytaxA0jQG3hoRXVq0_L3ceYShpw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 f268a165a18929fd0a24a3189fbd16b2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Feb 2023 21:58:26 GMT
age: 24721
etag: "dbe61e9ed7cd1f187a1b7cd24708b05c8c3b9e7e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F100b72bc-6a18-4651-a45d-d82ec5dd0742.jpeg
34.120.237.76200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F100b72bc-6a18-4651-a45d-d82ec5dd0742.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91dba5f028b3625b4d7bc9065af42d4d
73bb9040fb33da6ff5b980381737869da15ffad8
da1fe71ba9524897f7a2261b0268c1565026b30fa73faa2b014677269df52151
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F100b72bc-6a18-4651-a45d-d82ec5dd0742.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6580
x-amzn-requestid: 07366fea-7e7f-43b5-becb-3216463b4b2b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A91yHGiqIAMFQlg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fbd00d-3728556d4e567595267ec437;Sampled=0
x-amzn-remapped-date: Sun, 26 Feb 2023 21:33:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: my-lWeAHqZIDHIZDbMCuwJTQfoYJsTM_Nz4D9Q_jY3wM6OKaIeHQxg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Feb 2023 21:52:37 GMT
age: 25070
etag: "73bb9040fb33da6ff5b980381737869da15ffad8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ccc54d-e372-4fdd-b8cd-4217795ead1f.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ccc54d-e372-4fdd-b8cd-4217795ead1f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bff52cab0d2539ca09f1816873d62647
c75b6c338e7e7b24c0b25a55e924d95d59dd78f5
1b16d898cc5635695fd4bcdd264704d00ce19335fd800dc394859f4b872b0741
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ccc54d-e372-4fdd-b8cd-4217795ead1f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6947
x-amzn-requestid: 81f3227a-2b63-4b63-af54-a33bff52c2ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A92f8F9ooAMFz9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fbd132-73b58965526d8b3e1994ede2;Sampled=0
x-amzn-remapped-date: Sun, 26 Feb 2023 21:37:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: SHicH1y0SbWwqM7-ycPJn5PD_Sw9-qEuxQTjwrgv5iifJYQ_B3YUzA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 28fdf6e146f70e7372911f118404fb20.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Feb 2023 21:54:50 GMT
age: 24937
etag: "c75b6c338e7e7b24c0b25a55e924d95d59dd78f5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97e8f2e-6da0-4f8b-b12c-1af676e3e4da.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97e8f2e-6da0-4f8b-b12c-1af676e3e4da.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a5f3d376fe6a3a78a5d1fe136f962fb
3e9b03cc296e954d63526a4e7e75beea3130fc3b
c8cf4f1c0352102764247e4dc5a2076921e0eaa18bfd110e5b0b97a55c706690
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97e8f2e-6da0-4f8b-b12c-1af676e3e4da.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9093
x-amzn-requestid: 3fd9f8c8-cf10-4222-a2cc-5f18ff7b2e9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Az9D3HqmoAMFeBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f7dbb2-352315613cc0c2bc7eb28e05;Sampled=0
x-amzn-remapped-date: Thu, 23 Feb 2023 21:33:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: S8s54RJtScNtsl6uEFtBEHnTj4lb3l5xIWR96Kvr_SdwQQQMgSKNxA==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Feb 2023 21:34:59 GMT
age: 26128
etag: "3e9b03cc296e954d63526a4e7e75beea3130fc3b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f848511-16a1-40b6-8328-88961afd6942.jpeg
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f848511-16a1-40b6-8328-88961afd6942.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9fb59bc08860229b9530034ca3e35a89
92643e7f6867c0003c5e7e0b8278e7fdaa4ebbd0
c948a4916cf20668884725d2b30fe5468b8330d59d2ca57acfdc027a6879a3ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f848511-16a1-40b6-8328-88961afd6942.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9280
x-amzn-requestid: 884b990c-c7fc-4faa-b61b-81d468970f7c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A92tGEwYIAMFbaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fbd186-0c5c7a5b1a54a8745f94c2e1;Sampled=0
x-amzn-remapped-date: Sun, 26 Feb 2023 21:39:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: tK_ud6zn76YAwpmXuEGgP-JSjokKTgpHNvi04OWVpTrT0G6OM_m3hA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 1d0860167e2100a6d1cd9c0213c2b8e8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Feb 2023 21:57:52 GMT
age: 24755
etag: "92643e7f6867c0003c5e7e0b8278e7fdaa4ebbd0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff926a496-cbe3-4604-85ed-4f1913eeee5c.jpeg
34.120.237.76200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff926a496-cbe3-4604-85ed-4f1913eeee5c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e4fb58a7087b0732741cfae504f7cac
459f1c019f7dca423a40e4ddc21d23611f216b7f
0f4ba3e55fb7bfe3214bba4e4b910941dbb12f9d14c5118efe11a9489943a61f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff926a496-cbe3-4604-85ed-4f1913eeee5c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9445
x-amzn-requestid: a5596ce6-f6f2-4594-94f9-2a70cc8020de
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A91yqEfloAMFk8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fbd010-448f22521a3e81886f1498de;Sampled=0
x-amzn-remapped-date: Sun, 26 Feb 2023 21:33:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: U6zHij_o5QY8e5dEwa07xw9HBSiedmVT4lXMDFb_TucZ9M-wTiY15w==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 82c2ab57bc9900898383f6b70681b9e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Feb 2023 21:57:23 GMT
age: 24784
etag: "459f1c019f7dca423a40e4ddc21d23611f216b7f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
email.mycloudemail.co.uk/plugins/jqueryui/js/jquery-ui.min.js?s=1656275217
45.8.227.100200 OK 0 B URL HTTP/2 email.mycloudemail.co.uk/plugins/jqueryui/js/jquery-ui.min.js?s=1656275217
IP 45.8.227.100:0
Analyzer Verdict Alert openphish Webmail Providers
fortinet Phishing
GET /plugins/jqueryui/js/jquery-ui.min.js?s=1656275217 HTTP/1.1
Host: email.mycloudemail.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://email.mycloudemail.co.uk/
Cookie: roundcube_sessid=a6posme3agl6jjgjmf2gbee115
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Feb 2023 04:50:26 GMT
server: Apache
last-modified: Sun, 26 Jun 2022 20:26:57 GMT
etag: "3f6c0-5e25f9ff5a640-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 29 Mar 2023 04:50:26 GMT
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-type: application/javascript
x-via: LHR1
X-Firefox-Spdy: h2