Report - www.oasistiles.in/mails/static/img/dhl/dhl/

Report Overview

Submitted URL
www.oasistiles.in/mails/static/img/dhl/dhl/
IP
119.18.54.27
ASN
#394695 PUBLIC-DOMAIN-REGISTRY
Submitted
2023-02-03 11:58:17
Access
Website Title
Final URL
Tags
dhl logistics phishing
urlquery detections
Phishing - DHL

Detections

urlquery
17
Network Intrusion Detection
0
Threat Detection Systems
22

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-13T06:00:13Z	682 B	1.2 kB	93.184.220.29
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2.4 kB	6.2 kB	95.101.11.115
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
www.oasistiles.in	unknown	2015-02-02T20:55:20Z	2023-03-04T22:11:12Z	7.3 kB	2.0 MB	119.18.54.27
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	44.240.124.200
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.3 kB	58 kB	34.120.237.76
kit-free.fontawesome.com	22974	2019-05-10T14:34:22Z	2023-03-13T08:51:35Z	1.3 kB	2.6 kB	104.21.74.40
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-02-02	medium	www.oasistiles.in/mails/static/img/dhl/dhl/	DHL Airways, Inc.

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-03	medium	www.oasistiles.in/mails/static/img/dhl/dhl/	Phishing
2023-02-03	medium	www.oasistiles.in/mails/static/img/dhl/dhl/js/jquery.steps.js	Phishing
2023-02-03	medium	www.oasistiles.in/mails/static/img/dhl/dhl/js/fa.js	Phishing
2023-02-03	medium	www.oasistiles.in/mails/static/img/dhl/dhl/images/img.svg	Phishing
2023-02-03	medium	www.oasistiles.in/mails/static/img/dhl/dhl/js/jquery-3.3.1.min.js	Phishing
2023-02-03	medium	www.oasistiles.in/mails/static/img/dhl/dhl/js/jquery-ui.min.js	Phishing
2023-02-03	medium	www.oasistiles.in/mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Black.ttf	Phishing
2023-02-03	medium	www.oasistiles.in/mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Medium.ttf	Phishing
2023-02-03	medium	www.oasistiles.in/mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Regular.ttf	Phishing
2023-02-03	medium	www.oasistiles.in/mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Bold.ttf	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	www.oasistiles.in/mails/static/img/dhl/dhl/	6.3 kB	2023-03-07	2023-10-28
Pretty URL www.oasistiles.in/mails/static/img/dhl/dhl/ IP 119.18.54.27 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:59:32 Last Seen2023-10-28 19:10:05 Times Seen7 Hash f71bf7fba38d487669af37350122b822 9671853cd0607959b7398d6e41449fa5d35741e0 69330d49a2574758332682f2b69bafffde8017c403298848ddf1075dce00d70c Loading...

	www.oasistiles.in/mails/static/img/dhl/dhl/js/jquery.steps.js	55 kB	2023-03-07	2024-02-28
Pretty URL www.oasistiles.in/mails/static/img/dhl/dhl/js/jquery.steps.js IP 119.18.54.27 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:20:20 Last Seen2024-02-28 06:00:28 Times Seen142 Hash f90f52a6cf425581cd6d4d9030206b7d c2108a6336dfa75271c155e026d86d4ed8149efb 1591281f92394d16d6cc50fd69c9ca67619cdff00f5447eecd9b6e2345c1afaa Loading...

	www.oasistiles.in/mails/static/img/dhl/dhl/js/fa.js	5.8 kB	2023-03-07	2024-02-19
Pretty URL www.oasistiles.in/mails/static/img/dhl/dhl/js/fa.js IP 119.18.54.27 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:20:20 Last Seen2024-02-19 18:10:03 Times Seen89 Hash a8e6a3dde655976cfaa1ae45d67d78de 59d0646c28ea61558c1266ba00002a84b20868d9 717360f1759b6925a3e40ea293d825b50fc17e8bf7e849de44d70769664bf696 Loading...

	www.oasistiles.in/mails/static/img/dhl/dhl/js/jquery-3.3.1.min.js	87 kB	2023-03-07	2024-04-22
Pretty URL www.oasistiles.in/mails/static/img/dhl/dhl/js/jquery-3.3.1.min.js IP 119.18.54.27 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:32 Last Seen2024-04-22 06:11:10 Times Seen2973 Hash 378087a64e1394fc51f300bb9c11878c 0c3192b500a4fd550e483cf77a49806a5872185b 4fe68fa216176e6d1f4580e924bafecc9f519984ecc06b1a840a08b0d88c95de Loading...

	www.oasistiles.in/mails/static/img/dhl/dhl/js/jquery-ui.min.js	254 kB	2023-03-07	2024-03-19
Pretty URL www.oasistiles.in/mails/static/img/dhl/dhl/js/jquery-ui.min.js IP 119.18.54.27 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:20:20 Last Seen2024-03-19 05:09:47 Times Seen79 Hash d9770b4828d7480cd1f665c2c9363dbe 8ae1bdecefab956f66abd6c18f7de753e22c4704 35f185a2aacd3c120d77143582a9fede64aa4568dcc65a3137ff3a5a711de6a4 Loading...

HTTP Transactions (42)

URL IP Response Size

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7359
Expires: Fri, 03 Feb 2023 14:00:45 GMT
Date: Fri, 03 Feb 2023 11:58:06 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
81713f952b51a865ad9764cde68e3fdb
278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a
c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5518
Expires: Fri, 03 Feb 2023 13:30:04 GMT
Date: Fri, 03 Feb 2023 11:58:06 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 03 Feb 2023 11:43:35 GMT
content-type: application/json
age: 871
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7d2222d41721947297aaeb5a6e3d0714
04cc1ee417c8bf6338657fd4c2e4e1c1ddfd3065
de0e45969a2ad95e52f7e2fbd0d021d9075dd7b14666c929346efe111f648f7c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE0E45969A2AD95E52F7E2FBD0D021D9075DD7B14666C929346EFE111F648F7C"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19797
Expires: Fri, 03 Feb 2023 17:28:03 GMT
Date: Fri, 03 Feb 2023 11:58:06 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: yWa2KZc0Jka52TJ8/ZHnFlAXSkV7g/BvJOQ8tDF7mfgC5NjPLG4YvaOx8B8KKLpgPk4dnpwAZng=
x-amz-request-id: NQYGTPPC5VPCH8V8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 03 Feb 2023 11:52:24 GMT
age: 342
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 11:58:06 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

www.oasistiles.in/mails/static/img/dhl/dhl/

119.18.54.27

200 OK

4.7 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Size
4.7 kB (4710 bytes)
Hash
109356d64b978a33ee6682312a6ffa1e
39b936029f37af0086ffe602016af61976824472
130f6aaf435a738b21920d58291b3437614c1dd1511ecefb9afa4efc322619d3

Detections

Analyzer	Verdict	Alert
openphish	DHL Airways, Inc.
fortinet	Phishing

HTTP Headers

GET /mails/static/img/dhl/dhl/ HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4710
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8

www.oasistiles.in/mails/static/img/dhl/dhl/fonts/material-design-iconic-font/css/material-design-iconic-font.min.css

119.18.54.27

200 OK

13 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/fonts/material-design-iconic-font/css/material-design-iconic-font.min.css
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
ASCII text, with very long lines (65536), with no line terminators
Size
13 kB (12911 bytes)
Hash
62ae265dac0ef9c47ae112b683582857
571152aaa673a33099e913b3dee7047184971dc7
b14cade07a32928df81c6c161a5ed442412b3ce731bcb2a0332dd8ec14dcd583

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /mails/static/img/dhl/dhl/fonts/material-design-iconic-font/css/material-design-iconic-font.min.css HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:06 GMT
Server: Apache
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12911
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 03 Feb 2023 11:07:19 GMT
age: 3047
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

www.oasistiles.in/mails/static/img/dhl/dhl/css/roboto-font.css

119.18.54.27

200 OK

248 B

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/css/roboto-font.css
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
ASCII text
Size
248 B (248 bytes)
Hash
0e5de0410b6eda664e4d90641801289a
a3f7f030147b31d446d3837aa25422f48eef0bc8
e06151a518cc0ea25c2a4d15316cffc023e2bd705669d594a43c8b667ac68f11

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /mails/static/img/dhl/dhl/css/roboto-font.css HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 248
Keep-Alive: timeout=5, max=75
Content-Type: text/css

www.oasistiles.in/mails/static/img/dhl/dhl/css/style.css

119.18.54.27

200 OK

3.6 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/css/style.css
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
ASCII text, with CRLF line terminators
Size
3.6 kB (3607 bytes)
Hash
74cc2304962494183924f70c18eac75d
2cfaed273602611c864a10a8ad4178402a0cb970
23b8199cc39c6f8efaf0b1ceaf991c88dafde953630e6837776cba855963ac85

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /mails/static/img/dhl/dhl/css/style.css HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3607
Keep-Alive: timeout=5, max=75
Content-Type: text/css

www.oasistiles.in/mails/static/img/dhl/dhl/js/jquery.steps.js

119.18.54.27

200 OK

16 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/js/jquery.steps.js
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
ASCII text, with CRLF line terminators
Size
16 kB (16203 bytes)
Hash
5901f373842d3c05900bda6e99e17f3b
56e89852ab62f745875bea010d58f1a1b851628c
e1862de04c1321cb7e47062b4aabf8db3eedbe64923f9dead871acfbb191c8b7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
fortinet	Phishing

HTTP Headers

GET /mails/static/img/dhl/dhl/js/jquery.steps.js HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:06 GMT
Server: Apache
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16203
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript

www.oasistiles.in/mails/static/img/dhl/dhl/css/jquery-ui.min.css

119.18.54.27

200 OK

9.0 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/css/jquery-ui.min.css
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
ASCII text, with very long lines (29135)
Size
9.0 kB (8965 bytes)
Hash
6729afa6a30e95fa5e4df8dbd403a616
5c3fc9235d0e8e2b844020661fa8362af9fb48d9
7316162364bf9758ac5a9dd1465841803a1678d850789a79bcf673e550cb5947

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /mails/static/img/dhl/dhl/css/jquery-ui.min.css HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8965
Keep-Alive: timeout=5, max=75
Content-Type: text/css

www.oasistiles.in/mails/static/img/dhl/dhl/js/fa.js

119.18.54.27

200 OK

2.4 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/js/fa.js
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
ASCII text, with very long lines (5479)
Size
2.4 kB (2353 bytes)
Hash
ab2952ea2cc5f15b7ec5ae20856f6c93
79ea24a81be8742a364b88b2133f960a68cdbd3c
72c2929cb67e5312eeecc083dd37a369289c1dfc694bf935fcde7d6f4c717c0a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
fortinet	Phishing

HTTP Headers

GET /mails/static/img/dhl/dhl/js/fa.js HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2353
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5782
Expires: Fri, 03 Feb 2023 13:34:29 GMT
Date: Fri, 03 Feb 2023 11:58:07 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
b9241bc17296cd2466cf240452b243f0
890375e4388b868da3dcd75e4d2808f3447e5a62
85552935fbe83320179eefaaab2a63cee06e8c54bcb85d0ef498bfdd6f252029

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2260
Cache-Control: max-age=148577
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 11:58:07 GMT
Etag: "63dc8f5c-116"
Expires: Sun, 05 Feb 2023 05:14:24 GMT
Last-Modified: Fri, 03 Feb 2023 04:36:44 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 278

www.oasistiles.in/mails/static/img/dhl/dhl/images/wizard_v3_icon_1.png

119.18.54.27

200 OK

4.6 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/images/wizard_v3_icon_1.png
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
PNG image data, 150 x 35, 8-bit/color RGBA, non-interlaced\012- data
Size
4.6 kB (4633 bytes)
Hash
9be5e19e6f7538afce632d82b855dd24
12dec760d83e8db9c2073d46512c1b76b7a4edc2
5abaa5a71c4481349f88fb44e395b25d99a953329d0d5fbb11880312f4752fec

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /mails/static/img/dhl/dhl/images/wizard_v3_icon_1.png HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:07 GMT
Server: Apache
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Content-Length: 4633
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/png

www.oasistiles.in/mails/static/img/dhl/dhl/images/img.svg

119.18.54.27

200 OK

1.6 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/images/img.svg
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
1.6 kB (1603 bytes)
Hash
3fecc9db35d5d2a9e6e71ab4b02d22e5
628ba2f505b480097445aaf08649a08242bd6847
362bcaa42090e36611031bec6bdaa0600375ef847092cca195c58d3bae9b4419

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
fortinet	Phishing

HTTP Headers

GET /mails/static/img/dhl/dhl/images/img.svg HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:07 GMT
Server: Apache
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Content-Length: 1603
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/svg+xml

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
b9241bc17296cd2466cf240452b243f0
890375e4388b868da3dcd75e4d2808f3447e5a62
85552935fbe83320179eefaaab2a63cee06e8c54bcb85d0ef498bfdd6f252029

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2260
Cache-Control: max-age=148577
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 11:58:07 GMT
Etag: "63dc8f5c-116"
Expires: Sun, 05 Feb 2023 05:14:24 GMT
Last-Modified: Fri, 03 Feb 2023 04:36:44 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 278

www.oasistiles.in/mails/static/img/dhl/dhl/images/wizard_v4_icon.png

119.18.54.27

200 OK

1.1 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/images/wizard_v4_icon.png
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Size
1.1 kB (1131 bytes)
Hash
d3aab532241c4ae850bf45efa0047073
cfb509e3a77c0f8ab1a8083b7cd9754ac8b1a06e
4927e407f1f4b81dbc5d6269117fafdda60011698398015591dd10f33b779ffc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /mails/static/img/dhl/dhl/images/wizard_v4_icon.png HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/css/style.css

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:07 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Content-Length: 1131
Keep-Alive: timeout=5, max=75
Content-Type: image/png

www.oasistiles.in/mails/static/img/dhl/dhl/js/jquery-3.3.1.min.js

119.18.54.27

200 OK

38 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/js/jquery-3.3.1.min.js
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
ASCII text, with very long lines (65450), with CRLF line terminators
Size
38 kB (38066 bytes)
Hash
00bd7d12865d68c5a668e226ef180205
f2a90fa97dbb1dc4b33491ef114c021049f5980c
85f7888b795a8c7d423baa4f62618e2701937b02ea95fd8b0ce2f6000ebf69fb

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /mails/static/img/dhl/dhl/js/jquery-3.3.1.min.js HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:07 GMT
Server: Apache
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript

www.oasistiles.in/mails/static/img/dhl/dhl/fonts/material-design-iconic-font/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0

119.18.54.27

200 OK

38 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/fonts/material-design-iconic-font/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
Web Open Font Format (Version 2), TrueType, length 38384, version 1.0\012- data
Size
38 kB (38384 bytes)
Hash
a4d31128b633bc0b1cc1f18a34fb3851
6ee4c79372c3fd679706306ede47e4b03cf53d60
e8eea96e29a7c0a72612ab85ca3229979666467a28349642c2176e7189a1a39c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /mails/static/img/dhl/dhl/fonts/material-design-iconic-font/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0 HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/fonts/material-design-iconic-font/css/material-design-iconic-font.min.css

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:07 GMT
Server: Apache
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Content-Length: 38384
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: font/woff2

push.services.mozilla.com/

44.240.124.200

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.240.124.200:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6nBIhTwi44zAkyfraHBKbA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: GDmtKwBvUkEfxDqCIbwhdpFpZaA=

www.oasistiles.in/mails/static/img/dhl/dhl/js/jquery-ui.min.js

119.18.54.27

200 OK

92 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/js/jquery-ui.min.js
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
ASCII text, with very long lines (33326)
Size
92 kB (91534 bytes)
Hash
3f9e2d6f487a1e89a13011cbab425f45
5462193245f28d223fff59a9ae629325e7159ffa
30ab6e4ef189ef4865117f7408ebbb882b27d0e649ae06cfb8957b1480ee89a8

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /mails/static/img/dhl/dhl/js/jquery-ui.min.js HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:07 GMT
Server: Apache
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript

www.oasistiles.in/mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Black.ttf

119.18.54.27

200 OK

172 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Black.ttf
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
TrueType Font data, 18 tables, 1st "GDEF", 28 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.Roboto BlackRegularVersion 2.137; 2017Roboto-Blac\012- data
Size
172 kB (171480 bytes)
Hash
ec4c9962ba54eb91787aa93d361c10a8
c572416b9587c40d49ea60c7128f7f17b9317ad8
3872e9b39760a1b59ac1e192633dbb3b58e595b4d423930ac7ded525e9ae25e0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
fortinet	Phishing

HTTP Headers

GET /mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Black.ttf HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/css/roboto-font.css

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:07 GMT
Server: Apache
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Content-Length: 171480
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: font/ttf

www.oasistiles.in/mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Medium.ttf

119.18.54.27

200 OK

172 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Medium.ttf
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
TrueType Font data, 18 tables, 1st "GDEF", 28 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med\012- data
Size
172 kB (172064 bytes)
Hash
d08840599e05db7345652d3d417574a9
5f16f4d6dbb4a4f12d8ae96488ac209bb49762a5
f205cc511821ea56078a105557fcea6253129404d411c997e1866fbd006abb68

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
fortinet	Phishing

HTTP Headers

GET /mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Medium.ttf HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/css/roboto-font.css

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:07 GMT
Server: Apache
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Content-Length: 172064
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: font/ttf

www.oasistiles.in/mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Regular.ttf

119.18.54.27

200 OK

172 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Regular.ttf
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
TrueType Font data, 18 tables, 1st "GDEF", 26 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob\012- data
Size
172 kB (171676 bytes)
Hash
3e1af3ef546b9e6ecef9f3ba197bf7d2
dd1b1db13ff1f72138c134c62f38fef83749f36a
79e851404657dac2106b3d22ad256d47824a9a5765458edb72c9102a45816d95

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
fortinet	Phishing

HTTP Headers

GET /mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Regular.ttf HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/css/roboto-font.css

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:07 GMT
Server: Apache
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Content-Length: 171676
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: font/ttf

www.oasistiles.in/mails/static/img/dhl/dhl/images/bg.jpg

119.18.54.27

200 OK

1.1 MB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/images/bg.jpg
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=9, description=Frankfurt/ Main, 31 October 2002 Deutsche Post World Net launches STAR - Group-wide value enhancement programme ## Frankfurt/, orientation=upper-left, xresolution=354, yresolution=362, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2008:06:26 16:37:43, copyright=Deutsche Post World Net], baseline, precision 8, 2880x2045, components 4\012- data
Size
1.1 MB (1052344 bytes)
Hash
5c2ac9314ae3c0259449424163081404
c879027f32270cfe72949d12f73f09de8ae87a5f
81295e3657ad03f98dafc8b01981859656dcf33a052bfe61183ad7072821acd8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /mails/static/img/dhl/dhl/images/bg.jpg HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:07 GMT
Server: Apache
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Content-Length: 1052344
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/jpeg

www.oasistiles.in/mails/static/img/dhl/dhl/images/favicon.ico

119.18.54.27

200 OK

1.2 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/images/favicon.ico
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size
1.2 kB (1150 bytes)
Hash
d8106bf3a1d00ab43b01e6e3c92500eb
202b5e8654ab1b28351378293bca3b9d844cc29b
9ada5709e264c31b04a05bd85448a9bd5e91925e8d83df5cef0762ec97cc283e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL

HTTP Headers

GET /mails/static/img/dhl/dhl/images/favicon.ico HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:08 GMT
Server: Apache
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Content-Length: 1150
Cache-Control: max-age=604800
Expires: Fri, 10 Feb 2023 11:58:08 GMT
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/x-icon

www.oasistiles.in/mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Bold.ttf

119.18.54.27

200 OK

171 kB

URL HTTP/1.1
www.oasistiles.in/mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Bold.ttf
IP
119.18.54.27:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
TrueType Font data, 18 tables, 1st "GDEF", 26 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo\012- data
Size
171 kB (170760 bytes)
Hash
ee7b96fa85d8fdb8c126409326ac2d2b
0ce37ced9c5fcac9bdc452a432c1258870ba4677
7d0b991ee3e0be7af01ad7ea8cd2beea6c00a25e679a0226b6737f079aafff86

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - DHL
fortinet	Phishing

HTTP Headers

GET /mails/static/img/dhl/dhl/fonts/Roboto/Roboto-Bold.ttf HTTP/1.1
Host: www.oasistiles.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.oasistiles.in/mails/static/img/dhl/dhl/css/roboto-font.css

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 11:58:07 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 05 May 2020 18:11:16 GMT
Accept-Ranges: bytes
Content-Length: 170760
Keep-Alive: timeout=5, max=75
Content-Type: font/ttf

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2794
Expires: Fri, 03 Feb 2023 12:44:42 GMT
Date: Fri, 03 Feb 2023 11:58:08 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2794
Expires: Fri, 03 Feb 2023 12:44:42 GMT
Date: Fri, 03 Feb 2023 11:58:08 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2794
Expires: Fri, 03 Feb 2023 12:44:42 GMT
Date: Fri, 03 Feb 2023 11:58:08 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg

34.120.237.76

200 OK

5.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.6 kB (5641 bytes)
Hash
d4041f3b5316bc84c9e6d88ddbc85b89
4978a4a20836b6f5d863d331bcedad782b7b4ac6
549b62d2c4ec965b8bec62010c0ce338dfea7992ee83eb7af61ff1a30d21f8b5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5641
x-amzn-requestid: b53b54b1-3b00-47cf-a25c-e93910c2ebfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuvzpHsXoAMFsuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2ce3-0c4fc8154763febb44460ac2;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: x4-BZdG4JGRKCSdKynnuweZfo9l0XZtDB-MiANy7C2Yz1URYMHP4sQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:28:50 GMT
age: 48558
etag: "4978a4a20836b6f5d863d331bcedad782b7b4ac6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f58ae1f-1f79-4cc4-b12e-b11dde3b7e4d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.4 kB (6398 bytes)
Hash
4a92e881554205ebbe3721a7bbaeab40
b620fc82bd15b55b581bd8c3a699e1b16563ad2e
ff753b8411bfa0df54938a5f829ce25acbad863a2a3540b3bacca02baf9a2c7d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f58ae1f-1f79-4cc4-b12e-b11dde3b7e4d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 6398
x-amzn-requestid: 843fefd3-8cf4-44ee-bb7c-a010d4149442
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuv1XFXQoAMFe5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2cee-76739fd87b4c0d203eca4114;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EUE3i8Lccx5p9GVN4Dv3DOhFmG_4byC3LrD7SLrk4A5Zbone-NJwVA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:52:34 GMT
age: 50734
etag: "b620fc82bd15b55b581bd8c3a699e1b16563ad2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e690e4c-e16d-49e9-ac12-24a092d6a60c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.5 kB (8543 bytes)
Hash
a1d6fa4715c4e78250b2f72ddd2706f1
be04ac3a50aa6f1b349a2410ad386d92de3222be
d1c3c1b7016428bf2a085b71ca0d1e215a64b3d31ff15b0ef8bf5a78f11d9ae5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e690e4c-e16d-49e9-ac12-24a092d6a60c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8543
x-amzn-requestid: 3dc0960e-97db-42c8-99ac-623a44e8bb3e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuv0wGJhIAMFaTg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2ceb-5ad3ef033a62559762db42b9;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EKWOeGruQEm9HuSlJMiEEw_gN1p37qTTIhYqaiQ6bFaCF65kUfmMtA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:55:01 GMT
age: 50587
etag: "be04ac3a50aa6f1b349a2410ad386d92de3222be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10796 bytes)
Hash
3490571dd2de0a747987b9a0e18cccc8
18e9f8f160d3515f1cb31fc7538ac762a6cab344
1c071d7f3b288b29254500f94f19c0db0633c6aa90812f2e92c4f64992f5221a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10796
x-amzn-requestid: 5c9b1a83-c99a-44b9-9a90-5edd7ef1e225
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi0XKG93oAMFtsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76760-01bf754d6c725c3275c02a1b;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 06:44:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vUJO-Pt9Hi1ndrCQQT1nNCGT7oDOYBpA8-EawHanESoZAsZv32dQdg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 00:25:04 GMT
age: 41584
etag: "18e9f8f160d3515f1cb31fc7538ac762a6cab344"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15f2ebc9-82b4-4f1b-b0b8-978571cb123b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.1 kB (9130 bytes)
Hash
02123eef9faa8560ff66b058d4e13a28
decf26282993d7f0b14cf4112d14fa39c97fa89f
28889ff20f1b2fe0b73f8f97e6569f1d68d77fe436eeb47cc06ee4f0822ff239

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15f2ebc9-82b4-4f1b-b0b8-978571cb123b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9130
x-amzn-requestid: 09ad3fbb-1e71-4455-82df-6e59f65239a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuxiYEkqIAMFVZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2fa8-1dca116e4317f9bd14f6d45a;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:48:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _Bc2svrG-wX63DK9RPUyjh-n6AHVHaQe3QRmEL27L-amwCH2I_f_9g==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:05:17 GMT
age: 49971
etag: "decf26282993d7f0b14cf4112d14fa39c97fa89f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11565 bytes)
Hash
e366b32074025aaf60bbae8bdb08d330
a52c2883bad98fa20333aa639a5dd3a5bf544c8e
9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w0Zm5V0TQxsQ7917U3fdhS_n7qKE143PuhI2JmNCDM_Pf0yPLyW6yA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 04:53:21 GMT
age: 25487
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

kit-free.fontawesome.com/releases/latest/css/free-v4-shims.min.css

104.21.74.40

200 OK

0 B

URL HTTP/2
kit-free.fontawesome.com/releases/latest/css/free-v4-shims.min.css
IP
104.21.74.40:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /releases/latest/css/free-v4-shims.min.css HTTP/1.1
Host: kit-free.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.oasistiles.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Fri, 03 Feb 2023 11:58:07 GMT
content-type: text/css
x-amz-id-2: zlW0dja+CmaxSY7ooKiQ9JAa88VPJYitW/gN0Tr/jYIH5nD2AzG3ortuiDOiBJYh5YAD00e1uPM=
x-amz-request-id: 73BNZB7CQAEH12SC
last-modified: Wed, 04 Aug 2021 21:22:51 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=1800
cf-cache-status: HIT
age: 577
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h4EEASIU7cwenyWmKD53zmNk1gohMDmYJmkRpc6oiR9KYgiyOjIPd0ToZbXSxDkQXDvF5p1R%2B3gLyc0VVzhj5dzmoxFqGL2Pl%2Bh77HYHWIeOYlsQwVU2l4nqlRko%2BY1NghL9qIhEHAfKJUE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 793afe2efa90b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

kit-free.fontawesome.com/releases/latest/css/free-v4-font-face.min.css

104.21.74.40

200 OK

0 B

URL HTTP/2
kit-free.fontawesome.com/releases/latest/css/free-v4-font-face.min.css
IP
104.21.74.40:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /releases/latest/css/free-v4-font-face.min.css HTTP/1.1
Host: kit-free.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.oasistiles.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Fri, 03 Feb 2023 11:58:07 GMT
content-type: text/css
x-amz-id-2: DIlQTfEeEQmYXomh5e2uJvcjb1Dz0QR05djtSYcqb3+uWxFP2JPbNze0nk+QktzP04wIlEcUKk0=
x-amz-request-id: 1JT1ED578Z028JDJ
last-modified: Wed, 04 Aug 2021 21:22:51 GMT
etag: W/"f2e0b2680d9b0bcb6e0039c4424e5a59"
cache-control: max-age=1800
cf-cache-status: HIT
age: 577
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dZgS28%2BMz%2Bu8PXniE7P3uNTqodQMkbhTo3dZjNSW97I%2FYZDcF683o9R2VsnEJKlS6wZvQ7vBPdcDNF4VnJd2vwJ7VJcUVovYNMTFtuPdSCqE7O9OGLmoakoJl3ZgRbvWbtYsEhrujh6QbTQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 793afe2f3aecb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

kit-free.fontawesome.com/releases/latest/css/free.min.css

104.21.74.40

200 OK

0 B

URL HTTP/2
kit-free.fontawesome.com/releases/latest/css/free.min.css
IP
104.21.74.40:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /releases/latest/css/free.min.css HTTP/1.1
Host: kit-free.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.oasistiles.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Fri, 03 Feb 2023 11:58:07 GMT
content-type: text/css
x-amz-id-2: Vv5zoHcPIY1Gev6h/S8CGBGWjgFDrZsqYcYDuWjpSQtUvoyRsmS7X2PmjCRwy035gItWrkavZaQ=
x-amz-request-id: 763ZJAF9JZ4KNDDG
last-modified: Wed, 04 Aug 2021 21:22:50 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=1800
cf-cache-status: HIT
age: 577
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L38kwpSYbtwFovmyBxsKzANeSHS9XWBOjkRpECRTQUh8F4AsRSAyrpAywHUC%2BPQxxI8FyEV2jaTRZMJ2kAghh2SgQ1RNlzvcjNDYzEJRV5AZbO6vitq3pSS0P7KGdvMviNcPAERhtU%2Bf%2BPo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 793afe2f2ae6b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (42)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type