Report - www.concretemails.com/

Report Overview

Submitted URL
www.concretemails.com/
IP
68.178.224.37
ASN
#26496 AS-26496-GO-DADDY-COM-LLC
Submitted
2024-04-24 05:04:49
Access
public
Website Title
Sign in to your account
Final URL
www.concretemails.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
36

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.concretemails.com	unknown	unknown	No data	No data	10 kB	375 kB	68.178.224.37
img1.wsimg.com	9893	2008-03-17	2012-06-20	2024-04-23	2.6 kB	64 kB	95.101.10.131
r4.res.office365.com	180	2005-06-20	2017-03-03	2024-04-22	3.4 kB	721 kB	23.36.79.11
events.api.secureserver.net	125179	1998-03-30	2020-06-23	2024-04-23	5.1 kB	1.9 kB	23.36.79.33
csp.secureserver.net	unknown	1998-03-30	2022-12-18	2024-04-23	4.4 kB	4.6 kB	104.110.14.92

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook
2024-04-23	medium	www.concretemails.com/	Outlook

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	www.concretemails.com/	378 B	2024-04-24	2024-04-24
Pretty URL www.concretemails.com/ IP 68.178.224.37 ASN #26496 AS-26496-GO-DADDY-COM-LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 07:04:57 Last Seen2024-04-24 07:04:57 Times Seen1 Hash e2b62c2399bca4e888ac3f43fba796fe 7faaaff8c5ac4d5828a043f826afaac93f707893 b0e5e2735d2ee160c5a42c73ca80f19dac8a18d97b21c988ba5f0921a24aeeaa Loading...

	img1.wsimg.com/traffic-assets/js/tccl.min.js	106 kB	2024-03-22	2024-05-05
Pretty URL img1.wsimg.com/traffic-assets/js/tccl.min.js IP 95.101.10.131 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-22 17:30:50 Last Seen2024-05-05 19:49:29 Times Seen492 Hash fdf3f3c180ae2aa6864f9c46a83a37a9 59f698af339af479bc5447e5da54778d909c7068 e301943f5f3cb3486ab3f4c75c0315e96891268a76b8663b6a490324e39d1664 Loading...

HTTP Transactions (43)

URL IP Response Size

www.concretemails.com/

68.178.224.37

200 OK

5.3 kB

URL User Request GET HTTP/2
www.concretemails.com/
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (4148)
Size
5.3 kB (5286 bytes)
Hash
23b87b5c408935c5f7530dcb0f2523ed
76df392b8527c5ca42e911ffc6b0b4159bc7aed5
bc68034b3be6a68ce3b93a38dc796ba839a9e2bf2f5a30662446cc9c41121bdf

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET / HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-powered-by: PHP/8.1.27
vary: Accept-Encoding
content-encoding: br
content-length: 5286
content-type: text/html; charset=UTF-8
date: Wed, 24 Apr 2024 05:04:23 GMT
server: Apache
X-Firefox-Spdy: h2

img1.wsimg.com/traffic-assets/js/tccl.min.js

95.101.10.131

301 Moved Permanently

0 B

URL GET HTTP/2
img1.wsimg.com/traffic-assets/js/tccl.min.js
IP
95.101.10.131:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD
ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /traffic-assets/js/tccl.min.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
content-length: 0
location: https://img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js
cache-control: max-age=31536000
expires: Thu, 24 Apr 2025 05:04:23 GMT
date: Wed, 24 Apr 2024 05:04:23 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js

95.101.10.131

200 OK

20 kB

URL GET HTTP/2
img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js
IP
95.101.10.131:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD
ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
20 kB (20488 bytes)
Hash
fdf3f3c180ae2aa6864f9c46a83a37a9
59f698af339af479bc5447e5da54778d909c7068
e301943f5f3cb3486ab3f4c75c0315e96891268a76b8663b6a490324e39d1664

HTTP Headers

GET /signals/js/clients/scc-c2/scc-c2.min.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.concretemails.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: uJG25xxKuRo9DWFMTukI3ZGlOJXXJclf8KVA27PD2JMw5MWICVgdorg4aZ8c7Tc1Sd1yB5uo3O4hl1YmBjck3w==
x-amz-request-id: M96SWYY0R8EC8D1Q
last-modified: Fri, 22 Mar 2024 13:06:20 GMT
etag: "fdf3f3c180ae2aa6864f9c46a83a37a9"
x-amz-server-side-encryption: AES256
x-amz-meta-version: 0.2.5
x-amz-version-id: NUbpk_ypfZoRQFFJE7rB4qpj7fMsB7r1
accept-ranges: bytes
content-type: text/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1800
expires: Wed, 24 Apr 2024 05:34:23 GMT
date: Wed, 24 Apr 2024 05:04:23 GMT
content-length: 20488
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

www.concretemails.com/index_files/converged.v2.login.min.css

68.178.224.37

200 OK

16 kB

URL GET HTTP/2
www.concretemails.com/index_files/converged.v2.login.min.css
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
ASCII text, with very long lines (61177)
Size
16 kB (15551 bytes)
Hash
9b45f4084a4d9225b7a9c07888b86af4
0774b4207ecb7e34f07ca3086997e8e6c5c36cf4
64570ac138a6d71e3880f0a50ae35192827c0d153b6484ef69d88cc1b92c4544

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /index_files/converged.v2.login.min.css HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 08 Jul 2021 08:55:14 GMT
etag: "6d404db-174e7-5c698d034c080-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 15551
content-type: text/css
date: Wed, 24 Apr 2024 05:04:23 GMT
server: Apache
X-Firefox-Spdy: h2

www.concretemails.com/index_files/ellipsis_white.svg

68.178.224.37

200 OK

221 B

URL GET HTTP/2
www.concretemails.com/index_files/ellipsis_white.svg
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
SVG Scalable Vector Graphics image
Size
221 B (221 bytes)
Hash
5ac590ee72bfe06a7cecfd75b588ad73
dda2cb89a241bc424746d8cf2a22a35535094611
6075736ea9c281d69c4a3d78ff97bb61b9416a5809919babe5a0c5596f99aaea

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /index_files/ellipsis_white.svg HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 08 Jul 2021 08:55:14 GMT
etag: "6d404dd-393-5c698d034c080-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 221
content-type: image/svg+xml
date: Wed, 24 Apr 2024 05:04:23 GMT
server: Apache
X-Firefox-Spdy: h2

www.concretemails.com/index_files/ellipsis_grey.svg

68.178.224.37

200 OK

225 B

URL GET HTTP/2
www.concretemails.com/index_files/ellipsis_grey.svg
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
SVG Scalable Vector Graphics image
Size
225 B (225 bytes)
Hash
2b5d393db04a5e6e1f739cb266e65b4c
6a435df5cac3d58ccad655fe022ccf3dd4b9b721
16c3f6531d0fa5b4d16e82abf066233b2a9f284c068c663699313c09f5e8d6e6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /index_files/ellipsis_grey.svg HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 08 Jul 2021 08:55:14 GMT
etag: "6d404dc-393-5c698d034c080-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 225
content-type: image/svg+xml
date: Wed, 24 Apr 2024 05:04:23 GMT
server: Apache
X-Firefox-Spdy: h2

www.concretemails.com/index_files/microsoft_logo.svg

68.178.224.37

200 OK

1.4 kB

URL GET HTTP/2
www.concretemails.com/index_files/microsoft_logo.svg
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
SVG Scalable Vector Graphics image
Size
1.4 kB (1375 bytes)
Hash
ee5c8d9fb6248c938fd0dc19370e90bd
d01a22720918b781338b5bbf9202b241a5f99ee4
04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /index_files/microsoft_logo.svg HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 08 Jul 2021 08:55:14 GMT
etag: "6d404df-e43-5c698d034c080-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1375
content-type: image/svg+xml
date: Wed, 24 Apr 2024 05:04:23 GMT
server: Apache
X-Firefox-Spdy: h2

img1.wsimg.com/traffic-assets/js/tccl.min.js

95.101.10.131

301 Moved Permanently

0 B

URL GET HTTP/2
img1.wsimg.com/traffic-assets/js/tccl.min.js
IP
95.101.10.131:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD
ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /traffic-assets/js/tccl.min.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 301 Moved Permanently
content-length: 0
location: https://img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js
cache-control: max-age=31536000
expires: Thu, 24 Apr 2025 05:04:24 GMT
date: Wed, 24 Apr 2024 05:04:24 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js

95.101.10.131

200 OK

20 kB

URL GET HTTP/2
img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js
IP
95.101.10.131:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD
ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
20 kB (20488 bytes)
Hash
fdf3f3c180ae2aa6864f9c46a83a37a9
59f698af339af479bc5447e5da54778d909c7068
e301943f5f3cb3486ab3f4c75c0315e96891268a76b8663b6a490324e39d1664

HTTP Headers

GET /signals/js/clients/scc-c2/scc-c2.min.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.concretemails.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: uJG25xxKuRo9DWFMTukI3ZGlOJXXJclf8KVA27PD2JMw5MWICVgdorg4aZ8c7Tc1Sd1yB5uo3O4hl1YmBjck3w==
x-amz-request-id: M96SWYY0R8EC8D1Q
last-modified: Fri, 22 Mar 2024 13:06:20 GMT
etag: "fdf3f3c180ae2aa6864f9c46a83a37a9"
x-amz-server-side-encryption: AES256
x-amz-meta-version: 0.2.5
x-amz-version-id: NUbpk_ypfZoRQFFJE7rB4qpj7fMsB7r1
accept-ranges: bytes
content-type: text/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1800
expires: Wed, 24 Apr 2024 05:34:24 GMT
date: Wed, 24 Apr 2024 05:04:24 GMT
content-length: 20488
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

www.concretemails.com/index_files/prefetch.html

68.178.224.37

200 OK

1.2 kB

URL GET HTTP/2
www.concretemails.com/index_files/prefetch.html
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
HTML document, ASCII text, with very long lines (1188)
Size
1.2 kB (1248 bytes)
Hash
ebfd6b049a926324a0d7d68cb797a902
d1ffaf13e7a3728a97bcc3b5f513679bb063a7ab
3f375fa67d3af9884869fc5e62dd2f0d36886baf4db654a05d4ea09a44448604

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /index_files/prefetch.html HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Cookie: _tccl_visitor=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _tccl_visit=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _scc_session=pc=1&C_TOUCH=2024-04-24T05:04:23.793Z
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 08 Jul 2021 08:55:14 GMT
etag: "6d404e0-d2f-5c698d034c080-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1248
content-type: text/html
date: Wed, 24 Apr 2024 05:04:24 GMT
server: Apache
X-Firefox-Spdy: h2

www.concretemails.com/&quote;;

68.178.224.37

404 Not Found

315 B

URL GET HTTP/2
www.concretemails.com/&quote;;
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
HTML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /&quote;; HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Cookie: _tccl_visitor=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _tccl_visit=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _scc_session=pc=1&C_TOUCH=2024-04-24T05:04:23.793Z
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 24 Apr 2024 05:04:24 GMT
server: Apache
X-Firefox-Spdy: h2

img1.wsimg.com/traffic-assets/js/tccl.min.js

95.101.10.131

301 Moved Permanently

0 B

URL GET HTTP/2
img1.wsimg.com/traffic-assets/js/tccl.min.js
IP
95.101.10.131:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD
ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /traffic-assets/js/tccl.min.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 301 Moved Permanently
content-length: 0
location: https://img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js
cache-control: max-age=31536000
expires: Thu, 24 Apr 2025 05:04:24 GMT
date: Wed, 24 Apr 2024 05:04:24 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js

95.101.10.131

200 OK

20 kB

URL GET HTTP/2
img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js
IP
95.101.10.131:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD
ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
20 kB (20488 bytes)
Hash
fdf3f3c180ae2aa6864f9c46a83a37a9
59f698af339af479bc5447e5da54778d909c7068
e301943f5f3cb3486ab3f4c75c0315e96891268a76b8663b6a490324e39d1664

HTTP Headers

GET /signals/js/clients/scc-c2/scc-c2.min.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.concretemails.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: uJG25xxKuRo9DWFMTukI3ZGlOJXXJclf8KVA27PD2JMw5MWICVgdorg4aZ8c7Tc1Sd1yB5uo3O4hl1YmBjck3w==
x-amz-request-id: M96SWYY0R8EC8D1Q
last-modified: Fri, 22 Mar 2024 13:06:20 GMT
etag: "fdf3f3c180ae2aa6864f9c46a83a37a9"
x-amz-server-side-encryption: AES256
x-amz-meta-version: 0.2.5
x-amz-version-id: NUbpk_ypfZoRQFFJE7rB4qpj7fMsB7r1
accept-ranges: bytes
content-type: text/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1800
expires: Wed, 24 Apr 2024 05:34:24 GMT
date: Wed, 24 Apr 2024 05:04:24 GMT
content-length: 20488
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

www.concretemails.com/back.jpg?x=a5dbd4393ff6a725c7e62b61df7e72f0

68.178.224.37

200 OK

283 kB

URL GET HTTP/2
www.concretemails.com/back.jpg?x=a5dbd4393ff6a725c7e62b61df7e72f0
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
JPEG image data, baseline, precision 8, 1920x1080, components 3
Size
283 kB (283351 bytes)
Hash
a5dbd4393ff6a725c7e62b61df7e72f0
55b292f885ffc92abce18750b07aa4acfa4e903e
211a907de2da0ff4a0e90917ac8054e2f35c351180977550c26e51b4909f2beb

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /back.jpg?x=a5dbd4393ff6a725c7e62b61df7e72f0 HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Cookie: _tccl_visitor=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _tccl_visit=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _scc_session=pc=1&C_TOUCH=2024-04-24T05:04:23.793Z
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 08 Jul 2021 08:55:14 GMT
etag: "6d404c9-452d7-5c698d034c080"
accept-ranges: bytes
content-length: 283351
content-type: image/jpeg
date: Wed, 24 Apr 2024 05:04:24 GMT
server: Apache
X-Firefox-Spdy: h2

www.concretemails.com/index_files/boot.worldwide.0.mouse.js

68.178.224.37

404 Not Found

315 B

URL GET HTTP/2
www.concretemails.com/index_files/boot.worldwide.0.mouse.js
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
HTML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /index_files/boot.worldwide.0.mouse.js HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/index_files/prefetch.html
Cookie: _tccl_visitor=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _tccl_visit=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _scc_session=pc=1&C_TOUCH=2024-04-24T05:04:23.793Z
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 24 Apr 2024 05:04:24 GMT
server: Apache
X-Firefox-Spdy: h2

www.concretemails.com/index_files/boot.worldwide.1.mouse.js

68.178.224.37

404 Not Found

315 B

URL GET HTTP/2
www.concretemails.com/index_files/boot.worldwide.1.mouse.js
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
HTML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /index_files/boot.worldwide.1.mouse.js HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/index_files/prefetch.html
Cookie: _tccl_visitor=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _tccl_visit=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _scc_session=pc=1&C_TOUCH=2024-04-24T05:04:23.793Z
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 24 Apr 2024 05:04:24 GMT
server: Apache
X-Firefox-Spdy: h2

www.concretemails.com/index_files/boot.worldwide.2.mouse.js

68.178.224.37

404 Not Found

315 B

URL GET HTTP/2
www.concretemails.com/index_files/boot.worldwide.2.mouse.js
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
HTML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /index_files/boot.worldwide.2.mouse.js HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/index_files/prefetch.html
Cookie: _tccl_visitor=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _tccl_visit=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _scc_session=pc=1&C_TOUCH=2024-04-24T05:04:23.793Z
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 24 Apr 2024 05:04:24 GMT
server: Apache
X-Firefox-Spdy: h2

www.concretemails.com/index_files/boot.worldwide.3.mouse.js

68.178.224.37

404 Not Found

315 B

URL GET HTTP/2
www.concretemails.com/index_files/boot.worldwide.3.mouse.js
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
HTML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /index_files/boot.worldwide.3.mouse.js HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/index_files/prefetch.html
Cookie: _tccl_visitor=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _tccl_visit=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _scc_session=pc=1&C_TOUCH=2024-04-24T05:04:23.793Z
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 24 Apr 2024 05:04:24 GMT
server: Apache
X-Firefox-Spdy: h2

www.concretemails.com/index_files/sprite1.mouse.png

68.178.224.37

200 OK

17 kB

URL GET HTTP/2
www.concretemails.com/index_files/sprite1.mouse.png
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
PNG image data, 600 x 75, 8-bit/color RGBA, non-interlaced
Size
17 kB (16664 bytes)
Hash
2835f067dcf4c8a12464856267ca8ff7
ab0a6ccd3932d913314b1ff617f236750781a835
4b5cc3fed2c03c158abc3634c1f7700079fbc1e6183aa5e47a2064cfed87977c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /index_files/sprite1.mouse.png HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/index_files/prefetch.html
Cookie: _tccl_visitor=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _tccl_visit=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _scc_session=pc=1&C_TOUCH=2024-04-24T05:04:23.793Z
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 08 Jul 2021 08:55:14 GMT
etag: "6d404e2-4118-5c698d034c080"
accept-ranges: bytes
content-length: 16664
content-type: image/png
date: Wed, 24 Apr 2024 05:04:24 GMT
server: Apache
X-Firefox-Spdy: h2

www.concretemails.com/index_files/sprite1.mouse.css

68.178.224.37

200 OK

1.0 kB

URL GET HTTP/2
www.concretemails.com/index_files/sprite1.mouse.css
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
ASCII text, with very long lines (7604), with no line terminators
Size
1.0 kB (1014 bytes)
Hash
e9ba472d2ddb09fb3ec536dc240b1976
99daf55408b077f6f56daaf6cae4e54dc0fc0cfa
461f87e55bba34c4d9248d1b45685ea832eba56c15ebf6cccf75d49f1547b502

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /index_files/sprite1.mouse.css HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/index_files/prefetch.html
Cookie: _tccl_visitor=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _tccl_visit=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _scc_session=pc=1&C_TOUCH=2024-04-24T05:04:23.793Z
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 08 Jul 2021 08:55:14 GMT
etag: "6d404e1-1db4-5c698d034c080-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1014
content-type: text/css
date: Wed, 24 Apr 2024 05:04:24 GMT
server: Apache
X-Firefox-Spdy: h2

www.concretemails.com/index_files/boot.worldwide.mouse.css

68.178.224.37

200 OK

42 kB

URL GET HTTP/2
www.concretemails.com/index_files/boot.worldwide.mouse.css
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
42 kB (41537 bytes)
Hash
a7caadb84da8448a7c462ec0381e5476
70f27fcbbd725d05ec41addecc8ee31633916ce0
cd2ddb8b2f8ab2461222b1cb56431e615cdcf0d1f8491c31a4291a38d41f1229

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /index_files/boot.worldwide.mouse.css HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/index_files/prefetch.html
Cookie: _tccl_visitor=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _tccl_visit=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _scc_session=pc=1&C_TOUCH=2024-04-24T05:04:23.793Z
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 08 Jul 2021 08:55:14 GMT
etag: "6d404da-38be1-5c698d034c080-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 41537
content-type: text/css
date: Wed, 24 Apr 2024 05:04:24 GMT
server: Apache
X-Firefox-Spdy: h2

www.concretemails.com/index_files/favicon_a.ico

68.178.224.37

200 OK

419 B

URL GET HTTP/2
www.concretemails.com/index_files/favicon_a.ico
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Size
419 B (419 bytes)
Hash
12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /index_files/favicon_a.ico HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Cookie: _tccl_visitor=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _tccl_visit=4a92a9d9-3054-4e3a-8999-702c7b2a48a0; _scc_session=pc=1&C_TOUCH=2024-04-24T05:04:23.793Z
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 08 Jul 2021 08:55:14 GMT
etag: "6d404de-4316-5c698d034c080-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 419
content-type: image/x-icon
date: Wed, 24 Apr 2024 05:04:24 GMT
server: Apache
X-Firefox-Spdy: h2

r4.res.office365.com/owa/prem/16.2478.1.2588899/scripts/boot.worldwide.0.mouse.js

23.36.79.11

200 OK

179 kB

URL GET HTTP/2
r4.res.office365.com/owa/prem/16.2478.1.2588899/scripts/boot.worldwide.0.mouse.js
IP
23.36.79.11:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
Size
179 kB (179363 bytes)
Hash
b42711ed71ea766c8489a9acfadd7b15
ba397af2efd6c3e7bc9fbe2e8ede574b8e788e99
0d39ed3fa98dd9979b538842758edb2393a91d17d15f6ac6003b4081a257e127

HTTP Headers

GET /owa/prem/16.2478.1.2588899/scripts/boot.worldwide.0.mouse.js HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
last-modified: Tue, 24 Jul 2018 09:36:19 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 179363
cache-control: public,max-age=630720000, s-maxage=630720000
date: Wed, 24 Apr 2024 05:04:25 GMT
timing-allow-origin: *
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

events.api.secureserver.net/t/1/tl/event?dh=www.concretemails.com&dr=https%3A%2F%2Fwww.concretemails.com%2F&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&vtg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&dp=%2Findex_files%2Fprefetch.html&trace_id=55b948f32d3541a099d5a9fa5a7cd0f2&cts=2024-04-24T05%3A04%3A25.623Z&hit_id=11c08107-be3d-45b2-ae3c-83fd0cdd5c8e&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpsh-oh%22%2C%22server%22%3A%22sg2plzcpnl493870%22%2C%22dcenter%22%3A%22sg2%22%2C%22cp_id%22%3A%229851892%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpsh-oh&vci=1270337143&z=395513618&tce=1713935063801&tcs=1713935063801&tdc=1713935065614&tdclee=1713935065613&tdcles=1713935065613&tdi=1713935065613&tdl=1713935064286&tdle=1713935063801&tdls=1713935063801&tfs=1713935063801&tns=1713935063798&trqs=1713935063803&tre=1713935064281&trps=1713935064281&tles=1713935065614&tlee=0&nt=navigate&nav_type=hard

23.36.79.33

200 OK

43 B

URL GET HTTP/2
events.api.secureserver.net/t/1/tl/event?dh=www.concretemails.com&dr=https%3A%2F%2Fwww.concretemails.com%2F&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&vtg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&dp=%2Findex_files%2Fprefetch.html&trace_id=55b948f32d3541a099d5a9fa5a7cd0f2&cts=2024-04-24T05%3A04%3A25.623Z&hit_id=11c08107-be3d-45b2-ae3c-83fd0cdd5c8e&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpsh-oh%22%2C%22server%22%3A%22sg2plzcpnl493870%22%2C%22dcenter%22%3A%22sg2%22%2C%22cp_id%22%3A%229851892%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpsh-oh&vci=1270337143&z=395513618&tce=1713935063801&tcs=1713935063801&tdc=1713935065614&tdclee=1713935065613&tdcles=1713935065613&tdi=1713935065613&tdl=1713935064286&tdle=1713935063801&tdls=1713935063801&tfs=1713935063801&tns=1713935063798&trqs=1713935063803&tre=1713935064281&trps=1713935064281&tles=1713935065614&tlee=0&nt=navigate&nav_type=hard
IP
23.36.79.33:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerStarfield Technologies, Inc.
Subject*.api.secureserver.net
Fingerprint86:0A:54:3C:14:92:76:57:19:E1:8B:86:AE:B6:C7:06:3C:C8:7A:58
ValidityMon, 10 Jul 2023 19:26:59 GMT - Sat, 10 Aug 2024 19:26:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b

HTTP Headers

GET /t/1/tl/event?dh=www.concretemails.com&dr=https%3A%2F%2Fwww.concretemails.com%2F&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&vtg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&dp=%2Findex_files%2Fprefetch.html&trace_id=55b948f32d3541a099d5a9fa5a7cd0f2&cts=2024-04-24T05%3A04%3A25.623Z&hit_id=11c08107-be3d-45b2-ae3c-83fd0cdd5c8e&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpsh-oh%22%2C%22server%22%3A%22sg2plzcpnl493870%22%2C%22dcenter%22%3A%22sg2%22%2C%22cp_id%22%3A%229851892%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpsh-oh&vci=1270337143&z=395513618&tce=1713935063801&tcs=1713935063801&tdc=1713935065614&tdclee=1713935065613&tdcles=1713935065613&tdi=1713935065613&tdl=1713935064286&tdle=1713935063801&tdls=1713935063801&tfs=1713935063801&tns=1713935063798&trqs=1713935063803&tre=1713935064281&trps=1713935064281&tles=1713935065614&tlee=0&nt=navigate&nav_type=hard HTTP/1.1
Host: events.api.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.concretemails.com
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/gif
content-length: 43
access-control-allow-origin: https://www.concretemails.com
access-control-allow-credentials: true
x-robots-tag: noindex, nofollow
cache-control: private
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
date: Wed, 24 Apr 2024 05:04:25 GMT
X-Firefox-Spdy: h2

23.36.79.33

200 OK

43 B

URL GET HTTP/2
events.api.secureserver.net/t/1/tl/event?dh=www.concretemails.com&dr=&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&vtg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&dp=%2F&trace_id=ccc3fbb60fd04fac8b1309ee6f8f9736&cts=2024-04-24T05%3A04%3A23.793Z&hit_id=248f975b-f7a4-4ed5-a040-9a503a6b7418&ht=pageview&trfd=%7B%22ap%22%3A%22cpsh-oh%22%2C%22server%22%3A%22sg2plzcpnl493870%22%2C%22dcenter%22%3A%22sg2%22%2C%22cp_id%22%3A%229851892%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpsh-oh&vci=1451530397&z=1301823209
IP
23.36.79.33:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.api.secureserver.net
Fingerprint86:0A:54:3C:14:92:76:57:19:E1:8B:86:AE:B6:C7:06:3C:C8:7A:58
ValidityMon, 10 Jul 2023 19:26:59 GMT - Sat, 10 Aug 2024 19:26:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b

HTTP Headers

GET /t/1/tl/event?dh=www.concretemails.com&dr=&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&vtg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&dp=%2F&trace_id=ccc3fbb60fd04fac8b1309ee6f8f9736&cts=2024-04-24T05%3A04%3A23.793Z&hit_id=248f975b-f7a4-4ed5-a040-9a503a6b7418&ht=pageview&trfd=%7B%22ap%22%3A%22cpsh-oh%22%2C%22server%22%3A%22sg2plzcpnl493870%22%2C%22dcenter%22%3A%22sg2%22%2C%22cp_id%22%3A%229851892%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpsh-oh&vci=1451530397&z=1301823209 HTTP/1.1
Host: events.api.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.concretemails.com
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/gif
content-length: 43
access-control-allow-origin: https://www.concretemails.com
access-control-allow-credentials: true
x-robots-tag: noindex, nofollow
cache-control: private
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
date: Wed, 24 Apr 2024 05:04:25 GMT
X-Firefox-Spdy: h2

r4.res.office365.com/owa/prem/16.2478.1.2588899/scripts/boot.worldwide.1.mouse.js

23.36.79.11

200 OK

162 kB

URL GET HTTP/2
r4.res.office365.com/owa/prem/16.2478.1.2588899/scripts/boot.worldwide.1.mouse.js
IP
23.36.79.11:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Size
162 kB (162351 bytes)
Hash
557f0c57ee13303071e8b9857c76ff18
98080c0ca67e66c53cfe399fbbfef0e99209ac67
3e61fa6e58dc212b917b8f08977150cd82293f686b7fb0c1b0ac07c3c80b395e

HTTP Headers

GET /owa/prem/16.2478.1.2588899/scripts/boot.worldwide.1.mouse.js HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
last-modified: Tue, 24 Jul 2018 09:36:19 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 162351
cache-control: public,max-age=630720000, s-maxage=630720000
date: Wed, 24 Apr 2024 05:04:25 GMT
timing-allow-origin: *
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

r4.res.office365.com/owa/prem/16.2478.1.2588899/scripts/boot.worldwide.2.mouse.js

23.36.79.11

200 OK

169 kB

URL GET HTTP/2
r4.res.office365.com/owa/prem/16.2478.1.2588899/scripts/boot.worldwide.2.mouse.js
IP
23.36.79.11:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT

File type
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Size
169 kB (169404 bytes)
Hash
de782bc4b73d6f28b32341e5a63b7375
713d30bed8405f4953bec8ec79bce0b8c0d5baf4
8aed32991cb5ce84aa5e538b25121f170a17cf65d39e56bd6dc7a1ac3c11cebd

HTTP Headers

GET /owa/prem/16.2478.1.2588899/scripts/boot.worldwide.2.mouse.js HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
last-modified: Tue, 24 Jul 2018 09:36:20 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 169404
cache-control: public,max-age=630720000, s-maxage=630720000
date: Wed, 24 Apr 2024 05:04:26 GMT
timing-allow-origin: *
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

csp.secureserver.net/eventbus

104.110.14.92

200 OK

0 B

URL OPTIONS HTTP/1.1
csp.secureserver.net/eventbus
IP
104.110.14.92:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.secureserver.net
FingerprintB6:20:47:6F:3C:E3:DC:99:70:44:2D:CB:6A:E0:1C:12:A4:A5:A0:5C
ValidityTue, 10 Oct 2023 22:44:19 GMT - Sun, 10 Nov 2024 22:44:19 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /eventbus HTTP/1.1
Host: csp.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://www.concretemails.com/
Origin: https://www.concretemails.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 0
x-amzn-requestid: da29c65c-aeea-47b0-8737-a38827e48989
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: content-type,authorization
x-amz-apigw-id: WtviHF94IAMENxQ=
Access-Control-Allow-Methods: OPTIONS,POST
x-amzn-trace-id: Root=1-662892da-273fc8e507e5b3f40a7a1f54
x-envoy-upstream-service-time: 6
Expires: Wed, 24 Apr 2024 05:04:26 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 24 Apr 2024 05:04:26 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload

csp.secureserver.net/eventbus

104.110.14.92

200 OK

0 B

URL OPTIONS HTTP/1.1
csp.secureserver.net/eventbus
IP
104.110.14.92:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.secureserver.net
FingerprintB6:20:47:6F:3C:E3:DC:99:70:44:2D:CB:6A:E0:1C:12:A4:A5:A0:5C
ValidityTue, 10 Oct 2023 22:44:19 GMT - Sun, 10 Nov 2024 22:44:19 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /eventbus HTTP/1.1
Host: csp.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://www.concretemails.com/
Origin: https://www.concretemails.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 0
x-amzn-requestid: 8d05e7e5-0bcc-4e8b-9c1a-9d5ab31aa24a
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: content-type,authorization
x-amz-apigw-id: WtviHFGkoAMEBVw=
Access-Control-Allow-Methods: OPTIONS,POST
x-amzn-trace-id: Root=1-662892da-27644b2816cca71859ff1ae1
x-envoy-upstream-service-time: 6
Expires: Wed, 24 Apr 2024 05:04:26 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 24 Apr 2024 05:04:26 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload

csp.secureserver.net/eventbus

104.110.14.92

200 OK

0 B

URL OPTIONS HTTP/1.1
csp.secureserver.net/eventbus
IP
104.110.14.92:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.secureserver.net
FingerprintB6:20:47:6F:3C:E3:DC:99:70:44:2D:CB:6A:E0:1C:12:A4:A5:A0:5C
ValidityTue, 10 Oct 2023 22:44:19 GMT - Sun, 10 Nov 2024 22:44:19 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /eventbus HTTP/1.1
Host: csp.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://www.concretemails.com/
Origin: https://www.concretemails.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 0
x-amzn-requestid: 6ac518c1-0d45-41cc-a382-3b7d2f535e5e
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: content-type,authorization
x-amz-apigw-id: WtviHHl1oAMEDlg=
Access-Control-Allow-Methods: OPTIONS,POST
x-amzn-trace-id: Root=1-662892da-3d9e22b461c4c6a073d6921a
x-envoy-upstream-service-time: 6
Expires: Wed, 24 Apr 2024 05:04:26 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 24 Apr 2024 05:04:26 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload

csp.secureserver.net/eventbus

104.110.14.92

200 OK

0 B

URL OPTIONS HTTP/1.1
csp.secureserver.net/eventbus
IP
104.110.14.92:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.secureserver.net
FingerprintB6:20:47:6F:3C:E3:DC:99:70:44:2D:CB:6A:E0:1C:12:A4:A5:A0:5C
ValidityTue, 10 Oct 2023 22:44:19 GMT - Sun, 10 Nov 2024 22:44:19 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /eventbus HTTP/1.1
Host: csp.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://www.concretemails.com/
Origin: https://www.concretemails.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 0
x-amzn-requestid: d8644183-87d0-465d-a724-1bb792ea643e
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: content-type,authorization
x-amz-apigw-id: WtviHHGNIAMEMTw=
Access-Control-Allow-Methods: OPTIONS,POST
x-amzn-trace-id: Root=1-662892da-3d1f6f0f00ec608105f21d78
x-envoy-upstream-service-time: 5
Expires: Wed, 24 Apr 2024 05:04:26 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 24 Apr 2024 05:04:26 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload

events.api.secureserver.net/t/1/tl/event?dh=www.concretemails.com&dr=&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&vtg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&dp=%2F&trace_id=ccc3fbb60fd04fac8b1309ee6f8f9736&cts=2024-04-24T05%3A04%3A25.626Z&hit_id=74983ded-7b41-4dc5-b8b9-c7ac48fe4d6d&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpsh-oh%22%2C%22server%22%3A%22sg2plzcpnl493870%22%2C%22dcenter%22%3A%22sg2%22%2C%22cp_id%22%3A%229851892%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpsh-oh&vci=1451530397&z=1148529798&tce=1713935062706&tcs=1713935061273&tdc=1713935065618&tdclee=1713935064263&tdcles=1713935064259&tdi=1713935064258&tdl=1713935063616&tdle=1713935061273&tdls=1713935061273&tfs=1713935061271&tns=1713935061247&trqs=1713935062706&tre=1713935063532&trps=1713935063532&tles=1713935065618&tlee=0&nt=navigate&nav_type=hard

23.36.79.33

200 OK

43 B

URL GET HTTP/2
events.api.secureserver.net/t/1/tl/event?dh=www.concretemails.com&dr=&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&vtg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&dp=%2F&trace_id=ccc3fbb60fd04fac8b1309ee6f8f9736&cts=2024-04-24T05%3A04%3A25.626Z&hit_id=74983ded-7b41-4dc5-b8b9-c7ac48fe4d6d&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpsh-oh%22%2C%22server%22%3A%22sg2plzcpnl493870%22%2C%22dcenter%22%3A%22sg2%22%2C%22cp_id%22%3A%229851892%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpsh-oh&vci=1451530397&z=1148529798&tce=1713935062706&tcs=1713935061273&tdc=1713935065618&tdclee=1713935064263&tdcles=1713935064259&tdi=1713935064258&tdl=1713935063616&tdle=1713935061273&tdls=1713935061273&tfs=1713935061271&tns=1713935061247&trqs=1713935062706&tre=1713935063532&trps=1713935063532&tles=1713935065618&tlee=0&nt=navigate&nav_type=hard
IP
23.36.79.33:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.api.secureserver.net
Fingerprint86:0A:54:3C:14:92:76:57:19:E1:8B:86:AE:B6:C7:06:3C:C8:7A:58
ValidityMon, 10 Jul 2023 19:26:59 GMT - Sat, 10 Aug 2024 19:26:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b

HTTP Headers

GET /t/1/tl/event?dh=www.concretemails.com&dr=&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&vtg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&dp=%2F&trace_id=ccc3fbb60fd04fac8b1309ee6f8f9736&cts=2024-04-24T05%3A04%3A25.626Z&hit_id=74983ded-7b41-4dc5-b8b9-c7ac48fe4d6d&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22cpsh-oh%22%2C%22server%22%3A%22sg2plzcpnl493870%22%2C%22dcenter%22%3A%22sg2%22%2C%22cp_id%22%3A%229851892%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpsh-oh&vci=1451530397&z=1148529798&tce=1713935062706&tcs=1713935061273&tdc=1713935065618&tdclee=1713935064263&tdcles=1713935064259&tdi=1713935064258&tdl=1713935063616&tdle=1713935061273&tdls=1713935061273&tfs=1713935061271&tns=1713935061247&trqs=1713935062706&tre=1713935063532&trps=1713935063532&tles=1713935065618&tlee=0&nt=navigate&nav_type=hard HTTP/1.1
Host: events.api.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.concretemails.com
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/gif
content-length: 43
access-control-allow-origin: https://www.concretemails.com
access-control-allow-credentials: true
x-robots-tag: noindex, nofollow
cache-control: private
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
date: Wed, 24 Apr 2024 05:04:26 GMT
X-Firefox-Spdy: h2

23.36.79.33

200 OK

43 B

URL GET HTTP/2
events.api.secureserver.net/t/1/tl/event?dh=www.concretemails.com&dr=https%3A%2F%2Fwww.concretemails.com%2F&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&vtg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&dp=%2Findex_files%2Fprefetch.html&trace_id=55b948f32d3541a099d5a9fa5a7cd0f2&cts=2024-04-24T05%3A04%3A25.612Z&hit_id=835bc147-1b2a-4dfc-b2ca-59d3c579a773&ht=pageview&trfd=%7B%22ap%22%3A%22cpsh-oh%22%2C%22server%22%3A%22sg2plzcpnl493870%22%2C%22dcenter%22%3A%22sg2%22%2C%22cp_id%22%3A%229851892%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpsh-oh&vci=1270337143&z=539892201
IP
23.36.79.33:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerStarfield Technologies, Inc.
Subject*.api.secureserver.net
Fingerprint86:0A:54:3C:14:92:76:57:19:E1:8B:86:AE:B6:C7:06:3C:C8:7A:58
ValidityMon, 10 Jul 2023 19:26:59 GMT - Sat, 10 Aug 2024 19:26:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b

HTTP Headers

GET /t/1/tl/event?dh=www.concretemails.com&dr=https%3A%2F%2Fwww.concretemails.com%2F&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&client_name=scc-c2&cv=0.2.5&vg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&vtg=4a92a9d9-3054-4e3a-8999-702c7b2a48a0&dp=%2Findex_files%2Fprefetch.html&trace_id=55b948f32d3541a099d5a9fa5a7cd0f2&cts=2024-04-24T05%3A04%3A25.612Z&hit_id=835bc147-1b2a-4dfc-b2ca-59d3c579a773&ht=pageview&trfd=%7B%22ap%22%3A%22cpsh-oh%22%2C%22server%22%3A%22sg2plzcpnl493870%22%2C%22dcenter%22%3A%22sg2%22%2C%22cp_id%22%3A%229851892%22%2C%22cp_cache%22%3A%22%22%2C%22cp_cl%22%3A%228%22%7D&ap=cpsh-oh&vci=1270337143&z=539892201 HTTP/1.1
Host: events.api.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.concretemails.com
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/gif
content-length: 43
access-control-allow-origin: https://www.concretemails.com
access-control-allow-credentials: true
x-robots-tag: noindex, nofollow
cache-control: private
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
date: Wed, 24 Apr 2024 05:04:26 GMT
X-Firefox-Spdy: h2

r4.res.office365.com/owa/prem/16.2478.1.2588899/scripts/boot.worldwide.3.mouse.js

23.36.79.11

200 OK

145 kB

URL GET HTTP/2
r4.res.office365.com/owa/prem/16.2478.1.2588899/scripts/boot.worldwide.3.mouse.js
IP
23.36.79.11:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT

File type
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Size
145 kB (145035 bytes)
Hash
501f3b458cf834cb80804041fa5a6164
17d21eba8b87a8f0eafa1be19feed954681feeb9
234be61a6c98f9b1dba036840fdc3a42c6b4b9ccb9b11d9d191a0f06d2a0a787

HTTP Headers

GET /owa/prem/16.2478.1.2588899/scripts/boot.worldwide.3.mouse.js HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
last-modified: Tue, 24 Jul 2018 09:36:20 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 145035
cache-control: public,max-age=630720000, s-maxage=630720000
date: Wed, 24 Apr 2024 05:04:26 GMT
timing-allow-origin: *
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

r4.res.office365.com/owa/prem/16.2478.1.2588899/resources/images/0/sprite1.mouse.png

23.36.79.11

200 OK

17 kB

URL GET HTTP/2
r4.res.office365.com/owa/prem/16.2478.1.2588899/resources/images/0/sprite1.mouse.png
IP
23.36.79.11:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT

File type
PNG image data, 600 x 75, 8-bit/color RGBA, non-interlaced
Size
17 kB (16664 bytes)
Hash
2835f067dcf4c8a12464856267ca8ff7
ab0a6ccd3932d913314b1ff617f236750781a835
4b5cc3fed2c03c158abc3634c1f7700079fbc1e6183aa5e47a2064cfed87977c

HTTP Headers

GET /owa/prem/16.2478.1.2588899/resources/images/0/sprite1.mouse.png HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
last-modified: Tue, 24 Jul 2018 09:34:18 GMT
server: AkamaiNetStorage
content-length: 16664
cache-control: public,max-age=630720000, s-maxage=630720000
date: Wed, 24 Apr 2024 05:04:26 GMT
timing-allow-origin: *
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

r4.res.office365.com/owa/prem/16.2478.1.2588899/resources/images/0/sprite1.mouse.css

23.36.79.11

200 OK

1.1 kB

URL GET HTTP/2
r4.res.office365.com/owa/prem/16.2478.1.2588899/resources/images/0/sprite1.mouse.css
IP
23.36.79.11:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT

File type
ASCII text, with very long lines (7604), with no line terminators
Size
1.1 kB (1124 bytes)
Hash
e9ba472d2ddb09fb3ec536dc240b1976
99daf55408b077f6f56daaf6cae4e54dc0fc0cfa
461f87e55bba34c4d9248d1b45685ea832eba56c15ebf6cccf75d49f1547b502

HTTP Headers

GET /owa/prem/16.2478.1.2588899/resources/images/0/sprite1.mouse.css HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: text/css
last-modified: Tue, 24 Jul 2018 09:34:19 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1124
cache-control: public,max-age=630720000, s-maxage=630720000
date: Wed, 24 Apr 2024 05:04:26 GMT
timing-allow-origin: *
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

r4.res.office365.com/owa/prem/16.2478.1.2588899/resources/styles/0/boot.worldwide.mouse.css

23.36.79.11

200 OK

44 kB

URL GET HTTP/2
r4.res.office365.com/owa/prem/16.2478.1.2588899/resources/styles/0/boot.worldwide.mouse.css
IP
23.36.79.11:443
ASN
#20940 Akamai International B.V.

Requested by
https://www.concretemails.com/index_files/prefetch.html
Certificate
IssuerDigiCert Inc
Subject*.res.outlook.com
Fingerprint21:55:DF:8C:D8:DA:80:F2:04:7A:B9:66:BA:AC:C0:DC:D7:DB:46:D5
ValidityTue, 20 Feb 2024 00:00:00 GMT - Thu, 20 Feb 2025 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
44 kB (44251 bytes)
Hash
a7caadb84da8448a7c462ec0381e5476
70f27fcbbd725d05ec41addecc8ee31633916ce0
cd2ddb8b2f8ab2461222b1cb56431e615cdcf0d1f8491c31a4291a38d41f1229

HTTP Headers

GET /owa/prem/16.2478.1.2588899/resources/styles/0/boot.worldwide.mouse.css HTTP/1.1
Host: r4.res.office365.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: text/css
last-modified: Tue, 24 Jul 2018 09:35:11 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 44251
cache-control: public,max-age=630720000, s-maxage=630720000
date: Wed, 24 Apr 2024 05:04:26 GMT
timing-allow-origin: *
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

csp.secureserver.net/eventbus

104.110.14.92

200 OK

0 B

URL OPTIONS HTTP/1.1
csp.secureserver.net/eventbus
IP
104.110.14.92:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.secureserver.net
FingerprintB6:20:47:6F:3C:E3:DC:99:70:44:2D:CB:6A:E0:1C:12:A4:A5:A0:5C
ValidityTue, 10 Oct 2023 22:44:19 GMT - Sun, 10 Nov 2024 22:44:19 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /eventbus HTTP/1.1
Host: csp.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Authorization: api-key 8da2217409854bee82e12dc4ca0b39fb
Content-Type: application/json
Content-Length: 1845
Origin: https://www.concretemails.com
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 202 Accepted
Content-Type: application/json
Content-Length: 0
x-amzn-requestid: 0a0e7ee0-e13a-457d-8232-dd190466952b
Access-Control-Allow-Origin: *
x-amz-apigw-id: WtviJHhRIAMEmwA=
x-amzn-trace-id: Root=1-662892da-42398bfc79954b0a5fa0974c
x-envoy-upstream-service-time: 97
Expires: Wed, 24 Apr 2024 05:04:26 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 24 Apr 2024 05:04:26 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload

csp.secureserver.net/eventbus

104.110.14.92

200 OK

0 B

URL OPTIONS HTTP/1.1
csp.secureserver.net/eventbus
IP
104.110.14.92:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.secureserver.net
FingerprintB6:20:47:6F:3C:E3:DC:99:70:44:2D:CB:6A:E0:1C:12:A4:A5:A0:5C
ValidityTue, 10 Oct 2023 22:44:19 GMT - Sun, 10 Nov 2024 22:44:19 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /eventbus HTTP/1.1
Host: csp.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Authorization: api-key b18ef4f046435b64a469b32c3c1c20a3
Content-Type: application/json
Content-Length: 1140
Origin: https://www.concretemails.com
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 202 Accepted
Content-Type: application/json
Content-Length: 0
x-amzn-requestid: 364f61f5-2368-40c0-b605-8ae372524ff6
Access-Control-Allow-Origin: *
x-amz-apigw-id: WtviKEsBoAMEIBw=
x-amzn-trace-id: Root=1-662892da-12584945621c038e2665650c
x-envoy-upstream-service-time: 91
Expires: Wed, 24 Apr 2024 05:04:26 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 24 Apr 2024 05:04:26 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload

csp.secureserver.net/eventbus

104.110.14.92

200 OK

0 B

URL OPTIONS HTTP/1.1
csp.secureserver.net/eventbus
IP
104.110.14.92:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.secureserver.net
FingerprintB6:20:47:6F:3C:E3:DC:99:70:44:2D:CB:6A:E0:1C:12:A4:A5:A0:5C
ValidityTue, 10 Oct 2023 22:44:19 GMT - Sun, 10 Nov 2024 22:44:19 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /eventbus HTTP/1.1
Host: csp.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Authorization: api-key b18ef4f046435b64a469b32c3c1c20a3
Content-Type: application/json
Content-Length: 1066
Origin: https://www.concretemails.com
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 202 Accepted
Content-Type: application/json
Content-Length: 0
x-amzn-requestid: e8f292c4-d978-4ea5-ad87-415d0a4989c6
Access-Control-Allow-Origin: *
x-amz-apigw-id: WtviJGCgIAMEURA=
x-amzn-trace-id: Root=1-662892da-456359267fae4b6a6e6f0852
x-envoy-upstream-service-time: 100
Expires: Wed, 24 Apr 2024 05:04:26 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 24 Apr 2024 05:04:26 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload

csp.secureserver.net/eventbus

104.110.14.92

200 OK

0 B

URL OPTIONS HTTP/1.1
csp.secureserver.net/eventbus
IP
104.110.14.92:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.concretemails.com/
Certificate
IssuerStarfield Technologies, Inc.
Subject*.secureserver.net
FingerprintB6:20:47:6F:3C:E3:DC:99:70:44:2D:CB:6A:E0:1C:12:A4:A5:A0:5C
ValidityTue, 10 Oct 2023 22:44:19 GMT - Sun, 10 Nov 2024 22:44:19 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /eventbus HTTP/1.1
Host: csp.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Authorization: api-key 8da2217409854bee82e12dc4ca0b39fb
Content-Type: application/json
Content-Length: 1801
Origin: https://www.concretemails.com
DNT: 1
Connection: keep-alive
Referer: https://www.concretemails.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 202 Accepted
Content-Type: application/json
Content-Length: 0
x-amzn-requestid: d5139318-755c-41a3-8b1b-cdfc442ae7bd
Access-Control-Allow-Origin: *
x-amz-apigw-id: WtviJF3goAMEgLQ=
x-amzn-trace-id: Root=1-662892da-3760c53522bf8ffe5c483d0f
x-envoy-upstream-service-time: 104
Expires: Wed, 24 Apr 2024 05:04:26 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 24 Apr 2024 05:04:26 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload

www.concretemails.com/index_files/prefetch.html

68.178.224.37

200 OK

1.2 kB

URL GET HTTP/2
www.concretemails.com/index_files/prefetch.html
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
HTML document, ASCII text, with very long lines (1188)
Size
1.2 kB (1248 bytes)
Hash
ebfd6b049a926324a0d7d68cb797a902
d1ffaf13e7a3728a97bcc3b5f513679bb063a7ab
3f375fa67d3af9884869fc5e62dd2f0d36886baf4db654a05d4ea09a44448604

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /index_files/prefetch.html HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Thu, 08 Jul 2021 08:55:14 GMT
etag: "6d404e0-d2f-5c698d034c080-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1248
content-type: text/html
date: Wed, 24 Apr 2024 05:04:45 GMT
server: Apache
X-Firefox-Spdy: h2

www.concretemails.com/index_files/prefetch.html

68.178.224.37

200 OK

1.2 kB

URL GET HTTP/2
www.concretemails.com/index_files/prefetch.html
IP
68.178.224.37:443
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

Requested by
https://www.concretemails.com/
Certificate
IssuerLet's Encrypt
Subjectwebdisk.concretemails.com
Fingerprint40:4E:B1:09:C2:13:75:E9:56:77:AF:63:A7:8A:8B:FC:A6:12:45:89
ValidityTue, 23 Apr 2024 11:48:03 GMT - Mon, 22 Jul 2024 11:48:02 GMT

File type
HTML document, ASCII text, with very long lines (1188)
Size
1.2 kB (1248 bytes)
Hash
ebfd6b049a926324a0d7d68cb797a902
d1ffaf13e7a3728a97bcc3b5f513679bb063a7ab
3f375fa67d3af9884869fc5e62dd2f0d36886baf4db654a05d4ea09a44448604

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /index_files/prefetch.html HTTP/1.1
Host: www.concretemails.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 08 Jul 2021 08:55:14 GMT
etag: "6d404e0-d2f-5c698d034c080-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1248
content-type: text/html
date: Wed, 24 Apr 2024 05:04:45 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (43)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP