hgjgdfjgd-gsduyfgru.azurewebsites.net/
200 OK 7.1 kB URL User Request GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1157), with CRLF line terminators
Hash a4bfcae2f9b48ff985d83f99dc3340ba
8c2b049df4b25f1a9382af727361ba204df9ca4f
3a3a9f6dc593d55593b311ab23e98dc4b9a5adce4c0754c22af320ea29cf8bfa
Analyzer Verdict Alert OpenPhish phishing Office365
GET / HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Date: Thu, 07 Dec 2023 16:26:53 GMT
Server: nginx/1.24.0
Content-Encoding: gzip
ETag: W/"657094a4-4dbc"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
Transfer-Encoding: chunked
cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
200 OK 27 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (32180)
Hash 7f9fb969ce353c5d77707836391eb28d
62c4042e9ebc691a5372d653b424512a561d1670
2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 16:26:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 26660
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-14983"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1173677
expires: Tue, 26 Nov 2024 16:26:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lxEL99hFIXAqxtTmfi2SqMJNRESAPs5%2BDI4TNX4Aw02njfHXAs3hxWqYYt5ua4JOkaXuxl%2BOF%2FzflAvVocXT47nnza3dyBPreG%2B05CxRA4NXBY51WIt4y5CRGKTKFMtGJVW1MKVO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 831e2207ace20b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha1/dist/css/bootstrap.min.css
200 OK 34 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha1/dist/css/bootstrap.min.css
IP
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type Unicode text, UTF-8 text, with very long lines (65335)
Hash 5b42276b3039eaf18cc199cb4c8db7b8
719956aa52db4c8afdc5c0cfb3cbdead6258b8a6
932ea15108928991bcf0c0a46415fc652de5ffc0158c35205357b90c65eeb386
GET /npm/bootstrap@5.3.0-alpha1/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hgjgdfjgd-gsduyfgru.azurewebsites.net
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.3.0-alpha1
x-jsd-version-type: version
etag: W/"35e6c-cZlWqlLbTIr9xcDPs8verWJYuKY"
content-encoding: br
accept-ranges: bytes
date: Thu, 07 Dec 2023 16:26:54 GMT
age: 11964436
x-served-by: cache-fra-eddf8230112-FRA, cache-bma1652-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33467
X-Firefox-Spdy: h2
hgjgdfjgd-gsduyfgru.azurewebsites.net/styles.css
200 OK 9.0 kB URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/styles.css
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type assembler source, ASCII text, with very long lines (432), with CRLF line terminators
Hash 1cd263de986b8512033707aa7a514eaa
3d369e9eee12fed66fe5fb578027cf1632f59327
f0ad5c2e08b17383191767857b20c75214bdf91e315ed37cc6c41473b0c0a294
Analyzer Verdict Alert OpenPhish phishing Office365
GET /styles.css HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 9023
Content-Type: text/css
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Accept-Ranges: bytes
ETag: "657094a4-233f"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
code.jquery.com/jquery-1.4.4.min.js
200 OK 27 kB URL GET HTTP/2 code.jquery.com/jquery-1.4.4.min.js
IP
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (820)
Hash 73a9c334c5ca71d70d092b42064f6476
b75990598ee8d3895448ed9d08726af63109f842
517364f2d45162fb5037437b5b6cb953d00d9b2b3b79ba87d9fe57ea6ee6070c
GET /jquery-1.4.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-13309"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 07 Dec 2023 16:26:54 GMT
age: 3839030
x-served-by: cache-lga21980-LGA, cache-bma1665-BMA
x-cache: HIT, HIT
x-cache-hits: 8715, 3
x-timer: S1701966414.122086,VS0,VE0
vary: Accept-Encoding
content-length: 27078
X-Firefox-Spdy: h2
hgjgdfjgd-gsduyfgru.azurewebsites.net/scripts.js
200 OK 7.4 kB URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/scripts.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 7cab5bfc92ba9da7816d878728c478d5
df8996dbcbcfda8a34b263bb8d197a76a6699ad6
5a0329abb098f00fdb5c23896e332832bb4d63cd8d4f5a54b7e874212ae57bd0
Analyzer Verdict Alert OpenPhish phishing Office365
GET /scripts.js HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 7370
Content-Type: application/javascript
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Accept-Ranges: bytes
ETag: "657094a4-1cca"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
hgjgdfjgd-gsduyfgru.azurewebsites.net/nOxp-sett.png
200 OK 463 B URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/nOxp-sett.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type PNG image data, 33 x 31, 8-bit colormap, non-interlaced\012- data
Hash 905d91c276116928fa306ea732723fa9
092604f6a8786e46a7dee06065d29d2896fcf568
9cffd13c2ce05ebe032709a88fa59504e1218a12b175ec40d5aab280c18be51e
Analyzer Verdict Alert OpenPhish phishing Office365
GET /nOxp-sett.png HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 463
Content-Type: image/png
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Accept-Ranges: bytes
ETag: "657094a4-1cf"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
www.googletagmanager.com/gtag/js?id=G-FT1CFV1H9N
200 OK 86 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-FT1CFV1H9N
IP
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3034)
Hash 2a54d5ead9a1f25da4fe8d3caa1c8c15
c2da94a5122db0010a65d27a4b4ffe06bfe76ee1
fd32d7f72da9fc18126ed9e54dff6f229d473564d5bc2d1eb40bac3cd174cc95
GET /gtag/js?id=G-FT1CFV1H9N HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 16:26:54 GMT
expires: Thu, 07 Dec 2023 16:26:54 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86205
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hgjgdfjgd-gsduyfgru.azurewebsites.net/s-S4-acc.png
200 OK 813 B URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/s-S4-acc.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type PNG image data, 77 x 72, 8-bit colormap, non-interlaced\012- data
Hash d648c1837d01495eccd63e053491f72a
991d8f6c72777239472410d6129fd5f25ed9d134
9edbf56b360080f5d6765dce77353b8130e9f8316ad34c68f6c2792cdc446321
Analyzer Verdict Alert OpenPhish phishing Office365
GET /s-S4-acc.png HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 813
Content-Type: image/png
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Accept-Ranges: bytes
ETag: "657094a4-32d"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
hgjgdfjgd-gsduyfgru.azurewebsites.net/Z5BR-network.png
200 OK 607 B URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/Z5BR-network.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type PNG image data, 63 x 70, 8-bit colormap, non-interlaced\012- data
Hash 2cd03a547f00cad010f9038619df45de
912f919836a77a514c76b990aceaf5e930a24024
c56a8ae4818963e0d71eda4ebf46b4f2cdd3a238537dc8e99711fb690d272a73
Analyzer Verdict Alert OpenPhish phishing Office365
GET /Z5BR-network.png HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 607
Content-Type: image/png
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Accept-Ranges: bytes
ETag: "657094a4-25f"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
hgjgdfjgd-gsduyfgru.azurewebsites.net/qsbs-firewall.png
200 OK 920 B URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/qsbs-firewall.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type PNG image data, 77 x 63, 8-bit colormap, non-interlaced\012- data
Hash b0495ede4c875843fec037c794e9ff9a
c813aefba255a5cc53aea7811f987ccb551c3128
52b762d47c066e16300675d56cc359b504ffd3239438c96eb973864311bb7b79
Analyzer Verdict Alert OpenPhish phishing Office365
GET /qsbs-firewall.png HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 920
Content-Type: image/png
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Accept-Ranges: bytes
ETag: "657094a4-398"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
hgjgdfjgd-gsduyfgru.azurewebsites.net/okPE-vs.png
200 OK 313 B URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/okPE-vs.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type PNG image data, 37 x 38, 8-bit grayscale, non-interlaced\012- data
Hash f8176054bb2e264452c0d7c3a1a1093c
dd3145e0f95a236e073a780a2529febf409d4f2b
bf8ebf2c2aeb4d8310341694baf1ed935d35c68c1572588af85b4775d5cf500e
Analyzer Verdict Alert OpenPhish phishing Office365
GET /okPE-vs.png HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 313
Content-Type: image/png
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Accept-Ranges: bytes
ETag: "657094a4-139"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
hgjgdfjgd-gsduyfgru.azurewebsites.net/-EBq-current.png
200 OK 1.2 kB URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/-EBq-current.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type PNG image data, 27 x 28, 8-bit colormap, non-interlaced\012- data
Hash 35629cc2adc804353a548305f1217206
cda6e89c5f6a644683aea6999a5d11e00dc64275
c1d52e31f7fc13cbb3efca8b0ec937ddd97a5ec545c4dad26193429db10d8662
Analyzer Verdict Alert OpenPhish phishing Office365
GET /-EBq-current.png HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 1162
Content-Type: image/png
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Accept-Ranges: bytes
ETag: "657094a4-48a"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
hgjgdfjgd-gsduyfgru.azurewebsites.net/invisible.js
404 Not Found 114 B URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/invisible.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash d47b646093dd84d34885a714ce4bd74e
c4df23671b6440e29159093dc52cb8c4aa184597
6807c84bf35d67496e020c1528303b87d4759933c09817e514a7159ac689d352
Analyzer Verdict Alert OpenPhish phishing Office365
GET /invisible.js HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Type: text/html
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Content-Encoding: gzip
Transfer-Encoding: chunked
hgjgdfjgd-gsduyfgru.azurewebsites.net/kxFy-clip.png
200 OK 542 B URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/kxFy-clip.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type PNG image data, 66 x 68, 8-bit colormap, non-interlaced\012- data
Hash 0e9558d2d6e8000ce5c6c749c8fc67c2
f7ba9490807ef70bb6195150d6287cd54b7fefd0
91fb42a68a122344fd78cfd5f0cf9d06ff6d307fd4a5c68f40231c5950ece9a1
Analyzer Verdict Alert OpenPhish phishing Office365
GET /kxFy-clip.png HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 542
Content-Type: image/png
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Accept-Ranges: bytes
ETag: "657094a4-21e"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
hgjgdfjgd-gsduyfgru.azurewebsites.net/uZbx-si.png
200 OK 5.4 kB URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/uZbx-si.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type PNG image data, 42 x 702, 8-bit grayscale, non-interlaced\012- data
Hash 51147eb9734c3c0caf22aa77a80d96f0
dc33807cd0c0c35bb98d8e23efe2d625137a43f5
92d8510869b3d581401a93130fa72e4b54c5bf28dc8005994c5248d9afbfc37b
Analyzer Verdict Alert OpenPhish phishing Office365
GET /uZbx-si.png HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 5377
Content-Type: image/png
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Accept-Ranges: bytes
ETag: "657094a4-1501"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
hgjgdfjgd-gsduyfgru.azurewebsites.net/minimize.jpeg
200 OK 17 kB URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/minimize.jpeg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=39, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=180], baseline, precision 8, 180x39, components 3\012- data
Hash 4bf52eb9b3efce840add1a90d83a40e5
6348a7617dfce3165e07af53a48df7892d62ffe1
a85f1e749a829c5c909837844c6b53ce0a9ae2adb7c8eac0e7b96c372c679a0d
Analyzer Verdict Alert OpenPhish phishing Office365
GET /minimize.jpeg HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 17173
Content-Type: image/jpeg
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Accept-Ranges: bytes
ETag: "657094a4-4315"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
hgjgdfjgd-gsduyfgru.azurewebsites.net/microsoft.png
200 OK 1.0 kB URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/microsoft.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash bf2b460590fbb9d8e9611a6e9006b816
561e1dab259d61e798b3ce380527b71b61074ff3
ee4bc5fe81fa7c1e8497d79c9c8a96485df217092d334e9b48fa8840fed11d03
Analyzer Verdict Alert OpenPhish phishing Office365
GET /microsoft.png HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 1045
Content-Type: image/png
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Accept-Ranges: bytes
ETag: "657094a4-415"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
hgjgdfjgd-gsduyfgru.azurewebsites.net/favicon-16x16.png
200 OK 479 B URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/favicon-16x16.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type PNG image data, 16 x 16, 8-bit grayscale, non-interlaced\012- data
Hash ee92c6b1ca25431a9d6a0920f5e8dc4a
14e98b360137c740897f7cd20eeba14f4b37ad44
588068edf01fbc11f9b41fb2f06192f30bd611ae3272eee9856321e4bd7e60d6
Analyzer Verdict Alert OpenPhish phishing Office365
GET /favicon-16x16.png HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Cookie: _ga_FT1CFV1H9N=GS1.1.1701966421.1.0.1701966421.0.0.0; _ga=GA1.1.1826425206.1701966421
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 479
Content-Type: image/png
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Accept-Ranges: bytes
ETag: "657094a4-1df"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
hgjgdfjgd-gsduyfgru.azurewebsites.net/_Fm7-alert.mp3
206 Partial Content 47 kB URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/_Fm7-alert.mp3
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2, 64 kbps, 22.05 kHz, Monaural\012- data
Hash f8f5fd3882872f49d670e459b361db30
1d85431040d60a36ade3b9b2b2aff5e598b5e2fd
2e6299c63eb0f460640e38c9c160bd0a0cf0e88603e400bb0149d462edc356cd
Analyzer Verdict Alert OpenPhish phishing Office365
GET /_Fm7-alert.mp3 HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Content-Length: 200832
Content-Type: audio/mpeg
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Content-Range: bytes 0-200831/200832
ETag: "657094a4-31080"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
hgjgdfjgd-gsduyfgru.azurewebsites.net/bg.png
200 OK 387 kB URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/bg.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type PNG image data, 1920 x 1126, 8-bit/color RGBA, non-interlaced\012- data
Size 387 kB (386648 bytes)
Hash db2c775d2583118bf4464dd65a58535b
45413378bf16997decf585915931305788e55328
de9fbe2de348e17bd4948011260ef297c4102b69068692daaba02bf632acd291
Analyzer Verdict Alert OpenPhish phishing Office365
GET /bg.png HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 386648
Content-Type: image/png
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Accept-Ranges: bytes
ETag: "657094a4-5e658"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
hgjgdfjgd-gsduyfgru.azurewebsites.net/en07.php
84 B URL GET hgjgdfjgd-gsduyfgru.azurewebsites.net/en07.php
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 52bf3ccddb64ba07d5d6d79fdfba4765
f369871f7f1efa470a92ebb8ab98ad26b6754965
11359d75d1ccf8ead98ba93030fb3e9050157c154ac53255f9dda71f1465c3d7
Analyzer Verdict Alert OpenPhish phishing Office365
GET /en07.php HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Cookie: _ga_FT1CFV1H9N=GS1.1.1701966421.1.0.1701966421.0.0.0; _ga=GA1.1.1826425206.1701966421
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 401 Unauthorized
Content-Type: text/html; charset=utf-8
Date: Thu, 07 Dec 2023 16:26:55 GMT
Server: nginx/1.24.0
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Set-Cookie: PHPSESSID=e895d3d87ab972681a67f34f591864f3; path=/
Transfer-Encoding: chunked
WWW-Authenticate: Basic realm="Call Microsoft Security Helpline immediately. "
X-Powered-By: PHP/8.2.8
Refresh: 0; url=/en07.php
hgjgdfjgd-gsduyfgru.azurewebsites.net/apple-touch-icon.png
200 OK 584 B URL GET HTTP/1.1 hgjgdfjgd-gsduyfgru.azurewebsites.net/apple-touch-icon.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
FingerprintB4:DA:43:A2:AD:21:20:A7:A5:AA:F7:9B:81:31:98:1A:50:B5:BB:67
ValidityWed, 06 Sep 2023 00:21:24 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type PNG image data, 180 x 180, 8-bit grayscale, non-interlaced\012- data
Hash 98a44584bd20fad32a292273e6e93b46
b12323aa74741c0248fb60553c86c3b51efbae95
a198e64abfd8636018e3614e7d8ad47d064c172d34c960e9cb35f3111390cf14
Analyzer Verdict Alert OpenPhish phishing Office365
GET /apple-touch-icon.png HTTP/1.1
Host: hgjgdfjgd-gsduyfgru.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Cookie: _ga_FT1CFV1H9N=GS1.1.1701966421.1.0.1701966421.0.0.0; _ga=GA1.1.1826425206.1701966421
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 584
Content-Type: image/png
Date: Thu, 07 Dec 2023 16:26:54 GMT
Server: nginx/1.24.0
Accept-Ranges: bytes
ETag: "657094a4-248"
Last-Modified: Wed, 06 Dec 2023 15:35:00 GMT
stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
200 OK 60 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
IP
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (59765)
Hash 02d223393e00c273efdcb1ade8f4f8b1
0cc93b8421d89c24a889642428b363cb831de78a
79c599dd760cec0c1621a1af49d9a2a49da5d45e1b37d4575bace0a5e0226582
GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hgjgdfjgd-gsduyfgru.azurewebsites.net
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 16:26:54 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"02d223393e00c273efdcb1ade8f4f8b1"
last-modified: Mon, 25 Jan 2021 22:04:11 GMT
cdn-cachedat: 09/17/2023 22:21:35
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 6bbc631a109be698fb8a438383dcff4a
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 831e22083b4a568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
200 OK 28 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
IP
Requested by https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (27303)
Hash 4fbd15cb6047af93373f4f895639c8bf
12d6861075de8e293265ff6ff03b1f3adcb44c76
ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5
GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hgjgdfjgd-gsduyfgru.azurewebsites.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 16:26:54 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"4fbd15cb6047af93373f4f895639c8bf"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 10/31/2023 18:58:32
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1047
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 25754c75fb460a03a208e88579fbc0b3
cdn-cache: HIT
cf-cache-status: HIT
age: 1070059
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 831e2207ceb01c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
20.119.0.47
104.17.25.14