ocsp.pki.goog/gts1c3
142.250.74.67 472 B IP 142.250.74.67:0
Hash a3de2eea653e3a1ce91df4b363461541
2dc276faecea430b891e7b177b47cd6223e7a7f2
e911bd431713cfeccc8c8949a5e2a66f8f703ef86e62ac95b597cca8a2ce80d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 03 Oct 2023 13:07:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com.pe/amp/s/backend.athathy.ae/static/media/myuysess/amFyZWRtaWxsZXJAb2R5c3NleWxvZ2lzdGljcy5jb20=
172.217.21.163302 Found 290 B URL User Request GET HTTP/2 www.google.com.pe/amp/s/backend.athathy.ae/static/media/myuysess/amFyZWRtaWxsZXJAb2R5c3NleWxvZ2lzdGljcy5jb20=
IP 172.217.21.163:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com.pe
Fingerprint7E:BA:01:94:99:BE:96:0B:0F:16:54:03:F2:10:CC:15:16:39:FA:F3
ValidityMon, 04 Sep 2023 08:24:59 GMT - Mon, 27 Nov 2023 08:24:58 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 12556504538a8c346d3bae84c9181f03
f498c4e7193d8455b0c9057614e399e0755dfb8d
11d6ec71883930b5b04aa05ed026dd6a19e129b6053e6b27dac56cf544290075
GET /amp/s/backend.athathy.ae/static/media/myuysess/amFyZWRtaWxsZXJAb2R5c3NleWxvZ2lzdGljcy5jb20= HTTP/1.1
Host: www.google.com.pe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://backend.athathy.ae/static/media/myuysess/amFyZWRtaWxsZXJAb2R5c3NleWxvZ2lzdGljcy5jb20=
cache-control: private
x-robots-tag: noindex
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-FKD68X3jwbhzKPFYlxd5Xw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/fff"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Tue, 03 Oct 2023 13:07:56 GMT
server: gws
content-length: 290
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: __Secure-ENID=15.SE=CNT1sGl_sJhb8YEF_gvMLxnA036_AgV9aAesMXZcrUqCSNpawOSAsETPFVoLoMfW5FyCt2tQj-mIKRv_qvoUJsKDw_QtqOROm5xdzX-p2TG3qumvn5oV4yapFBSVOfkWl1nokCR6Q4q0bimjIBeqsR9krAGJsCbyh7Deg3WnK0w; expires=Sat, 02-Nov-2024 05:26:14 GMT; path=/; domain=.google.com.pe; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+449; expires=Thu, 02-Oct-2025 13:07:56 GMT; path=/; domain=.google.com.pe; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.67 472 B IP 142.250.74.67:0
Hash a3de2eea653e3a1ce91df4b363461541
2dc276faecea430b891e7b177b47cd6223e7a7f2
e911bd431713cfeccc8c8949a5e2a66f8f703ef86e62ac95b597cca8a2ce80d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 03 Oct 2023 13:07:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
aufeingespraech.de/favicon.ico
104.21.79.2403 Forbidden 5.6 kB URL GET HTTP/3 aufeingespraech.de/favicon.ico
IP 104.21.79.2:443
Requested by https://aufeingespraech.de/Mjaredmiller@odysseylogistics.com
Certificate IssuerLet's Encrypt
Subjectaufeingespraech.de
FingerprintE6:F1:6E:29:88:E9:FE:8B:A8:8F:39:53:12:F8:7A:47:16:9F:79:65
ValidityThu, 24 Aug 2023 10:03:14 GMT - Wed, 22 Nov 2023 10:03:13 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5669), with no line terminators
Hash 605d1f60b2c1cf61304db8c65cff87f6
33e71253c819edfc9203428cd464e60148e0451c
46014ab53509fa7ae8cf8c2bf4d1b82c0e4feb9a0e5edd98388c23c583e0f0b2
GET /favicon.ico HTTP/1.1
Host: aufeingespraech.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aufeingespraech.de/Mjaredmiller@odysseylogistics.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Tue, 03 Oct 2023 13:07:58 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ryc%2F23r7E%2Fd%2Br5lZP6G90eo7yeLod2WWD%2B00nZ3vXGmn2RXovVYNye7XqrHV0fA02p5ANr%2BpFg2uvtLopOQVmrInVkQMZ4ygrXnxkqLSVT3ycbGAfInPZTTZR7eQyayfFpRzujE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81056942dd6cb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aufeingespraech.de/cdn-cgi/challenge-platform/h/g/flow/ov1/973352701:1696334875:3mzMbDGNfK6G-4QtWvOqNwkv_SGL6IJPLd1mEcN0H3g/8105693fb91f569d/851e00e17b203f1
104.21.79.2200 OK 11 kB URL POST HTTP/3 aufeingespraech.de/cdn-cgi/challenge-platform/h/g/flow/ov1/973352701:1696334875:3mzMbDGNfK6G-4QtWvOqNwkv_SGL6IJPLd1mEcN0H3g/8105693fb91f569d/851e00e17b203f1
IP 104.21.79.2:443
Requested by https://aufeingespraech.de/Mjaredmiller@odysseylogistics.com
Certificate IssuerLet's Encrypt
Subjectaufeingespraech.de
FingerprintE6:F1:6E:29:88:E9:FE:8B:A8:8F:39:53:12:F8:7A:47:16:9F:79:65
ValidityThu, 24 Aug 2023 10:03:14 GMT - Wed, 22 Nov 2023 10:03:13 GMT
File type ASCII text, with very long lines (10988), with no line terminators
Hash 477e844c1eceac61d4d40c3d018a261e
d1da556e6016f8dfb8f95219a2d9cd947571225a
6c652cf7999b48c238fc6e452d2a89376dfd3f60fc7dfee5b6253adae989bd79
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/973352701:1696334875:3mzMbDGNfK6G-4QtWvOqNwkv_SGL6IJPLd1mEcN0H3g/8105693fb91f569d/851e00e17b203f1 HTTP/1.1
Host: aufeingespraech.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aufeingespraech.de/Mjaredmiller@odysseylogistics.com
Content-type: application/x-www-form-urlencoded
CF-Challenge: 851e00e17b203f1
Content-Length: 1827
Origin: https://aufeingespraech.de
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Oct 2023 13:07:58 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: kTh6i0RXJ/tHIdOHpmYbXn7fibOU8gINJshp1hzJQRg08gfzkmBxxLAKVGMa1UUz$+W6V0Kqvs814z490O6Agbw==
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lJu%2BqzcYrg%2BH1Z6S9iVcKuEAvSSOUi9Cdp7cN8GDwLdxEn13masdFcS6ep7%2BCRcMeekA8YZKEmdBwbQoh5ocOBr5ZStUIFc1xkq%2Bcqn3rq2zLABH52IeM36nRQnyuDjR1xGxG10%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 810569440eb0b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aufeingespraech.de/cdn-cgi/challenge-platform/h/g/flow/ov1/973352701:1696334875:3mzMbDGNfK6G-4QtWvOqNwkv_SGL6IJPLd1mEcN0H3g/8105693fb91f569d/851e00e17b203f1
104.21.79.2200 OK 3.3 kB URL POST HTTP/3 aufeingespraech.de/cdn-cgi/challenge-platform/h/g/flow/ov1/973352701:1696334875:3mzMbDGNfK6G-4QtWvOqNwkv_SGL6IJPLd1mEcN0H3g/8105693fb91f569d/851e00e17b203f1
IP 104.21.79.2:443
Requested by https://aufeingespraech.de/Mjaredmiller@odysseylogistics.com
Certificate IssuerLet's Encrypt
Subjectaufeingespraech.de
FingerprintE6:F1:6E:29:88:E9:FE:8B:A8:8F:39:53:12:F8:7A:47:16:9F:79:65
ValidityThu, 24 Aug 2023 10:03:14 GMT - Wed, 22 Nov 2023 10:03:13 GMT
File type ASCII text, with very long lines (3280), with no line terminators
Hash 92ca2b6a00ade7c312e50dee3e648732
c4d9d8d09942200d51a5e0d33e93c0dcafdcccbc
694fe89093ee1540ec11b76c48dd4ec3361d455ed4500ea35804d67cfbb7526a
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/973352701:1696334875:3mzMbDGNfK6G-4QtWvOqNwkv_SGL6IJPLd1mEcN0H3g/8105693fb91f569d/851e00e17b203f1 HTTP/1.1
Host: aufeingespraech.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aufeingespraech.de/Mjaredmiller@odysseylogistics.com
Content-type: application/x-www-form-urlencoded
CF-Challenge: 851e00e17b203f1
Content-Length: 3193
Origin: https://aufeingespraech.de
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 03 Oct 2023 13:08:02 GMT
content-type: text/html; charset=UTF-8
set-cookie: cf_chl_rc_m=;Expires=Mon, 02 Oct 2023 13:08:02 GMT;SameSite=Strict
cf-chl-out: x5mjsxpqOVgpKcmjSz2DeD/0YMHgu6lJ4ndRkkHhhPxKivHOTsun4drQa9b2Ui/uuwCX5On8MWUzStbQqA6duQ==$KvGv72lLOeQmZrYbM30KkQ==
cf-chl-out-s: RpafteTu8eBc5ocLxPfB5Y1ewylkRZT3dBI8ZX6H/79BWhlDEOH+mkYI44UQMcVsJk9T/nq0wbpSzPTt0mCIVrEkIirS/oARUyZq+aN1oTd9dQKQO5HOdeORq6bKs7zcUB4675Ef0/wghDDyvPp8iRJmVKTnzRp5aXUv6kh5fFM=$N3EW2zJpTRGqnze09X3N6A==
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zqAMJ9R4GBfokLKo46WrIP6tdcqNtDdwqC9iGg248HF6IQ7OrxrLCxP6cVluODddxMSjSsU9OTKPpy6z1%2BRKPJzngvgURqURtaafgBSHSR8%2BNIC1ZX7wpKKk6gwirt6%2Bysmu7ag%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8105695e1d41b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aufeingespraech.de/Mjaredmiller@odysseylogistics.com
104.21.79.2302 Found 6.7 kB URL User Request POST HTTP/3 aufeingespraech.de/Mjaredmiller@odysseylogistics.com
IP 104.21.79.2:443
Certificate IssuerLet's Encrypt
Subjectaufeingespraech.de
FingerprintE6:F1:6E:29:88:E9:FE:8B:A8:8F:39:53:12:F8:7A:47:16:9F:79:65
ValidityThu, 24 Aug 2023 10:03:14 GMT - Wed, 22 Nov 2023 10:03:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
POST /Mjaredmiller@odysseylogistics.com HTTP/1.1
Host: aufeingespraech.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aufeingespraech.de/Mjaredmiller@odysseylogistics.com?__cf_chl_tk=5aO4OMvXoTzrrltGZVbDf5BZMPEI41RlMxZ1DI0YXOk-1696338478-0-gaNycGzNDbs
Content-Type: application/x-www-form-urlencoded
Content-Length: 3916
Origin: https://aufeingespraech.de
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Tue, 03 Oct 2023 13:08:03 GMT
content-type: text/html; charset=UTF-8
location: ./beebb091955c06fa68b3eb8afc0bae51651c1233710baPASbeebb091955c06fa68b3eb8afc0bae51651c1233710bb
set-cookie: cf_clearance=TNmqHzkW9p7DGKz6OW74V1f3CBTAIyouPl2Ky8ntbOM-1696338478-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; path=/; expires=Wed, 02-Oct-24 13:08:03 GMT; domain=.aufeingespraech.de; HttpOnly; Secure; SameSite=None
PHPSESSID=731b686f833af0c03e7f730e7973c62f; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VKzU5aIoq1Q4dg9B%2F4zsuCrCCDodU4HvZCxjckIVxD4cdTEB88IAqL62jDGo9VzWRnrFLBVQ%2FB8f7hjom7oJXQVxDvH8CLdcV5cZaID7mluElQQpsEunHOFm7QdCLDFPW91x3R8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8105695f0e86b515-OSL
alt-svc: h3=":443"; ma=86400
aufeingespraech.de/jq/b8225a150d3e49745fd4b7963c968563651c12337f3f0
0.0.0.0 0 B URL GET aufeingespraech.de/jq/b8225a150d3e49745fd4b7963c968563651c12337f3f0
IP 0.0.0.0:0
Requested by https://aufeingespraech.de/beebb091955c06fa68b3eb8afc0bae51651c1233710baPASbeebb091955c06fa68b3eb8afc0bae51651c1233710bb
Certificate IssuerLet's Encrypt
Subjectaufeingespraech.de
FingerprintE6:F1:6E:29:88:E9:FE:8B:A8:8F:39:53:12:F8:7A:47:16:9F:79:65
ValidityThu, 24 Aug 2023 10:03:14 GMT - Wed, 22 Nov 2023 10:03:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jq/b8225a150d3e49745fd4b7963c968563651c12337f3f0 HTTP/1.1
Host: aufeingespraech.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aufeingespraech.de/beebb091955c06fa68b3eb8afc0bae51651c1233710baPASbeebb091955c06fa68b3eb8afc0bae51651c1233710bb
Cookie: cf_clearance=TNmqHzkW9p7DGKz6OW74V1f3CBTAIyouPl2Ky8ntbOM-1696338478-0-1-69b0ef05.c399f377.3eb1b0e5-160.0.0; PHPSESSID=731b686f833af0c03e7f730e7973c62f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
aufeingespraech.de/Mjaredmiller@odysseylogistics.com
104.21.79.2403 Forbidden 6.7 kB URL User Request GET HTTP/2 aufeingespraech.de/Mjaredmiller@odysseylogistics.com
IP 104.21.79.2:443
Certificate IssuerLet's Encrypt
Subjectaufeingespraech.de
FingerprintE6:F1:6E:29:88:E9:FE:8B:A8:8F:39:53:12:F8:7A:47:16:9F:79:65
ValidityThu, 24 Aug 2023 10:03:14 GMT - Wed, 22 Nov 2023 10:03:13 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6787), with no line terminators
Hash 4ec7840481a3086d78ee103f82d93437
3911e19e8b87e29f38e84a6d72466dbd7fc025bf
bd91f5c54edfb3fdc71854211eddbf7a275a0051c540f647fe88384a3aca7ce4
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /Mjaredmiller@odysseylogistics.com HTTP/1.1
Host: aufeingespraech.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Tue, 03 Oct 2023 13:07:58 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nFaqLlk1I03FhO7%2FcLOlqiV%2BvPRel%2Bhs7MDUpCDkw6x5aG67bHxlBlmkocesDoJNlai6XysQVolZ4t5ktsWLSdnLJS9ctBIvmaZulVwqQI0z9%2FZ0EqfISSv7LAnHpaJ7C9cCX%2Fo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8105693fb91f569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
backend.athathy.ae/static/media/myuysess/amFyZWRtaWxsZXJAb2R5c3NleWxvZ2lzdGljcy5jb20=
172.67.194.190200 OK 0 B URL User Request GET HTTP/2 backend.athathy.ae/static/media/myuysess/amFyZWRtaWxsZXJAb2R5c3NleWxvZ2lzdGljcy5jb20=
IP 172.67.194.190:443
Certificate IssuerGoogle Trust Services LLC
Subjectathathy.ae
Fingerprint6A:39:36:AB:EA:19:5A:31:C3:92:FB:AB:8C:05:03:2A:17:63:30:46
ValidityWed, 13 Sep 2023 05:52:37 GMT - Tue, 12 Dec 2023 05:52:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft Outlook
GET /static/media/myuysess/amFyZWRtaWxsZXJAb2R5c3NleWxvZ2lzdGljcy5jb20= HTTP/1.1
Host: backend.athathy.ae
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 03 Oct 2023 13:07:57 GMT
content-type: text/html; charset=UTF-8
refresh: 0;url=https://aufeingespraech.de/Mjaredmiller@odysseylogistics.com
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YBu4ZtVUXgyLDp1NVC9s6kMwJMxDPKnUht1dsOIpJdcsEZ2QKCYj%2F9gzpEEslHKab1Zw4lg9kxT%2FoDX1SJrf5C5sAPFMZRvEAbkxqXVQtp%2BFyPTwo1t9XZWTR%2FPwW1Qxk0UrfA4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 810569387d0c56cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2