| itones.teaserfaster.de/reisndnseaq/bWFyY3VzLmdydW5kdEB1bml0ZWQtaW50ZXJuZXQtbWVkaWEuZGU= |  67.227.156.113 | | 1.1 kB |
URL itones.teaserfaster.de/reisndnseaq/bWFyY3VzLmdydW5kdEB1bml0ZWQtaW50ZXJuZXQtbWVkaWEuZGU= IP67.227.156.113:0
File typeHTML document, ASCII text, with very long lines (1753), with CRLF line terminators Hash30dca183d57dc5ebd08042f27ed800b3 5bf09c8f95fe0ede165922c02d66e6bacb264f51 1a3ed3cbeb984c149671e3c7cba81b6a99bac03eef715e79c60df92fd800cf1e
GET /reisndnseaq/bWFyY3VzLmdydW5kdEB1bml0ZWQtaW50ZXJuZXQtbWVkaWEuZGU= HTTP/1.1
Host: itones.teaserfaster.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-length: 1087
content-type: text/html; charset=UTF-8
date: Tue, 16 Apr 2024 07:31:37 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/b/bcc5fb0a8815/api.js?onload=HrjuF1&render=explicit |  104.17.3.184 | | 24 kB |
URL challenges.cloudflare.com/turnstile/v0/b/bcc5fb0a8815/api.js?onload=HrjuF1&render=explicit IP104.17.3.184:0
File typeJavaScript source, ASCII text, with very long lines (40613) Hashd1048a66fc11ea28c3cb1488fac82c62 f055707cf91f637ec19bf5e65bf378857e798469 8f1ad19042c2f9ee60c2de21f37f788af7b1ecccda8eec1d877f9b9c0e994370
GET /turnstile/v0/b/bcc5fb0a8815/api.js?onload=HrjuF1&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dcpsenergy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 07:31:38 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 87527a143b740b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2099706236:1713249049:wm23mTUflRUjwEn_ngLp5oBiPOnpLMwu2XNGQPF_CwI/87527a15ac320b4d/f37ad6826960165 | 104.17.3.184 | | 135 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2099706236:1713249049:wm23mTUflRUjwEn_ngLp5oBiPOnpLMwu2XNGQPF_CwI/87527a15ac320b4d/f37ad6826960165 IP104.17.3.184:0
File typeASCII text, with very long lines (976), with no line terminators Size135 kB (134639 bytes) Hash42e57111f120989f29e9f86d9037602f 7864a3df41cd887cf5231a54d533582f1c29428b c0979ded265f364073579d2d8b34d58a39bb166c860c02356e9b9257d2bc8ef4
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2099706236:1713249049:wm23mTUflRUjwEn_ngLp5oBiPOnpLMwu2XNGQPF_CwI/87527a15ac320b4d/f37ad6826960165 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/x81hd/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: f37ad6826960165
Content-Length: 38296
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:31:43 GMT
content-type: text/html; charset=UTF-8
cf-chl-out: iwwfz1Rz3V25ZiqULFf8FwToTBBDlAB8ocJTyk2akdQ7XAAXx6z4+SjgvfCT5eRwe+7dU027CV0pk8YDYwUszz+pR2nOFR982D2xQWgSiX8=$yH8RO/LvaEO1DWaJvvdR7Q==
cf-chl-out-s: P6dVDVjvBdPp6kuBoZjZqy45bCKt9YfETA8pwgGa+62ns+Oh0d6cZLcCfBIuDoPTtSPpPfAek8u4bBUTW2QkoXGk0v6SjJumU6mdpqSN8/hTVPOFkytqwcJmmRZkQNdcBkG7MGu6BMr9Z8yd0qYzPA==$YAKEfv6rmTTPvSIEPix2Zw==
server: cloudflare
cf-ray: 87527a374e420b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2099706236:1713249049:wm23mTUflRUjwEn_ngLp5oBiPOnpLMwu2XNGQPF_CwI/87527a15ac320b4d/f37ad6826960165 | 104.17.3.184 | | 231 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2099706236:1713249049:wm23mTUflRUjwEn_ngLp5oBiPOnpLMwu2XNGQPF_CwI/87527a15ac320b4d/f37ad6826960165 IP104.17.3.184:0
File typeASCII text, with very long lines (65536), with no line terminators Size231 kB (230704 bytes) Hashdd0be82f11cd648280822178a29d9202 12337d537641c63e5ce49b6e5ebb058d9489a57a 509983c6b7527228fff592746c408e02470e29f6241b66d2241f90949805f400
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2099706236:1713249049:wm23mTUflRUjwEn_ngLp5oBiPOnpLMwu2XNGQPF_CwI/87527a15ac320b4d/f37ad6826960165 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/x81hd/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: f37ad6826960165
Content-Length: 3350
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:31:38 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: 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$IBrMMumwOHX0RedTYKs69g==
server: cloudflare
cf-ray: 87527a17de650b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dcpsenergy.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1477055104:1713249023:oNOpgbHApjOBNwHdPxOaKwDLJP6hMdX0JV75-aJ7FjM/87527a448dce56bd/a55c01a013c2864 |  188.114.96.1 | | 23 kB |
URL dcpsenergy.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1477055104:1713249023:oNOpgbHApjOBNwHdPxOaKwDLJP6hMdX0JV75-aJ7FjM/87527a448dce56bd/a55c01a013c2864 IP188.114.96.1:0
File typeASCII text, with very long lines (15928), with no line terminators Hash897e5b7e60b3eeee8921d87a8ab836b8 583d8c50466501253b7eb69b6aa3c96b9e19f374 cb29213da7d98792f684557a4f004f6db504b9fe6e6b4c16cd4bb68c70afd799
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1477055104:1713249023:oNOpgbHApjOBNwHdPxOaKwDLJP6hMdX0JV75-aJ7FjM/87527a448dce56bd/a55c01a013c2864 HTTP/1.1
Host: dcpsenergy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dcpsenergy.com/Mmarcus.grundt@united-internet-media.de
Content-type: application/x-www-form-urlencoded
CF-Challenge: a55c01a013c2864
Content-Length: 1913
Origin: https://dcpsenergy.com
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:31:46 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: ZRQvMe//B7xRT8JRGHgSXsRSKwx9dI49Z/C9fFZoQOL7oPyQBuJhGhvwvJWQ7J5e$QMz5hz/K8sAtUBTCAJaOwQ==
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oRaw8vp6QR5eui7M5dPTl21VqJOb80dFDP%2BxP8SSluyHo8tofUZWk8yVps7DAywJnW1IZHwDvKQsyW8C0v%2BghYXxhPpnmPriMXntYb0I6W7jK70IcvRKIbsCBAhf1wvuYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87527a467ff456bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/461228575:1713249042:_F7mjZ2psWOUEK1dkPe2QAL1mwqsQDA_3VSgy74Y2fA/87527a477a220b4d/3f3c6676479861a | 104.17.3.184 | | 23 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/461228575:1713249042:_F7mjZ2psWOUEK1dkPe2QAL1mwqsQDA_3VSgy74Y2fA/87527a477a220b4d/3f3c6676479861a IP104.17.3.184:0
File typeASCII text, with very long lines (22616), with no line terminators Hash18e74bdf2d2cda6ba6c38312a35084fd df59a35c65ac28ddb8d53aa3c932ff58fd1a5fba 8657c76003b0bfdbf7ebb525d98080365a4cacfaa08cbf09b5a675f2251f94b3
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/461228575:1713249042:_F7mjZ2psWOUEK1dkPe2QAL1mwqsQDA_3VSgy74Y2fA/87527a477a220b4d/3f3c6676479861a HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/g2nmv/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 3f3c6676479861a
Content-Length: 26230
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:31:48 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: rI3IgWc4WjSuF184mVV15TCbGZg7dCVMfuwWEPCe6Fe/JGU0LndcOvg5nqk9S4Ux$kDJjiqeGPLGIptvBMIv9Xw==
server: cloudflare
cf-ray: 87527a527a6c0b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dcpsenergy.com/e/8668ceafb19a11c03c377bf91d66a256661e2967bc222 | 188.114.96.1 | 200 OK | 5.3 kB |
URL GET HTTP/3dcpsenergy.com/e/8668ceafb19a11c03c377bf91d66a256661e2967bc222 IP188.114.96.1:443
Requested byhttps://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 CertificateIssuerLet's Encrypt Subjectdcpsenergy.com Fingerprint1B:83:C6:7D:27:EF:41:52:97:03:4D:84:AC:8B:95:92:EC:86:5E:CF ValidityThu, 11 Apr 2024 18:25:37 GMT - Wed, 10 Jul 2024 18:25:36 GMT
File typeSVG Scalable Vector Graphics image Hasha9cc2824ef3517b6c4160dcf8ff7d410 8db9aebad84ca6e4225bfdd2458ff3821cc4f064 34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58
GET /e/8668ceafb19a11c03c377bf91d66a256661e2967bc222 HTTP/1.1
Host: dcpsenergy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00
Cookie: cf_clearance=NnYSq1kQ9_dDqgjnaSJND6qSsNbxUlv2isWvNUTEXmo-1713252706-1.0.1.1-HnMFPiYGO5jSyAv2dvgdqITCfI5k65yI1.ZkCEXHe76BdgVHSwdXKTNbNGwPiSVz4TwbbnEHzwUs5fTl6NKDvw; PHPSESSID=54c37f99afd07b9959050e5806c13a73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:31:51 GMT
content-type: image/svg+xml
last-modified: Mon, 15 Apr 2024 23:25:37 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZiljqtYV9k3ej%2BK6TUtFQGWmR62jJLoQrD4iwkwNDYF4eu%2FdihSEO%2B9c0H%2B4cDgzXk9b4uCjmcqFLgmjavMjpUeF5IzIqOTnxcTjBOBHN2yUlx82ur3eVmbdlbeuA4i%2FeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87527a68da3656bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| aadcdn.msauthimages.net/c1c6b6c8-k-pcdqnpubufolfl-zxsx2ptdfd1wtnqxf4fs2c3mx0/logintenantbranding/0/illustration?ts=636674335418838753 |  152.199.21.175 | 200 OK | 297 kB |
URL GET HTTP/2aadcdn.msauthimages.net/c1c6b6c8-k-pcdqnpubufolfl-zxsx2ptdfd1wtnqxf4fs2c3mx0/logintenantbranding/0/illustration?ts=636674335418838753 IP152.199.21.175:443
Requested byhttps://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 CertificateIssuerMicrosoft Corporation Subjectaadcdn.msauthimages.net Fingerprint3B:14:C7:84:64:65:A8:46:3C:B4:7E:B7:F2:A1:AF:6B:8F:EF:17:E5 ValidityThu, 11 Jan 2024 12:14:02 GMT - Sun, 05 Jan 2025 12:14:02 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3 Size297 kB (297116 bytes) Hash7b5d9bf65663b78bc9e77521175d9405 182e77a5ead4e5d2c184f0f07fb201c9ede0fc07 8f1a854ac811a0e53b3c2a182a58b5a8338da5ee25ae3492b7ace0233b062851
GET /c1c6b6c8-k-pcdqnpubufolfl-zxsx2ptdfd1wtnqxf4fs2c3mx0/logintenantbranding/0/illustration?ts=636674335418838753 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcpsenergy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
cache-control: public, max-age=86400
content-md5: e12b9lZjt4vJ53UhF12UBQ==
content-type: image/*
date: Tue, 16 Apr 2024 07:31:52 GMT
etag: 0x8D5EBEF508327C7
last-modified: Tue, 17 Jul 2018 14:12:22 GMT
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 072eb329-e01e-0041-29d0-8f0421000000
x-ms-version: 2009-09-19
content-length: 297116
X-Firefox-Spdy: h2
|
|
| dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 | 188.114.96.1 | 200 OK | 5.5 kB |
URL User Request GET HTTP/3dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 IP188.114.96.1:443
CertificateIssuerLet's Encrypt Subjectdcpsenergy.com Fingerprint1B:83:C6:7D:27:EF:41:52:97:03:4D:84:AC:8B:95:92:EC:86:5E:CF ValidityThu, 11 Apr 2024 18:25:37 GMT - Wed, 10 Jul 2024 18:25:36 GMT
File typeHTML document, ASCII text, with very long lines (5541), with no line terminators Hashd8dba2da98e4fedced25b8cc99afea59 3cdb305436af806d0b7bd9030485f5168136cc67 8872db2b2957ae018153b9c6fe3a4c5c6d2d042d588aa0c996b4e56d091fd2ee
GET /beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 HTTP/1.1
Host: dcpsenergy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dcpsenergy.com/Mmarcus.grundt@united-internet-media.de?__cf_chl_tk=nY.qeS7CynWHLDQTKGFM7TgmCg6GxnScSb1VJMweQAU-1713252706-0.0.1.1-1663
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=NnYSq1kQ9_dDqgjnaSJND6qSsNbxUlv2isWvNUTEXmo-1713252706-1.0.1.1-HnMFPiYGO5jSyAv2dvgdqITCfI5k65yI1.ZkCEXHe76BdgVHSwdXKTNbNGwPiSVz4TwbbnEHzwUs5fTl6NKDvw; PHPSESSID=54c37f99afd07b9959050e5806c13a73
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:31:51 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zbLHUB%2FHBsk%2FpijEk70Xyq8TUYowCt%2FbVrn%2BouQvgudFwwjkgRE%2BKEsHNCSpPcofFLR6meEBaCLOKksYkIPldr6NmLxtefeM5qOKXEwFZr9bzgwScvGbNoYGLldg6YoeDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87527a66afda56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| unpkg.com/axios/dist/axios.min.js | 104.17.246.203 | 302 Found | 42 kB |
URL GET HTTP/2unpkg.com/axios/dist/axios.min.js IP104.17.246.203:443
Requested byhttps://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 CertificateIssuerGoogle Trust Services LLC Subjectunpkg.com Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3 ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /axios/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcpsenergy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 16 Apr 2024 07:31:51 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.6.8/dist/axios.min.js
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01HVJWMFK6A5XJY2Z0ZRWP7012-arn
cf-cache-status: HIT
age: 491
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87527a677bc7b529-OSL
X-Firefox-Spdy: h2
|
|
| unpkg.com/axios@1.6.8/dist/axios.min.js | 104.17.246.203 | 200 OK | 42 kB |
URL GET HTTP/2unpkg.com/axios@1.6.8/dist/axios.min.js IP104.17.246.203:443
Requested byhttps://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 CertificateIssuerGoogle Trust Services LLC Subjectunpkg.com Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3 ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File typeJavaScript source, ASCII text, with very long lines (41442) Hash3b5b3d36fde8ffe8ed76b1efbfc65410 d63107d0912fdb387530d5ce2d512c928d73d122 29d600462a30694efd15b9848b4ca42d178cd067009275c35a30580121114304
GET /axios@1.6.8/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dcpsenergy.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 07:31:51 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"a209-1jEH0JEv2zh1MNXOLVEsko1z0SI"
via: 1.1 fly.io
fly-request-id: 01HS1FGRYZKY14C0JK748EAY1W-arn
cf-cache-status: HIT
age: 2732153
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87527a679bf6b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dcpsenergy.com/boot/8668ceafb19a11c03c377bf91d66a256661e29677619b | 188.114.96.1 | 200 OK | 51 kB |
URL GET HTTP/3dcpsenergy.com/boot/8668ceafb19a11c03c377bf91d66a256661e29677619b IP188.114.96.1:443
Requested byhttps://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 CertificateIssuerLet's Encrypt Subjectdcpsenergy.com Fingerprint1B:83:C6:7D:27:EF:41:52:97:03:4D:84:AC:8B:95:92:EC:86:5E:CF ValidityThu, 11 Apr 2024 18:25:37 GMT - Wed, 10 Jul 2024 18:25:36 GMT
File typeJavaScript source, ASCII text, with very long lines (50758) Hash67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /boot/8668ceafb19a11c03c377bf91d66a256661e29677619b HTTP/1.1
Host: dcpsenergy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00
Cookie: cf_clearance=NnYSq1kQ9_dDqgjnaSJND6qSsNbxUlv2isWvNUTEXmo-1713252706-1.0.1.1-HnMFPiYGO5jSyAv2dvgdqITCfI5k65yI1.ZkCEXHe76BdgVHSwdXKTNbNGwPiSVz4TwbbnEHzwUs5fTl6NKDvw; PHPSESSID=54c37f99afd07b9959050e5806c13a73
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:31:51 GMT
content-type: text/javascript
last-modified: Mon, 15 Apr 2024 23:25:37 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2UxfFuUhqP0K2h0jJxxdEeQMgcyCwGA9y9SscI6yD6XxNvQvHrMWqRAfqI%2BDGZiEhHzSItzTMA9fHtilRekx3DV8LVCPzleKkL%2Fph8pIQUh%2FRGHPKzP3Hdzx11DzlOK6KQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87527a67587256bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dcpsenergy.com/ic/8668ceafb19a11c03c377bf91d66a256661e2967bc0e2 | 188.114.96.1 | 200 OK | 17 kB |
URL GET HTTP/3dcpsenergy.com/ic/8668ceafb19a11c03c377bf91d66a256661e2967bc0e2 IP188.114.96.1:443
Requested byhttps://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 CertificateIssuerLet's Encrypt Subjectdcpsenergy.com Fingerprint1B:83:C6:7D:27:EF:41:52:97:03:4D:84:AC:8B:95:92:EC:86:5E:CF ValidityThu, 11 Apr 2024 18:25:37 GMT - Wed, 10 Jul 2024 18:25:36 GMT
File typeMS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors Hash12e3dac858061d088023b2bd48e2fa96 e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /ic/8668ceafb19a11c03c377bf91d66a256661e2967bc0e2 HTTP/1.1
Host: dcpsenergy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00
Cookie: cf_clearance=NnYSq1kQ9_dDqgjnaSJND6qSsNbxUlv2isWvNUTEXmo-1713252706-1.0.1.1-HnMFPiYGO5jSyAv2dvgdqITCfI5k65yI1.ZkCEXHe76BdgVHSwdXKTNbNGwPiSVz4TwbbnEHzwUs5fTl6NKDvw; PHPSESSID=54c37f99afd07b9959050e5806c13a73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:31:52 GMT
content-type: image/x-icon
last-modified: Mon, 15 Apr 2024 23:25:37 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rvg0vkp8y2%2BpHK%2F0%2FeBYQd64kB45gypcS04A6Fd9L6PX3vIokte6FLhcrCQ164fRTOeYsG36yStodt9MRkBoIx9QjoYYeoMGfD9shX%2BkLPpD%2BZ1hnrMKwV4HNouFrjw0JQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87527a6b1c5d56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dcpsenergy.com/Mmarcus.grundt@united-internet-media.de | 188.114.96.1 | 302 Found | 5.5 kB |
URL User Request POST HTTP/3dcpsenergy.com/Mmarcus.grundt@united-internet-media.de IP188.114.96.1:443
CertificateIssuerLet's Encrypt Subjectdcpsenergy.com Fingerprint1B:83:C6:7D:27:EF:41:52:97:03:4D:84:AC:8B:95:92:EC:86:5E:CF ValidityThu, 11 Apr 2024 18:25:37 GMT - Wed, 10 Jul 2024 18:25:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Mmarcus.grundt@united-internet-media.de HTTP/1.1
Host: dcpsenergy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dcpsenergy.com/Mmarcus.grundt@united-internet-media.de?__cf_chl_tk=nY.qeS7CynWHLDQTKGFM7TgmCg6GxnScSb1VJMweQAU-1713252706-0.0.1.1-1663
Content-Type: application/x-www-form-urlencoded
Content-Length: 4155
Origin: https://dcpsenergy.com
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Tue, 16 Apr 2024 07:31:51 GMT
content-type: text/html; charset=UTF-8
location: ./beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: cf_clearance=NnYSq1kQ9_dDqgjnaSJND6qSsNbxUlv2isWvNUTEXmo-1713252706-1.0.1.1-HnMFPiYGO5jSyAv2dvgdqITCfI5k65yI1.ZkCEXHe76BdgVHSwdXKTNbNGwPiSVz4TwbbnEHzwUs5fTl6NKDvw; path=/; expires=Wed, 16-Apr-25 07:31:51 GMT; domain=.dcpsenergy.com; HttpOnly; Secure; SameSite=None
PHPSESSID=54c37f99afd07b9959050e5806c13a73; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oMzkj8LJswSk0TvEVlasbe9WzJ3Oyc%2BwQKIoL7y7f%2FAoONXbq5G5Q3D0207Vek5efMau6fuOBRyGUKjRoqlHnkfr71r4cgIsdYwOMel5k744WO1BVhnnYUwYk7lWOKsDlw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87527a63cd4356bd-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dcpsenergy.com/api-as1f?email=marcus.grundt@united-internet-media.de&data=logo | 188.114.96.1 | 200 OK | 168 B |
URL GET HTTP/3dcpsenergy.com/api-as1f?email=marcus.grundt@united-internet-media.de&data=logo IP188.114.96.1:443
Requested byhttps://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 CertificateIssuerLet's Encrypt Subjectdcpsenergy.com Fingerprint1B:83:C6:7D:27:EF:41:52:97:03:4D:84:AC:8B:95:92:EC:86:5E:CF ValidityThu, 11 Apr 2024 18:25:37 GMT - Wed, 10 Jul 2024 18:25:36 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash0c5a6b89d43cf52b44c7e224343ae5a5 2ac2df90ea9aa67ba2091262cfc359a803d9960b 93718c0aebd710eb32e12efce9b8b1a680f66c8c5d877e980b5e291b7e672d78
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft Outlook |
GET /api-as1f?email=marcus.grundt@united-internet-media.de&data=logo HTTP/1.1
Host: dcpsenergy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00
Cookie: cf_clearance=NnYSq1kQ9_dDqgjnaSJND6qSsNbxUlv2isWvNUTEXmo-1713252706-1.0.1.1-HnMFPiYGO5jSyAv2dvgdqITCfI5k65yI1.ZkCEXHe76BdgVHSwdXKTNbNGwPiSVz4TwbbnEHzwUs5fTl6NKDvw; PHPSESSID=54c37f99afd07b9959050e5806c13a73
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:31:52 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zlmxKbBXtzhodf9HTOyLyBaythvnkwpK1E4sZlJkkG%2BtqIlhSd7YM4iSqZGMT8j%2BnZS8PBPLEPrWpJsoCJjx2TgnFa3VXnThaZTLvTssPkKIutxrOU8z2j0CcOx%2BK7gG5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87527a68da4056bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dcpsenergy.com/APP-GKNXFE/8668ceafb19a11c03c377bf91d66a256661e2967bc0e7 | 188.114.96.1 | 200 OK | 105 kB |
URL GET HTTP/3dcpsenergy.com/APP-GKNXFE/8668ceafb19a11c03c377bf91d66a256661e2967bc0e7 IP188.114.96.1:443
Requested byhttps://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 CertificateIssuerLet's Encrypt Subjectdcpsenergy.com Fingerprint1B:83:C6:7D:27:EF:41:52:97:03:4D:84:AC:8B:95:92:EC:86:5E:CF ValidityThu, 11 Apr 2024 18:25:37 GMT - Wed, 10 Jul 2024 18:25:36 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size105 kB (105369 bytes) Hash8e6b0f88563f9c33f78bce65cf287df7 ef7765cd2a7d64ed27dd7344702597aff6f8c397 a7057bebfff43e7281ca31da00d40bd88c8d02d1576b9c45891dd56a3853269a
GET /APP-GKNXFE/8668ceafb19a11c03c377bf91d66a256661e2967bc0e7 HTTP/1.1
Host: dcpsenergy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00
Cookie: cf_clearance=NnYSq1kQ9_dDqgjnaSJND6qSsNbxUlv2isWvNUTEXmo-1713252706-1.0.1.1-HnMFPiYGO5jSyAv2dvgdqITCfI5k65yI1.ZkCEXHe76BdgVHSwdXKTNbNGwPiSVz4TwbbnEHzwUs5fTl6NKDvw; PHPSESSID=54c37f99afd07b9959050e5806c13a73
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:31:51 GMT
content-type: text/css
last-modified: Mon, 15 Apr 2024 23:25:37 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CgyZhfLpihNHmnNtwPmhWq6CHVV8cc0esAmtnl92Iw62FVSeDlIDKB8rZU6fFNmBTRHMQPVhOG1B6O8NEweHNRPzCVh7fGYrfs2a50Nq4Rd3Kf0TCheLSgCxMxf5n3OGCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87527a68ea4a56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| aadcdn.msauthimages.net/c1c6b6c8-k-pcdqnpubufolfl-zxsx2ptdfd1wtnqxf4fs2c3mx0/logintenantbranding/0/bannerlogo?ts=636523023460806558 | 152.199.21.175 | 200 OK | 5.0 kB |
URL GET HTTP/2aadcdn.msauthimages.net/c1c6b6c8-k-pcdqnpubufolfl-zxsx2ptdfd1wtnqxf4fs2c3mx0/logintenantbranding/0/bannerlogo?ts=636523023460806558 IP152.199.21.175:443
Requested byhttps://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 CertificateIssuerMicrosoft Corporation Subjectaadcdn.msauthimages.net Fingerprint3B:14:C7:84:64:65:A8:46:3C:B4:7E:B7:F2:A1:AF:6B:8F:EF:17:E5 ValidityThu, 11 Jan 2024 12:14:02 GMT - Sun, 05 Jan 2025 12:14:02 GMT
File typePNG image data, 280 x 60, 8-bit/color RGB, non-interlaced Hashd8de004f03b7468a47b5d9fdb69b8180 b50022fe0eba97bedc1688d9175c70093f0058d6 62918df75f2c6270b8ca60213f12e6678cd865cfbd66d540a66089b10cb3158a
GET /c1c6b6c8-k-pcdqnpubufolfl-zxsx2ptdfd1wtnqxf4fs2c3mx0/logintenantbranding/0/bannerlogo?ts=636523023460806558 HTTP/1.1
Host: aadcdn.msauthimages.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcpsenergy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
cache-control: public, max-age=86400
content-md5: 2N4ATwO3RopHtdn9tpuBgA==
content-type: image/*
date: Tue, 16 Apr 2024 07:31:52 GMT
etag: 0x8D5625140CB9FFC
last-modified: Tue, 23 Jan 2018 11:05:46 GMT
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 25d0ccda-d01e-0042-1ed0-8f0726000000
x-ms-version: 2009-09-19
content-length: 5004
X-Firefox-Spdy: h2
|
|
| dcpsenergy.com/jq/8668ceafb19a11c03c377bf91d66a256661e296776198 | 188.114.96.1 | 200 OK | 86 kB |
URL GET HTTP/3dcpsenergy.com/jq/8668ceafb19a11c03c377bf91d66a256661e296776198 IP188.114.96.1:443
Requested byhttps://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 CertificateIssuerLet's Encrypt Subjectdcpsenergy.com Fingerprint1B:83:C6:7D:27:EF:41:52:97:03:4D:84:AC:8B:95:92:EC:86:5E:CF ValidityThu, 11 Apr 2024 18:25:37 GMT - Wed, 10 Jul 2024 18:25:36 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /jq/8668ceafb19a11c03c377bf91d66a256661e296776198 HTTP/1.1
Host: dcpsenergy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00
Cookie: cf_clearance=NnYSq1kQ9_dDqgjnaSJND6qSsNbxUlv2isWvNUTEXmo-1713252706-1.0.1.1-HnMFPiYGO5jSyAv2dvgdqITCfI5k65yI1.ZkCEXHe76BdgVHSwdXKTNbNGwPiSVz4TwbbnEHzwUs5fTl6NKDvw; PHPSESSID=54c37f99afd07b9959050e5806c13a73
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:31:51 GMT
content-type: text/javascript
last-modified: Mon, 15 Apr 2024 23:25:37 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T5d5eUHBJAmCjaVk%2BHip1l41L7U2%2FB8eSDL7eTLXJn7aVQn8mRHewm7jj6FUQPYOfkzNaN9HAcCR9PTyzo4nai8BDt9Idx4DHsDO0PdNgBIvAnE9auMYAJc5dHjbJzptig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87527a67587156bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dcpsenergy.com/favicon.ico | 188.114.96.1 | 404 Not Found | 315 B |
URL GET HTTP/3dcpsenergy.com/favicon.ico IP188.114.96.1:443
Requested byhttps://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 CertificateIssuerLet's Encrypt Subjectdcpsenergy.com Fingerprint1B:83:C6:7D:27:EF:41:52:97:03:4D:84:AC:8B:95:92:EC:86:5E:CF ValidityThu, 11 Apr 2024 18:25:37 GMT - Wed, 10 Jul 2024 18:25:36 GMT
File typeHTML document, ASCII text, with very long lines (326), with no line terminators Hash97ef40509b73c101d6815511c3adf98d a4242322497ea630ea72e26ba297a95a2bbe5ccd 322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
GET /favicon.ico HTTP/1.1
Host: dcpsenergy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00
Cookie: cf_clearance=NnYSq1kQ9_dDqgjnaSJND6qSsNbxUlv2isWvNUTEXmo-1713252706-1.0.1.1-HnMFPiYGO5jSyAv2dvgdqITCfI5k65yI1.ZkCEXHe76BdgVHSwdXKTNbNGwPiSVz4TwbbnEHzwUs5fTl6NKDvw; PHPSESSID=54c37f99afd07b9959050e5806c13a73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 16 Apr 2024 07:31:51 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4SIQoDExSANHgGh8xO4gbcp23X2CkpaTB9B6fgVXar8GYtAYSVITcOlan6CB5HaZV0DoOFhZKUuRmoN7l%2Bibz6%2FsraEZgRoRN9PLFbXJQCl7RHn7pe6Z3yiv7w3%2BvzRWNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87527a68ca1f56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dcpsenergy.com/o/8668ceafb19a11c03c377bf91d66a256661e2967bc21b | 188.114.96.1 | 200 OK | 3.7 kB |
URL GET HTTP/3dcpsenergy.com/o/8668ceafb19a11c03c377bf91d66a256661e2967bc21b IP188.114.96.1:443
Requested byhttps://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 CertificateIssuerLet's Encrypt Subjectdcpsenergy.com Fingerprint1B:83:C6:7D:27:EF:41:52:97:03:4D:84:AC:8B:95:92:EC:86:5E:CF ValidityThu, 11 Apr 2024 18:25:37 GMT - Wed, 10 Jul 2024 18:25:36 GMT
File typeSVG Scalable Vector Graphics image Hashd633a913e6f3b1f45774b9874dfc85e0 5ba1344048578062c93cfddfdf8458477eaca476 c1fbfbd9a81fc4d9c9539a65bdfb4c6738926b8d4681b0346706196413e92714
GET /o/8668ceafb19a11c03c377bf91d66a256661e2967bc21b HTTP/1.1
Host: dcpsenergy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00
Cookie: cf_clearance=NnYSq1kQ9_dDqgjnaSJND6qSsNbxUlv2isWvNUTEXmo-1713252706-1.0.1.1-HnMFPiYGO5jSyAv2dvgdqITCfI5k65yI1.ZkCEXHe76BdgVHSwdXKTNbNGwPiSVz4TwbbnEHzwUs5fTl6NKDvw; PHPSESSID=54c37f99afd07b9959050e5806c13a73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:31:51 GMT
content-type: image/svg+xml
last-modified: Mon, 15 Apr 2024 23:25:37 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gp5p8oXNDI9tXd%2ByPUQEmVjmTZZzPBkgkpn0U4bkM32gA308IFNNxlOEuO3VbtOy7uqJeH%2F5hy162mgY%2FJA6acovWAN69jTbi0gtGshRyKNuNphALCiidUz0aGxVWBWCog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87527a68da3556bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dcpsenergy.com/2 | 188.114.96.1 | 200 OK | 39 kB |
IP188.114.96.1:443
Requested byhttps://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 CertificateIssuerLet's Encrypt Subjectdcpsenergy.com Fingerprint1B:83:C6:7D:27:EF:41:52:97:03:4D:84:AC:8B:95:92:EC:86:5E:CF ValidityThu, 11 Apr 2024 18:25:37 GMT - Wed, 10 Jul 2024 18:25:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2 HTTP/1.1
Host: dcpsenergy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00
Cookie: cf_clearance=NnYSq1kQ9_dDqgjnaSJND6qSsNbxUlv2isWvNUTEXmo-1713252706-1.0.1.1-HnMFPiYGO5jSyAv2dvgdqITCfI5k65yI1.ZkCEXHe76BdgVHSwdXKTNbNGwPiSVz4TwbbnEHzwUs5fTl6NKDvw; PHPSESSID=54c37f99afd07b9959050e5806c13a73
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:31:51 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jEALUJqwmHzckZZR5pfFRJNNlw1BSSqbQfURvGfKheaGVX4bDNyUAoyS7%2BBQ7nqrLdhzLD1iXvSJ5snYatRXHvRjk69aKudzft8BXgySt4dpsYQZ2Au%2FCMN%2B870Oschb0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87527a68797d56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dcpsenergy.com/Mmarcus.grundt@united-internet-media.de | 188.114.96.1 | 403 Forbidden | 16 kB |
URL User Request GET HTTP/3dcpsenergy.com/Mmarcus.grundt@united-internet-media.de IP188.114.96.1:443
CertificateIssuerLet's Encrypt Subjectdcpsenergy.com Fingerprint1B:83:C6:7D:27:EF:41:52:97:03:4D:84:AC:8B:95:92:EC:86:5E:CF ValidityThu, 11 Apr 2024 18:25:37 GMT - Wed, 10 Jul 2024 18:25:36 GMT
File typeHTML document, ASCII text, with very long lines (15826), with no line terminators Hash765d4b7f9be88b506c652df3a33a3963 7b83f6e03eae8ed19c1be821839347ad1fce2592 4d114dad6762e40d4b986dfa58b654a3c18407ffaf14a6a83e1e45c8f068fd8e
GET /Mmarcus.grundt@united-internet-media.de HTTP/1.1
Host: dcpsenergy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://itones.teaserfaster.de/
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_m=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Tue, 16 Apr 2024 07:31:46 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: f/xVRLWHJG9SGElYYdWoYFyrJIe0q0BrEe8YggMaQrp13nlTIBuYoNIM19ZQnEGQOM3ZtKv16G5GkGYIGOh52FSqnIjAAsywzJYPFM0uLasfAU0KGhKziMTUlwS36Iod5x1uV1moGmX7DBWBoEvvnA==$u5O4TGXXyyxyYVJYZ4r7xg==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UIGcslDdC%2FeUGuinrCn2B9C73YURNhPiDhgfVKGuNBO%2F2KaJR69%2BVPtqcrX8r6mvWHVvJ2hi74VK2lYA7VZ3CtHjYIb5We79UdinuAZEMpjbgd3KSieiXfzP1bHDvlMCVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87527a448dce56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dcpsenergy.com/jm/8668ceafb19a11c03c377bf91d66a256661e29677619c | 188.114.96.1 | 200 OK | 6.4 kB |
URL GET HTTP/3dcpsenergy.com/jm/8668ceafb19a11c03c377bf91d66a256661e29677619c IP188.114.96.1:443
Requested byhttps://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 CertificateIssuerLet's Encrypt Subjectdcpsenergy.com Fingerprint1B:83:C6:7D:27:EF:41:52:97:03:4D:84:AC:8B:95:92:EC:86:5E:CF ValidityThu, 11 Apr 2024 18:25:37 GMT - Wed, 10 Jul 2024 18:25:36 GMT
File typeJavaScript source, ASCII text, with very long lines (6376), with no line terminators Hash1e07a363eef4b40ab4a38d5e4371da5c 7351be2a378540a016aec380141927221a45f19b 01ba4de80540981fd34be681b5c1fce8b205e341ac6fa73a61817068ff566510
GET /jm/8668ceafb19a11c03c377bf91d66a256661e29677619c HTTP/1.1
Host: dcpsenergy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00
Cookie: cf_clearance=NnYSq1kQ9_dDqgjnaSJND6qSsNbxUlv2isWvNUTEXmo-1713252706-1.0.1.1-HnMFPiYGO5jSyAv2dvgdqITCfI5k65yI1.ZkCEXHe76BdgVHSwdXKTNbNGwPiSVz4TwbbnEHzwUs5fTl6NKDvw; PHPSESSID=54c37f99afd07b9959050e5806c13a73
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:31:51 GMT
content-type: text/javascript
last-modified: Mon, 15 Apr 2024 23:25:37 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e%2BEqx1%2FfpfJ8vtNoH790%2B5GU1UQkMCfzRNFBV8eDecQCLg1Wy72fXoWdWxbr1%2FaLce5t1HuRiE%2FvGqfno91t%2BIm1r54BP6ka%2BXvMVx32%2BtUFQ2CKACkEJT9d%2FLPYySyzuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87527a67587556bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dcpsenergy.com/api-as1f?email=marcus.grundt@united-internet-media.de&data=background | 188.114.96.1 | 200 OK | 176 B |
URL GET HTTP/3dcpsenergy.com/api-as1f?email=marcus.grundt@united-internet-media.de&data=background IP188.114.96.1:443
Requested byhttps://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00 CertificateIssuerLet's Encrypt Subjectdcpsenergy.com Fingerprint1B:83:C6:7D:27:EF:41:52:97:03:4D:84:AC:8B:95:92:EC:86:5E:CF ValidityThu, 11 Apr 2024 18:25:37 GMT - Wed, 10 Jul 2024 18:25:36 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashe1d5c63a70f550c5a0d37e8f251a81d8 cf70569fd48c12a5545016c15c5996edc81476b4 c5de848c5fe413e5b006039106d076ae6758a1ae6b44aa458151b24a33e12bd3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Microsoft Outlook |
GET /api-as1f?email=marcus.grundt@united-internet-media.de&data=background HTTP/1.1
Host: dcpsenergy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcpsenergy.com/beebb091955c06fa68b3eb8afc0bae51661e29676cafePASbeebb091955c06fa68b3eb8afc0bae51661e29676cb00
Cookie: cf_clearance=NnYSq1kQ9_dDqgjnaSJND6qSsNbxUlv2isWvNUTEXmo-1713252706-1.0.1.1-HnMFPiYGO5jSyAv2dvgdqITCfI5k65yI1.ZkCEXHe76BdgVHSwdXKTNbNGwPiSVz4TwbbnEHzwUs5fTl6NKDvw; PHPSESSID=54c37f99afd07b9959050e5806c13a73
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:31:52 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XYOrb6inTU0sz4cJutCnm1HZZXkqxoPznLFZPVk1xu9s6iRFORZzSZF%2FXZB2SZYMwDt82H3RmmH%2FqPWACNECS2JpLdPCRbIQTj4Tz7uuteLjKA0upMFr%2FLdcA7LgMa6UNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87527a68ea4756bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|