Report - doportal.documentmailbox.com/RedirectTarget.aspx?Action=EmailRedirect&BrandingID=ConEdison&CheckSum=419c0ea4458af823f7020dbc143e7fc8&IdToken=B6E2D3B3-D2AD-11ED-8139-1C98EC1A1C69&TargetUrl=//pie-majestic-guava%E3%80%82glitch%E3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==//pie-majestic-guava%E3%80%82glitch%E3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==//pie-majestic-guava%E3%80%82glitch%E3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==//pie-majestic-guava%E3%80%82glitch%E3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==

Report Overview

Submitted URL
doportal.documentmailbox.com/RedirectTarget.aspx?Action=EmailRedirect&BrandingID=ConEdison&CheckSum=419c0ea4458af823f7020dbc143e7fc8&IdToken=B6E2D3B3-D2AD-11ED-8139-1C98EC1A1C69&TargetUrl=//pie-majestic-guava%E3%80%82glitch%E3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==//pie-majestic-guava%E3%80%82glitch%E3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==//pie-majestic-guava%E3%80%82glitch%E3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==//pie-majestic-guava%E3%80%82glitch%E3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==
IP
167.212.17.236
ASN
#29949 BFS-49-29949
Submitted
2024-05-08 14:29:18
Access
public
Website Title
a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Final URL
a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.entrust.net	1208	1997-07-28	2014-01-10	2024-05-07	328 B	2.0 kB	23.38.202.187
pie-majestic-guava.glitch.me	unknown	unknown	No data	No data	789 B	1.3 kB	54.83.64.233
a3cb6c8b.webmail-7hc.pages.dev	unknown	unknown	No data	No data	2.6 kB	50 kB	172.66.47.175
images.sftcdn.net	77483	2008-09-15	2017-07-20	2024-05-08	567 B	2.4 kB	104.110.18.102
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-05-08	446 B	28 kB	104.17.25.14
www.google.com	7	1997-09-15	2015-05-10	2024-03-23	1.7 kB	4.2 kB	142.250.74.164
logo.clearbit.com	27344	2003-07-04	2015-06-30	2024-05-07	1.3 kB	31 kB	143.204.55.28
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21	2024-05-07	338 B	942 B	143.204.53.97
fonts.google.com	31986	1997-09-15	2016-06-16	2024-05-08	1.7 kB	13 kB	142.250.74.14
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-08	1.7 kB	65 kB	142.250.74.163
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2024-05-07	466 B	118 kB	104.18.11.207

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	a3cb6c8b.webmail-7hc.pages.dev/docc-file.html	Generic/Spear Phishing
2024-05-08	medium	a3cb6c8b.webmail-7hc.pages.dev/docc-file.html	Generic/Spear Phishing

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js	84 kB	2023-03-07	2024-05-19
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:40 Last Seen2024-05-19 19:04:35 Times Seen11170 Hash 7f9fb969ce353c5d77707836391eb28d 62c4042e9ebc691a5372d653b424512a561d1670 2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515 Loading...

	a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu	1.3 kB	2023-03-08	2024-05-16
Pretty URL a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 16:44:50 Last Seen2024-05-16 05:00:34 Times Seen2323 Hash 160f11a1f1b5c685346e0f033b170f66 b8ea0e8e982a0195c3d1ed8f6bfbb31649052960 af555745524b5a2d7e9aa623f85964fad33cda13494e21646a2e597854a7b2d1 Loading...

	a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu	3.4 kB	2023-03-08	2024-05-16
Pretty URL a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 16:44:50 Last Seen2024-05-16 05:00:34 Times Seen2323 Hash c47fcb454544146076bf38a0ad01ed5f b4fe3c348e85b6f631fc0df9f739e9316c560df6 3b9192cc0217fb9406b6e9d9d6b08f78ecef7b87739b999b6d817be0bf23c5fc Loading...

HTTP Transactions (25)

URL IP Response Size

ocsp.entrust.net/

23.38.202.187

1.6 kB

URL
ocsp.entrust.net/
IP
23.38.202.187:0
ASN
#16625 AKAMAI-AS

File type
data
Size
1.6 kB (1588 bytes)
Hash
9fb3139dad257afd809a4fe1e44b9e57
409f64858c08b440d91961ce690ea8bf4fcd3ed0
01b65e967445fe6ae9259ab483d00a1e6c733d11c82e2965cb71902d53c936d3

HTTP Headers

POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "01B65E967445FE6AE9259AB483D00A1E6C733D11C82E2965CB71902D53C936D3"
Last-Modified: Wed, 08 May 2024 03:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3586
Expires: Wed, 08 May 2024 15:28:35 GMT
Date: Wed, 08 May 2024 14:28:49 GMT
Connection: keep-alive

ocsp.r2m03.amazontrust.com/

143.204.53.97

471 B

URL
ocsp.r2m03.amazontrust.com/
IP
143.204.53.97:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
887ede8850e6b2c5581b53fa3f849948
edfe80edcacb805a3af4418f2126d230af4756b5
2ef71d9cfeb6b840015d6ca4571a7e2ef0f1686869e218c47d364dd61a02e919

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 08 May 2024 14:28:50 GMT
Last-Modified: Wed, 08 May 2024 13:44:03 GMT
Server: ECAcc (ska/F6D2)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 47PBz-Ae-P9A-a5u7HMNEwrJMnohz9N7oGtAPeMK0fk5OOTt4Q4XWg==
Age: 2687

pie-majestic-guava.glitch.me/?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==//pie-majestic-guava%e3%80%82glitch%e3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==//pie-majestic-guava%e3%80%82glitch%e3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==//pie-majestic-guava%e3%80%82glitch%e3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==

54.83.64.233

806 B

URL
pie-majestic-guava.glitch.me/?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==//pie-majestic-guava%e3%80%82glitch%e3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==//pie-majestic-guava%e3%80%82glitch%e3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==//pie-majestic-guava%e3%80%82glitch%e3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==
IP
54.83.64.233:0
ASN
#14618 AMAZON-AES

File type
HTML document, ASCII text
Size
806 B (806 bytes)
Hash
08a23446d433040e17a0aa158c016074
e13da2ef56762a908ff5f512cd2c25247982009c
4314e75c9d0c447b928007a97fbe1c287eda7c4be3f1417ee5dd4ac362c9c07c

HTTP Headers

GET /?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==//pie-majestic-guava%e3%80%82glitch%e3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==//pie-majestic-guava%e3%80%82glitch%e3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ==//pie-majestic-guava%e3%80%82glitch%e3%80%82me?/YW5kcmVlYS5ib2xvaGFuQGVjLmV1cm9wYS5ldQ== HTTP/1.1
Host: pie-majestic-guava.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 14:28:50 GMT
content-type: text/html; charset=utf-8
content-length: 806
x-amz-id-2: pN0LymlHBfLLWBHIWHHY98G9t0yGe/3CXGqOZE0UJ2bNjEJKCkaEw154RyjXf9Ds4zRvHhHS0x4eGczN0qfQvjwqTl1SpLQh
x-amz-request-id: MHAMQZ151HYR8ADG
last-modified: Mon, 06 May 2024 12:39:46 GMT
etag: "08a23446d433040e17a0aa158c016074"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: Xk_GcJuGJE0YAyPGwSZyVKK0yzFvIjS7
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

a3cb6c8b.webmail-7hc.pages.dev/docc-file.html

172.66.47.175

0 B

URL
a3cb6c8b.webmail-7hc.pages.dev/docc-file.html
IP
172.66.47.175:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Generic/Spear Phishing

HTTP Headers

GET /docc-file.html HTTP/1.1
Host: a3cb6c8b.webmail-7hc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pie-majestic-guava.glitch.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 308 Permanent Redirect
date: Wed, 08 May 2024 14:28:50 GMT
content-length: 0
location: /docc-file
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FLOvj4XEfrXwOwVvPpUAIVmZVFxpexOXFM7T223QHs%2FWVRZ6w1V9sApi0Rz4GJmOBI6CuXmb3yaZ3CA74ZjY3uSn1xLFAuOVnvRs8pxZ%2BLeUwCBNNXUj1ogDSYwmgMazawnEPpUCK8Nk2jxiBpWarE8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880a2379d91b568d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

a3cb6c8b.webmail-7hc.pages.dev/assets/js/script.js

172.66.47.175

404 Not Found

0 B

URL GET HTTP/3
a3cb6c8b.webmail-7hc.pages.dev/assets/js/script.js
IP
172.66.47.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Certificate
IssuerGoogle Trust Services LLC
Subjectwebmail-7hc.pages.dev
FingerprintA7:23:DA:28:42:A4:BA:4B:F9:73:A1:9A:EA:EF:3F:A0:BE:05:D2:39
ValiditySun, 05 May 2024 22:10:41 GMT - Sat, 03 Aug 2024 22:10:40 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/js/script.js HTTP/1.1
Host: a3cb6c8b.webmail-7hc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/docc-file
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Wed, 08 May 2024 14:28:51 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2yxItXOz4BUnBSZbu8fmnq0I9nSsbRFwFYbP3wFOP4dbBmfkyyd2W%2BnLnELKtwtPtHDU90PXe23kgjIdBotmmFplQYsLSkLBHMG6U15UZwAW7hn0R5Eg5O1ltjQ6pRNKhKm0THrfZlFC5l5FiMbfbRA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880a237b9c1456b4-OSL
alt-svc: h3=":443"; ma=86400

a3cb6c8b.webmail-7hc.pages.dev/assets/css/style.css

172.66.47.175

404 Not Found

0 B

URL GET HTTP/3
a3cb6c8b.webmail-7hc.pages.dev/assets/css/style.css
IP
172.66.47.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Certificate
IssuerGoogle Trust Services LLC
Subjectwebmail-7hc.pages.dev
FingerprintA7:23:DA:28:42:A4:BA:4B:F9:73:A1:9A:EA:EF:3F:A0:BE:05:D2:39
ValiditySun, 05 May 2024 22:10:41 GMT - Sat, 03 Aug 2024 22:10:40 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/css/style.css HTTP/1.1
Host: a3cb6c8b.webmail-7hc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/docc-file
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Wed, 08 May 2024 14:28:51 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kDstUFl%2FWmcbyyhsLzrVnpFA8C5Ilq%2Bonwcp4LwS85n%2BXZqNVX%2FfLzHLjPtJ%2FN03iCr4byvQjnChgKesmRva4JE41OHT766FA5W1B8Y4%2F5KyE92aOVcpsFW5SaPrVJCNftzEOzgyop9aKbo9XtY%2BBSU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880a237b9c0d56b4-OSL
alt-svc: h3=":443"; ma=86400

images.sftcdn.net/images/t_app-logo-xl,f_auto,dpr_2/p/7a60e021-3fe5-4334-9e56-7cc6ebae632d/2825932570/roundcube-webmail-roundcube_logo_icon.svg

104.110.18.102

200 OK

1.6 kB

URL GET HTTP/2
images.sftcdn.net/images/t_app-logo-xl,f_auto,dpr_2/p/7a60e021-3fe5-4334-9e56-7cc6ebae632d/2825932570/roundcube-webmail-roundcube_logo_icon.svg
IP
104.110.18.102:443
ASN
#16625 AKAMAI-AS

Requested by
https://a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Certificate
IssuerLet's Encrypt
Subjects4-san.cloudinary.com
Fingerprint12:4D:54:45:72:66:B8:94:EB:53:70:54:6C:4E:F3:56:78:29:8D:27
ValidityWed, 14 Feb 2024 11:43:07 GMT - Tue, 14 May 2024 11:43:06 GMT

File type
RIFF (little-endian) data, Web/P image
Size
1.6 kB (1620 bytes)
Hash
99724406fe475a16c3ba875b3e4742e7
b0a47e644eb92d1d0dcd7dcd41f393f0da26fb1b
2175ef57d8cb9f2c1d8d1f75f2a4d0cce3963fdf0c8013cafbe5ecd1866a6c2c

HTTP Headers

GET /images/t_app-logo-xl,f_auto,dpr_2/p/7a60e021-3fe5-4334-9e56-7cc6ebae632d/2825932570/roundcube-webmail-roundcube_logo_icon.svg HTTP/1.1
Host: images.sftcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/webp
content-length: 1620
etag: "99724406fe475a16c3ba875b3e4742e7"
last-modified: Fri, 26 Jun 2020 13:52:47 GMT
date: Wed, 08 May 2024 14:28:51 GMT
cache-control: private, no-transform, max-age=31536000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
vary: Accept,User-Agent
content-disposition: inline; filename="roundcube-webmail-roundcube_logo_icon.svg"
x-content-type-options: nosniff
server-timing: cld-akam;dur=5;start=2024-05-08T14:28:51.188Z;desc=hit,rtt;dur=5
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js

104.17.25.14

200 OK

27 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32180)
Size
27 kB (26660 bytes)
Hash
7f9fb969ce353c5d77707836391eb28d
62c4042e9ebc691a5372d653b424512a561d1670
2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515

HTTP Headers

GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 14:28:51 GMT
content-type: application/javascript; charset=utf-8
content-length: 26660
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-14983"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 680530
expires: Mon, 28 Apr 2025 14:28:51 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X8EMhquZKKPbBJREqpSY62xumDypaIQnzyN1ndlo1xeA2u9kYPIqgFyflNPaDeuMGyqtoJiEAutWTwZz5WUXO3TyBeOVdApVBRYRGejqDafGQKuoKdgbw8Ah7yUtyrHORJTJMulA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 880a237bfaf05689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.google.com/fonts

142.250.74.164

0 B

URL
www.google.com/fonts
IP
142.250.74.164:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /fonts HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
content-type: application/binary
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 May 2024 14:28:51 GMT
location: https://fonts.google.com/
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-security-policy: script-src 'nonce-DRxbnkZSgdP3Hr-uxU3nXQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy: same-origin-allow-popups
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=514=m1BIQzi99MJjjBFs8qP7jGEtsyAhCP5tThD__mmSlrfg7rk05uz-Oz6AyXKoyZOaUovDQ8urVZGKeB_DcWjqhRoSOqbvn_k4gWNRw7O_KsBEe2wnS987ECq2K3OLn1VLHNy4PR8JRvD0hFMOfLbLcodP9O3wlEv8hSemTAL5cOg; expires=Thu, 07-Nov-2024 14:28:51 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.google.com/fonts

142.250.74.164

0 B

URL
www.google.com/fonts
IP
142.250.74.164:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /fonts HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
content-type: application/binary
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 May 2024 14:28:51 GMT
location: https://fonts.google.com/
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-security-policy: script-src 'nonce-fwW8ciIo2ajk-Rk4X84u4A' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy: same-origin-allow-popups
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=514=Z8Ttwj7iJiqGU8yt7ghy0gxjlnfj3vkVzdt-c29zhvGRfDsNBjybZd8S7YHEuzdwgU_OruHS8Urlyt3JaKASaCjP7cS1DMS1gsWH56bC4ewZuogi3XJoudLnslwkgfR2zcT9c8uX6MhAA9GBl_INPuBEMEgFbuZDousViwTE9zI; expires=Thu, 07-Nov-2024 14:28:51 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.google.com/

142.250.74.14

4.6 kB

URL
fonts.google.com/
IP
142.250.74.14:0
ASN
#15169 GOOGLE

File type
gzip compressed data, max compression
Size
4.6 kB (4643 bytes)
Hash
c82a7f68d2d83bae76c5949bd1c2b2a4
dabe1e0231b8a1be0c0bcc4ae756ee8c9889a8af
cd57341657002932cd4d99d8c38c82808382fb356b9b62e207c282561488d1a8

HTTP Headers

GET / HTTP/1.1
Host: fonts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 May 2024 14:28:51 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
cross-origin-opener-policy: same-origin-allow-popups
content-security-policy: script-src 'nonce-EQFsVcxAJJGlvp2Jifw4mA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=514=WHjxbdwYrrgBM7ktFlWKUPdnksEQ32s6b7KyTAP1yBA0U8IHdXAZXpq1U82LGQ_oxK7RrXcdCpYmA9J4t2U15f7FkybySBcjXyNemc-6uOZEQPndORHuOaZ4vAUX1uuEkerVLgfmrPzEn5CvFgFWfisgER72tpFrR43fu42Yzg4; expires=Thu, 07-Nov-2024 14:28:51 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.google.com/

142.250.74.14

4.1 kB

URL
fonts.google.com/
IP
142.250.74.14:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text, with very long lines (18773)
Size
4.1 kB (4121 bytes)
Hash
3b4d85be487d7faad831418ac7bb5a40
211252e89d246e2aeb23014c7de91c70f449343a
3495fd6b40bab125a486836a9753dd83e834c97ff3efffb473f208c309e2ed33

HTTP Headers

GET / HTTP/1.1
Host: fonts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 May 2024 14:28:51 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-security-policy: script-src 'nonce-lh0RXn-rgT2DDIMIZXIaKw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=514=WH4JS33ncpqX1JnQrPcPOhIedj4snKqfyyLLsADPwhB1nvEkzIWoD5ZYuMxJL_IBz0pGKn901y8zaNdakp8AadfnQXJpauJ1mFZkcJyy9J_XQa9S6E22vsh8HBntvwZBr2ySQZwUiZFeUHQOOT_9XFqXKuxht3LpyALVFb8scqA; expires=Thu, 07-Nov-2024 14:28:51 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxP.ttf

142.250.74.163

200 OK

21 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxP.ttf
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-Regularhtt
Size
21 kB (20776 bytes)
Hash
a0d084a3e8176664e75f8eca3ebea96c
324ec20b91392a6871d7846e0ff2972447a1b2b8
a9ef021078603005c0b08fba881f1a7eb62ef213238021f3e8a4a00daa60b9d6

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxP.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
Origin: https://a3cb6c8b.webmail-7hc.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 02:15:02 GMT
expires: Sat, 03 May 2025 02:15:02 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 476029
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc9.ttf

142.250.74.163

200 OK

21 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc9.ttf
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto LightRegularVersion 2.137; 2017Roboto-Ligh
Size
21 kB (20847 bytes)
Hash
85df2cb76110ce9ce787b45a5266d23a
91187234316d05377268346f4631e2de3bb6affe
4501b0c41bd6ffd12d34114eed5113b9e136f5f1715d7b4348dd1ccb570470f9

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc9.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
Origin: https://a3cb6c8b.webmail-7hc.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20847
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:59:59 GMT
expires: Fri, 02 May 2025 01:59:59 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:41 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 563332
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc9.ttf

142.250.74.163

200 OK

21 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc9.ttf
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo
Size
21 kB (20828 bytes)
Hash
ecec6c79a27c8914400d4116e02668aa
3b2880007b93580c4b35e2b31afe2fc9b6fa5923
8a9a74f4455f392ec3e7499cfda6097b536bb4b7f1e529a079c3d953c08b54ca

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc9.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
Origin: https://a3cb6c8b.webmail-7hc.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20828
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:49:31 GMT
expires: Fri, 02 May 2025 01:49:31 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 563961
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

logo.clearbit.com/ec.europa.eu

143.204.55.28

200 OK

9.7 kB

URL GET HTTP/2
logo.clearbit.com/ec.europa.eu
IP
143.204.55.28:443
ASN
#16509 AMAZON-02

Requested by
https://a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Certificate
IssuerAmazon
Subjectclearbit.com
FingerprintCE:16:94:BB:21:1F:D1:5C:C5:B1:B0:D0:51:6C:C5:26:30:0D:59:72
ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced
Size
9.7 kB (9658 bytes)
Hash
6e0c060b29a81e88a8d01a0e447f68de
67ef23d054fe6b54a13929aa5b14c66a30845e26
713171cc665da621bbde2f7e75d0c318e77ba98e7e9e6471cd9796df4d0c3ee4

HTTP Headers

GET /ec.europa.eu HTTP/1.1
Host: logo.clearbit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
cache-control: public, max-age=2592000
date: Sun, 14 Apr 2024 08:47:22 GMT
x-envoy-response-flags: -
server: Clearbit
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2mpxk0K6ti4WwYxHabeGiaoHvp4yKJxGDs2BX3MHJ1iRNg6e05yRWA==
age: 2094089
X-Firefox-Spdy: h2

fonts.google.com/

142.250.74.14

200 OK

0 B

URL GET HTTP/2
fonts.google.com/
IP
142.250.74.14:443
ASN
#15169 GOOGLE

Requested by
https://a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: fonts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 May 2024 14:28:51 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-security-policy: script-src 'nonce-lh0RXn-rgT2DDIMIZXIaKw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=514=WH4JS33ncpqX1JnQrPcPOhIedj4snKqfyyLLsADPwhB1nvEkzIWoD5ZYuMxJL_IBz0pGKn901y8zaNdakp8AadfnQXJpauJ1mFZkcJyy9J_XQa9S6E22vsh8HBntvwZBr2ySQZwUiZFeUHQOOT_9XFqXKuxht3LpyALVFb8scqA; expires=Thu, 07-Nov-2024 14:28:51 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

a3cb6c8b.webmail-7hc.pages.dev/docc-file

172.66.47.175

200 OK

24 kB

URL User Request GET HTTP/2
a3cb6c8b.webmail-7hc.pages.dev/docc-file
IP
172.66.47.175:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectwebmail-7hc.pages.dev
FingerprintA7:23:DA:28:42:A4:BA:4B:F9:73:A1:9A:EA:EF:3F:A0:BE:05:D2:39
ValiditySun, 05 May 2024 22:10:41 GMT - Sat, 03 Aug 2024 22:10:40 GMT

File type
HTML document, ASCII text, with very long lines (1280)
Size
24 kB (23516 bytes)
Hash
93a0d6a9013d5645634310486adb48d5
f19496e8717c7fff39818fc0a56b2063e6251f85
3cf0a7e8c09251ad20fb5c3addc82cfa48dd291fc0a29f974dcd4096b590c54a

HTTP Headers

GET /docc-file HTTP/1.1
Host: a3cb6c8b.webmail-7hc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pie-majestic-guava.glitch.me/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 14:28:50 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"70ab6fd395b500e8d3035877ddc9ab67"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-robots-tag: noindex
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e2TECcfFV0dBlLSZLi98q4rSv%2F0jJcqhl31g5QSPvdfMxL9X3KVQ%2FVHhgA2kas4waelu3k29tPx0oS9u9kvW%2FlRvm25rApkE3dILywNrXcgvRuVXqXyXtTMlKwxLhhLgFUxMgPJlrWIQgkILWCK1BUU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880a237a2973568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.google.com/fonts

142.250.74.164

301 Moved Permanently

0 B

URL GET HTTP/2
www.google.com/fonts
IP
142.250.74.164:443
ASN
#15169 GOOGLE

Requested by
https://a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99
ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /fonts HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
content-type: application/binary
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 May 2024 14:28:51 GMT
location: https://fonts.google.com/
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-security-policy: script-src 'nonce-DRxbnkZSgdP3Hr-uxU3nXQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy: same-origin-allow-popups
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=514=m1BIQzi99MJjjBFs8qP7jGEtsyAhCP5tThD__mmSlrfg7rk05uz-Oz6AyXKoyZOaUovDQ8urVZGKeB_DcWjqhRoSOqbvn_k4gWNRw7O_KsBEe2wnS987ECq2K3OLn1VLHNy4PR8JRvD0hFMOfLbLcodP9O3wlEv8hSemTAL5cOg; expires=Thu, 07-Nov-2024 14:28:51 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.google.com/

142.250.74.14

200 OK

0 B

URL GET HTTP/2
fonts.google.com/
IP
142.250.74.14:443
ASN
#15169 GOOGLE

Requested by
https://a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0
ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: fonts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 May 2024 14:28:51 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
cross-origin-opener-policy: same-origin-allow-popups
content-security-policy: script-src 'nonce-EQFsVcxAJJGlvp2Jifw4mA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=514=WHjxbdwYrrgBM7ktFlWKUPdnksEQ32s6b7KyTAP1yBA0U8IHdXAZXpq1U82LGQ_oxK7RrXcdCpYmA9J4t2U15f7FkybySBcjXyNemc-6uOZEQPndORHuOaZ4vAUX1uuEkerVLgfmrPzEn5CvFgFWfisgER72tpFrR43fu42Yzg4; expires=Thu, 07-Nov-2024 14:28:51 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

logo.clearbit.com/ec.europa.eu

143.204.55.28

200 OK

9.7 kB

URL GET HTTP/2
logo.clearbit.com/ec.europa.eu
IP
143.204.55.28:443
ASN
#16509 AMAZON-02

Requested by
https://a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Certificate
IssuerAmazon
Subjectclearbit.com
FingerprintCE:16:94:BB:21:1F:D1:5C:C5:B1:B0:D0:51:6C:C5:26:30:0D:59:72
ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced
Size
9.7 kB (9658 bytes)
Hash
6e0c060b29a81e88a8d01a0e447f68de
67ef23d054fe6b54a13929aa5b14c66a30845e26
713171cc665da621bbde2f7e75d0c318e77ba98e7e9e6471cd9796df4d0c3ee4

HTTP Headers

GET /ec.europa.eu HTTP/1.1
Host: logo.clearbit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
cache-control: public, max-age=2592000
date: Sun, 14 Apr 2024 08:47:22 GMT
x-envoy-response-flags: -
server: Clearbit
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3aBKlrP6BhkR7552mx_-TB3spaiTbwHIw05WCkbn6HkUR5fQfeOXWg==
age: 2094089
X-Firefox-Spdy: h2

a3cb6c8b.webmail-7hc.pages.dev/docc-file.html

172.66.47.175

308 Permanent Redirect

24 kB

URL User Request GET HTTP/2
a3cb6c8b.webmail-7hc.pages.dev/docc-file.html
IP
172.66.47.175:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectwebmail-7hc.pages.dev
FingerprintA7:23:DA:28:42:A4:BA:4B:F9:73:A1:9A:EA:EF:3F:A0:BE:05:D2:39
ValiditySun, 05 May 2024 22:10:41 GMT - Sat, 03 Aug 2024 22:10:40 GMT

File type
HTML document, ASCII text, with very long lines (1280)
Size
24 kB (23516 bytes)
Hash
93a0d6a9013d5645634310486adb48d5
f19496e8717c7fff39818fc0a56b2063e6251f85
3cf0a7e8c09251ad20fb5c3addc82cfa48dd291fc0a29f974dcd4096b590c54a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Generic/Spear Phishing

HTTP Headers

GET /docc-file.html HTTP/1.1
Host: a3cb6c8b.webmail-7hc.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pie-majestic-guava.glitch.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 308 Permanent Redirect
date: Wed, 08 May 2024 14:28:50 GMT
content-length: 0
location: /docc-file
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FLOvj4XEfrXwOwVvPpUAIVmZVFxpexOXFM7T223QHs%2FWVRZ6w1V9sApi0Rz4GJmOBI6CuXmb3yaZ3CA74ZjY3uSn1xLFAuOVnvRs8pxZ%2BLeUwCBNNXUj1ogDSYwmgMazawnEPpUCK8Nk2jxiBpWarE8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880a2379d91b568d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/bootstrap/3.3.4/css/bootstrap.min.css

104.18.11.207

200 OK

117 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/3.3.4/css/bootstrap.min.css
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (65371)
Size
117 kB (117305 bytes)
Hash
eedf9ee80c2faa4e1b9ab9017cdfcb88
ed29315e0ffb3f14382431f2724235bf67f44eb3
f04b517ba5d6a0510485689a3e42dac000f51640fd71b986804cba178eae42a5

HTTP Headers

GET /bootstrap/3.3.4/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 14:28:51 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"eedf9ee80c2faa4e1b9ab9017cdfcb88"
last-modified: Mon, 25 Jan 2021 22:03:58 GMT
cdn-cachedat: 08/04/2023 12:50:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 7e74c5fea2151758aaf7c8cf1f839c4a
cdn-cache: HIT
cf-cache-status: HIT
age: 680505
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 880a237be8d856c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.google.com/fonts

142.250.74.164

301 Moved Permanently

0 B

URL GET HTTP/2
www.google.com/fonts
IP
142.250.74.164:443
ASN
#15169 GOOGLE

Requested by
https://a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99
ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /fonts HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
content-type: application/binary
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 May 2024 14:28:51 GMT
location: https://fonts.google.com/
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-security-policy: script-src 'nonce-fwW8ciIo2ajk-Rk4X84u4A' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy: same-origin-allow-popups
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=514=Z8Ttwj7iJiqGU8yt7ghy0gxjlnfj3vkVzdt-c29zhvGRfDsNBjybZd8S7YHEuzdwgU_OruHS8Urlyt3JaKASaCjP7cS1DMS1gsWH56bC4ewZuogi3XJoudLnslwkgfR2zcT9c8uX6MhAA9GBl_INPuBEMEgFbuZDousViwTE9zI; expires=Thu, 07-Nov-2024 14:28:51 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

logo.clearbit.com/ec.europa.eu

143.204.55.28

200 OK

9.7 kB

URL GET HTTP/2
logo.clearbit.com/ec.europa.eu
IP
143.204.55.28:443
ASN
#16509 AMAZON-02

Requested by
https://a3cb6c8b.webmail-7hc.pages.dev/docc-file#andreea.bolohan@ec.europa.eu
Certificate
IssuerAmazon
Subjectclearbit.com
FingerprintCE:16:94:BB:21:1F:D1:5C:C5:B1:B0:D0:51:6C:C5:26:30:0D:59:72
ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced
Size
9.7 kB (9658 bytes)
Hash
6e0c060b29a81e88a8d01a0e447f68de
67ef23d054fe6b54a13929aa5b14c66a30845e26
713171cc665da621bbde2f7e75d0c318e77ba98e7e9e6471cd9796df4d0c3ee4

HTTP Headers

GET /ec.europa.eu HTTP/1.1
Host: logo.clearbit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3cb6c8b.webmail-7hc.pages.dev/
Origin: https://a3cb6c8b.webmail-7hc.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
cache-control: public, max-age=2592000
date: Sun, 14 Apr 2024 08:47:22 GMT
x-envoy-response-flags: -
server: Clearbit
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2R3VCmEeA3HmnJGnv0JmkHEh61-gYt5AY5RXrUqK3YCoZZqZmh8p7g==
age: 2094088
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (25)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN