Report - portal.shepherdoutsourcing.com/s/ANn4p

Report Overview

Visited public
2025-05-10 17:42:56
Tags
Submit Tags
URL
portal.shepherdoutsourcing.com/s/ANn4p
Finishing URL
portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN
IP / ASN
172.67.202.85
#13335 CLOUDFLARENET
Title
Shepherd Outsourcing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
portal.shepherdoutsourcing.com	unknown	2019-10-04	2025-03-14	2025-04-16	8.6 kB	1.2 MB	104.21.52.174
fonts.googleapis.com	8877	2005-01-25	2012-05-23	2025-05-07	474 B	13 kB	142.250.74.10
evolution-uploads.s3.amazonaws.com	unknown	2005-08-18	2024-10-15	2025-04-16	500 B	18 kB	16.182.66.9
fonts.gstatic.com	unknown	2008-02-11	2014-04-02	2025-05-07	1.7 kB	148 kB	142.250.74.35

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN	ScriptElement	48 kB	2025-05-10	2025-06-19
Pretty URL portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN IP 104.21.52.174 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-05-10 17:42 Last Seen2025-06-19 14:07 Times Seen2 Hash 6de61259c76288009b5eb261c2157ba0 aec5a7beabb002108b8f07974e048fa7a59ff0a9 fd59d586516a5ccd99d47ee8e6a1c04f8bdbb6bf638ad6c7655aea7f56866e25 Loading...

	portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN	ScriptElement	622 B	2025-03-28	2025-06-19
Pretty URL portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN IP 104.21.52.174 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-28 14:50 Last Seen2025-06-19 14:07 Times Seen3 Hash 3e5d26edfd657e0fbf09b5e05f9be08e 7dce1607af1070d4bff1a53ab2a39e3d7a4dc108 4c9bde66bce91127582b4507f2ff3aa81687642fa064ddd877b4a79afebf51c8 Loading...

	portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN	Function	2.4 kB	2025-05-10	2025-05-10
Pretty URL portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN IP 104.21.52.174 ASN #13335 CLOUDFLARENET Introduced by Function Embedded in HTML false Observations First Seen2025-05-10 17:42 Last Seen2025-05-10 17:42 Times Seen1 Hash 1c19bcecb2cd6381a9f7efc1329f7a16 dedbfa0f58f75b5b15ee36f1c93bac720038d88b 3fb51745197f4ce5f3e63e05549c58f617b09d8e4f6341ba585488381313c32f Loading...

	portal.shepherdoutsourcing.com/consumer-portal/assets/portal-C-tEw6sv.js	ScriptElement	908 kB	2025-05-10	2025-05-10
Pretty URL portal.shepherdoutsourcing.com/consumer-portal/assets/portal-C-tEw6sv.js IP 104.21.52.174 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-05-10 17:42 Last Seen2025-05-10 17:42 Times Seen1 Hash e2f26daa98f12debb343f35818222f87 2c4c4b3969fd824ac34684b1e9a98c3a10047a1f 40f7a1ce630da5f1c3015c678e71c3008334e3c9d7721a8ffd91aa2f61cb16e0 Loading...

HTTP Transactions (15)

	URL	IP	Response	Size
	GET portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN	104.21.52.174	200 OK	51 kB
URL User Request GET portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN IP 104.21.52.174:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectshepherdoutsourcing.com Fingerprint00:AF:5D:DD:17:A0:63:5D:D6:A3:11:C5:74:4D:DD:21:45:C6:6F:3B ValiditySun, 04 May 2025 17:17:40 GMT - Sat, 02 Aug 2025 18:16:02 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (2241) Size 51 kB (51370 bytes) Hash 0334d740dcd74ca82ca88321ce382d25 3f90b812e8f27c146eb28e60175c9120fbedef23 c4766a9474119018ad661948d20b61839eb9fabbf5b1731bc1040b0310f79149 HTTP Headers GET /?x=998945700-115&s=TWSXN HTTP/1.1 Host: portal.shepherdoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: laravel_session=eyJpdiI6ImcrMndRaHptK0VxOTdpZHlSQkNmNWc9PSIsInZhbHVlIjoiMjkwRUhWKytOTmNIUzhqdmd0ZFdINjI2MUprcFVEMnltTXRCZ2RDUDlzaXBCdUNUcmxmZmw1M1ltNFBOTzdNajFuam9pNCtpUGQ2SnJ5R2ZjN0wyM3ByOU5ycGRHRDVYallrYU05cmczeDVvekQrdWhjbUo5VnlpYWVLMEN2U2siLCJtYWMiOiJjMTRmYWZhMDVhMTdkNTkzM2I3ZWE5NjkxMzY1NTAxNDEzYmYwMDE0ZGYyMjg3MDdhOWQ3NmI5OGQ3MDE3ZTY5IiwidGFnIjoiIn0%3D Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Sat, 10 May 2025 17:42:35 GMT content-type: text/html; charset=UTF-8 server: cloudflare cache-control: no-cache, private nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=t91SnYmALpjgS6BRWO3WccU3GZ6FHzlhlrLtv7%2Feau%2FivQ1yjn1z6oS4XdxBvMSipnGVwOd9ksBja%2BIIbbREcHdreEhX0FOrldq6oBeKZd2UGqCTTMPhG1ZU%2BJrL3Xbl2H5BHcuznBcutqjeEa7xsxE%3D"}]} cf-cache-status: DYNAMIC vary: accept-encoding content-encoding: br set-cookie: laravel_session=eyJpdiI6ImxHZmk4dFN6NldZYTZrUjgxS0Y2Qnc9PSIsInZhbHVlIjoiS3Fudnp2ZVZHS0Q0RFg0MEMxTHpVNWUxa1JNNnh3NDFFM09wRDIydVBRdGpTelNNQTYxSmxweVZPWk9YMy9IWExDaGMveXN4VGNjcFpxQ0lFZ0JoL2lsbXN2Z1VaYWE5Zmg1dW1LbVN6Z2JUTk5BSFZyVVBuRzJaaEx0cFp1QkYiLCJtYWMiOiJkYmExMTk2Nzg3YjQ0ZTNhODE2YTc3YjA1NDgyN2QwYzJiNmIwZDJkOTcyMzdlZWJlOGRhMTU4YjkxMmQ3M2FhIiwidGFnIjoiIn0%3D; HttpOnly; SameSite=None; Secure; Path=/; Max-Age=5999940; Expires=Sat, 19 Jul 2025 04:21:35 GMT cf-ray: 93db3be6c889ebc9-CPH alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	GET fonts.googleapis.com/css?family=Inter:300,400,500,600,700	142.250.74.10	200 OK	12 kB
URL GET fonts.googleapis.com/css?family=Inter:300,400,500,600,700 IP 142.250.74.10:443 ASN #15169 GOOGLE Requested by https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Certificate IssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint7A:29:E6:A8:BE:59:2C:AE:82:2D:CA:8E:15:89:41:BE:EC:D2:0D:EA ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT File type ASCII text Size 12 kB (11865 bytes) Hash 2c14fc9b723181bf410869237b1a7512 afeccbad3eff1f6c2afe645451483aee31ff6fd7 4a24a5abff332c77c802d8b848a045bf40f52796933c6b05e679af4176aaacba HTTP Headers `GET /css?family=Inter:300,400,500,600,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://portal.shepherdoutsourcing.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css; charset=utf-8 vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Sat, 10 May 2025 17:42:36 GMT date: Sat, 10 May 2025 17:42:36 GMT cache-control: private, max-age=86400 cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET evolution-uploads.s3.amazonaws.com/licensee/1/logo/dynamic-Medium%20Logo.png	16.182.66.9	200 OK	18 kB
URL GET evolution-uploads.s3.amazonaws.com/licensee/1/logo/dynamic-Medium%20Logo.png IP 16.182.66.9:443 ASN #16509 AMAZON-02 Requested by https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Certificate IssuerAmazon Subject.s3.amazonaws.com Fingerprint2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69 ValidityFri, 14 Feb 2025 00:00:00 GMT - Sat, 07 Feb 2026 23:59:59 GMT File type PNG image data, 1127 x 306, 8-bit/color RGBA, non-interlaced Size 18 kB (17612 bytes) Hash db3057a40c4017fbc9a4063b4743349e 5c64d122eb10a47bdd7718947e3ed17abca27717 5f60c2dc79c2e1e651bf4e730011a435140446d69e954643c50142527060c996 HTTP Headers `GET /licensee/1/logo/dynamic-Medium%20Logo.png HTTP/1.1 Host: evolution-uploads.s3.amazonaws.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://portal.shepherdoutsourcing.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK x-amz-id-2: 0g3aqQy7ga+uR0yTMhzNYd//mYqa74yW3myVkuRfSq47+S6l3oUqO/SRlebknoAO3TqnU4GwdyM= x-amz-request-id: KQC619JCEY2NK87Q Date: Sat, 10 May 2025 17:42:38 GMT Last-Modified: Wed, 01 May 2024 01:50:05 GMT ETag: "db3057a40c4017fbc9a4063b4743349e" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Content-Length: 17612 Server: AmazonS3`

	GET portal.shepherdoutsourcing.com/favicon.ico	104.21.52.174	200 OK	0 B
URL GET portal.shepherdoutsourcing.com/favicon.ico IP 104.21.52.174:443 ASN #13335 CLOUDFLARENET Requested by https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Certificate IssuerGoogle Trust Services Subjectshepherdoutsourcing.com Fingerprint00:AF:5D:DD:17:A0:63:5D:D6:A3:11:C5:74:4D:DD:21:45:C6:6F:3B ValiditySun, 04 May 2025 17:17:40 GMT - Sat, 02 Aug 2025 18:16:02 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /favicon.ico HTTP/1.1 Host: portal.shepherdoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Cookie: laravel_session=eyJpdiI6ImxHZmk4dFN6NldZYTZrUjgxS0Y2Qnc9PSIsInZhbHVlIjoiS3Fudnp2ZVZHS0Q0RFg0MEMxTHpVNWUxa1JNNnh3NDFFM09wRDIydVBRdGpTelNNQTYxSmxweVZPWk9YMy9IWExDaGMveXN4VGNjcFpxQ0lFZ0JoL2lsbXN2Z1VaYWE5Zmg1dW1LbVN6Z2JUTk5BSFZyVVBuRzJaaEx0cFp1QkYiLCJtYWMiOiJkYmExMTk2Nzg3YjQ0ZTNhODE2YTc3YjA1NDgyN2QwYzJiNmIwZDJkOTcyMzdlZWJlOGRhMTU4YjkxMmQ3M2FhIiwidGFnIjoiIn0%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Sat, 10 May 2025 17:42:37 GMT content-type: image/x-icon content-length: 0 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=019Fj8NWAeuZUd6hfN8YxDZar3adBkgqsUYGa3xqPBCiM4pp3F8uuq84888fafjO%2FuWD41UzgonYeiy3RfI5GvA8nTr%2BFAXY%2FhSf0TQJUnNuGC%2F5m9CaBGbq5Sm0zb4RJkCQKAE6jKhaYH3L1qBZc8U%3D"}],"group":"cf-nel","max_age":604800} last-modified: Fri, 09 May 2025 18:23:46 GMT etag: "681e4832-0" x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cache-control: max-age=14400 cf-cache-status: REVALIDATED accept-ranges: bytes cf-ray: 93db3bf35bd092c8-CPH server: cloudflare vary: Accept-Encoding nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=26070&min_rtt=22511&rtt_var=4069&sent=352&recv=33&lost=0&retrans=0&sent_bytes=393377&recv_bytes=6234&delivery_rate=270690&cwnd=148800&unsent_bytes=0&cid=abb1b29258c67d7b&ts=2334&x=16"

	POST portal.shepherdoutsourcing.com/api/visits	104.21.52.174	200 OK	0 B
URL POST portal.shepherdoutsourcing.com/api/visits IP 104.21.52.174:443 ASN #13335 CLOUDFLARENET Requested by https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Certificate IssuerGoogle Trust Services Subjectshepherdoutsourcing.com Fingerprint00:AF:5D:DD:17:A0:63:5D:D6:A3:11:C5:74:4D:DD:21:45:C6:6F:3B ValiditySun, 04 May 2025 17:17:40 GMT - Sat, 02 Aug 2025 18:16:02 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /api/visits HTTP/1.1 Host: portal.shepherdoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Content-Length: 55 Origin: https://portal.shepherdoutsourcing.com DNT: 1 Connection: keep-alive Referer: https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Cookie: laravel_session=eyJpdiI6IjhOK2Y5bzJoemVNdmhzWkwvYk82R1E9PSIsInZhbHVlIjoiemtvanlVMWM0OWIvVmhzem80Nkl6K3RxN0ZsY2xyTXM5VXZ0TkY3UHhJSndiaVFzc2NIR3M2aFJHQVRDUitkcERXemFHNkRGemc4bVhlYVhEamV5dXVwdDhrNTJnenZQV3FUbjhBdDlwSDhGajVBd1JSdmlSUXhWTUFzQTk2a2kiLCJtYWMiOiJiY2IzZGU4YTA3NTA1ZWRlNTgyMjVjNWY5M2FjMWEwMWRhMGQ2YjJhYjY2OTA1ODYyNDUyNTcxYzUwMDU0NzVhIiwidGFnIjoiIn0%3D Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Sat, 10 May 2025 17:42:42 GMT content-type: text/html; charset=UTF-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R1lY2TsiblNM%2BVVuNoSOj2RwF%2BMhgz3eyyh3BnvWo1QQRHcgiZBG4b7oEVdytRG8GHImVrnW6Ap1uUw6mzAXzwGt7cdeMghaOUfe2lFGdPsDJZJrDlwvIAkqKJcU9OZRieGXnU%2FBKkuV2CMJlgjPwyo%3D"}],"group":"cf-nel","max_age":604800} cache-control: no-cache, private set-cookie: laravel_session=eyJpdiI6InEwVklPRHJIWDh0dGFuRWZyaUduTnc9PSIsInZhbHVlIjoieXYzZXhvc2dhWjRjQTFGUXBwbEVtUXdEa09YNGo1czVuRkRrK0Z3c3VwejFMM2o4ckRnd3g0QUM2MmlRNkRlT3VuWldtM3lXVVFid3VydzByT1hrd0hoTWtOR1Z1NldialhieS93aHFXVUROR2tmd2dZenh1MEd4eVZKNlM0ZFoiLCJtYWMiOiJkMTgwYmQ0MmQwNzU2MjJlYTBhMDk5OGI3YzQwNjc0ODY5ZWE0NmFiNDgzMTFhNzlkYmMwYjU2YzU3MjZhOGRkIiwidGFnIjoiIn0%3D; expires=Sat, 19 Jul 2025 04:21:42 GMT; Max-Age=5999940; path=/; secure; httponly; samesite=none x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: DYNAMIC vary: accept-encoding content-encoding: br cf-ray: 93db3c10becb92c8-CPH server: cloudflare alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=25825&min_rtt=22511&rtt_var=2744&sent=355&recv=36&lost=0&retrans=0&sent_bytes=395090&recv_bytes=7022&delivery_rate=22527&cwnd=148800&unsent_bytes=0&cid=abb1b29258c67d7b&ts=6855&x=16"

	GET portal.shepherdoutsourcing.com/images/consumer/cvv.png	104.21.52.174	200 OK	89 kB
URL GET portal.shepherdoutsourcing.com/images/consumer/cvv.png IP 104.21.52.174:443 ASN #13335 CLOUDFLARENET Requested by https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Certificate IssuerGoogle Trust Services Subjectshepherdoutsourcing.com Fingerprint00:AF:5D:DD:17:A0:63:5D:D6:A3:11:C5:74:4D:DD:21:45:C6:6F:3B ValiditySun, 04 May 2025 17:17:40 GMT - Sat, 02 Aug 2025 18:16:02 GMT File type PNG image data, 600 x 400, 8-bit/color RGB, non-interlaced Size 89 kB (89333 bytes) Hash c8e88d446014b32841ed5e0688383965 4cb4159ef1ae1cec83df4519b9e3fcfe137ebc4c bb27626009b4c23fb2aa213746ef3c0169f0044560551a95804980bbd7a2c549 HTTP Headers GET /images/consumer/cvv.png HTTP/1.1 Host: portal.shepherdoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Cookie: laravel_session=eyJpdiI6ImxHZmk4dFN6NldZYTZrUjgxS0Y2Qnc9PSIsInZhbHVlIjoiS3Fudnp2ZVZHS0Q0RFg0MEMxTHpVNWUxa1JNNnh3NDFFM09wRDIydVBRdGpTelNNQTYxSmxweVZPWk9YMy9IWExDaGMveXN4VGNjcFpxQ0lFZ0JoL2lsbXN2Z1VaYWE5Zmg1dW1LbVN6Z2JUTk5BSFZyVVBuRzJaaEx0cFp1QkYiLCJtYWMiOiJkYmExMTk2Nzg3YjQ0ZTNhODE2YTc3YjA1NDgyN2QwYzJiNmIwZDJkOTcyMzdlZWJlOGRhMTU4YjkxMmQ3M2FhIiwidGFnIjoiIn0%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Sat, 10 May 2025 17:42:37 GMT content-type: image/png content-length: 89333 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EERcbAz4K%2FS1OxjAheOUFvGcehp4syOsSoVoR9Bs%2B4l6CrlAu4jM7ckKMj4rSgvotDDctsKvvljpRLCsjArll7Hn6XE%2BexTm4VcQP57XrXeyWTOmIS0BFWdHB%2FNPNnfVoRaFMFD4m6%2BafBS7KUjTKII%3D"}],"group":"cf-nel","max_age":604800} last-modified: Fri, 09 May 2025 18:23:46 GMT etag: "681e4832-15cf5" x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff accept-ranges: bytes cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93db3bf11b9b92c8-CPH server: cloudflare vary: Accept-Encoding nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=26352&min_rtt=22511&rtt_var=4676&sent=272&recv=30&lost=0&retrans=0&sent_bytes=301086&recv_bytes=4905&delivery_rate=1490314&cwnd=148800&unsent_bytes=0&cid=abb1b29258c67d7b&ts=1974&x=16"

	POST portal.shepherdoutsourcing.com/api/login-events	104.21.52.174	200 OK	2 B
URL POST portal.shepherdoutsourcing.com/api/login-events IP 104.21.52.174:443 ASN #13335 CLOUDFLARENET Requested by https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Certificate IssuerGoogle Trust Services Subjectshepherdoutsourcing.com Fingerprint00:AF:5D:DD:17:A0:63:5D:D6:A3:11:C5:74:4D:DD:21:45:C6:6F:3B ValiditySun, 04 May 2025 17:17:40 GMT - Sat, 02 Aug 2025 18:16:02 GMT File type JSON text data Size 2 B (2 bytes) Hash d751713988987e9331980363e24189ce 97d170e1550eee4afc0af065b78cda302a97674c 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945 HTTP Headers POST /api/login-events HTTP/1.1 Host: portal.shepherdoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Content-Length: 24 Origin: https://portal.shepherdoutsourcing.com DNT: 1 Connection: keep-alive Referer: https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Cookie: laravel_session=eyJpdiI6ImxHZmk4dFN6NldZYTZrUjgxS0Y2Qnc9PSIsInZhbHVlIjoiS3Fudnp2ZVZHS0Q0RFg0MEMxTHpVNWUxa1JNNnh3NDFFM09wRDIydVBRdGpTelNNQTYxSmxweVZPWk9YMy9IWExDaGMveXN4VGNjcFpxQ0lFZ0JoL2lsbXN2Z1VaYWE5Zmg1dW1LbVN6Z2JUTk5BSFZyVVBuRzJaaEx0cFp1QkYiLCJtYWMiOiJkYmExMTk2Nzg3YjQ0ZTNhODE2YTc3YjA1NDgyN2QwYzJiNmIwZDJkOTcyMzdlZWJlOGRhMTU4YjkxMmQ3M2FhIiwidGFnIjoiIn0%3D Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Sat, 10 May 2025 17:42:37 GMT content-type: application/json nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KgOQyGGCi%2BTzb8RydMUj0798HmK7rj8Nbbl%2BKXQ8ZhqG7R5qlXrZOFpAwEIHsrp92ACnF5eA0SzqpfsnS9CEYmc2uivtOmgqI3mUN8RsHQDk%2F37dE25z4mywvqoUs6ZgR6UYf3yaUwR0BGQpErNdyqw%3D"}],"group":"cf-nel","max_age":604800} cache-control: no-cache, private set-cookie: laravel_session=eyJpdiI6IjhOK2Y5bzJoemVNdmhzWkwvYk82R1E9PSIsInZhbHVlIjoiemtvanlVMWM0OWIvVmhzem80Nkl6K3RxN0ZsY2xyTXM5VXZ0TkY3UHhJSndiaVFzc2NIR3M2aFJHQVRDUitkcERXemFHNkRGemc4bVhlYVhEamV5dXVwdDhrNTJnenZQV3FUbjhBdDlwSDhGajVBd1JSdmlSUXhWTUFzQTk2a2kiLCJtYWMiOiJiY2IzZGU4YTA3NTA1ZWRlNTgyMjVjNWY5M2FjMWEwMWRhMGQ2YjJhYjY2OTA1ODYyNDUyNTcxYzUwMDU0NzVhIiwidGFnIjoiIn0%3D; expires=Sat, 19 Jul 2025 04:21:37 GMT; Max-Age=5999940; path=/; secure; httponly; samesite=none x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cf-cache-status: DYNAMIC vary: accept-encoding cf-ray: 93db3bf49bee92c8-CPH server: cloudflare alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=25998&min_rtt=22511&rtt_var=3197&sent=353&recv=34&lost=0&retrans=0&sent_bytes=394059&recv_bytes=6280&delivery_rate=1873&cwnd=148800&unsent_bytes=0&cid=abb1b29258c67d7b&ts=2559&x=16"

	GET fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2	142.250.74.35	200 OK	48 kB
URL GET fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 IP 142.250.74.35:443 ASN #15169 GOOGLE Requested by https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Certificate IssuerGoogle Trust Services Subject.gstatic.com Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT File type Web Open Font Format (Version 2), TrueType, length 48496, version 1.0 Size 48 kB (48496 bytes) Hash 8b7943a41013101d892c4684617ed41d 1853b95f5ae2cc51c89edf6f2c44a676efe31f3b 9d9e7b21769c8048b64fbdc1743c32641c3aa1c70c37197987ffe14d0f0508cd HTTP Headers GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://portal.shepherdoutsourcing.com DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 48496 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 08 May 2025 10:09:02 GMT expires: Fri, 08 May 2026 10:09:02 GMT cache-control: public, max-age=31536000 age: 200014 last-modified: Mon, 29 Jul 2024 22:47:09 GMT content-type: font/woff2 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET portal.shepherdoutsourcing.com/s/ANn4p	104.21.52.174	302 Found	51 kB
URL User Request GET portal.shepherdoutsourcing.com/s/ANn4p IP 104.21.52.174:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectshepherdoutsourcing.com Fingerprint00:AF:5D:DD:17:A0:63:5D:D6:A3:11:C5:74:4D:DD:21:45:C6:6F:3B ValiditySun, 04 May 2025 17:17:40 GMT - Sat, 02 Aug 2025 18:16:02 GMT File type Size 51 kB (51370 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /s/ANn4p HTTP/1.1 Host: portal.shepherdoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found date: Sat, 10 May 2025 17:42:35 GMT content-type: text/html; charset=utf-8 location: https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN server: cloudflare cache-control: no-cache, private nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: DYNAMIC report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=HwLASo1ee8vretDCsBY9PaxEN2dgHUsSbmATEoR%2BJcqzSF9tojGXjq1BQfgm7CJkkgWSRH8Fd%2BVPJu7YSmgn%2B5HUd0oYGyaTcMrEWzHKa5K3B%2FuJ9N50yhKZzSHYo7jfS4leuu7nr9rHETi4xjhNMTo%3D"}]} set-cookie: laravel_session=eyJpdiI6ImcrMndRaHptK0VxOTdpZHlSQkNmNWc9PSIsInZhbHVlIjoiMjkwRUhWKytOTmNIUzhqdmd0ZFdINjI2MUprcFVEMnltTXRCZ2RDUDlzaXBCdUNUcmxmZmw1M1ltNFBOTzdNajFuam9pNCtpUGQ2SnJ5R2ZjN0wyM3ByOU5ycGRHRDVYallrYU05cmczeDVvekQrdWhjbUo5VnlpYWVLMEN2U2siLCJtYWMiOiJjMTRmYWZhMDVhMTdkNTkzM2I3ZWE5NjkxMzY1NTAxNDEzYmYwMDE0ZGYyMjg3MDdhOWQ3NmI5OGQ3MDE3ZTY5IiwidGFnIjoiIn0%3D; HttpOnly; SameSite=None; Secure; Path=/; Max-Age=5999940; Expires=Sat, 19 Jul 2025 04:21:35 GMT cf-ray: 93db3be45dd9ebc9-CPH alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	GET portal.shepherdoutsourcing.com/consumer-portal/assets/portal-Cb5Prvw4.css	104.21.52.174	200 OK	95 kB
URL GET portal.shepherdoutsourcing.com/consumer-portal/assets/portal-Cb5Prvw4.css IP 104.21.52.174:443 ASN #13335 CLOUDFLARENET Requested by https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Certificate IssuerGoogle Trust Services Subjectshepherdoutsourcing.com Fingerprint00:AF:5D:DD:17:A0:63:5D:D6:A3:11:C5:74:4D:DD:21:45:C6:6F:3B ValiditySun, 04 May 2025 17:17:40 GMT - Sat, 02 Aug 2025 18:16:02 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 95 kB (94632 bytes) Hash 1aa2f74281fd31e0598d8cee58b4b018 d334c9451415f43d067cf54beb966b6ac44ca115 be0f04fc7915c5ca8a5c8811d1cb758460930da942708b089491581ebc926478 HTTP Headers GET /consumer-portal/assets/portal-Cb5Prvw4.css HTTP/1.1 Host: portal.shepherdoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Cookie: laravel_session=eyJpdiI6ImxHZmk4dFN6NldZYTZrUjgxS0Y2Qnc9PSIsInZhbHVlIjoiS3Fudnp2ZVZHS0Q0RFg0MEMxTHpVNWUxa1JNNnh3NDFFM09wRDIydVBRdGpTelNNQTYxSmxweVZPWk9YMy9IWExDaGMveXN4VGNjcFpxQ0lFZ0JoL2lsbXN2Z1VaYWE5Zmg1dW1LbVN6Z2JUTk5BSFZyVVBuRzJaaEx0cFp1QkYiLCJtYWMiOiJkYmExMTk2Nzg3YjQ0ZTNhODE2YTc3YjA1NDgyN2QwYzJiNmIwZDJkOTcyMzdlZWJlOGRhMTU4YjkxMmQ3M2FhIiwidGFnIjoiIn0%3D Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Sat, 10 May 2025 17:42:36 GMT content-type: text/css nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aPIkrofDWr6NcRBkV65ugVG%2FHAoqOCKsmIO6kJMuQMQGNkxeA4PQurleWuJQNo9RFsEtMYMgUxqQ%2FEc2584lNsSBMHVAWqCoJrXm4QUHqkMvevb5s5cCfMXpEwgb8SVcnys7qffhksJ2X5SYqNAYYK8%3D"}],"group":"cf-nel","max_age":604800} last-modified: Fri, 09 May 2025 18:23:46 GMT etag: W/"681e4832-171a8" x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93db3bea897e92c8-CPH server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=28825&min_rtt=25698&rtt_var=12990&sent=30&recv=17&lost=0&retrans=0&sent_bytes=13312&recv_bytes=3712&delivery_rate=1186&cwnd=12000&unsent_bytes=0&cid=abb1b29258c67d7b&ts=953&x=16"

	GET portal.shepherdoutsourcing.com/consumer-portal/assets/portal-BJ7yHedy.css	104.21.52.174	200 OK	402 B
URL GET portal.shepherdoutsourcing.com/consumer-portal/assets/portal-BJ7yHedy.css IP 104.21.52.174:443 ASN #13335 CLOUDFLARENET Requested by https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Certificate IssuerGoogle Trust Services Subjectshepherdoutsourcing.com Fingerprint00:AF:5D:DD:17:A0:63:5D:D6:A3:11:C5:74:4D:DD:21:45:C6:6F:3B ValiditySun, 04 May 2025 17:17:40 GMT - Sat, 02 Aug 2025 18:16:02 GMT File type ASCII text, with very long lines (401) Size 402 B (402 bytes) Hash 6f1546164846470bc1d54bb65a0422a0 47dabce59f231f80821872f7986b6550a0238680 6634d9a8bd9a2c53512f7520df7698ee132efb1fb62337377fa87c65158fc8c1 HTTP Headers GET /consumer-portal/assets/portal-BJ7yHedy.css HTTP/1.1 Host: portal.shepherdoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Cookie: laravel_session=eyJpdiI6ImxHZmk4dFN6NldZYTZrUjgxS0Y2Qnc9PSIsInZhbHVlIjoiS3Fudnp2ZVZHS0Q0RFg0MEMxTHpVNWUxa1JNNnh3NDFFM09wRDIydVBRdGpTelNNQTYxSmxweVZPWk9YMy9IWExDaGMveXN4VGNjcFpxQ0lFZ0JoL2lsbXN2Z1VaYWE5Zmg1dW1LbVN6Z2JUTk5BSFZyVVBuRzJaaEx0cFp1QkYiLCJtYWMiOiJkYmExMTk2Nzg3YjQ0ZTNhODE2YTc3YjA1NDgyN2QwYzJiNmIwZDJkOTcyMzdlZWJlOGRhMTU4YjkxMmQ3M2FhIiwidGFnIjoiIn0%3D Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Sat, 10 May 2025 17:42:36 GMT content-type: text/css nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g3ByAwL1LxFLjcSYOgfZ%2FFc%2FOREGEPH%2FHkKxNEzHIZde8mi8xNR2zvQSASNpW3mnEVaFZHilEpLQUDkMdZ3GMEN4t1sdWzCjY2bSPrhEi%2FkAMs0Gy9836RnWChwpbkirr8uUvyosNM7rn7we1gt25aM%3D"}],"group":"cf-nel","max_age":604800} last-modified: Fri, 09 May 2025 18:23:46 GMT etag: W/"681e4832-192" x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93db3bea997f92c8-CPH server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=28825&min_rtt=25698&rtt_var=12990&sent=28&recv=17&lost=0&retrans=0&sent_bytes=12472&recv_bytes=3712&delivery_rate=1186&cwnd=12000&unsent_bytes=0&cid=abb1b29258c67d7b&ts=953&x=16"

	GET portal.shepherdoutsourcing.com/consumer-portal/assets/portal-C-tEw6sv.js	104.21.52.174	200 OK	908 kB
URL GET portal.shepherdoutsourcing.com/consumer-portal/assets/portal-C-tEw6sv.js IP 104.21.52.174:443 ASN #13335 CLOUDFLARENET Requested by https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Certificate IssuerGoogle Trust Services Subjectshepherdoutsourcing.com Fingerprint00:AF:5D:DD:17:A0:63:5D:D6:A3:11:C5:74:4D:DD:21:45:C6:6F:3B ValiditySun, 04 May 2025 17:17:40 GMT - Sat, 02 Aug 2025 18:16:02 GMT File type JavaScript source, ASCII text, with very long lines (28166) Size 908 kB (907576 bytes) Hash e2f26daa98f12debb343f35818222f87 2c4c4b3969fd824ac34684b1e9a98c3a10047a1f 40f7a1ce630da5f1c3015c678e71c3008334e3c9d7721a8ffd91aa2f61cb16e0 HTTP Headers GET /consumer-portal/assets/portal-C-tEw6sv.js HTTP/1.1 Host: portal.shepherdoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Cookie: laravel_session=eyJpdiI6ImxHZmk4dFN6NldZYTZrUjgxS0Y2Qnc9PSIsInZhbHVlIjoiS3Fudnp2ZVZHS0Q0RFg0MEMxTHpVNWUxa1JNNnh3NDFFM09wRDIydVBRdGpTelNNQTYxSmxweVZPWk9YMy9IWExDaGMveXN4VGNjcFpxQ0lFZ0JoL2lsbXN2Z1VaYWE5Zmg1dW1LbVN6Z2JUTk5BSFZyVVBuRzJaaEx0cFp1QkYiLCJtYWMiOiJkYmExMTk2Nzg3YjQ0ZTNhODE2YTc3YjA1NDgyN2QwYzJiNmIwZDJkOTcyMzdlZWJlOGRhMTU4YjkxMmQ3M2FhIiwidGFnIjoiIn0%3D Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Sat, 10 May 2025 17:42:36 GMT content-type: application/javascript; charset=utf-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zE9vajeqjgsERrQUfp1ebPj4o3s01cX2luDmnK%2BwRoXqftrSGevI%2FESycwc3laJO9G0Q0yVvxEzKqemo4hbQVbBEJ4qA1Eo9n7TUZYmocmwZDUdzzZo9OCLFujknkp%2F7gsdR9lq%2FfWYEw5QTJ8ScdzQ%3D"}],"group":"cf-nel","max_age":604800} last-modified: Fri, 09 May 2025 18:23:46 GMT etag: W/"681e4832-dd938" x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cache-control: max-age=14400 cf-cache-status: MISS cf-ray: 93db3bea998192c8-CPH server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=27945&min_rtt=22893&rtt_var=6791&sent=41&recv=21&lost=0&retrans=0&sent_bytes=25631&recv_bytes=3888&delivery_rate=36869&cwnd=20400&unsent_bytes=0&cid=abb1b29258c67d7b&ts=1048&x=16"

	GET portal.shepherdoutsourcing.com/assets/static/css/fontawesome/4.7.0.css?1746815026	104.21.52.174	200 OK	37 kB
URL GET portal.shepherdoutsourcing.com/assets/static/css/fontawesome/4.7.0.css?1746815026 IP 104.21.52.174:443 ASN #13335 CLOUDFLARENET Requested by https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Certificate IssuerGoogle Trust Services Subjectshepherdoutsourcing.com Fingerprint00:AF:5D:DD:17:A0:63:5D:D6:A3:11:C5:74:4D:DD:21:45:C6:6F:3B ValiditySun, 04 May 2025 17:17:40 GMT - Sat, 02 Aug 2025 18:16:02 GMT File type troff or preprocessor input, ASCII text, with very long lines (372) Size 37 kB (37414 bytes) Hash c495654869785bc3df60216616814ad1 0140952c64e3f2b74ef64e050f2fe86eab6624c8 36e0a7e08bee65774168528938072c536437669c1b7458ac77976ec788e4439c HTTP Headers GET /assets/static/css/fontawesome/4.7.0.css?1746815026 HTTP/1.1 Host: portal.shepherdoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Cookie: laravel_session=eyJpdiI6ImxHZmk4dFN6NldZYTZrUjgxS0Y2Qnc9PSIsInZhbHVlIjoiS3Fudnp2ZVZHS0Q0RFg0MEMxTHpVNWUxa1JNNnh3NDFFM09wRDIydVBRdGpTelNNQTYxSmxweVZPWk9YMy9IWExDaGMveXN4VGNjcFpxQ0lFZ0JoL2lsbXN2Z1VaYWE5Zmg1dW1LbVN6Z2JUTk5BSFZyVVBuRzJaaEx0cFp1QkYiLCJtYWMiOiJkYmExMTk2Nzg3YjQ0ZTNhODE2YTc3YjA1NDgyN2QwYzJiNmIwZDJkOTcyMzdlZWJlOGRhMTU4YjkxMmQ3M2FhIiwidGFnIjoiIn0%3D Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Sat, 10 May 2025 17:42:36 GMT content-type: text/css nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=unrjf9ObKHH7OVwtme0OA23O1XbAkej0fInmirkPLZ9ncFyMwo37RaovqDzzSxKB0LBzl8fn6Zbc%2Fku5x8NPG%2BoZ0fZHe4NvKC8vqMwudUdulLzGOwt8vWenrOXuiFxvzH1CQgofuexVg04aXnCujw0%3D"}],"group":"cf-nel","max_age":604800} last-modified: Fri, 09 May 2025 18:23:46 GMT etag: W/"681e4832-9226" x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93db3bea998392c8-CPH server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=28825&min_rtt=25698&rtt_var=12990&sent=20&recv=17&lost=0&retrans=0&sent_bytes=4128&recv_bytes=3712&delivery_rate=1186&cwnd=12000&unsent_bytes=0&cid=abb1b29258c67d7b&ts=945&x=16"

	GET fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2	142.250.74.35	200 OK	48 kB
URL GET fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 IP 142.250.74.35:443 ASN #15169 GOOGLE Requested by https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Certificate IssuerGoogle Trust Services Subject.gstatic.com Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT File type Web Open Font Format (Version 2), TrueType, length 48496, version 1.0 Size 48 kB (48496 bytes) Hash 8b7943a41013101d892c4684617ed41d 1853b95f5ae2cc51c89edf6f2c44a676efe31f3b 9d9e7b21769c8048b64fbdc1743c32641c3aa1c70c37197987ffe14d0f0508cd HTTP Headers GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://portal.shepherdoutsourcing.com DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 48496 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 08 May 2025 10:09:02 GMT expires: Fri, 08 May 2026 10:09:02 GMT cache-control: public, max-age=31536000 age: 200015 last-modified: Mon, 29 Jul 2024 22:47:09 GMT content-type: font/woff2 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2	142.250.74.35	200 OK	48 kB
URL GET fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 IP 142.250.74.35:443 ASN #15169 GOOGLE Requested by https://portal.shepherdoutsourcing.com/?x=998945700-115&s=TWSXN Certificate IssuerGoogle Trust Services Subject.gstatic.com Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT File type Web Open Font Format (Version 2), TrueType, length 48496, version 1.0 Size 48 kB (48496 bytes) Hash 8b7943a41013101d892c4684617ed41d 1853b95f5ae2cc51c89edf6f2c44a676efe31f3b 9d9e7b21769c8048b64fbdc1743c32641c3aa1c70c37197987ffe14d0f0508cd HTTP Headers GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://portal.shepherdoutsourcing.com DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 48496 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 08 May 2025 10:09:02 GMT expires: Fri, 08 May 2026 10:09:02 GMT cache-control: public, max-age=31536000 age: 200015 last-modified: Mon, 29 Jul 2024 22:47:09 GMT content-type: font/woff2 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (15)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL POST

IP

ASN

Requested by