| www.ibiservice.com/ |  35.190.16.47 | 301 Moved Permanently | 0 B |
IP35.190.16.47:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET / HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 28 Jan 2023 20:10:42 GMT
Content-Type: text/html; Charset=UTF-8
Content-Length: 0
Cache-Control: private
Location: https://www.ibiservice.com/Default.asp
Set-Cookie: vsettings=; expires=Tue, 23-Jan-2024 08:00:00 GMT; path=/
ASPSESSIONIDQCTRTTTB=EFAKFHHCHEHEHPAFCHPOFIGA; path=/; HttpOnly
TS014fe2d9=014f69ac9b5a0a6bf6cc4e690e1a59ee1e12f684744cadc7c080436adc577bfe55a0c33eeed7ef50442cdde84779e120a276f5df35acc77a365a1a5d5efb504659ffe31f5ccac736d944ab163504d656ea7054e93d; Path=/
Strict-Transport-Security: max-age=15552000
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-XSS-Protection: 1; mode=block
Via: 1.1 google
|
|
| r3.o.lencr.org/ |  95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash81dd5c5cc5b3278876cb44dcb520a60f c0511a59e9eccdcdda98717b87c89c5d59974808 41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13381
Expires: Sat, 28 Jan 2023 23:53:44 GMT
Date: Sat, 28 Jan 2023 20:10:43 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hasha2104f935c638b4767ca5ae0d738ef23 85c6af15af749be0ceeae6de17c36925b750f166 5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6913
Expires: Sat, 28 Jan 2023 22:05:56 GMT
Date: Sat, 28 Jan 2023 20:10:43 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashdcd75ca6daca51c5e39d431468511793 07f76d3bf23d65c9110d810fa71a994e39e085d3 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 19:35:31 GMT
content-type: application/json
age: 2112
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash302c7548412192add063ad6c8b99cf3b e5d178931a27db036ce8daae302594d3ff7050b8 fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15877
Expires: Sun, 29 Jan 2023 00:35:20 GMT
Date: Sat, 28 Jan 2023 20:10:43 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 1Vjh7yTGHdr453k9VvISLuh/JI4j2YjIQL+BMDSNJoEAOxfY0b5Fwofm9PElCoGGJ4iYTgWEHJs=
x-amz-request-id: RYW9WF2FJ32DW96Q
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 19:21:05 GMT
age: 2978
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash865f7493df080762fcb40f5c26b07307 2a615ff1bc1ab5d79f5903ca94743e0e6f40f578 48e17668f9c1e2a56ab1228b6da30802e54db735dba5b390da7f7171dbbb0fe1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48E17668F9C1E2A56AB1228B6DA30802E54DB735DBA5B390DA7F7171DBBB0FE1"
Last-Modified: Fri, 27 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 29 Jan 2023 02:10:43 GMT
Date: Sat, 28 Jan 2023 20:10:43 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 19:41:40 GMT
age: 1743
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash16a7b6a7128312e2f985d30df18c4487 6017bff79ffb525d9c7f9f32b999b74b5dc69602 663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13439
Expires: Sat, 28 Jan 2023 23:54:42 GMT
Date: Sat, 28 Jan 2023 20:10:43 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash7da8f9a23d8c05f64f248e4e3427c76e e2d001c2909cd9403173cbb0e288d55fbc8e4d0a db8790004124a0eeb0676860170ad9c37250b2ba697a27dee62c99b64c67b4b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 20:10:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash8c630e9bbc930d1c367efa81b67be3f7 ec536695531d40a813d99a06271c7c2d698d51d3 39ca0a60c3e2e85712757ead0830d0da82beac1e4f44b6e90243e5ca9326bf4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 20:10:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash7da8f9a23d8c05f64f248e4e3427c76e e2d001c2909cd9403173cbb0e288d55fbc8e4d0a db8790004124a0eeb0676860170ad9c37250b2ba697a27dee62c99b64c67b4b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 20:10:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ajax.googleapis.com/ajax/libs/jqueryui/1.8.4/themes/base/jquery-ui.css | 142.250.74.74 | 200 OK | 5.9 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jqueryui/1.8.4/themes/base/jquery-ui.css IP142.250.74.74:0
File typeASCII text, with very long lines (500) Hash04f5405d7e41b7dc06e361c3fb09a6c2 753756e43c91b91ea208ea7ca2d1c0480549bd69 49106c65f71b4fbd6ace8026332d714f16ef947b2e769f5b81c6bf985034b842
GET /ajax/libs/jqueryui/1.8.4/themes/base/jquery-ui.css HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 5913
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 24 Jan 2023 21:14:59 GMT
expires: Wed, 24 Jan 2024 21:14:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/css; charset=UTF-8
age: 341744
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jqueryui/1.8.4/jquery-ui.min.js | 142.250.74.74 | 200 OK | 50 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jqueryui/1.8.4/jquery-ui.min.js IP142.250.74.74:0
File typeASCII text, with very long lines (658) Hashc617961fc0c2861735d19bf493156488 e36f249ab187b77f092103ba921337fb5621367d 3a3dd88f29223605b72b77228ee82950b18f7f5a7fd2a6f00990540b76a01e52
GET /ajax/libs/jqueryui/1.8.4/jquery-ui.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 50116
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 19:37:30 GMT
expires: Thu, 25 Jan 2024 19:37:30 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 261193
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/template/help.gif | 35.190.16.47 | 200 OK | 282 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/template/help.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 72 x 29\012- data Hashf012c6cfd73427947e3f448be42f96a4 36345c59a7bd61659b4be5c7ed8d835de5d908dd 548ac7db598549ecb665b1dbf3f2cc2d6ec2db5560850c6601f972011afc7364
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/template/help.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 282
last-modified: Thu, 03 Apr 2008 17:41:00 GMT
accept-ranges: bytes
etag: "b1f24ee1b195c81:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/template/viewcart.gif | 35.190.16.47 | 200 OK | 510 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/template/viewcart.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 108 x 29\012- data Hash56a273bf776f73fe393d0db3e5eeae87 4292fd3c3e00fc3239b36d7e3a8cdf9fd23ad5fd 085bb79eb148f9c55c63cbdb49a2482e4b5802cbe18ec26a7ddf3bce46a1dda8
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/template/viewcart.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 510
last-modified: Thu, 03 Apr 2008 17:41:00 GMT
accept-ranges: bytes
etag: "87ef8ce1b195c81:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/clear1x1.gif | 35.190.16.47 | 200 OK | 43 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/clear1x1.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash325472601571f31e1bf00674c368d335 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/clear1x1.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 43
last-modified: Thu, 03 Apr 2008 17:40:47 GMT
accept-ranges: bytes
etag: "1eb7cfd9b195c81:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/Template/Menu1_Bullet.gif | 35.190.16.47 | 200 OK | 43 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/Template/Menu1_Bullet.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/Template/Menu1_Bullet.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 43
last-modified: Tue, 15 Dec 2009 15:40:08 GMT
accept-ranges: bytes
etag: "caa6c3e19c7dca1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/Template/Menu2_Bullet.gif | 35.190.16.47 | 200 OK | 43 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/Template/Menu2_Bullet.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/Template/Menu2_Bullet.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 43
last-modified: Tue, 15 Dec 2009 15:40:08 GMT
accept-ranges: bytes
etag: "caa6c3e19c7dca1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/Template/Menu4_Bullet.gif | 35.190.16.47 | 200 OK | 43 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/Template/Menu4_Bullet.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/Template/Menu4_Bullet.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 43
last-modified: Tue, 15 Dec 2009 15:40:09 GMT
accept-ranges: bytes
etag: "855412e29c7dca1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/Template/Menu3_Bullet.gif | 35.190.16.47 | 200 OK | 43 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/Template/Menu3_Bullet.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/Template/Menu3_Bullet.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 43
last-modified: Tue, 15 Dec 2009 15:40:09 GMT
accept-ranges: bytes
etag: "855412e29c7dca1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/template/myaccount.gif | 35.190.16.47 | 200 OK | 757 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/template/myaccount.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 173 x 29\012- data Hashfc7262490b345c545779ed5ef23731b7 87978545fe78d7b3467f04e1db28431a683ba223 fc29851002c35a935d4921443d5523c2a9e139687eda4cb247942865d825b7a8
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/template/myaccount.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 757
last-modified: Thu, 03 Apr 2008 17:41:00 GMT
accept-ranges: bytes
etag: "de518fe1b195c81:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/a/i/seal_volusion1.png | 35.190.16.47 | 200 OK | 22 kB |
URL HTTP/2www.ibiservice.com/a/i/seal_volusion1.png IP35.190.16.47:0
File typePNG image data, 100 x 113, 8-bit/color RGBA, non-interlaced\012- data Hashb5684040ca99979fdd8276340ce2af4d a8a19e091d2ac5defdc33c69dbcfbfdc744370ce 75a4a0bca5232761dec5d7492d6d9d544a282be1e12df586a6a3922d8f35c5f1
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /a/i/seal_volusion1.png HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/png
content-length: 22182
last-modified: Fri, 13 Jan 2023 19:01:04 GMT
accept-ranges: bytes
etag: "05871628127d91:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/Template/Menu5_Bullet.gif | 35.190.16.47 | 200 OK | 43 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/Template/Menu5_Bullet.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/Template/Menu5_Bullet.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 43
last-modified: Tue, 15 Dec 2009 15:40:10 GMT
accept-ranges: bytes
etag: "9b6463e29c7dca1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash7da8f9a23d8c05f64f248e4e3427c76e e2d001c2909cd9403173cbb0e288d55fbc8e4d0a db8790004124a0eeb0676860170ad9c37250b2ba697a27dee62c99b64c67b4b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 20:10:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/cart/amex.jpg | 35.190.16.47 | 200 OK | 16 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/cart/amex.jpg IP35.190.16.47:0
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 138x135, components 3\012- data Hash4f0dfef884d847d68ad77fe1e900c7ce 3aa7342ffdf464cfcffb88798a04247704e41688 9a5ace67bd80acf827ff1f3f112cd8f714a3f0345d1ae11c88b81b2321dc4dab
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/cart/amex.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/jpeg
content-length: 16365
last-modified: Fri, 26 Feb 2010 20:21:18 GMT
accept-ranges: bytes
etag: "51d8ff4021b7ca1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/HomePage/FeaturedProducts.gif | 35.190.16.47 | 200 OK | 689 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/HomePage/FeaturedProducts.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 211 x 13\012- data Hash65fda9689b68414a6ab9a1a29c0b25ab e87e1ea73647ef463cb95a521c9b837da69580cb ea5f3947cd72e91d34f9eaada347ce55abcb9fa2fab52c6daab5e515ed6202ff
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/HomePage/FeaturedProducts.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 689
last-modified: Wed, 03 Mar 2010 16:09:18 GMT
accept-ranges: bytes
etag: "92dbc0e0ebbaca1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/Bullet_MoreInfo.gif | 35.190.16.47 | 200 OK | 116 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/Bullet_MoreInfo.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 52 x 9\012- data Hash8ae021e26e1a4c417a311fb6801bf919 05198d8192fb982063637f67cf579760ec15e33c eb80411669c1aafebb9f2e476dcb37807191fc8ce0a087ff41c65a2b89c0ee5c
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/Bullet_MoreInfo.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 116
last-modified: Thu, 03 Apr 2008 17:40:43 GMT
accept-ranges: bytes
etag: "98d3a1d7b195c81:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/assets/images/newcc_logos.png | 35.190.16.47 | 200 OK | 3.5 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/assets/images/newcc_logos.png IP35.190.16.47:0
File typePNG image data, 105 x 29, 8-bit/color RGBA, non-interlaced\012- data Hashc5215032fe6e91abc642eadf40380d65 345bc5b30e833836ae8a90ee888840f694188d50 d3728ed54a4007d2d472cdefd2e86d2a460b1e4d8cac67e320f7eb2c52eb5068
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/assets/images/newcc_logos.png HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/png
content-length: 3511
last-modified: Fri, 12 Oct 2007 23:06:25 GMT
accept-ranges: bytes
etag: "80ae208324dc81:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/assets/images/cideb-logo_opt.jpg | 35.190.16.47 | 200 OK | 21 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/assets/images/cideb-logo_opt.jpg IP35.190.16.47:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 400x174, components 3\012- data Hash4cae2ce38f5737057a4c72c690b9add4 98300eff9b68294db1891c14523319bd7af9ade1 96c4bb35e469a70f579e7f025a80b529eb5380ae660c494636e5ac5765a4ad39
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/assets/images/cideb-logo_opt.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/jpeg
content-length: 20861
last-modified: Tue, 19 Apr 2011 16:50:02 GMT
accept-ranges: bytes
etag: "958facd3b1fecb1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/assets/images/cornelsen%20logo.jgp.gif | 35.190.16.47 | 200 OK | 2.4 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/assets/images/cornelsen%20logo.jgp.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 110 x 32\012- data Hash299f664b711493378d5d2b4cf71d60eb a8a601bee32e72f80be388dc1da51d5de73bff6c 5fa181150917b12c5d89d207c148bdb7a020158f18a5aab12df628eb8a214583
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/assets/images/cornelsen%20logo.jgp.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 2421
last-modified: Mon, 11 Jul 2011 14:53:41 GMT
accept-ranges: bytes
etag: "07aee52da3fcc1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/assets/images/logo_klett.gif | 35.190.16.47 | 200 OK | 1.8 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/assets/images/logo_klett.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 100 x 50\012- data Hashcaebd2ba26a692e6115343a128c67d02 72a9ef8bffc868fd59b93895bc4655f6eea7f0a4 524c639a0f3eac290b91b5734765fd29a3ad2312f597d17da43cbd1a9fb0cc50
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/assets/images/logo_klett.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 1814
last-modified: Wed, 10 Mar 2010 20:25:18 GMT
accept-ranges: bytes
etag: "3b511acd8fc0ca1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/photos/9783926893116-1.jpg | 35.190.16.47 | 200 OK | 8.8 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/photos/9783926893116-1.jpg IP35.190.16.47:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 150x150, components 3\012- data Hash5aa508a375410f8c67d0e3af71bf8a3e c3b54327e1a66e9ad3a063fae948563f862a03e0 e4ff612ed20e7eb3ca051b0d7e5fdf2593a588d5a05bf3150dce62f87b7330e0
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/photos/9783926893116-1.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/jpeg
content-length: 8824
last-modified: Tue, 10 Apr 2012 20:53:26 GMT
accept-ranges: bytes
etag: "affcddf95b17cd1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/photos/4010232053817-1.jpg | 35.190.16.47 | 200 OK | 12 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/photos/4010232053817-1.jpg IP35.190.16.47:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 108x150, components 3\012- data Hashf0bf85213bb102b6a2aa40237e04965d c7cec031c89df4662c3ac92d8e1db52a183fefad b6efb5bde4ec9522b7d7358e383868d1b5bca8ab315b2abf4b49ddcffbf2ddd7
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/photos/4010232053817-1.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/jpeg
content-length: 12082
last-modified: Wed, 19 Oct 2011 22:03:44 GMT
accept-ranges: bytes
etag: "955d32f8aa8ecc1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/Template/footer_arrow.gif | 35.190.16.47 | 200 OK | 489 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/Template/footer_arrow.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 23 x 23\012- data Hash04a590da90da1642dc948773eb46c135 a9fedbceb00dc47ae3370ef334c235c468f74ba5 9df70033aa922cdd5d105ecbd31bac28f5e9f3f7b825afc4e0b0e6526856d1eb
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/Template/footer_arrow.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 489
last-modified: Thu, 03 Apr 2008 17:40:59 GMT
accept-ranges: bytes
etag: "e5431fe1b195c81:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/a/i/blank.gif | 35.190.16.47 | 200 OK | 49 B |
URL HTTP/2www.ibiservice.com/a/i/blank.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash56398e76be6355ad5999b262208a17c9 a1fdee122b95748d81cee426d717c05b5174fe96 2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /a/i/blank.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 49
last-modified: Fri, 13 Jan 2023 19:01:04 GMT
accept-ranges: bytes
etag: "05871628127d91:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/buttons/btn_go_gray.gif | 35.190.16.47 | 200 OK | 500 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/buttons/btn_go_gray.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 30 x 24\012- data Hash0fe51b561b9f2fb6bdfba61c4dba1106 25c5a86c322bcdf6dbddb04fdb4021ae13d4ba97 2c7755045704e96ea93b125d5a8d8dd1e8560c5eeb9c6c20bbba6fe1174f2da0
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/buttons/btn_go_gray.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 500
last-modified: Wed, 10 Mar 2010 20:43:07 GMT
accept-ranges: bytes
etag: "34e6684a92c0ca1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/HomePage/FBox_Border_Bottom.gif | 35.190.16.47 | 200 OK | 79 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/HomePage/FBox_Border_Bottom.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 185 x 4\012- data Hash4edf10cfbebd33fe9c1159d8e60c06b8 99bd6fd6b6ec6eb5762a2a178bf85da371e6555d a223faf78be8822a7b85d38fb58b3922e6140b994fc1a83174cdf2259df7d033
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/HomePage/FBox_Border_Bottom.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 79
last-modified: Thu, 03 Apr 2008 17:40:52 GMT
accept-ranges: bytes
etag: "5f98fdcb195c81:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/pixel_white.gif | 35.190.16.47 | 200 OK | 43 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/pixel_white.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/pixel_white.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/gif
content-length: 43
last-modified: Thu, 03 Apr 2008 17:40:58 GMT
accept-ranges: bytes
etag: "4fb148e0b195c81:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/assets/images/9782090331431.jpg | 35.190.16.47 | 200 OK | 55 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/assets/images/9782090331431.jpg IP35.190.16.47:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 350x475, components 3\012- data Hashc2f188dff1a45c88751163c737242d6c e7d66f5b55654accedccec22c7206b72b206cbce 1b91d12392652eccfafb98349f82cc28ac810881446f10901cbf0fb30f2bc6be
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/assets/images/9782090331431.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/jpeg
content-length: 55230
last-modified: Wed, 22 May 2013 14:28:30 GMT
accept-ranges: bytes
etag: "b74beda1f856ce1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/assets/images/9783060208722.jpg | 35.190.16.47 | 200 OK | 20 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/assets/images/9783060208722.jpg IP35.190.16.47:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 183x183, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7], baseline, precision 8, 300x424, components 3\012- data Hash8811b3ea7b99a17f7585270e910c20ea 8cfdb829215cd665d097ee3791019f1867675692 d146715b514504125e2f8d4f9c355bc1db2bdd3a42fe35c4366194ab4583bfd8
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/assets/images/9783060208722.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/jpeg
content-length: 20297
last-modified: Wed, 22 May 2013 14:08:18 GMT
accept-ranges: bytes
etag: "d6bf79cff556ce1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/assets/images/9783126762052.jpg | 35.190.16.47 | 200 OK | 16 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/assets/images/9783126762052.jpg IP35.190.16.47:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 166x222, components 3\012- data Hash147828a8a99f0ee86f56f174fa1022b3 1ca9215558001042df89033f3505e8763d598a74 4ca7d98ff6e51d1e3d90b01e8dd7445c1d7a56d06cccece314cd5bf521c5471d
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/assets/images/9783126762052.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/jpeg
content-length: 16088
last-modified: Wed, 22 May 2013 14:15:35 GMT
accept-ranges: bytes
etag: "9b187d3f656ce1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/photos/9783867890007-1.jpg | 35.190.16.47 | 200 OK | 13 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/photos/9783867890007-1.jpg IP35.190.16.47:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 98x150, components 3\012- data Hash4a0a8048a7b9374a1e11917ebea39939 7783d639129076cba17ae0605e27c0894771057e 8054ddbce14d5329e3236b9d76d675800792fbd41b5044c748cde484cb11a894
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/photos/9783867890007-1.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/jpeg
content-length: 12762
last-modified: Fri, 10 Sep 2010 21:38:18 GMT
accept-ranges: bytes
etag: "dc16ea7b3051cb1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/photos/9783895552380-1.jpg | 35.190.16.47 | 200 OK | 10 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/photos/9783895552380-1.jpg IP35.190.16.47:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 104x150, components 3\012- data Hash1a4e752a63144099d6748f9a699160e7 8cf14e9cf0b34b39742fabdff258339a276056ca 08b42ef2b8e486ae6a7a783f58bd81aedaf300698954edd656514606597cec84
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/photos/9783895552380-1.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/jpeg
content-length: 10491
last-modified: Mon, 08 Nov 2010 22:16:16 GMT
accept-ranges: bytes
etag: "2b7a1390927fcb1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/assets/images/reclam%20logo2.jpg | 35.190.16.47 | 200 OK | 2.5 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/assets/images/reclam%20logo2.jpg IP35.190.16.47:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 50x50, components 3\012- data Hashab4ec230f64ce62356a040ce66bbdb5d e2307d0a35002fa89c43745cd1caacd2b1bdf700 3568d689eaa0d570d5648c9ff1e49e121c6aa5a4c3283e7dadee13541911cfbf
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/assets/images/reclam%20logo2.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/jpeg
content-length: 2458
last-modified: Fri, 19 Nov 2010 15:33:20 GMT
accept-ranges: bytes
etag: "e776318ff87cb1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/assets/images/langenscheidt%20logo.jpg | 35.190.16.47 | 200 OK | 3.0 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/assets/images/langenscheidt%20logo.jpg IP35.190.16.47:0
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 158x39, components 3\012- data Hash254ef7b0c089bf88e651b4bc17e2bb39 c9071ebe6d0892d56ad9439b5a5c2cf45556aeb0 39651d649b4ab5500781e1f8469f20468b9f45fd29a51a0eff6bab339a3d7220
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/assets/images/langenscheidt%20logo.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/jpeg
content-length: 2970
last-modified: Wed, 27 Apr 2011 17:27:48 GMT
accept-ranges: bytes
etag: "bfbf46d05cc1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/assets/images/9782218951985.jpg | 35.190.16.47 | 200 OK | 69 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/assets/images/9782218951985.jpg IP35.190.16.47:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 341x475, components 3\012- data Hash4370d20d63aac0f310d9b2366a941ec4 58cc6d8f1c9499c90fa7974560e005cf37c536a5 6685409afb30f0d8293e2f94c74657b86fa6b1396ce1a2fbfa841c575216112a
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/assets/images/9782218951985.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: image/jpeg
content-length: 68673
last-modified: Wed, 22 May 2013 14:40:07 GMT
accept-ranges: bytes
etag: "eeb3e040fa56ce1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/ibis%20bird.jpg | 35.190.16.47 | 200 OK | 42 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/ibis%20bird.jpg IP35.190.16.47:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=8, xresolution=182, yresolution=190, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2009:04:02 19:54:48], baseline, precision 8, 400x264, components 3\012- data Hash3ed4a434772284908631a983bbde3ee3 cf5c84091593041567e4b6efcdadea6ae07c53fa 9de4401528f444cb98bfb1b3e5cb379f5319ea2af5dd017cba637247c39e0574
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/ibis%20bird.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: image/jpeg
content-length: 41986
last-modified: Fri, 05 Mar 2010 22:02:24 GMT
accept-ranges: bytes
etag: "fceab89afbcca1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 52.42.252.225 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.42.252.225:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: uB8IzFYc5dJSn4RCYHSmZQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: w7l4SQp6mGTVt/xSWxwR2ShxrtE=
|
|
| www.ibiservice.com/v/vspfiles/photos/9783549074022-1.jpg | 35.190.16.47 | 200 OK | 9.7 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/photos/9783549074022-1.jpg IP35.190.16.47:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 93x150, components 3\012- data Hashf15e08a4595db417cd13ad986c060a20 9887582546e9bb419516abef26dce0b469b3bc6c 8e5dc5a3a6029428fde170746ef9762f07cc9af5464cddafa2dd740bdf8c7667
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/photos/9783549074022-1.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: image/jpeg
content-length: 9733
last-modified: Wed, 02 Nov 2011 22:09:55 GMT
accept-ranges: bytes
etag: "0122b27ac99cc1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/assets/images/harrypotter%20banner.jpg | 35.190.16.47 | 200 OK | 42 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/assets/images/harrypotter%20banner.jpg IP35.190.16.47:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, xresolution=110, yresolution=118], baseline, precision 8, 384x105, components 3\012- data Hashdfca7b0afdb10d8e5874136cc2b9a7e8 217cf32458f0b7ecb018bc7ec3affba72c99bdd7 91dfb573c383bf166cdda8317c4f03108ca54d231ba2bcef96b5c10530fa2401
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/assets/images/harrypotter%20banner.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: image/jpeg
content-length: 41985
last-modified: Tue, 16 Nov 2010 23:16:28 GMT
accept-ranges: bytes
etag: "6687344ce485cb1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/photos/9783608910865-1.jpg | 35.190.16.47 | 200 OK | 7.8 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/photos/9783608910865-1.jpg IP35.190.16.47:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 102x150, components 3\012- data Hash0732fb24324884efd1a46c2802a43768 4490c5768c2bd9a21f6f9c1e51e406b9b2444291 7f5ee5acdae693b42e8a2bfcafcba49513ad9da14a8f8b3c5e0f63170cbe70f5
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/photos/9783608910865-1.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: image/jpeg
content-length: 7779
last-modified: Wed, 16 Nov 2011 22:14:58 GMT
accept-ranges: bytes
etag: "38853d2dada4cc1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/assets/images/hueber%20logo%202.jpg | 35.190.16.47 | 200 OK | 11 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/assets/images/hueber%20logo%202.jpg IP35.190.16.47:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, xresolution=194, yresolution=202], baseline, precision 8, 200x115, components 3\012- data Hasha564c4a003022227eddd946b50bf10f1 d7bbf9a95596986d172d9ca28c6808974d23548f 9760db86304a9f8ebffcff72b2ba191cfe607a097951594490fa8c3d7f0afeb6
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/assets/images/hueber%20logo%202.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: image/jpeg
content-length: 10672
last-modified: Tue, 19 Jul 2011 21:37:42 GMT
accept-ranges: bytes
etag: "c898e4165c46cc1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/assets/images/facebook-logo.jpg | 35.190.16.47 | 200 OK | 81 kB |
URL HTTP/2www.ibiservice.com/v/vspfiles/assets/images/facebook-logo.jpg IP35.190.16.47:0
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2007:12:02 16:07:26], baseline, precision 8, 800x301, components 3\012- data Hasha494608bf366dc7b51ab72c34b1929fb 471d1313ba5f80bd292e48b0f7db500d1bd94572 2835c414c80752a68bea2bdb88c25349e8b32f2686b543de3d16b5538a299982
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/assets/images/facebook-logo.jpg HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: image/jpeg
content-length: 80643
last-modified: Tue, 14 Jun 2011 21:21:46 GMT
accept-ranges: bytes
etag: "cabef11d92acc1:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/a/contentbuilder/assets/icons/css/fontello.css | 35.190.16.47 | 200 OK | 1.5 kB |
URL HTTP/2www.ibiservice.com/a/contentbuilder/assets/icons/css/fontello.css IP35.190.16.47:0
Hash99c7ba325c8484272b1edbf95179dca1 54f0205a673b019b535ff1c045682bdade7c3124 68e2e14a4f3b7c91f2e7acb4881afd2ce532e79f349c5f802888492cf1000971
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /a/contentbuilder/assets/icons/css/fontello.css HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/a/contentbuilder/assets/default/content.css
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 13 Jan 2023 19:01:00 GMT
etag: W/"0fee608127d91:0"
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| js-cdn.dynatrace.com/jstag/17052aca8bb/bf64226adg/f2c8c7e93216e073_complete.js | 54.230.111.72 | 404 Not Found | 15 kB |
URL HTTP/2js-cdn.dynatrace.com/jstag/17052aca8bb/bf64226adg/f2c8c7e93216e073_complete.js IP54.230.111.72:0
Hash7d12c8f8c43742db49f104cc51ef7e16 d54f5fb0d0cad07998fbdabc13b0fb74a0252494 b2d4f50ff5fe1bc508ad8bc8aa6dca5d97c7bdc16bb20396b900ffba77d6fa24
GET /jstag/17052aca8bb/bf64226adg/f2c8c7e93216e073_complete.js HTTP/1.1
Host: js-cdn.dynatrace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ibiservice.com
Connection: keep-alive
Referer: https://www.ibiservice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
date: Sat, 28 Jan 2023 20:10:44 GMT
x-oneagent-js-injection: true
traffic-source: UNKNOWN
dynatrace-response-source: Cluster
dynatrace-response-id: HBFTMUKN6ULX
cache-control: must-revalidate,no-cache,no-store
x-cache: Error from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yweXciINafyLxW48zmNozumA0w0XWPABC9Gowo-51oOdBLKmMbYbUg==
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/css/Navigation.css | 35.190.16.47 | 200 OK | 490 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/css/Navigation.css IP35.190.16.47:0
Hashe357225e2d148771c230b02eaded2b19 6a37ee45c15c0fed963b3143863d856f35f787fb 7b7bccf9d72457b5724ac80d0ab069a6180c3769ef3a2628fa1e37e75c638cad
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/css/Navigation.css HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/v/vspfiles/templates/50/css/Imports.css
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Mon, 31 Jan 2011 23:12:19 GMT
etag: W/"92e224f9cc1cb1:0"
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/a/contentbuilder/assets/ionicons/css/ionicons.min.css | 35.190.16.47 | 200 OK | 8.4 kB |
URL HTTP/2www.ibiservice.com/a/contentbuilder/assets/ionicons/css/ionicons.min.css IP35.190.16.47:0
Hashf986d173a0705a526520bdfa1ae14c09 073a8795a4a8301bb8211b798575eeec842aebaf b750b7ff5d38097153fabf382c264ae2987e9de8efc9bc577e7d32b6cb3ad6a5
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /a/contentbuilder/assets/ionicons/css/ionicons.min.css HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/a/contentbuilder/assets/default/content.css
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 13 Jan 2023 19:01:00 GMT
etag: W/"0fee608127d91:0"
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/Grid_Divider_Vertical.gif | 35.190.16.47 | 200 OK | 144 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/Grid_Divider_Vertical.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 50 x 50\012- data Hash1b36755a4c581ab783e847db380a55a4 9144a99750c058ba8cf14a18f8bcce7074e5082c 0004733eb3d90b229b3c1beecb2159462e3a6ebe7abcf7c307fc2d7e25bb5c41
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/Grid_Divider_Vertical.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: image/gif
content-length: 144
last-modified: Thu, 03 Apr 2008 17:40:49 GMT
accept-ranges: bytes
etag: "b449a6dab195c81:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/css/Content_Area.css | 35.190.16.47 | 200 OK | 532 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/css/Content_Area.css IP35.190.16.47:0
Hashd902b02be572d56593a2fa6e3ba2f05c 243811e0351850ac4fa6e115b98405965b12d5f3 ed0a2fb52d5ac8177d65b9bdea0644b22a06ae6dfdddce964b13397e560d1b6e
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/css/Content_Area.css HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/v/vspfiles/templates/50/css/Imports.css
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Thu, 03 Apr 2008 17:40:41 GMT
etag: W/"e5a62d6b195c81:0"
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js | 142.250.74.74 | 200 OK | 79 B |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js IP142.250.74.74:0
Hash828a6ac948a5ce2cb4ef5fefc8bb4578 59bf1339bce038e96a1dc225bedc7e559ba58bb5 2ce1d2dcf15a3565527c32e4905f8542fb645f3475232d06b920c51ae3b159bb
GET /ajax/libs/jquery/1.4.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 24715
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 00:13:11 GMT
expires: Fri, 26 Jan 2024 00:13:11 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 244652
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/HomePage/FBox_Border_Left.gif | 35.190.16.47 | 200 OK | 43 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/HomePage/FBox_Border_Left.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 3 x 1\012- data Hashb30e4568c6d47bd540d3a7b5cd18f342 7aa5ead8e63ca95d3cd66ef60b003830542f1044 5f5b86b2bfd48c442679d3739f2914a98f9d91208a6cf80537e922488e5141a8
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/HomePage/FBox_Border_Left.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: image/gif
content-length: 43
last-modified: Thu, 03 Apr 2008 17:40:52 GMT
accept-ranges: bytes
etag: "5f98fdcb195c81:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/images/HomePage/FBox_Heading_Back.gif | 35.190.16.47 | 200 OK | 924 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/images/HomePage/FBox_Heading_Back.gif IP35.190.16.47:0
File typeGIF image data, version 89a, 230 x 23\012- data Hash152ed5aae94c9c090a05d6b6a53d008e a3dca0c82e974abb51e071372b090a70f3a69dad 36ee4ad91b93d1b494811312a97368d079d025aa3e18a16f077c5930759d4e42
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/images/HomePage/FBox_Heading_Back.gif HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: image/gif
content-length: 924
last-modified: Thu, 03 Apr 2008 17:40:52 GMT
accept-ranges: bytes
etag: "b66b91dcb195c81:0"
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashbab8a4c1e6bb2e6c9cc00222eef1235d 1a5dd108e9f9aaf33bc048b0097a9f510d295cad fd182297a143655a9142e3ee5bbafefd76ca974094f43fb695611f6876f3ab63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 20:10:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ssl.google-analytics.com/ga.js | 216.58.207.232 | 200 OK | 17 kB |
URL HTTP/2ssl.google-analytics.com/ga.js IP216.58.207.232:0
File typeASCII text, with very long lines (1305) Hash01d5892e6e243b52998310c2925b9f3a 58180151b6a6ee4af73583a214b68efb9e8844d4 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Sat, 28 Jan 2023 18:41:14 GMT
expires: Sat, 28 Jan 2023 20:41:14 GMT
cache-control: public, max-age=7200
age: 5370
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashbab8a4c1e6bb2e6c9cc00222eef1235d 1a5dd108e9f9aaf33bc048b0097a9f510d295cad fd182297a143655a9142e3ee5bbafefd76ca974094f43fb695611f6876f3ab63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 20:10:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ssl.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=149555942&utmhn=www.ibiservice.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=International%20Book%20Import%20Service%2C%20Inc.%20(IBIS)&utmhid=1085746420&utmr=-&utmp=%2FDefault.asp&utmht=1674936649031&utmac=UA-16909011-1&utmcc=__utma%3D51604593.530378822.1674936649.1674936649.1674936649.1%3B%2B__utmz%3D51604593.1674936649.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1354315321&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ | 216.58.207.232 | 200 OK | 35 B |
URL HTTP/2ssl.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=149555942&utmhn=www.ibiservice.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=International%20Book%20Import%20Service%2C%20Inc.%20(IBIS)&utmhid=1085746420&utmr=-&utmp=%2FDefault.asp&utmht=1674936649031&utmac=UA-16909011-1&utmcc=__utma%3D51604593.530378822.1674936649.1674936649.1674936649.1%3B%2B__utmz%3D51604593.1674936649.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1354315321&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ IP216.58.207.232:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash28d6814f309ea289f847c69cf91194c6 0f4e929dd5bb2564f7ab9c76338e04e292a42ace 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=149555942&utmhn=www.ibiservice.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=International%20Book%20Import%20Service%2C%20Inc.%20(IBIS)&utmhid=1085746420&utmr=-&utmp=%2FDefault.asp&utmht=1674936649031&utmac=UA-16909011-1&utmcc=__utma%3D51604593.530378822.1674936649.1674936649.1674936649.1%3B%2B__utmz%3D51604593.1674936649.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1354315321&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Sat, 28 Jan 2023 20:10:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/net/ConfigurationSettingProvider.ashx?setting=FacebookGraphApiVersion | 35.190.16.47 | 200 OK | 4 B |
URL HTTP/2www.ibiservice.com/net/ConfigurationSettingProvider.ashx?setting=FacebookGraphApiVersion IP35.190.16.47:0
File typeASCII text, with no line terminators Hash240b69805c38121c6f91000e44817e6e f7a5459fb04ec1583a82c76d344fcd15a2d625e8 5a7dbdfa59dc40460c5aa3b7debcd15ef75c3442ab5000cfa5be6bd16531a745
GET /net/ConfigurationSettingProvider.ashx?setting=FacebookGraphApiVersion HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: text/plain; charset=utf-8
content-length: 4
cache-control: private
x-powered-by: Volusion
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashf2a0c2c0f25bdd19baf87cbb3a87dcdb bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13352
Expires: Sat, 28 Jan 2023 23:53:17 GMT
Date: Sat, 28 Jan 2023 20:10:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashf2a0c2c0f25bdd19baf87cbb3a87dcdb bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13352
Expires: Sat, 28 Jan 2023 23:53:17 GMT
Date: Sat, 28 Jan 2023 20:10:45 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg | 34.120.237.76 | 200 OK | 7.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashea24bcba583bd8bd139559448a343e68 b9d37c2b14f890d41983a59f352e8f7caa9c94bb e5ef5975eec964ae1684deb424f00833f2d217bdc7e6c385320ed3adeb6bc1c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7585
x-amzn-requestid: bfb52acb-e0d7-482d-8be9-be5db1c16cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_vkE5roAMF0Hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44663-2d38d314177e0ac40d4c8240;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1WE1zQwrCGVy8HLT9_BFkAr6rQE_ROyttMOByR32KeT0w2Hd_ylvYQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:16:00 GMT
age: 78885
etag: "b9d37c2b14f890d41983a59f352e8f7caa9c94bb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb7a0759c043594fbe85af422b59b8227 a05cfaad16078f42218dae233da38f6f5dff8487 e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 2e85f75e-ab9d-4d45-adad-7313950a9647
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSWbxGwnoAMFejw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d117-68f1a9e71a07a0453311fd32;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 06:49:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dbz3wXGNaetf6xvRE98rshyHy-FVfDo8co-4VDL0a4Qe3E4U8A82Og==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 18:36:06 GMT
age: 5679
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash0ed1a0bd725b2078b4cfe4ed83877901 62493ca03be9870aac2341e033611a6d56bd322a 706e84bc63fd98acaeb72789239af3210ae6e3910e6589d92a25899dc9059dfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12397
x-amzn-requestid: e8436997-696d-483a-b03a-a84e7ca614ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_T5HbzoAMFXsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445b2-1c2ccd0a187d0a3e2f6a59cc;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lmLHc8fKQYUpq9B-GyOQ0FKzhxi0ToTEPA7cu6JnQftgDFDNV8USvw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:37 GMT
age: 80048
etag: "62493ca03be9870aac2341e033611a6d56bd322a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg | 34.120.237.76 | 200 OK | 4.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4205d8106659e00fff1cbe9262918b8c ab4f6528594a1725934727dc7d834c028a79c609 31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:46 GMT
age: 80039
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb4afa01d2ffe17f8378e4c0b5afd4608 f5c7e2137efa07a207427a6b6fe1df541f85ea25 84fc0c05d25d674b5594b54720017332b86d391f66c7136d76cfce3e884e8e12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13375
x-amzn-requestid: 372fcbe8-85a1-4be2-a006-31fb9289c5e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-CxF6BoAMFyGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443ab-4b9860545c612cc416cbe599;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: yEFlWGi3J14JLA0l2h02VlIqV8opHesKP6GOvfoP5Tp0m7dOYDxIGA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:59:32 GMT
age: 79873
etag: "f5c7e2137efa07a207427a6b6fe1df541f85ea25"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b9e50f-b1f6-4665-acd6-9532ce741c2f.jpeg | 34.120.237.76 | 200 OK | 8.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b9e50f-b1f6-4665-acd6-9532ce741c2f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd04b173ecc22c619998bda87a8f9ce70 9e3c3ac1b5a8a5fcee6d1b0db1a61b71948d5fe5 c30fbd2807e36b637bd1382a955c34abb4fe88b99173692530d288fff0986896
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b9e50f-b1f6-4665-acd6-9532ce741c2f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8739
x-amzn-requestid: 77241ca1-d7d1-4133-bc06-e89a8db93aef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fbANlFiSoAMFrcQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44723-0b07156624f03d47665f2d4f;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:50:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9ZePVrD3oL-ImiMCCYYfuUbQ8l09Q-9F91cFRgSgFG2poVC5Ww4JaQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:57:22 GMT
age: 80003
etag: "9e3c3ac1b5a8a5fcee6d1b0db1a61b71948d5fe5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/a/c/default.css | 35.190.16.47 | 200 OK | 0 B |
URL HTTP/2www.ibiservice.com/a/c/default.css IP35.190.16.47:0
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /a/c/default.css HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 13 Jan 2023 19:00:52 GMT
etag: W/"04a4a5b8127d91:0"
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/css/Imports.css | 35.190.16.47 | 200 OK | 0 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/css/Imports.css IP35.190.16.47:0
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/css/Imports.css HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Thu, 03 Apr 2008 17:40:41 GMT
etag: W/"e5a62d6b195c81:0"
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| js-cdn.dynatrace.com/jstag/17052aca8bb/bf64226adg/f2c8c7e93216e073_complete.js | 54.230.111.72 | 404 Not Found | 0 B |
URL HTTP/2js-cdn.dynatrace.com/jstag/17052aca8bb/bf64226adg/f2c8c7e93216e073_complete.js IP54.230.111.72:0
GET /jstag/17052aca8bb/bf64226adg/f2c8c7e93216e073_complete.js HTTP/1.1
Host: js-cdn.dynatrace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ibiservice.com
Connection: keep-alive
Referer: https://www.ibiservice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/html
date: Sat, 28 Jan 2023 20:10:44 GMT
x-oneagent-js-injection: true
traffic-source: UNKNOWN
dynatrace-response-source: Cluster
dynatrace-response-id: ZBPFVB3PYQDP
cache-control: must-revalidate,no-cache,no-store
x-cache: Error from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -o7IVug-OtEj52eL_-KEEX_3pvQC3uDr8vMBUtHNa-WOHbmxjwCLtQ==
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/a/j/volusion.js?7.217.3.4918 | 35.190.16.47 | 200 OK | 0 B |
URL HTTP/2www.ibiservice.com/a/j/volusion.js?7.217.3.4918 IP35.190.16.47:0
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /a/j/volusion.js?7.217.3.4918 HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 13 Jan 2023 19:01:08 GMT
etag: W/"0b2d3648127d91:0"
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/a/j/soft_add_mult.js | 35.190.16.47 | 200 OK | 0 B |
URL HTTP/2www.ibiservice.com/a/j/soft_add_mult.js IP35.190.16.47:0
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | | | fortinet | Phishing | |
GET /a/j/soft_add_mult.js HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 13 Jan 2023 19:01:08 GMT
etag: W/"0b2d3648127d91:0"
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/a/c/soft_add.css | 35.190.16.47 | 200 OK | 0 B |
URL HTTP/2www.ibiservice.com/a/c/soft_add.css IP35.190.16.47:0
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /a/c/soft_add.css HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 13 Jan 2023 19:00:52 GMT
etag: W/"04a4a5b8127d91:0"
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/a/j/javascripts.js?6_5_7.217.3.4918 | 35.190.16.47 | 200 OK | 0 B |
URL HTTP/2www.ibiservice.com/a/j/javascripts.js?6_5_7.217.3.4918 IP35.190.16.47:0
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /a/j/javascripts.js?6_5_7.217.3.4918 HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 13 Jan 2023 19:01:08 GMT
etag: W/"0b2d3648127d91:0"
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/Default.asp | 35.190.16.47 | 200 OK | 0 B |
URL HTTP/2www.ibiservice.com/Default.asp IP35.190.16.47:0
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | | | fortinet | Phishing | |
GET /Default.asp HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: text/html; Charset=UTF-8
vary: Accept-Encoding
cache-control: private
set-cookie: vsettings=; expires=Tue, 23-Jan-2024 08:00:00 GMT; path=/
ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; path=/; HttpOnly
TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625; Path=/
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/a/j/soft_add.js | 35.190.16.47 | 200 OK | 0 B |
URL HTTP/2www.ibiservice.com/a/j/soft_add.js IP35.190.16.47:0
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | | | fortinet | Phishing | |
GET /a/j/soft_add.js HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 13 Jan 2023 19:01:08 GMT
etag: W/"0b2d3648127d91:0"
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/css/Template.css | 35.190.16.47 | 200 OK | 0 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/css/Template.css IP35.190.16.47:0
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/css/Template.css HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/v/vspfiles/templates/50/css/Imports.css
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 27 Jan 2023 20:31:20 GMT
etag: W/"9a4ba4508e32d91:0"
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/favicon.ico | 35.190.16.47 | 404 Not Found | 0 B |
URL HTTP/2www.ibiservice.com/favicon.ico IP35.190.16.47:0
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /favicon.ico HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: private
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/a/j/paypal-rest-default-buttons.js | 35.190.16.47 | 200 OK | 0 B |
URL HTTP/2www.ibiservice.com/a/j/paypal-rest-default-buttons.js IP35.190.16.47:0
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /a/j/paypal-rest-default-buttons.js HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 13 Jan 2023 19:01:08 GMT
etag: W/"0b2d3648127d91:0"
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/a/contentbuilder/assets/default/content.css | 35.190.16.47 | 200 OK | 0 B |
URL HTTP/2www.ibiservice.com/a/contentbuilder/assets/default/content.css IP35.190.16.47:0
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /a/contentbuilder/assets/default/content.css HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/Default.asp
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:43 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 13 Jan 2023 19:00:54 GMT
etag: W/"0777b5c8127d91:0"
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.ibiservice.com/v/vspfiles/templates/50/css/Colors.css | 35.190.16.47 | 200 OK | 0 B |
URL HTTP/2www.ibiservice.com/v/vspfiles/templates/50/css/Colors.css IP35.190.16.47:0
| Analyzer | Verdict | Alert |
|---|
| openphish | Facebook, Inc. | |
GET /v/vspfiles/templates/50/css/Colors.css HTTP/1.1
Host: www.ibiservice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibiservice.com/v/vspfiles/templates/50/css/Imports.css
Cookie: vsettings=; ASPSESSIONIDQCTRTTTB=FFAKFHHCOGIBIHNPLNEPLHPL; TS014fe2d9=014f69ac9b6efd47a3e03a4290ccade4434cbdc8cdfbc650662555a36b45b9ab43ac68e98b8d0f51605f9bd754d44f5932aa5b05e3c6c1d493d3e319d7588d5ec22463cbf33bb552530fb82a0cf9354e04efbd1625
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 20:10:44 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 17 Mar 2010 19:48:34 GMT
etag: W/"3854e6d3ac6ca1:0"
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|