Report - lesliedavis.net/js.php

Report Overview

Submitted URL
lesliedavis.net/js.php
IP
204.44.192.75
ASN
#23273 HOSTP-LA
Submitted
2022-09-02 09:51:18
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
22

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.3 kB	3.5 kB	23.36.76.226
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	356 B	1.0 kB	216.58.211.10
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	329 B	737 B	93.184.220.29
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	411 B	11 kB	142.250.74.163
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	44.242.3.166
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	61 kB	34.120.237.76
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.115
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	143.204.55.25
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
lesliedavis.net	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	5.0 kB	145 kB	204.44.192.75

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-02	medium	lesliedavis.net/js.php	Phishing
2022-09-02	medium	lesliedavis.net/js.php/	Phishing
2022-09-02	medium	lesliedavis.net/wp-content/themes/songwriter/style.css?ver=a550c5bdec0953107641d0572fee1afa	Phishing
2022-09-02	medium	lesliedavis.net/wp-content/themes/songwriter/css/elegantfont.css?ver=a550c5bdec0953107641d0572fee1afa	Phishing
2022-09-02	medium	lesliedavis.net/wp-content/themes/songwriter/js/menubox.js?ver=1.0	Phishing
2022-09-02	medium	lesliedavis.net/wp-content/themes/songwriter/js/placeholders.js?ver=3.0.2	Phishing
2022-09-02	medium	lesliedavis.net/wp-content/themes/songwriter/js/responsive.js?ver=1.0	Phishing
2022-09-02	medium	lesliedavis.net/wp-content/themes/songwriter/js/selectnav.js?ver=0.1	Phishing
2022-09-02	medium	lesliedavis.net/wp-includes/js/wp-embed.min.js?ver=a550c5bdec0953107641d0572fee1afa	Phishing
2022-09-02	medium	lesliedavis.net/wp-content/themes/songwriter/js/scroll-to-top.js?ver=1.0	Phishing
2022-09-02	medium	lesliedavis.net/wp-content/themes/songwriter/css/fonts/ElegantIcons.woff	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	lesliedavis.net/js.php/	2.1 kB	2023-03-07	2023-03-07
Pretty URL lesliedavis.net/js.php/ IP 204.44.192.75 ASN #23273 HOSTP-LA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09:06 Last Seen2023-03-07 12:09:06 Times Seen1 Hash 5315cf25c25c11a5028d99e703cba339 2203184d374d317588ffad1c0aaadbd7b3a2562a e7015760366f5543e25ab50d8da69f6b18cf035fc8f575b71800d8ef5c00f43d Loading...

	lesliedavis.net/wp-includes/js/jquery/jquery.js?ver=1.12.4	97 kB	2023-03-07	2024-04-23
Pretty URL lesliedavis.net/wp-includes/js/jquery/jquery.js?ver=1.12.4 IP 204.44.192.75 ASN #23273 HOSTP-LA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:45 Last Seen2024-04-23 05:14:55 Times Seen10190 Hash dc5ba5044fccc0297be7b262ce669a7c f137ff98ae379e35b0702967d3b6866a0a40e3be cf34e1b87bbfd9d9b185dec994924a496e279d8dc9387ad8d35bc0110134c4d3 Loading...

	lesliedavis.net/js.php/	1.3 kB	2023-03-07	2023-03-07
Pretty URL lesliedavis.net/js.php/ IP 204.44.192.75 ASN #23273 HOSTP-LA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09:06 Last Seen2023-03-07 12:09:06 Times Seen1 Hash 01156f5fb6430f6fc7679a8fe882c661 25626941b133af7586f9a0658ca79104509daef5 289e560b19be41f5acba3a73d4f75ecbb667bb8abe2b36b5f12a4976adcffc6b Loading...

	lesliedavis.net/wp-content/themes/songwriter/js/selectnav.js?ver=0.1	3.7 kB	2023-03-07	2023-12-30
Pretty URL lesliedavis.net/wp-content/themes/songwriter/js/selectnav.js?ver=0.1 IP 204.44.192.75 ASN #23273 HOSTP-LA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:41:30 Last Seen2023-12-30 23:43:21 Times Seen63 Hash 4ac691a8750166ef39610b0ca9c244a5 de77738a45f5f1a510a326af6ffba7e12995071f d24943e348d272c8652cc0bf7aee31d381e3bb64b7ec68aa5c45be32fde3215d Loading...

	lesliedavis.net/wp-content/themes/songwriter/js/responsive.js?ver=1.0	43 B	2023-03-07	2023-12-30
Pretty URL lesliedavis.net/wp-content/themes/songwriter/js/responsive.js?ver=1.0 IP 204.44.192.75 ASN #23273 HOSTP-LA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09:06 Last Seen2023-12-30 23:43:22 Times Seen43 Hash 06678f7eb22be545dde595fa143d207f 326b0380d34ca67edc320d54f3700fca3efb36ee fe1eb7ba320b88ace34d2ef072b793549eddf277148fc893121cbdb348ac4390 Loading...

	lesliedavis.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1	10 kB	2023-03-07	2024-04-24
Pretty URL lesliedavis.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 IP 204.44.192.75 ASN #23273 HOSTP-LA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:37 Last Seen2024-04-24 04:42:17 Times Seen37163 Hash 7121994eec5320fbe6586463bf9651c2 90532aff6d4121954254cdf04994d834f7ec169b 48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d Loading...

	lesliedavis.net/wp-content/themes/songwriter/js/placeholders.js?ver=3.0.2	4.3 kB	2023-03-07	2023-12-30
Pretty URL lesliedavis.net/wp-content/themes/songwriter/js/placeholders.js?ver=3.0.2 IP 204.44.192.75 ASN #23273 HOSTP-LA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:41:30 Last Seen2023-12-30 23:43:20 Times Seen64 Hash 2de263a6d5502b76cf5a212bd6658267 97a203236afee71d969d7f907cb5428b579835d5 c75160fe66803906a5e28e4a600138c685fc474cc70a132a578be319d9d50721 Loading...

	lesliedavis.net/wp-content/themes/songwriter/js/scroll-to-top.js?ver=1.0	530 B	2023-03-07	2023-12-30
Pretty URL lesliedavis.net/wp-content/themes/songwriter/js/scroll-to-top.js?ver=1.0 IP 204.44.192.75 ASN #23273 HOSTP-LA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09:06 Last Seen2023-12-30 23:43:20 Times Seen39 Hash eae31efb9f93614a3e12777ec3d6d6e6 659cc5293c26131c1b118c0503e132520f02bafb d35396db0aafc61792c9f5016e623ba1b232df98af921aa8436585965f292613 Loading...

	lesliedavis.net/wp-content/themes/songwriter/js/menubox.js?ver=1.0	327 B	2023-03-07	2023-12-30
Pretty URL lesliedavis.net/wp-content/themes/songwriter/js/menubox.js?ver=1.0 IP 204.44.192.75 ASN #23273 HOSTP-LA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09:06 Last Seen2023-12-30 23:43:21 Times Seen24 Hash b257bccbe969a7d9642769d1f753e9d6 f06f6810ba208c4d74694d30c68f57a4391c1927 93ee41f91c1803ea00aa478731d400f271614714c5e762ca7697d016ceb42bb2 Loading...

	lesliedavis.net/wp-includes/js/wp-embed.min.js?ver=a550c5bdec0953107641d0572fee1afa	1.4 kB	2023-03-07	2024-04-06
Pretty URL lesliedavis.net/wp-includes/js/wp-embed.min.js?ver=a550c5bdec0953107641d0572fee1afa IP 204.44.192.75 ASN #23273 HOSTP-LA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:32 Last Seen2024-04-06 23:49:07 Times Seen555 Hash 92c80d35c5362a549518e2b474d23ea1 2807bfdd0dac15e0784cc9eb74a90ac132c38f6d 57dd85466749e869c5958a2652e548673557a2390ec68490a353916353ecc74e Loading...

	lesliedavis.net/?wordfence_lh=1&hid=FFB589CEE5EE981DC16E6DD33F11AAB4&r=0.6606203762969243	0 B	2023-03-07	2024-04-24
Pretty URL lesliedavis.net/?wordfence_lh=1&hid=FFB589CEE5EE981DC16E6DD33F11AAB4&r=0.6606203762969243 IP 204.44.192.75 ASN #23273 HOSTP-LA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-24 09:15:41 Times Seen37035666 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (33)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

143.204.55.115

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 02 Sep 2022 09:41:43 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: yrmapA7aQUemXre2l69-AnK8W_tKrD6j3zzgZLp6-UIBCDNlZ6ccvw==
Age: 565

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain

143.204.55.25

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
143.204.55.25:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 02 Sep 2022 01:15:17 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: d_sEOwghUxsXrMcbOxPRpEEQUHJF0GFTDHSBXzArlf2-oCWcmImx0g==
age: 30951
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
bcdebf7a2bad5db595e8a0c1abb2ddcb
249dda2fa5e37b8a8f3a8c797193bf0874b6eedc
9b43ec48b16f96449208a0094c4d660806a2a2d344b5862dbff4c393bf3f9f9f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B43EC48B16F96449208A0094C4D660806A2A2D344B5862DBFF4C393BF3F9F9F"
Last-Modified: Thu, 01 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5190
Expires: Fri, 02 Sep 2022 11:17:38 GMT
Date: Fri, 02 Sep 2022 09:51:08 GMT
Connection: keep-alive

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 09:51:08 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

lesliedavis.net/js.php

204.44.192.75

301 Moved Permanently

0 B

URL HTTP/1.1
lesliedavis.net/js.php
IP
204.44.192.75:0
ASN
#23273 HOSTP-LA

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js.php HTTP/1.1
Host: lesliedavis.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Sep 2022 09:51:08 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: http://lesliedavis.net/js.php/
Vary: Accept-Encoding,User-Agent
Content-Length: 0
Keep-Alive: timeout=2, max=100
Content-Type: text/html; charset=UTF-8

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.115

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 02 Sep 2022 09:38:16 GMT
Cache-Control: max-age=3600
Expires: Fri, 02 Sep 2022 10:11:41 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mzKXdjkvrfFFVZAzWq84uFJt4jLg6F2z7lxo0M35eplRvrWJhU7z8A==
Age: 772

lesliedavis.net/js.php/

204.44.192.75

200 OK

7.3 kB

URL HTTP/1.1
lesliedavis.net/js.php/
IP
204.44.192.75:0
ASN
#23273 HOSTP-LA

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1724), with CRLF, LF line terminators
Size
7.3 kB (7255 bytes)
Hash
1c6ac162f66fe22c8205fb6e77bbcbe3
e57057623be269708964114bbe44a16445e9d74a
aeee0b6689cde28d18e31299a1b07b81515dc61849ba31075f7e7a1803ecac3e

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js.php/ HTTP/1.1
Host: lesliedavis.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 09:51:08 GMT
Server: Apache
Link: <http://lesliedavis.net/?rest_route=/>; rel="https://api.w.org/"
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7255
Keep-Alive: timeout=2, max=100
Content-Type: text/html; charset=UTF-8

fonts.googleapis.com/css?family=Oswald&subset=latin%2Clatin-ext&ver=a550c5bdec0953107641d0572fee1afa

216.58.211.10

200 OK

495 B

URL HTTP/1.1
fonts.googleapis.com/css?family=Oswald&subset=latin%2Clatin-ext&ver=a550c5bdec0953107641d0572fee1afa
IP
216.58.211.10:0
ASN
#15169 GOOGLE

File type
ASCII text
Size
495 B (495 bytes)
Hash
a4a32d3d207b2c021587e24e97d9a668
7eba49938cae3f0f1a7204f8ea5c1e24c21397df
2b5c3cdc80fd6a3c61185c1667e7a0fef0d1ce49066bafe2da8cdeba79301933

HTTP Headers

GET /css?family=Oswald&subset=latin%2Clatin-ext&ver=a550c5bdec0953107641d0572fee1afa HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lesliedavis.net/

HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 02 Sep 2022 09:51:08 GMT
Date: Fri, 02 Sep 2022 09:51:08 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
21daf45cdda2eb462873226bb5c1f0fb
4d4621bbf1461f35f7e536c1dbd9de71978ffa23
8164c742d013bdc2836cac1167acfe482547347ab6a1daefa15475f694dae057

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5476
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 09:51:08 GMT
Last-Modified: Fri, 02 Sep 2022 08:19:52 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

lesliedavis.net/wp-content/themes/songwriter/style.css?ver=a550c5bdec0953107641d0572fee1afa

204.44.192.75

200 OK

9.4 kB

URL HTTP/1.1
lesliedavis.net/wp-content/themes/songwriter/style.css?ver=a550c5bdec0953107641d0572fee1afa
IP
204.44.192.75:0
ASN
#23273 HOSTP-LA

File type
ASCII text, with very long lines (620), with CRLF line terminators
Size
9.4 kB (9380 bytes)
Hash
3be1ae178d724727b6c3dd257075923f
c3f86dc2896a3813ff2bd47c96d3e6de90dfe902
262cfca89620b417d8fe4b7348fcf7f5330324fa725edf1c63f7c0fcf9e43437

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-content/themes/songwriter/style.css?ver=a550c5bdec0953107641d0572fee1afa HTTP/1.1
Host: lesliedavis.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lesliedavis.net/js.php/

HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 09:51:08 GMT
Server: Apache
Last-Modified: Fri, 14 Oct 2016 20:32:14 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 9380
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/css

lesliedavis.net/wp-content/themes/songwriter/css/elegantfont.css?ver=a550c5bdec0953107641d0572fee1afa

204.44.192.75

200 OK

5.0 kB

URL HTTP/1.1
lesliedavis.net/wp-content/themes/songwriter/css/elegantfont.css?ver=a550c5bdec0953107641d0572fee1afa
IP
204.44.192.75:0
ASN
#23273 HOSTP-LA

File type
ASCII text, with very long lines (6610)
Size
5.0 kB (4995 bytes)
Hash
45732e9f1fd6d5e8ff50e10fcc11828b
f8db763d81b40d011278bece871fe45c9bd30b3a
d71e5e97ffb50b9b71437cacd76d286c0720e986bfd9f853a51ac5bc494eeb3f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-content/themes/songwriter/css/elegantfont.css?ver=a550c5bdec0953107641d0572fee1afa HTTP/1.1
Host: lesliedavis.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lesliedavis.net/js.php/

HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 09:51:08 GMT
Server: Apache
Last-Modified: Fri, 14 Oct 2016 20:32:14 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 4995
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/css

lesliedavis.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1

204.44.192.75

200 OK

4.8 kB

URL HTTP/1.1
lesliedavis.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
204.44.192.75:0
ASN
#23273 HOSTP-LA

File type
ASCII text, with very long lines (9959)
Size
4.8 kB (4823 bytes)
Hash
d4b2d440154b0708bbe47f5911d6824e
e09da35219c04c5bb061dd9178306f0f1874e13a
2f4bdb1a6259e376f56c7b991b6eb056a1ac208644764494a72e70c6a2ab8ab0

HTTP Headers

GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: lesliedavis.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lesliedavis.net/js.php/

HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 09:51:09 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 14 Oct 2016 20:31:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 4823
Keep-Alive: timeout=2, max=100
Content-Type: application/javascript

lesliedavis.net/wp-content/themes/songwriter/js/menubox.js?ver=1.0

204.44.192.75

200 OK

201 B

URL HTTP/1.1
lesliedavis.net/wp-content/themes/songwriter/js/menubox.js?ver=1.0
IP
204.44.192.75:0
ASN
#23273 HOSTP-LA

File type
ASCII text, with CRLF line terminators
Size
201 B (201 bytes)
Hash
3d4947152142305b976fd7236ac3ef28
256c18740278c261feef6437caae2054374bf3b8
f7531c5f5c3d9a61898758c262e89e63f931e722ceba867368dcd6e9a6d0fef6

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-content/themes/songwriter/js/menubox.js?ver=1.0 HTTP/1.1
Host: lesliedavis.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lesliedavis.net/js.php/

HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 09:51:09 GMT
Server: Apache
Last-Modified: Fri, 14 Oct 2016 20:32:14 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 201
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: application/javascript

lesliedavis.net/wp-content/themes/songwriter/js/placeholders.js?ver=3.0.2

204.44.192.75

200 OK

1.9 kB

URL HTTP/1.1
lesliedavis.net/wp-content/themes/songwriter/js/placeholders.js?ver=3.0.2
IP
204.44.192.75:0
ASN
#23273 HOSTP-LA

File type
ASCII text, with very long lines (4237), with CRLF line terminators
Size
1.9 kB (1891 bytes)
Hash
770d51de7c3937fda8c87ee6dd128a71
6944b2d9745d532e6c4b9b40a83c93faa6cf0240
80af11a320f7a3db974e1289c55ad5a66bb09cd71bda47c9fb2bb8c8da3ac0fe

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-content/themes/songwriter/js/placeholders.js?ver=3.0.2 HTTP/1.1
Host: lesliedavis.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lesliedavis.net/js.php/

HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 09:51:09 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 14 Oct 2016 20:32:14 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1891
Keep-Alive: timeout=2, max=100
Content-Type: application/javascript

lesliedavis.net/wp-content/themes/songwriter/js/responsive.js?ver=1.0

204.44.192.75

200 OK

43 B

URL HTTP/1.1
lesliedavis.net/wp-content/themes/songwriter/js/responsive.js?ver=1.0
IP
204.44.192.75:0
ASN
#23273 HOSTP-LA

File type
ASCII text, with CRLF line terminators
Size
43 B (43 bytes)
Hash
06678f7eb22be545dde595fa143d207f
326b0380d34ca67edc320d54f3700fca3efb36ee
fe1eb7ba320b88ace34d2ef072b793549eddf277148fc893121cbdb348ac4390

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-content/themes/songwriter/js/responsive.js?ver=1.0 HTTP/1.1
Host: lesliedavis.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lesliedavis.net/js.php/

HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 09:51:09 GMT
Server: Apache
Last-Modified: Fri, 14 Oct 2016 20:32:14 GMT
Accept-Ranges: bytes
Content-Length: 43
Vary: Accept-Encoding,User-Agent
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: application/javascript

lesliedavis.net/wp-content/themes/songwriter/js/selectnav.js?ver=0.1

204.44.192.75

200 OK

1.7 kB

URL HTTP/1.1
lesliedavis.net/wp-content/themes/songwriter/js/selectnav.js?ver=0.1
IP
204.44.192.75:0
ASN
#23273 HOSTP-LA

File type
HTML document, Unicode text, UTF-8 text
Size
1.7 kB (1653 bytes)
Hash
86644e8b2f8a4398e240fe5f18534c57
563bfd2ade9483458089a18de0350f7dd5af26b3
52719883ecaa8da788def4c92548c5e06aff11d2173c9296479e43552e0118d9

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-content/themes/songwriter/js/selectnav.js?ver=0.1 HTTP/1.1
Host: lesliedavis.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lesliedavis.net/js.php/

HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 09:51:09 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 14 Oct 2016 20:32:14 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1653
Keep-Alive: timeout=2, max=100
Content-Type: application/javascript

push.services.mozilla.com/

44.242.3.166

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.242.3.166:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sHFrtVW1b+N0dXADkZQnkg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ND8kitEc5ahDpB+ANIZcWMA+iCY=

lesliedavis.net/wp-includes/js/wp-embed.min.js?ver=a550c5bdec0953107641d0572fee1afa

204.44.192.75

200 OK

818 B

URL HTTP/1.1
lesliedavis.net/wp-includes/js/wp-embed.min.js?ver=a550c5bdec0953107641d0572fee1afa
IP
204.44.192.75:0
ASN
#23273 HOSTP-LA

File type
ASCII text, with very long lines (1386), with no line terminators
Size
818 B (818 bytes)
Hash
a31e832dfb087c442eb21cdb92022cdb
067e95e5a0c4bdc39c46ac5e80edcd6056ea9719
315c362daff4838af7d815a99d54229d3ece97f5a08ea57911e0ff16ed4ab9eb

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-includes/js/wp-embed.min.js?ver=a550c5bdec0953107641d0572fee1afa HTTP/1.1
Host: lesliedavis.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lesliedavis.net/js.php/

HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 09:51:09 GMT
Server: Apache
Last-Modified: Thu, 15 Apr 2021 07:49:55 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 818
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: application/javascript

lesliedavis.net/wp-content/themes/songwriter/js/scroll-to-top.js?ver=1.0

204.44.192.75

200 OK

294 B

URL HTTP/1.1
lesliedavis.net/wp-content/themes/songwriter/js/scroll-to-top.js?ver=1.0
IP
204.44.192.75:0
ASN
#23273 HOSTP-LA

File type
ASCII text, with CRLF line terminators
Size
294 B (294 bytes)
Hash
3ea3b8a395eafe3920e822194259aa7a
7ae93409aea92d4ae11f023b5d63c0371953a141
f2fd0cf18511b8d39ca7386503570b3870629d0bec4ab573c4850dc0647cab5c

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-content/themes/songwriter/js/scroll-to-top.js?ver=1.0 HTTP/1.1
Host: lesliedavis.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lesliedavis.net/js.php/

HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 09:51:09 GMT
Server: Apache
Last-Modified: Fri, 14 Oct 2016 20:32:14 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 294
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: application/javascript

lesliedavis.net/wp-includes/js/jquery/jquery.js?ver=1.12.4

204.44.192.75

200 OK

46 kB

URL HTTP/1.1
lesliedavis.net/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP
204.44.192.75:0
ASN
#23273 HOSTP-LA

File type
ASCII text, with very long lines (31997)
Size
46 kB (45609 bytes)
Hash
59a5b42d4170392cf8d673bec79eb8d5
5f128ee3658727d4424e5322621f1d481d0c06e4
9c95f581fc3af40755edadff3fed512a4089f587522c988e35b0ee8924612b4e

HTTP Headers

GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: lesliedavis.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lesliedavis.net/js.php/

HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 09:51:09 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 05 Sep 2019 07:54:23 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=2, max=100
Transfer-Encoding: chunked
Content-Type: application/javascript

fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2

142.250.74.163

200 OK

9.8 kB

URL HTTP/1.1
fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Size
9.8 kB (9840 bytes)
Hash
afda6e429fd299054de28e1f157c683d
c1847d6f3df5fe11d5e96fd5e6a59b73ff7ed96b
81cd29d1413ecf75834fb3ce1da572fe5c39e53b22c61f5dafec5b14ed4ee12e

HTTP Headers

GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://lesliedavis.net
Connection: keep-alive
Referer: http://fonts.googleapis.com/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 9840
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 30 Aug 2022 04:55:31 GMT
Expires: Wed, 30 Aug 2023 04:55:31 GMT
Cache-Control: public, max-age=31536000
Age: 276938
Last-Modified: Mon, 18 Jul 2022 19:24:04 GMT
Content-Type: font/woff2

lesliedavis.net/?wordfence_lh=1&hid=FFB589CEE5EE981DC16E6DD33F11AAB4&r=0.6606203762969243

204.44.192.75

200 OK

0 B

URL HTTP/1.1
lesliedavis.net/?wordfence_lh=1&hid=FFB589CEE5EE981DC16E6DD33F11AAB4&r=0.6606203762969243
IP
204.44.192.75:0
ASN
#23273 HOSTP-LA

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?wordfence_lh=1&hid=FFB589CEE5EE981DC16E6DD33F11AAB4&r=0.6606203762969243 HTTP/1.1
Host: lesliedavis.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lesliedavis.net/js.php/

HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 09:51:09 GMT
Server: Apache
Link: <http://lesliedavis.net/?rest_route=/>; rel="https://api.w.org/"
Connection: close
X-Robots-Tag: noindex
Content-Length: 0
Vary: Accept-Encoding,User-Agent
Content-Type: text/javascript;charset=UTF-8

lesliedavis.net/wp-content/themes/songwriter/css/fonts/ElegantIcons.woff

204.44.192.75

200 OK

64 kB

URL HTTP/1.1
lesliedavis.net/wp-content/themes/songwriter/css/fonts/ElegantIcons.woff
IP
204.44.192.75:0
ASN
#23273 HOSTP-LA

File type
Web Open Font Format, CFF, length 63664, version 1.0\012- data
Size
64 kB (63664 bytes)
Hash
fdd9e757bf61675343dcf55100422b84
f9be87fa2d1d4a95e8305afb51778db4bc759fbc
be1825e52a0dc7df04df9322f62abe2a2f2a25d98aac186de0140dfc7f6bdcae

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-content/themes/songwriter/css/fonts/ElegantIcons.woff HTTP/1.1
Host: lesliedavis.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://lesliedavis.net/wp-content/themes/songwriter/css/elegantfont.css?ver=a550c5bdec0953107641d0572fee1afa

HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 09:51:09 GMT
Server: Apache
Last-Modified: Fri, 14 Oct 2016 20:32:14 GMT
Accept-Ranges: bytes
Content-Length: 63664
Vary: Accept-Encoding,User-Agent
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: font/woff

lesliedavis.net/favicon.ico

204.44.192.75

200 OK

0 B

URL HTTP/1.1
lesliedavis.net/favicon.ico
IP
204.44.192.75:0
ASN
#23273 HOSTP-LA

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: lesliedavis.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lesliedavis.net/js.php/

HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 09:51:09 GMT
Server: Apache
Vary: Accept-Encoding,User-Agent
Content-Length: 0
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12475
Expires: Fri, 02 Sep 2022 13:19:05 GMT
Date: Fri, 02 Sep 2022 09:51:10 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12475
Expires: Fri, 02 Sep 2022 13:19:05 GMT
Date: Fri, 02 Sep 2022 09:51:10 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12475
Expires: Fri, 02 Sep 2022 13:19:05 GMT
Date: Fri, 02 Sep 2022 09:51:10 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10435 bytes)
Hash
955f2a35bd6b3802670e7fa8a7cda833
4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c
2fb517039f0704d2f6fe2fa78eae47c71c645add1c2276f8726248184ae45760

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10435
x-amzn-requestid: 813ec4ca-243d-46cb-a6a6-8ec58e5dd9f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLjdHwnIAMFhzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112615-4733cfb83cf0e8734abc5716;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:37:25 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: n6DJbsUGTdXT42cNLTDq6Uz28H2SDhwq6drdKP4axAHsBz471X7r_g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:37:26 GMT
etag: "4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c"
content-type: image/jpeg
age: 44024
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdec8409-e401-4b73-bbb3-47aa626edd42.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.2 kB (9200 bytes)
Hash
37fee36d8fd409ea63dd4a26dee39510
6b00992edf40eb957e6900d592ebcb0c5e611944
a36b1bf6a3bedcb0d842b29538ce966ebb37e5c371d5dca74ee1634f29799065

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdec8409-e401-4b73-bbb3-47aa626edd42.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9200
x-amzn-requestid: 5a10ba85-af61-4f8d-a293-38d8c028fb9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XnTWaEzIIAMF_zQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c65c2-17f7c0552179175c3400a90d;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 07:07:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: spauFIWImrFN23UAmrPD0H6PdkP1F8BtWjkXqTlhct3eAFbTWDbLYA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 08:43:54 GMT
age: 4036
etag: "6b00992edf40eb957e6900d592ebcb0c5e611944"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

17 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
17 kB (16818 bytes)
Hash
12756903aaa74164feb5f8525398ca36
9fef9b071daea6793cbbdfe391254ac4326b1aa2
6d474a6d96aebfed43a4f6812f18a1be8d100c590f75eb0fbf4ec7277dd0c442

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 16818
x-amzn-requestid: 6950a3c5-2cdc-4a21-854c-10d925e32ecd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XiYLvHRSIAMFotQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630a6d7e-6e98b9a77e592bd01afb1d97;Sampled=0
x-amzn-remapped-date: Sat, 27 Aug 2022 19:16:14 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3eBLhLH4APXLyj9kLHXNCFT9ccS_bnBp5INvMI93IFvOuBMERe_GgQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 13:35:58 GMT
age: 72912
etag: "9fef9b071daea6793cbbdfe391254ac4326b1aa2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.3 kB (9252 bytes)
Hash
5ba50b2fd1814c5ffc95aef40c69ce8c
cbb4546228115cccc122b16209e70171bef5c1f2
de822c8549508b28a07d29b203ae3ef356470df906cba727fc765f1bd14bb866

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9252
x-amzn-requestid: 7feebba8-f6b9-4b79-9726-5a7534da277e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyVG5DoAMF_Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112675-3123158f3dcfbd476537ca3c;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BOa5zGQyJS9q9bHmtKzlNtyS9ToGPZJkDFo2uY2lzz8Lnd3cZLQEaA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 22:48:18 GMT
age: 39772
etag: "cbb4546228115cccc122b16209e70171bef5c1f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

2.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb286723e-5b07-4b35-8224-cdbe76a32724.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
2.6 kB (2625 bytes)
Hash
225b8d6b006bc34721fd5f986b3fb6f6
7b7e20e3036e32798cbcc251dacc89ac93085e4d
87b2404ad60df3c4421c4b1fae2d2c4c8391aec7ce809da223642fc0375044cd

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb286723e-5b07-4b35-8224-cdbe76a32724.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 2625
x-amzn-requestid: 45e03380-927b-4bc2-b53f-af2df7d8380c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLlfHq5IAMFQxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112622-5aa105d34993ee034a18138e;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:37:38 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: mPZC6Uuds4HDELnIhEAXe11QTYpEDgrjQT6_lBHiyiB5QnUFJjMfOw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:37:51 GMT
age: 43999
etag: "7b7e20e3036e32798cbcc251dacc89ac93085e4d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.2 kB (6196 bytes)
Hash
5e05660322f0368dd2bf8067d7e4554d
ec65cb47d86488f734c945a210d5f636a40fea2c
98875230ec45766102191bdc4180742fa3b8f3ad5ad1a128d12437105f86247e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6196
x-amzn-requestid: a7d6ce70-06d7-498c-8024-80185a3fc3e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyLFmVIAMFkcQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112674-3fad622927177e9236d7c50a;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qAMCgNpYR80vXSDyHFOFcbT8VukBemR2AGoGNaCfYaszKshu-gv6zg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:54:15 GMT
age: 43015
etag: "ec65cb47d86488f734c945a210d5f636a40fea2c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations