Report - carloscardona.mx/

Report Overview

Submitted URL
carloscardona.mx/
IP
192.185.79.218
ASN
#19871 NETWORK-SOLUTIONS-HOSTING
Submitted
2024-04-16 04:53:50
Access
public
Website Title
Sign in - chase.com
Final URL
carloscardona.mx/
Tags
chase financial phishing
urlquery detections
Phishing - Chase

Detections

urlquery
8
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
static.chasecdn.com	8638	2014-08-07	2017-02-01	2024-04-08	3.0 kB	380 kB	95.101.10.169
kit.fontawesome.com	1868	2012-10-18	2019-12-16	2024-04-15	441 B	12 kB	104.18.40.68
carloscardona.mx	unknown	unknown	No data	No data	2.7 kB	564 kB	192.185.79.218
ka-f.fontawesome.com	3598	2012-10-18	2019-12-17	2024-04-15	3.0 kB	415 kB	172.64.164.7

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-15	medium	carloscardona.mx/	Chase Personal Banking
2024-04-15	medium	carloscardona.mx/	Chase Personal Banking
2024-04-15	medium	carloscardona.mx/	Chase Personal Banking
2024-04-15	medium	carloscardona.mx/	Chase Personal Banking
2024-04-15	medium	carloscardona.mx/	Chase Personal Banking
2024-04-15	medium	carloscardona.mx/	Chase Personal Banking

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	kit.fontawesome.com/fd69f7a966.js	12 kB	2024-04-16	2024-04-16
Pretty URL kit.fontawesome.com/fd69f7a966.js IP 104.18.40.68 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 06:53:56 Last Seen2024-04-16 06:53:57 Times Seen2 Hash 9f8932703f5854e200ae36d0c7b565fc bd4431e1004baedd1e895c87b9bca83c9660dce3 5730ae022b37d48ca9b7a3cdfc2a1dc1515fdc96c453a936184cf59e807567e8 Loading...

	carloscardona.mx/	281 B	2023-08-18	2024-04-16
Pretty URL carloscardona.mx/ IP 192.185.79.218 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2023-08-18 01:12:53 Last Seen2024-04-16 06:53:57 Times Seen5 Hash 23af5fe7e2b355bb6d75017c6de8f9d2 4cb0f17f727841730bd8dee5c570444ddafbc1e4 bd13ddd4cdd8e6a3a55724aefc9c49a30207574a677c54502560cba5bcbb7ea2 Loading...

	carloscardona.mx/	1.9 kB	2023-08-18	2024-04-16
Pretty URL carloscardona.mx/ IP 192.185.79.218 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2023-08-18 01:12:53 Last Seen2024-04-16 06:53:57 Times Seen5 Hash e4d91435e3725f1e707466772b350fcc 08b23e911f3b75011cfb093ec62c9441a2b19e33 762ac8c472d7680677fd76857c2b1aeba5df2697ec1660ea73c1f556c6a3fe25 Loading...

HTTP Transactions (19)

URL IP Response Size

carloscardona.mx/

192.185.79.218

200 OK

6.4 kB

URL User Request GET HTTP/2
carloscardona.mx/
IP
192.185.79.218:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Certificate
IssuerLet's Encrypt
Subjectcarloscardona.mx
Fingerprint8B:8E:5C:7A:BF:C2:24:B5:8B:29:27:42:61:F8:96:A9:68:1D:FD:2E
ValidityFri, 22 Mar 2024 09:17:20 GMT - Thu, 20 Jun 2024 09:17:19 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (3082)
Size
6.4 kB (6369 bytes)
Hash
666b03a90580505a11a215359f0d24e0
fa9e9d49b3e4eabd38a9dcdcf953b0b041623326
0a2541365b8f6b6ecf37c25acece36bf0f8142aff4258a9c81be5e1b64171a34

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Chase
OpenPhish	phishing	Chase Personal Banking

HTTP Headers

GET / HTTP/1.1
Host: carloscardona.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Wed, 12 Apr 2023 07:28:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6369
content-type: text/html
date: Tue, 16 Apr 2024 04:53:23 GMT
server: Apache
X-Firefox-Spdy: h2

carloscardona.mx/mds-chase-icons.css

192.185.79.218

404 Not Found

4.7 kB

URL GET HTTP/2
carloscardona.mx/mds-chase-icons.css
IP
192.185.79.218:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://carloscardona.mx/
Certificate
IssuerLet's Encrypt
Subjectcarloscardona.mx
Fingerprint8B:8E:5C:7A:BF:C2:24:B5:8B:29:27:42:61:F8:96:A9:68:1D:FD:2E
ValidityFri, 22 Mar 2024 09:17:20 GMT - Thu, 20 Jun 2024 09:17:19 GMT

File type
HTML document, ASCII text, with very long lines (358)
Size
4.7 kB (4677 bytes)
Hash
a8063bd37d3c8fb3176a6bf140558a4d
e32cf4b407db3d3773ded13ff64b70fdbad7735f
bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Chase
OpenPhish	phishing	Chase Personal Banking

HTTP Headers

GET /mds-chase-icons.css HTTP/1.1
Host: carloscardona.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://carloscardona.mx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
last-modified: Mon, 03 Oct 2022 20:49:22 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4677
content-type: text/html
date: Tue, 16 Apr 2024 04:53:23 GMT
server: Apache
X-Firefox-Spdy: h2

carloscardona.mx/mds-chase-icons.css

192.185.79.218

404 Not Found

4.7 kB

URL GET HTTP/2
carloscardona.mx/mds-chase-icons.css
IP
192.185.79.218:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://carloscardona.mx/
Certificate
IssuerLet's Encrypt
Subjectcarloscardona.mx
Fingerprint8B:8E:5C:7A:BF:C2:24:B5:8B:29:27:42:61:F8:96:A9:68:1D:FD:2E
ValidityFri, 22 Mar 2024 09:17:20 GMT - Thu, 20 Jun 2024 09:17:19 GMT

File type
HTML document, ASCII text, with very long lines (358)
Size
4.7 kB (4677 bytes)
Hash
a8063bd37d3c8fb3176a6bf140558a4d
e32cf4b407db3d3773ded13ff64b70fdbad7735f
bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Chase
OpenPhish	phishing	Chase Personal Banking

HTTP Headers

GET /mds-chase-icons.css HTTP/1.1
Host: carloscardona.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://carloscardona.mx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
last-modified: Mon, 03 Oct 2022 20:49:22 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4677
content-type: text/html
date: Tue, 16 Apr 2024 04:53:24 GMT
server: Apache
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/webfonts/free-fa-brands-400.woff2

172.64.164.7

200 OK

118 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/webfonts/free-fa-brands-400.woff2
IP
172.64.164.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://carloscardona.mx/
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98
ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT

File type
Web Open Font Format (Version 2), TrueType, length 117856, version 773.1280
Size
118 kB (117856 bytes)
Hash
5674af1ac41fe62c1b4568cbb6a031ff
83ac1707f24f448c43d0656f224a827014154c4f
0de3edeabe89b14f48e7856d2cb631722c600ff66839fae178d0567902d62a91

HTTP Headers

GET /releases/v6.5.2/webfonts/free-fa-brands-400.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carloscardona.mx
DNT: 1
Connection: keep-alive
Referer: https://carloscardona.mx/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 16 Apr 2024 04:53:24 GMT
content-type: font/woff2
content-length: 117856
last-modified: Tue, 02 Apr 2024 15:51:14 GMT
etag: "5674af1ac41fe62c1b4568cbb6a031ff"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: fa-kit-token
access-control-max-age: 3000
x-cache: Hit from cloudfront
via: 1.1 aff6ac5c98fa897349204752e5877c80.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA56-C2
x-amz-cf-id: bsquO-TVjcTtbxrRXi-AFLnHMaHBO6CNhx1vHs8I8Momw1ur49QeBQ==
age: 1158148
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lw1Xc7eOUDW1D3uIC4X3xJ0G8km9F%2FxCLJr2Ej7Th2%2BSX7pASa47aYP4ofcmMtQtDkLvkWH%2BEyasAU%2FuHwQezAdA7vGqd9LPyCEa6b9kESL1qVeKJA3HZKarL5ZtKDhQWjzIogX7Dw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8751924bfb746534-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/webfonts/free-fa-solid-900.woff2

172.64.164.7

200 OK

156 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/webfonts/free-fa-solid-900.woff2
IP
172.64.164.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://carloscardona.mx/
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98
ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT

File type
Web Open Font Format (Version 2), TrueType, length 156388, version 773.1280
Size
156 kB (156388 bytes)
Hash
ae015e3286ef56a0daf8e83838a32a88
7c18577fd6c4e7d9036b244215ace3945372eefe
41dca0965bdfd255f85e7fc8e9a3dc1fe3eb810996c553d4ef2b8872737ee825

HTTP Headers

GET /releases/v6.5.2/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carloscardona.mx
DNT: 1
Connection: keep-alive
Referer: https://carloscardona.mx/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 16 Apr 2024 04:53:24 GMT
content-type: font/woff2
content-length: 156388
last-modified: Tue, 02 Apr 2024 15:51:14 GMT
etag: "ae015e3286ef56a0daf8e83838a32a88"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: fa-kit-token
access-control-max-age: 3000
x-cache: Hit from cloudfront
via: 1.1 0d5d2d408eb42296c7636196e25ef8a2.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA56-C2
x-amz-cf-id: E9poQcnpMlLyaCIFn6i_hsrr5X2V30kJvwPxRxKA3amNi-8xCjRqZA==
age: 301775
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YR0ee92%2F74J5QUmb4DYlqb6T9AVoUFsyg9f914vkdaDmdLxU1KP9y5ePy3aO1ddNS9ngxn8LoK3rIBsgADpGbxAQGUsqmK1Ybqrr6JltD0IT5C9nXOd2lOOaxLwssTdKoptEh%2FQ9WQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8751924c0b816534-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

carloscardona.mx/img/wordmark-white.svg

192.185.79.218

200 OK

1.4 kB

URL GET HTTP/2
carloscardona.mx/img/wordmark-white.svg
IP
192.185.79.218:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://carloscardona.mx/
Certificate
IssuerLet's Encrypt
Subjectcarloscardona.mx
Fingerprint8B:8E:5C:7A:BF:C2:24:B5:8B:29:27:42:61:F8:96:A9:68:1D:FD:2E
ValidityFri, 22 Mar 2024 09:17:20 GMT - Thu, 20 Jun 2024 09:17:19 GMT

File type
SVG Scalable Vector Graphics image
Size
1.4 kB (1409 bytes)
Hash
b55b042f907bc7108f5dca2103a8476b
9fcdcc86bfe1f3c7d4f774775670fbd08fe7556c
d3bf9c143e5e360da41736b1d4e833b5ac6b6f7093ddc91ffc538233a78488d0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Chase
OpenPhish	phishing	Chase Personal Banking

HTTP Headers

GET /img/wordmark-white.svg HTTP/1.1
Host: carloscardona.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://carloscardona.mx/css/logon.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 12 Apr 2023 04:53:14 GMT
accept-ranges: bytes
content-length: 1409
content-type: image/svg+xml
date: Tue, 16 Apr 2024 04:53:24 GMT
server: Apache
X-Firefox-Spdy: h2

static.chasecdn.com/content/dam/cpo-static/fonts/opensans-bold.woff

95.101.10.169

200 OK

14 kB

URL GET HTTP/2
static.chasecdn.com/content/dam/cpo-static/fonts/opensans-bold.woff
IP
95.101.10.169:443
ASN
#20940 Akamai International B.V.

Requested by
https://carloscardona.mx/
Certificate
IssuerEntrust, Inc.
Subjectstatic2.chasecdn.com
FingerprintCE:8C:2A:FE:E3:28:F3:78:C4:C4:C7:09:78:B7:4F:84:90:ED:57:B7
ValidityMon, 08 Apr 2024 21:32:40 GMT - Tue, 08 Apr 2025 21:32:38 GMT

File type
Web Open Font Format, TrueType, length 14504, version 1.1
Size
14 kB (14504 bytes)
Hash
3ccbd41bfd4962b57199a8fcfbcbde66
6abb08bfa56a3668b8df2fd3ea5c04774f12b920
0634f735018d63980fb935914bd910ebd51ed5ed0a03c8811607aca0c2e7c532

HTTP Headers

GET /content/dam/cpo-static/fonts/opensans-bold.woff HTTP/1.1
Host: static.chasecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carloscardona.mx
DNT: 1
Connection: keep-alive
Referer: https://carloscardona.mx/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: font/woff
content-length: 14504
server: Apache
last-modified: Mon, 28 Aug 2023 16:17:53 GMT
accept-ranges: bytes
x-app-cdndc-id: us-east-1
access-control-allow-origin: *
cache-control: max-age=2592000,s-maxage=2592000
date: Tue, 16 Apr 2024 04:53:24 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713243204624_1600457381_121255961_37_5199_3_11_31";dur=1
strict-transport-security: max-age=86400 ; preload
x-amzn-trace-id: 0.a50a655f.1713243204.73a3819
X-Firefox-Spdy: h2

static.chasecdn.com/content/dam/cpo-static/fonts/opensans-semibold.woff

95.101.10.169

200 OK

25 kB

URL GET HTTP/2
static.chasecdn.com/content/dam/cpo-static/fonts/opensans-semibold.woff
IP
95.101.10.169:443
ASN
#20940 Akamai International B.V.

Requested by
https://carloscardona.mx/
Certificate
IssuerEntrust, Inc.
Subjectstatic2.chasecdn.com
FingerprintCE:8C:2A:FE:E3:28:F3:78:C4:C4:C7:09:78:B7:4F:84:90:ED:57:B7
ValidityMon, 08 Apr 2024 21:32:40 GMT - Tue, 08 Apr 2025 21:32:38 GMT

File type
Web Open Font Format, TrueType, length 25108, version 1.0
Size
25 kB (25108 bytes)
Hash
33b58dcbc5aa1ae12fa76473c21ffe44
82a3345756101d0f95fe1dab285e9f9c4e79871f
d2113460c69de50edc6206a20deec3c2bc2733929f53817f1faca74ab34c33e3

HTTP Headers

GET /content/dam/cpo-static/fonts/opensans-semibold.woff HTTP/1.1
Host: static.chasecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carloscardona.mx
DNT: 1
Connection: keep-alive
Referer: https://carloscardona.mx/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: font/woff
content-length: 25108
server: Apache
last-modified: Tue, 12 Dec 2023 23:03:49 GMT
accept-ranges: bytes
x-app-cdndc-id: us-east-2
access-control-allow-origin: *
cache-control: max-age=2592000,s-maxage=2592000
date: Tue, 16 Apr 2024 04:53:24 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713243204640_1600457381_121255965_170_4542_2_0_31";dur=1
strict-transport-security: max-age=86400 ; preload
x-amzn-trace-id: 0.a50a655f.1713243204.73a381d
X-Firefox-Spdy: h2

static.chasecdn.com/content/dam/cpo-static/fonts/opensans-regular.woff

95.101.10.169

200 OK

25 kB

URL GET HTTP/2
static.chasecdn.com/content/dam/cpo-static/fonts/opensans-regular.woff
IP
95.101.10.169:443
ASN
#20940 Akamai International B.V.

Requested by
https://carloscardona.mx/
Certificate
IssuerEntrust, Inc.
Subjectstatic2.chasecdn.com
FingerprintCE:8C:2A:FE:E3:28:F3:78:C4:C4:C7:09:78:B7:4F:84:90:ED:57:B7
ValidityMon, 08 Apr 2024 21:32:40 GMT - Tue, 08 Apr 2025 21:32:38 GMT

File type
Web Open Font Format, TrueType, length 24876, version 1.0
Size
25 kB (24876 bytes)
Hash
4eeedb4bc24c1cae309e117eea3f102f
ad5a141ef39ad1ada22a464fcd3678fcf72ac22b
b8422277fc69c8e6ab51112dbf25048e40425cc497490fee251b56d7ef0ca179

HTTP Headers

GET /content/dam/cpo-static/fonts/opensans-regular.woff HTTP/1.1
Host: static.chasecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carloscardona.mx
DNT: 1
Connection: keep-alive
Referer: https://carloscardona.mx/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: font/woff
content-length: 24876
server: Apache
last-modified: Wed, 13 Sep 2023 14:50:05 GMT
accept-ranges: bytes
x-app-cdndc-id: us-east-1
access-control-allow-origin: *
cache-control: max-age=2592000,s-maxage=2592000
date: Tue, 16 Apr 2024 04:53:24 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713243204639_1600457381_121255966_26_5339_2_0_31";dur=1
strict-transport-security: max-age=86400 ; preload
x-amzn-trace-id: 0.a50a655f.1713243204.73a381e
X-Firefox-Spdy: h2

static.chasecdn.com/content/geo-images/images/background.desktop.day.1.jpeg

95.101.10.169

200 OK

306 kB

URL GET HTTP/2
static.chasecdn.com/content/geo-images/images/background.desktop.day.1.jpeg
IP
95.101.10.169:443
ASN
#20940 Akamai International B.V.

Requested by
https://carloscardona.mx/
Certificate
IssuerEntrust, Inc.
Subjectstatic2.chasecdn.com
FingerprintCE:8C:2A:FE:E3:28:F3:78:C4:C4:C7:09:78:B7:4F:84:90:ED:57:B7
ValidityMon, 08 Apr 2024 21:32:40 GMT - Tue, 08 Apr 2025 21:32:38 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3
Size
306 kB (306152 bytes)
Hash
ff4ccdb7a4428ead513943583665aa4e
07bec642d24ae6fbc965251e147992df17bb71f0
01978e63789284edde4bb064e7d3215fad57fb5b7ea373b031b5b97021868085

HTTP Headers

GET /content/geo-images/images/background.desktop.day.1.jpeg HTTP/1.1
Host: static.chasecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://carloscardona.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/jpeg
content-length: 306152
server: Apache
last-modified: Thu, 15 Feb 2024 18:11:38 GMT
accept-ranges: bytes
x-app-cdndc-id: us-east-1
access-control-allow-origin: *
cache-control: max-age=2592000,s-maxage=2592000
date: Tue, 16 Apr 2024 04:53:24 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=2, ak_p; desc="1713243204619_1600457381_121255964_221_5658_1_17_22";dur=1
strict-transport-security: max-age=86400 ; preload
x-amzn-trace-id: 0.a50a655f.1713243204.73a381c
X-Firefox-Spdy: h2

static.chasecdn.com/content/dam/cpo-static/images/chase-touch-icon-152x152.png

95.101.10.169

200 OK

3.3 kB

URL GET HTTP/2
static.chasecdn.com/content/dam/cpo-static/images/chase-touch-icon-152x152.png
IP
95.101.10.169:443
ASN
#20940 Akamai International B.V.

Requested by
https://carloscardona.mx/
Certificate
IssuerEntrust, Inc.
Subjectstatic2.chasecdn.com
FingerprintCE:8C:2A:FE:E3:28:F3:78:C4:C4:C7:09:78:B7:4F:84:90:ED:57:B7
ValidityMon, 08 Apr 2024 21:32:40 GMT - Tue, 08 Apr 2025 21:32:38 GMT

File type
PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced
Size
3.3 kB (3306 bytes)
Hash
c914a8a86590b23691476a4178ea3a52
af16ec4fc3b5446cac17ec8f0044286b835d3295
f3446f452fc926c9182a2a43780faa169e533df8446d4f9a5f62ac2fb5b375e6

HTTP Headers

GET /content/dam/cpo-static/images/chase-touch-icon-152x152.png HTTP/1.1
Host: static.chasecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://carloscardona.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 3306
x-dispatcher: dispatcher1useast1-28539364
x-vhost: private-publish
last-modified: Sat, 06 Apr 2024 05:42:55 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=2592000,s-maxage=2592000
x-ams-migration: TRUE
date: Tue, 16 Apr 2024 04:53:24 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713243204755_1600457381_121256059_58_6020_1_0_21";dur=1
strict-transport-security: max-age=86400 ; preload
x-amzn-trace-id: 0.a50a655f.1713243204.73a387b
X-Firefox-Spdy: h2

static.chasecdn.com/content/dam/cpo-static/images/chasefavicon.ico

95.101.10.169

2.5 kB

URL GET
static.chasecdn.com/content/dam/cpo-static/images/chasefavicon.ico
IP
95.101.10.169:0
ASN
#20940 Akamai International B.V.

Requested by
https://carloscardona.mx/
Certificate
IssuerEntrust, Inc.
Subjectstatic2.chasecdn.com
FingerprintCE:8C:2A:FE:E3:28:F3:78:C4:C4:C7:09:78:B7:4F:84:90:ED:57:B7
ValidityMon, 08 Apr 2024 21:32:40 GMT - Tue, 08 Apr 2025 21:32:38 GMT

File type
MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
2.5 kB (2478 bytes)
Hash
5744986eb3dc6f2da92157a651889902
5a558b58498fab2aeb742acdab51e0c2fbc78385
625816f80596303e9de8e68695973369faa462b416202825b03899c781464fb9

HTTP Headers

GET /content/dam/cpo-static/images/chasefavicon.ico HTTP/1.1
Host: static.chasecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://carloscardona.mx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/x-icon
server: Apache
last-modified: Sun, 11 Feb 2024 06:58:49 GMT
accept-ranges: bytes
x-app-cdndc-id: us-east-1
access-control-allow-origin: *
cache-control: max-age=2592000,s-maxage=2592000
vary: Accept-Encoding
content-encoding: gzip
content-length: 2478
date: Tue, 16 Apr 2024 04:53:24 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713243204771_1600457381_121256065_1170_5030_1_0_21";dur=1
strict-transport-security: max-age=86400 ; preload
x-amzn-trace-id: 0.a50a655f.1713243204.73a3881
X-Firefox-Spdy: h2

carloscardona.mx/css/logon.css

192.185.79.218

200 OK

35 kB

URL GET HTTP/2
carloscardona.mx/css/logon.css
IP
192.185.79.218:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://carloscardona.mx/
Certificate
IssuerLet's Encrypt
Subjectcarloscardona.mx
Fingerprint8B:8E:5C:7A:BF:C2:24:B5:8B:29:27:42:61:F8:96:A9:68:1D:FD:2E
ValidityFri, 22 Mar 2024 09:17:20 GMT - Thu, 20 Jun 2024 09:17:19 GMT

File type
gzip compressed data, from Unix
Size
35 kB (35035 bytes)
Hash
df88f735b5c888ce1718797b222ee49f
3fdb0f48cb2f3b1c65f79843c1c11980d60be9f8
e4a766a64519b4ac89f8262f8bbe6b7ddbffcb8e2c6f16e4984f25183f3dc33e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Chase
OpenPhish	phishing	Chase Personal Banking

HTTP Headers

GET /css/logon.css HTTP/1.1
Host: carloscardona.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://carloscardona.mx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 12 Apr 2023 04:53:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Tue, 16 Apr 2024 04:53:23 GMT
server: Apache
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-shims.min.css?token=fd69f7a966

172.64.164.7

200 OK

28 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-shims.min.css?token=fd69f7a966
IP
172.64.164.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://carloscardona.mx/
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98
ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT

File type
ASCII text, with very long lines (27377)
Size
28 kB (27592 bytes)
Hash
940b066040a876fa1dc7b2ee2d222a58
64b2aea0b4d60d879d4ff7540192a906ffc0fd92
f4e953827930889e844103c3a6771bd2e9de17d091b36378c40362271858e075

HTTP Headers

GET /releases/v6.5.2/css/free-v4-shims.min.css?token=fd69f7a966 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://carloscardona.mx/
Origin: https://carloscardona.mx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 04:53:24 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"940b066040a876fa1dc7b2ee2d222a58"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dca6db3c8f31f3cd48bb06d78a8be624.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA56-C2
x-amz-cf-id: AFutX6A71Q09vrVTsiE9WnQGYhEoc198fnXEVO3SQosxJMiz5dWOaQ==
age: 1158149
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mN5TmpOk5MBSMiofuQj06g%2FFcL6eyT8U%2B3evPpueuItrdMV8DeYL2w114HuGdKxqb1Q6xZeEd1oOqFx0DR6dhfWgyCyJ%2BnmjFwHgUREvtS9Pc5QhFB1jtiSxZOkIlcaQ8pppEkZjjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8751924a8a196534-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-font-face.min.css?token=fd69f7a966

172.64.164.7

200 OK

1.8 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-font-face.min.css?token=fd69f7a966
IP
172.64.164.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://carloscardona.mx/
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98
ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT

File type
ASCII text, with very long lines (1803), with no line terminators
Size
1.8 kB (1775 bytes)
Hash
36f549800bc029aaadd0d7ac3d1d0f54
45bfcbb57c0155a2f22a47117deae6dc87706d4a
4048a832df1b9ac88058b1964ab9c45300daf6c10b0a02d697a29d729a81ea30

HTTP Headers

GET /releases/v6.5.2/css/free-v4-font-face.min.css?token=fd69f7a966 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://carloscardona.mx/
Origin: https://carloscardona.mx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 04:53:24 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"9c9f596493867f0e7ef5f9fe99103fce"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 95adda0bdbd310a1a9e4f54f540543e2.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA56-C2
x-amz-cf-id: MdSxP5tL6FDR26oNSS_QJrdbQDevt-a1efwhjRUQSsGMlEeC3kylyA==
age: 1158149
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WytQJH61OzcrpoD15045WAIastaH1fiZGgV5vVhfOL2HLiHpgXckr%2ByvycQjvt81YUzEUlQcRKU%2BMZjKkuxZN8Vfci620F2J5PSCobwCiUVHiZHXuMScbaHYQYQUDOltdib3%2FDRiEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8751924a7a136534-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kit.fontawesome.com/fd69f7a966.js

104.18.40.68

200 OK

12 kB

URL GET HTTP/2
kit.fontawesome.com/fd69f7a966.js
IP
104.18.40.68:443
ASN
#13335 CLOUDFLARENET

Requested by
https://carloscardona.mx/
Certificate
IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D
ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (11461)
Size
12 kB (11890 bytes)
Hash
9f8932703f5854e200ae36d0c7b565fc
bd4431e1004baedd1e895c87b9bca83c9660dce3
5730ae022b37d48ca9b7a3cdfc2a1dc1515fdc96c453a936184cf59e807567e8

HTTP Headers

GET /fd69f7a966.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://carloscardona.mx
DNT: 1
Connection: keep-alive
Referer: https://carloscardona.mx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 04:53:24 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, stale-while-revalidate=30
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F8apne6j7Qj2NPQnGZoB
cf-cache-status: MISS
server: cloudflare
cf-ray: 87519248cae256c1-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free.min.css?token=fd69f7a966

172.64.164.7

200 OK

104 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free.min.css?token=fd69f7a966
IP
172.64.164.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://carloscardona.mx/
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98
ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT

File type
ASCII text, with very long lines (65321)
Size
104 kB (103541 bytes)
Hash
7f29cd8c97789aa298af8c61623ca28b
af8109e0e5c8bb2c1c3ab44ba7b5d25900ca454a
3e9c73fa687cd4110688668977a7caa87f5a1dee0d11f03687bd4871deedf1c1

HTTP Headers

GET /releases/v6.5.2/css/free.min.css?token=fd69f7a966 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://carloscardona.mx/
Origin: https://carloscardona.mx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 04:53:24 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"7f29cd8c97789aa298af8c61623ca28b"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 67c28c3777e19eb797bcdb8909f34c46.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR5-P6
x-amz-cf-id: GPXgXymFLFFFJqAlZV6CiXDk34vhPBdskTHJUqTwiSZir_nPJ2lS5g==
age: 1158149
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xR%2FPru9Fgh5l9O%2BtPJE%2FllQQVotaPb11yPUeX1MERGF0immmMyrlrmaxAMnOWAtd8QKO8paLULe5npPYXvO1XO5Vi6Uj%2FpxCXy%2BS1sXEX2yXXRXFvALX%2FnU025195rhbss9W4%2FmhKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8751924a6a016534-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

carloscardona.mx/css/blue-ui.css

192.185.79.218

200 OK

510 kB

URL GET HTTP/2
carloscardona.mx/css/blue-ui.css
IP
192.185.79.218:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://carloscardona.mx/
Certificate
IssuerLet's Encrypt
Subjectcarloscardona.mx
Fingerprint8B:8E:5C:7A:BF:C2:24:B5:8B:29:27:42:61:F8:96:A9:68:1D:FD:2E
ValidityFri, 22 Mar 2024 09:17:20 GMT - Thu, 20 Jun 2024 09:17:19 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
510 kB (510195 bytes)
Hash
da956e1b9164548d5127f341d7895ab9
9ea06c5175c2492fda40e90028b29dbea4830855
3303fd8e3e10ea99269b96fcffa1370d6e40a21f02a712920f875b04a91e3205

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Chase
OpenPhish	phishing	Chase Personal Banking

HTTP Headers

GET /css/blue-ui.css HTTP/1.1
Host: carloscardona.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://carloscardona.mx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Wed, 12 Apr 2023 04:48:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Tue, 16 Apr 2024 04:53:23 GMT
server: Apache
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free-v5-font-face.min.css?token=fd69f7a966

172.64.164.7

200 OK

823 B

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free-v5-font-face.min.css?token=fd69f7a966
IP
172.64.164.7:443
ASN
#13335 CLOUDFLARENET

Requested by
https://carloscardona.mx/
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98
ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT

File type
ASCII text, with very long lines (845), with no line terminators
Size
823 B (823 bytes)
Hash
d8a0274a5097af25642c9310d6d4bb3e
61512d739400e60d9360863446eaf008395859fb
84f5ae05668bcfe4bd7447d5035e909686423e998d8dfc2c96789875ef78cdd3

HTTP Headers

GET /releases/v6.5.2/css/free-v5-font-face.min.css?token=fd69f7a966 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://carloscardona.mx/
Origin: https://carloscardona.mx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 04:53:24 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"a3d53e21a02e37af6cbc00ac63b3cc1e"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 d9724ab1ffbd159e13ec0a9fda972d3e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR5-P6
x-amz-cf-id: FPEAOOa_r12OLzqVjFvz7Azs3tB_mZaPDYsROYEp0RBMbShSL5uygw==
age: 1158149
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ej458JnFx3sz3%2BwCPnQoBa9gBcIwsIMuEDWK4xAKk%2B%2BUGo7rjRIYqbjFB3l1BvzLtsp6Sr%2Buxp9WGWR%2F8Z4A%2BjvY6gnDaVIVD32TA7mvRYLuQQrYP44GtWiw2at7GIP48XIIi6xjTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8751924a7a0b6534-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (19)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN