Report - brcollision.com/

Report Overview

Submitted URL
brcollision.com/
IP
192.169.148.77
ASN
#398101 GO-DADDY-COM-LLC
Submitted
2022-11-27 08:06:56
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
18

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
brcollision.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	8.4 kB	512 kB	192.169.148.77
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.5 kB	93.184.220.29
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	686 B	1.4 kB	142.250.74.3
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	55 kB	34.120.237.76
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	4.4 kB	23.36.77.32
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	35.161.136.21
www.google-analytics.com	40	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.1 kB	21 kB	142.250.74.174
www.skinnyswebworks.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	299 B	472 B	192.169.148.77
skinnyswebworks.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	295 B	8.7 kB	192.169.148.77

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-27	medium	brcollision.com/	Phishing
2022-11-27	medium	brcollision.com/wb.slideshow.min.js	Phishing
2022-11-27	medium	brcollision.com/wb.newsviewer.min.js	Phishing
2022-11-27	medium	brcollision.com/jquery.ui.effect-fade.min.js	Phishing
2022-11-27	medium	brcollision.com/jquery.ui.effect.min.js	Phishing
2022-11-27	medium	brcollision.com/wb.stickylayer.min.js	Phishing
2022-11-27	medium	brcollision.com/jquery-1.11.1.min.js	Phishing
2022-11-27	medium	www.skinnyswebworks.com/	Phishing
2022-11-27	medium	skinnyswebworks.com/	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	brcollision.com/wb.slideshow.min.js	14 kB	2023-03-07	2023-08-10
Pretty URL brcollision.com/wb.slideshow.min.js IP 192.169.148.77 ASN #398101 GO-DADDY-COM-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:39:34 Last Seen2023-08-10 13:06:36 Times Seen5 Hash 77c0169b07daf7c95cb93ff694ff52db 8e3d8614b4d672500fa8513d06beaf2b44cfa61e 350068e1b82da0366430c2cbd9ca9554c184a6a6727029105cda39b5e8f71a3b Loading...

	brcollision.com/jquery.ui.effect.min.js	13 kB	2023-03-07	2023-12-29
Pretty URL brcollision.com/jquery.ui.effect.min.js IP 192.169.148.77 ASN #398101 GO-DADDY-COM-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:39:34 Last Seen2023-12-29 01:48:27 Times Seen9 Hash 9d6c89cb5cd989e1d48b63c0ef7c86e5 ad909557b270d4e07d29f14556ce947f777105b8 7501e4eeb17d33d2e94fa5130f9603c04be2273912e3f72d05800132447bb2c3 Loading...

	brcollision.com/	391 B	2023-03-07	2023-05-21
Pretty URL brcollision.com/ IP 192.169.148.77 ASN #398101 GO-DADDY-COM-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:39:34 Last Seen2023-05-21 09:08:40 Times Seen2 Hash 1b109660f64335590c1d715d87beca9e 0b33746ddae7c2a387acb30188ebecb412071740 ebe30b2c29e3bbbd7e9eb4ce8eabcf2890854ba4a52976d659657ed46c8b7212 Loading...

	brcollision.com/wb.newsviewer.min.js	8.4 kB	2023-03-07	2023-05-21
Pretty URL brcollision.com/wb.newsviewer.min.js IP 192.169.148.77 ASN #398101 GO-DADDY-COM-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:39:34 Last Seen2023-05-21 09:08:40 Times Seen3 Hash dc91cec715645178743f89bb493f661e 8664b3142d86a8a408a4f48a7ed45c0aaef1b798 846636f7e1eb1271b605e227f618168079d15b37c17029dfd34227eb3952c30a Loading...

	brcollision.com/jquery-1.11.1.min.js	96 kB	2023-03-07	2024-04-25
Pretty URL brcollision.com/jquery-1.11.1.min.js IP 192.169.148.77 ASN #398101 GO-DADDY-COM-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-04-25 09:11:13 Times Seen46336 Hash 8101d596b2b8fa35fe3a634ea342d7c3 d6c1f41972de07b09bfa63d2e50f9ab41ec372bd 540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441 Loading...

	brcollision.com/jquery.ui.effect-fade.min.js	368 B	2023-03-07	2023-12-29
Pretty URL brcollision.com/jquery.ui.effect-fade.min.js IP 192.169.148.77 ASN #398101 GO-DADDY-COM-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:39:34 Last Seen2023-12-29 01:48:27 Times Seen7 Hash 27ab247948f0b16081c5d3e94d1ece2e 080185b931c2a1628a41010c095cf9c0e006f172 8226b21969d534d9810af3ec3d6eda8252908591dc32a85d28efd44fa8d2053d Loading...

	brcollision.com/wb.stickylayer.min.js	2.2 kB	2023-03-07	2023-05-21
Pretty URL brcollision.com/wb.stickylayer.min.js IP 192.169.148.77 ASN #398101 GO-DADDY-COM-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:39:34 Last Seen2023-05-21 09:08:40 Times Seen3 Hash ecdd41d63edf0777bcaad51c0c6369f0 2e01db27711f294eab6eff19499baafc07f768e7 7578d6928bb4888a412add6d4ead086e98595b6c8ee72a856a7551857ea2a99b Loading...

	brcollision.com/	1.8 kB	2023-03-07	2023-05-21
Pretty URL brcollision.com/ IP 192.169.148.77 ASN #398101 GO-DADDY-COM-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:39:34 Last Seen2023-05-21 09:08:40 Times Seen2 Hash 013f70cc3a6c0b0d11801c23bd29e67c d25c83a08837a9d1419e7932d8879620490dded4 06cc2fc80f51d9205c2988b8eae4926fc37b394a7357679246860b1c220ff05e Loading...

	www.google-analytics.com/analytics.js	50 kB	2023-03-08	2024-04-24
Pretty URL www.google-analytics.com/analytics.js IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 05:22:31 Last Seen2024-04-24 18:41:20 Times Seen1526 Hash fda30e8a22c9bcd954fd8d0fadd0e77c ae47cd34cbde081a48d7f92fc80aaf06a1381193 b42e4a056cb5b80c5a315040826866445ec9332f0749e184509ab2d9d3b86719 Loading...

HTTP Transactions (51)

URL IP Response Size

brcollision.com/

192.169.148.77

200 OK

3.7 kB

URL HTTP/1.1
brcollision.com/
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (690)
Size
3.7 kB (3713 bytes)
Hash
5f371f1f1559ad318561248f2e234fe2
a6a2306336a6dc26a6aa75aa8a11bae496803fba
2073b4222a72404bcfed9167ef86a3987f3b7ff7046fa9ffabc2e9e4b1617afb

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:45 GMT
Server: Apache
X-Powered-By: PHP/7.4.33
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3713
Keep-Alive: timeout=5
Content-Type: text/html; charset=UTF-8

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
150792cfc458af013998f4ef6bdf5f74
d5179b2dcb11d06f82606bf6eb6648319998d63e
72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7265
Expires: Sun, 27 Nov 2022 10:07:50 GMT
Date: Sun, 27 Nov 2022 08:06:45 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3211
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:06:45 GMT
Last-Modified: Sun, 27 Nov 2022 07:13:14 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10357
Expires: Sun, 27 Nov 2022 10:59:22 GMT
Date: Sun, 27 Nov 2022 08:06:45 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 07:19:21 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2844
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: hUWxrjzdpqIMiAc9DAtc1pd9II1gzdk3uVuATaxkL8C0u2wpf5sUCws+m5ddWBGpL3sc5LOETgg=
x-amz-request-id: YXPJES1YFGQYXQG5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 07:44:33 GMT
age: 1332
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:06:45 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

brcollision.com/index.css

192.169.148.77

200 OK

992 B

URL HTTP/1.1
brcollision.com/index.css
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
ASCII text
Size
992 B (992 bytes)
Hash
2c8e0fa69e6457ceb3a2771354a16c59
bd61be9b3be6213a0469acfba3a7cd7c63f5b830
6d5e410ad9f4a9c812892d03c0c90b75ee9e1fe46b567c578ce395005134aad8

HTTP Headers

GET /index.css HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:45 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:50:56 GMT
ETag: "4811d7-19a6-5c7d81a97580d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 992
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/css

brcollision.com/BRC00006.css

192.169.148.77

200 OK

436 B

URL HTTP/1.1
brcollision.com/BRC00006.css
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
ASCII text
Size
436 B (436 bytes)
Hash
528b8b2e14fb7bfde4ccd9cd0c565424
077dd74703d085f2ecee1c7695de9eac9f1327b3
5ac07378d65e3c7063f0ac39bfc80eecd27321c18942603fb304268401275624

HTTP Headers

GET /BRC00006.css HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:45 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 24 Jul 2021 05:50:55 GMT
ETag: "4811d1-ad1-5c7d81a82f14a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 436
Keep-Alive: timeout=5
Content-Type: text/css

brcollision.com/wb.slideshow.min.js

192.169.148.77

200 OK

3.1 kB

URL HTTP/1.1
brcollision.com/wb.slideshow.min.js
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
ASCII text, with very long lines (521)
Size
3.1 kB (3090 bytes)
Hash
3851fa68cb3ee8c567b5196324384ae7
edb780190f4c6f5fc0737aeb7c67adef201c4b59
84ce86e4c79afe3b4979b19ba02f4426a47da509ac9e61e7f4add5f07853c222

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wb.slideshow.min.js HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:45 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 24 Jul 2021 05:50:59 GMT
ETag: "4811e4-351e-5c7d81ac7e5fc-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3090
Keep-Alive: timeout=5
Content-Type: application/javascript

brcollision.com/wb.newsviewer.min.js

192.169.148.77

200 OK

3.0 kB

URL HTTP/1.1
brcollision.com/wb.newsviewer.min.js
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
ASCII text, with very long lines (557)
Size
3.0 kB (2987 bytes)
Hash
f5b4f31afa0381f2f28c5c0734712864
787275c047894d38a067640cc28b4367fb847fc9
5a175a13dc4eaf9fd2444bf30cfa8be1ae7840b67ff8d38245dee23feb6cf9e3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wb.newsviewer.min.js HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:45 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 24 Jul 2021 05:50:59 GMT
ETag: "4811e3-20bb-5c7d81ac26f84-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2987
Keep-Alive: timeout=5
Content-Type: application/javascript

brcollision.com/jquery.ui.effect-fade.min.js

192.169.148.77

200 OK

279 B

URL HTTP/1.1
brcollision.com/jquery.ui.effect-fade.min.js
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
ASCII text
Size
279 B (279 bytes)
Hash
7734c81b0338db195afa84b1bde245e7
9931b0371e88295377ec28f17eb094381aafdf44
d20a5feaed18bfae7c6693a7d89592751096bcf28fe965d5d2347765ca4fa8a4

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /jquery.ui.effect-fade.min.js HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:45 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:50:57 GMT
ETag: "4811da-170-5c7d81aa31404-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 279
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript

brcollision.com/jquery.ui.effect.min.js

192.169.148.77

200 OK

5.1 kB

URL HTTP/1.1
brcollision.com/jquery.ui.effect.min.js
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
ASCII text, with very long lines (12782)
Size
5.1 kB (5055 bytes)
Hash
ea923936252e1c6f085ab2b6ed5645f7
b7fe1de8a909911b0e1f018c8b05fb9cb942ef9f
d3379803d4651391a0c6024dd130d0075798053fd0de7b8510a7b7a22feea5a0

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /jquery.ui.effect.min.js HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 24 Jul 2021 05:50:57 GMT
ETag: "4811db-3294-5c7d81aa736a1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5055
Keep-Alive: timeout=5
Content-Type: application/javascript

brcollision.com/wb.stickylayer.min.js

192.169.148.77

200 OK

743 B

URL HTTP/1.1
brcollision.com/wb.stickylayer.min.js
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
ASCII text, with very long lines (2082)
Size
743 B (743 bytes)
Hash
12929db84c2a3a951f8b4fd6ad5a8a14
859103a8ce44b972e0ff8bf7860acaafd923f94f
9af4585a513b2cf193e2923d0c751606edabfd2ebdf14406955e5f63787de9c2

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wb.stickylayer.min.js HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:50:59 GMT
ETag: "4811e5-8b2-5c7d81ac94975-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 743
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript

brcollision.com/jquery-1.11.1.min.js

192.169.148.77

200 OK

33 kB

URL HTTP/1.1
brcollision.com/jquery-1.11.1.min.js
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
ASCII text, with very long lines (32086)
Size
33 kB (33225 bytes)
Hash
77c96b81bc26956680cd7813d2d4efd9
2f35ac87d37734bb8216c87f56079036109aeaa1
bf48f792ab036db71babef1dbea45dceff0b04212a7278ed08b6c997115352ad

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /jquery-1.11.1.min.js HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:45 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 24 Jul 2021 05:50:57 GMT
ETag: "4811d9-1762a-5c7d81aa15a9a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 33225
Keep-Alive: timeout=5
Content-Type: application/javascript

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 07:08:54 GMT
cache-control: public,max-age=3600
age: 3472
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

brcollision.com/images/img0001.png

192.169.148.77

200 OK

2.0 kB

URL HTTP/1.1
brcollision.com/images/img0001.png
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
PNG image data, 460 x 318, 8-bit/color RGBA, non-interlaced\012- data
Size
2.0 kB (2015 bytes)
Hash
4922b99149e2f440f0b86e8b48cbe431
4df4497add5624df50e3c47f40feb753049bb683
f745be00937fcffe01cf8bb93e1b9da245d8451225562a76b55080f1f8237770

HTTP Headers

GET /images/img0001.png HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:05 GMT
ETag: "501216-7df-5c7d81b1af807"
Accept-Ranges: bytes
Content-Length: 2015
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png

brcollision.com/images/br-logo-003.png

192.169.148.77

200 OK

19 kB

URL HTTP/1.1
brcollision.com/images/br-logo-003.png
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
PNG image data, 265 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size
19 kB (19014 bytes)
Hash
92b65ae6ab1a0ae364c060f2a0f0dac6
381e6c189e01564d4f901fb5f8f1f6f7a680376e
c3dc5659833ee34123ad47e2252983e095f897f6046f5bbb076a55721d8d0d74

HTTP Headers

GET /images/br-logo-003.png HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:02 GMT
ETag: "50120e-4a46-5c7d81af971d4"
Accept-Ranges: bytes
Content-Length: 19014
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png

brcollision.com/images/img0006.png

192.169.148.77

200 OK

5.1 kB

URL HTTP/1.1
brcollision.com/images/img0006.png
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
PNG image data, 664 x 52, 8-bit/color RGBA, non-interlaced\012- data
Size
5.1 kB (5118 bytes)
Hash
4a0073743e5395621e1ab1b5e5a326f6
b108fc38755f4f707920a1e17200d641cf2b024f
07fcf3b8d998a5af31c9b4ee92a63fe536c26aff7681cea53ea0a942253232b3

HTTP Headers

GET /images/img0006.png HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:06 GMT
ETag: "50121b-13fe-5c7d81b3002db"
Accept-Ranges: bytes
Content-Length: 5118
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png

brcollision.com/images/img0007.png

192.169.148.77

200 OK

5.1 kB

URL HTTP/1.1
brcollision.com/images/img0007.png
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
PNG image data, 664 x 52, 8-bit/color RGBA, non-interlaced\012- data
Size
5.1 kB (5072 bytes)
Hash
e898d34c9d0453cdb44645ceddab2c75
e0e025ec12d23e85398be1f62d65bc2fe2805a52
fbbe25f6794ec7342d73516fa3017b0defb714c4a4796dda421cbe74b9c9788c

HTTP Headers

GET /images/img0007.png HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:06 GMT
ETag: "50121c-13d0-5c7d81b319d05"
Accept-Ranges: bytes
Content-Length: 5072
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png

brcollision.com/images/img0002.png

192.169.148.77

200 OK

2.0 kB

URL HTTP/1.1
brcollision.com/images/img0002.png
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
PNG image data, 460 x 318, 8-bit/color RGBA, non-interlaced\012- data
Size
2.0 kB (2015 bytes)
Hash
4922b99149e2f440f0b86e8b48cbe431
4df4497add5624df50e3c47f40feb753049bb683
f745be00937fcffe01cf8bb93e1b9da245d8451225562a76b55080f1f8237770

HTTP Headers

GET /images/img0002.png HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:05 GMT
ETag: "501217-7df-5c7d81b209d5f"
Accept-Ranges: bytes
Content-Length: 2015
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6470
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:06:46 GMT
Last-Modified: Sun, 27 Nov 2022 06:18:57 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

brcollision.com/images/br-phone-number-004.png

192.169.148.77

200 OK

8.2 kB

URL HTTP/1.1
brcollision.com/images/br-phone-number-004.png
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
PNG image data, 196 x 40, 8-bit/color RGBA, non-interlaced\012- data
Size
8.2 kB (8170 bytes)
Hash
16179513feea04ded3b6c7ac0ba76f6a
b86f26774b32832e4e6a4a4e73cc5f58b87d7cb3
63dc004b300032a8800326578eaaa97fc33c2ba54e5a8247a2add0dc41e5cb3a

HTTP Headers

GET /images/br-phone-number-004.png HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:03 GMT
ETag: "501210-1fea-5c7d81b0368a9"
Accept-Ranges: bytes
Content-Length: 8170
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png

brcollision.com/images/skinnys-webworks-logo-50.png

192.169.148.77

200 OK

10 kB

URL HTTP/1.1
brcollision.com/images/skinnys-webworks-logo-50.png
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
PNG image data, 216 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size
10 kB (10540 bytes)
Hash
50c330b8fbf88e8ab2161f547f62572a
23b207d717c9becf96333ce5b136350b9f1cb633
a5008f14daea0ea8be07a78f2893c5c624f14c3689a565a857e218197513cb0e

HTTP Headers

GET /images/skinnys-webworks-logo-50.png HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:08 GMT
ETag: "501224-292c-5c7d81b51fa57"
Accept-Ranges: bytes
Content-Length: 10540
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png

brcollision.com/images/img0008.png

192.169.148.77

200 OK

4.7 kB

URL HTTP/1.1
brcollision.com/images/img0008.png
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
PNG image data, 664 x 52, 8-bit/color RGBA, non-interlaced\012- data
Size
4.7 kB (4708 bytes)
Hash
fb9ce22dd527bfa209511111d6e85bc6
724b0ccc5145738e0b7b1fbc4bc5d6f586500eb5
a723197148e444480ccd7fafcd138b26130f0cc9a029e7618f03508e55649fba

HTTP Headers

GET /images/img0008.png HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:07 GMT
ETag: "50121d-1264-5c7d81b37afbd"
Accept-Ranges: bytes
Content-Length: 4708
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png

brcollision.com/images/br-slider-frame-002.png

192.169.148.77

200 OK

30 kB

URL HTTP/1.1
brcollision.com/images/br-slider-frame-002.png
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
PNG image data, 800 x 218, 8-bit/color RGBA, non-interlaced\012- data
Size
30 kB (30124 bytes)
Hash
77b6677a71f6df2d3a404923587b5175
0a0a8774694370d691f455cb98f4c66664153c60
1956528916f631f20212863cd507e645423414c32b054443a3c07c6bf6b306cf

HTTP Headers

GET /images/br-slider-frame-002.png HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:04 GMT
ETag: "501211-75ac-5c7d81b097779"
Accept-Ranges: bytes
Content-Length: 30124
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png

push.services.mozilla.com/

35.161.136.21

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.161.136.21:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3Ji98B0bypgfreH/kLmb0A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fnX5mVlmFo11+XepFz701fEi/GE=

brcollision.com/images/br-collision-your-car-accident-damage-001.jpg

192.169.148.77

200 OK

50 kB

URL HTTP/1.1
brcollision.com/images/br-collision-your-car-accident-damage-001.jpg
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, xresolution=122, yresolution=130, resolutionunit=2, software=paint.net 4.0.6], baseline, precision 8, 1000x400, components 3\012- data
Size
50 kB (50102 bytes)
Hash
b2cd156a8f3bee5f0493492b8a1e9a53
6bb539e0a68815efeafdc212bb000b09fb591a29
97201e3313d27bc953c3e9a810c7a4c42cfb800d25f8cb92a90b781ee4101353

HTTP Headers

GET /images/br-collision-your-car-accident-damage-001.jpg HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:02 GMT
ETag: "50120c-c3b6-5c7d81af17aba"
Accept-Ranges: bytes
Content-Length: 50102
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg

brcollision.com/images/br-logo-010.png

192.169.148.77

200 OK

19 kB

URL HTTP/1.1
brcollision.com/images/br-logo-010.png
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
PNG image data, 265 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size
19 kB (19339 bytes)
Hash
5e7382e67c641169e48425f7d6dbe030
ad5bf9db74ff8d69e7df39cd739d115f59899c34
8776f0e52155afc56ce5f598c42bdb8065b1327088bbf0ce6ae24f7b280a8015

HTTP Headers

GET /images/br-logo-010.png HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:03 GMT
ETag: "50120f-4b8b-5c7d81b01788e"
Accept-Ranges: bytes
Content-Length: 19339
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png

brcollision.com/images/steering-illegal-001.png

192.169.148.77

200 OK

11 kB

URL HTTP/1.1
brcollision.com/images/steering-illegal-001.png
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
PNG image data, 300 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size
11 kB (11078 bytes)
Hash
8be62075cc7afd72fcd324dc5f0a3983
725b8c04dc6e5f1b9b7c04cfa46840acde717520
6bf04e8152c1f6c42e67422b03d95a1c4424761e4ec29c27ee6e5b708aa494d3

HTTP Headers

GET /images/steering-illegal-001.png HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:09 GMT
ETag: "501225-2b46-5c7d81b58341f"
Accept-Ranges: bytes
Content-Length: 11078
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png

brcollision.com/images/click-here-now-001.png

192.169.148.77

200 OK

6.4 kB

URL HTTP/1.1
brcollision.com/images/click-here-now-001.png
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
PNG image data, 300 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size
6.4 kB (6393 bytes)
Hash
68975030cfc4fc0843ab8d4759384d68
d3537b4527f9523777d855f8a02186f4979bc516
8314682ef84d010b757d46163bba115d63cb00db234b0641c2123f0de5118fce

HTTP Headers

GET /images/click-here-now-001.png HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:04 GMT
ETag: "501214-18f9-5c7d81b132415"
Accept-Ranges: bytes
Content-Length: 6393
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png

brcollision.com/images/map-b-r-collision-001.png

192.169.148.77

200 OK

76 kB

URL HTTP/1.1
brcollision.com/images/map-b-r-collision-001.png
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
PNG image data, 442 x 251, 8-bit/color RGBA, non-interlaced\012- data
Size
76 kB (75940 bytes)
Hash
3c39d397d46f7985e55a61fc38eddf34
9116186be28c28122ada1a145b845f3fcc90d104
34b88a7fcab7e816b39c9036335e5bdf1099fbb8de6c5e8a3bdb2c90d01bf40e

HTTP Headers

GET /images/map-b-r-collision-001.png HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:08 GMT
ETag: "501221-128a4-5c7d81b4a5545"
Accept-Ranges: bytes
Content-Length: 75940
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png

brcollision.com/images/br-collision-repair-your-car-001-a.jpg

192.169.148.77

200 OK

36 kB

URL HTTP/1.1
brcollision.com/images/br-collision-repair-your-car-001-a.jpg
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, xresolution=122, yresolution=130, resolutionunit=2, software=paint.net 4.0.6], baseline, precision 8, 1000x400, components 3\012- data
Size
36 kB (35529 bytes)
Hash
f94632a935d6cb42d46f120951d1a8c3
23975250401e15c6811bdf57bd961f2d57f522ee
6453607b768124b01f7c36293bb365eabdadc2200173998b13be0dbb7763bd8b

HTTP Headers

GET /images/br-collision-repair-your-car-001-a.jpg HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:01 GMT
ETag: "50120a-8ac9-5c7d81ae93d4f"
Accept-Ranges: bytes
Content-Length: 35529
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg

brcollision.com/images/br-collision-assess-vehicle-damage-001.jpg

192.169.148.77

200 OK

47 kB

URL HTTP/1.1
brcollision.com/images/br-collision-assess-vehicle-damage-001.jpg
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, xresolution=122, yresolution=130, resolutionunit=2, software=paint.net 4.0.6], baseline, precision 8, 1000x400, components 3\012- data
Size
47 kB (47054 bytes)
Hash
10f7383a25ade578bb4ee07296f8cee2
d86e6b73f79e1595f7874ad07abe4bbce10adf03
8c8861ec5b714a66a5d99c0a98e8e1a98262dbd1656cbc6cc9439c35cd46e3a2

HTTP Headers

GET /images/br-collision-assess-vehicle-damage-001.jpg HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:01 GMT
ETag: "501208-b7ce-5c7d81ae155d5"
Accept-Ranges: bytes
Content-Length: 47054
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg

www.google-analytics.com/analytics.js

142.250.74.174

200 OK

20 kB

URL HTTP/1.1
www.google-analytics.com/analytics.js
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1325)
Size
20 kB (20039 bytes)
Hash
47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e

HTTP Headers

GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20039
Date: Sun, 27 Nov 2022 06:22:56 GMT
Expires: Sun, 27 Nov 2022 08:22:56 GMT
Cache-Control: public, max-age=7200
Age: 6231
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript

brcollision.com/images/footer_cars.png

192.169.148.77

200 OK

121 kB

URL HTTP/1.1
brcollision.com/images/footer_cars.png
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
PNG image data, 950 x 110, 8-bit/color RGBA, non-interlaced\012- data
Size
121 kB (120984 bytes)
Hash
b78a6078f337785a722e1d4023f37d7f
01f46a6f82725fbd947fc6978893e3c2d7d4d36e
68acdcb93eb33bea3a2dcef190c98d881441f99623636553f23c4be9d05b0bcd

HTTP Headers

GET /images/footer_cars.png HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:46 GMT
Server: Apache
Last-Modified: Sat, 24 Jul 2021 05:51:05 GMT
ETag: "501215-1d898-5c7d81b1af41f"
Accept-Ranges: bytes
Content-Length: 120984
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:06:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google-analytics.com/j/collect?v=1&_v=j98&a=390468529&t=pageview&_s=1&dl=http%3A%2F%2Fbrcollision.com%2F&ul=en-us&de=UTF-8&dt=B%26R%20Collision%20Repair%20in%20Hawley%20PA&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=211287039&gjid=1412797184&cid=2021267700.1669536407&tid=UA-68444443-7&_gid=1897347584.1669536407&_r=1&_slc=1&z=1014319240

142.250.74.174

200 OK

2 B

URL HTTP/2
www.google-analytics.com/j/collect?v=1&_v=j98&a=390468529&t=pageview&_s=1&dl=http%3A%2F%2Fbrcollision.com%2F&ul=en-us&de=UTF-8&dt=B%26R%20Collision%20Repair%20in%20Hawley%20PA&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=211287039&gjid=1412797184&cid=2021267700.1669536407&tid=UA-68444443-7&_gid=1897347584.1669536407&_r=1&_slc=1&z=1014319240
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
ASCII text, with no line terminators
Size
2 B (2 bytes)
Hash
38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f

HTTP Headers

POST /j/collect?v=1&_v=j98&a=390468529&t=pageview&_s=1&dl=http%3A%2F%2Fbrcollision.com%2F&ul=en-us&de=UTF-8&dt=B%26R%20Collision%20Repair%20in%20Hawley%20PA&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=211287039&gjid=1412797184&cid=2021267700.1669536407&tid=UA-68444443-7&_gid=1897347584.1669536407&_r=1&_slc=1&z=1014319240 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://brcollision.com
Connection: keep-alive
Referer: http://brcollision.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: http://brcollision.com
date: Sun, 27 Nov 2022 08:06:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

brcollision.com/favicon.ico

192.169.148.77

302 Found

214 B

URL HTTP/1.1
brcollision.com/favicon.ico
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
214 B (214 bytes)
Hash
5a7e29329f6ab8ee1b10f5757dec2075
2fe3bbf68dd82b6e97d1876ad31ac4bde3da1f02
8465e3799c3ae847e527d061875e36c27c39dbeeff155e1c5782005d43718c7c

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: brcollision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://brcollision.com/

HTTP/1.1 302 Found
Date: Sun, 27 Nov 2022 08:06:47 GMT
Server: Apache
Location: http://www.skinnyswebworks.com
Content-Length: 214
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:06:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.skinnyswebworks.com/

192.169.148.77

301 Moved Permanently

235 B

URL HTTP/1.1
www.skinnyswebworks.com/
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
235 B (235 bytes)
Hash
cda4dae06a0c10b3fabd65e13750ac2f
629d64fe5a595b946d32571f0968770e1d0b6338
3fc0f401fec4218e33d33de72aa00af2b4dd477756514845813be0cf24017c6b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: www.skinnyswebworks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://brcollision.com/
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 08:06:47 GMT
Server: Apache
Location: http://skinnyswebworks.com/
Content-Length: 235
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10718
Expires: Sun, 27 Nov 2022 11:05:25 GMT
Date: Sun, 27 Nov 2022 08:06:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10718
Expires: Sun, 27 Nov 2022 11:05:25 GMT
Date: Sun, 27 Nov 2022 08:06:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10718
Expires: Sun, 27 Nov 2022 11:05:25 GMT
Date: Sun, 27 Nov 2022 08:06:47 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg

34.120.237.76

200 OK

7.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.4 kB (7380 bytes)
Hash
76c00eceed956377d7469ef58b0815cb
97a135335f5b1b042adeb385718f8808cb78528b
81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:50:08 GMT
age: 36999
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a2bb7d-e57c-4751-a56f-0802ae9eaee6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.1 kB (9063 bytes)
Hash
e615cdc2e330b5cf76435abce9aa631a
71f737c3cee7766494157cd6491ce247a785c09e
853f68bf79a553b9fbf0e10391424faf0a3c071370d05d369563f7824d1bda84

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a2bb7d-e57c-4751-a56f-0802ae9eaee6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9063
x-amzn-requestid: f00ac8bd-6466-4c92-9b99-0e71b4b2345c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b8Jr4ENtoAMFzvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637b2318-0e3a57932987e29521388dd7;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 07:04:56 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: ntfumip5IjOlyoe6ASlwJ1PjPLN1yZHkK_iiDDKfmMCyI__PrrGVMA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 82893cc36087a50f9a150a621d10e740.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 11:33:57 GMT
age: 73970
etag: "71f737c3cee7766494157cd6491ce247a785c09e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.8 kB (4803 bytes)
Hash
cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:37 GMT
age: 36910
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F183848d2-b6cc-4349-b07a-3fd8540a63e2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.0 kB (4023 bytes)
Hash
9de86e0161ef1255306ddfce1c2549d7
f77ff5378766c6b14125de0e003b21f34726672b
7db14b31e7e2d882eb446bd6056ad9e8eed6e1581837a6d54d2e0d26aa2600bb

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F183848d2-b6cc-4349-b07a-3fd8540a63e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4023
x-amzn-requestid: e9fe84db-d488-4ec7-81e6-c819bb625944
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b44BuHsmIAMFUsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6379d3a4-54fbd7892170110e4bafc899;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 07:13:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GYi18tS1H9gOh6y9rQGwRx9VANq4dYJ_vJIpMD0kWIXFVNSif-sxXA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 22:05:29 GMT
age: 36078
etag: "f77ff5378766c6b14125de0e003b21f34726672b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10199 bytes)
Hash
2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:41 GMT
age: 36906
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (13049 bytes)
Hash
1db6041a0bdb2319ae85afcc30caaeec
3b0ec6a7188dadf986f72fda8110296d9abd6f35
05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13049
x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBsvpHDJoAMFhFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MA_O50Lu6RRAFJpzXmVXhkxvYazdX5Lhk2Qa5k9fYUhBta-IWpVT1g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 01:46:48 GMT
age: 22799
etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

skinnyswebworks.com/

192.169.148.77

200 OK

8.4 kB

URL HTTP/1.1
skinnyswebworks.com/
IP
192.169.148.77:0
ASN
#398101 GO-DADDY-COM-LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (498)
Size
8.4 kB (8363 bytes)
Hash
e0ba8067ee02509d479c11b1614fdcad
06a05020a98291e4bb44858b9248158e3a3dab89
072ebe68ef130210b1d1289a302a5034259030a7cbe40f16fb9a93c1d84ec5a2

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: skinnyswebworks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://brcollision.com/
Connection: keep-alive

HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:06:48 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 13 May 2022 19:34:19 GMT
ETag: "44152a-a183-5dee9c2ba6b2a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8363
Keep-Alive: timeout=5
Content-Type: text/html

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations