package.dittugarments.com/public/0pde70z78iPu1B0RnEyGm1BNc7B9PUZI
167.114.30.172 406 B URL package.dittugarments.com/public/0pde70z78iPu1B0RnEyGm1BNc7B9PUZI
IP 167.114.30.172:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 59f665f4e8b0de50ce9f4d3b3986738e
09472b45ea37760858f630988f50d69b1583f445
704abe42375f89894e44312a52e5172cdf8e94e26a4a3c6382de1844af07e366
Analyzer Verdict Alert urlquery phishing Phishing - DHL
OpenPhish phishing DHL Airways, Inc.
GET /public/0pde70z78iPu1B0RnEyGm1BNc7B9PUZI HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Tue, 05 Dec 2023 10:27:27 GMT
Server: Apache
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6InBSOEQ3ZUE4eUczOU1yVHlRWEcyQ2c9PSIsInZhbHVlIjoiMU4vWDJoaGNnV0JQZytSR0J3TjBRYUdENVhRVTY0RnAxS2JJTFN4N0YxSGNRbEsybXdFdjh3b0hKbjhoT0pjbjRaanZDc2E4UGd3akVycjEvT016Z1NxV1hjUmhQdkNLTjRsTGhsb1FRQXNLekRIY1o0V1RNblBrbHM1VmhXelEiLCJtYWMiOiI2M2MwMjMxMmM5MDRiMjgyN2IxZTE5ZDg0Mjk2NzhkNTliOGI2MzE3OGQ5YjIxNzdmZGZkODExOGYwYzBlNTg3IiwidGFnIjoiIn0%3D; expires=Tue, 05-Dec-2023 12:27:27 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6InlNZHlaTHR2cDZJUjc3ZXpCQUovZGc9PSIsInZhbHVlIjoiUktONVNib29FVDA2K0V5R0N0MDJsRWFUTEhCaUl3ZWR6amxjMUhEU0h6WTVzbWZiNGlDQkdSVlNQMjcxazZiS0lTYXlNdG1Gb1ZKVTJtVVl5aGpxNmJQYTQ3Skh2SGpCbmdZYmk5SC95cUtIZnBCSXpTV3dCUFNDRXYxcjVzK0IiLCJtYWMiOiJjOTg5ZGQ2NGExOTg5NTEyNTUzZDhhYmMzMjIyMDEwOGEzZTFkMzRmZGU5ODBkMWQ5ZWRiOGUzZjkwY2M3MzA3IiwidGFnIjoiIn0%3D; expires=Tue, 05-Dec-2023 12:27:27 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Location: https://package.dittugarments.com/public
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
package.dittugarments.com/public
167.114.30.172 249 B URL package.dittugarments.com/public
IP 167.114.30.172:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a8e11bccdd02a57c9f088693a6595edb
2e29945d816bf9d4d8f244a8e60f671410098d1d
3fd5f6483304c2d479276375ef9ad5d751348bfdb8e188f304b7c79c53388c43
Analyzer Verdict Alert urlquery phishing Phishing - DHL
OpenPhish phishing DHL Airways, Inc.
GET /public HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBSOEQ3ZUE4eUczOU1yVHlRWEcyQ2c9PSIsInZhbHVlIjoiMU4vWDJoaGNnV0JQZytSR0J3TjBRYUdENVhRVTY0RnAxS2JJTFN4N0YxSGNRbEsybXdFdjh3b0hKbjhoT0pjbjRaanZDc2E4UGd3akVycjEvT016Z1NxV1hjUmhQdkNLTjRsTGhsb1FRQXNLekRIY1o0V1RNblBrbHM1VmhXelEiLCJtYWMiOiI2M2MwMjMxMmM5MDRiMjgyN2IxZTE5ZDg0Mjk2NzhkNTliOGI2MzE3OGQ5YjIxNzdmZGZkODExOGYwYzBlNTg3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InlNZHlaTHR2cDZJUjc3ZXpCQUovZGc9PSIsInZhbHVlIjoiUktONVNib29FVDA2K0V5R0N0MDJsRWFUTEhCaUl3ZWR6amxjMUhEU0h6WTVzbWZiNGlDQkdSVlNQMjcxazZiS0lTYXlNdG1Gb1ZKVTJtVVl5aGpxNmJQYTQ3Skh2SGpCbmdZYmk5SC95cUtIZnBCSXpTV3dCUFNDRXYxcjVzK0IiLCJtYWMiOiJjOTg5ZGQ2NGExOTg5NTEyNTUzZDhhYmMzMjIyMDEwOGEzZTFkMzRmZGU5ODBkMWQ5ZWRiOGUzZjkwY2M3MzA3IiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 05 Dec 2023 10:27:27 GMT
Server: Apache
Location: https://package.dittugarments.com/public/
Content-Length: 249
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
package.dittugarments.com/public/
167.114.30.172 544 B URL package.dittugarments.com/public/
IP 167.114.30.172:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash acacfb81d339d414361f06c47975bfd7
4b4513cfd689d86d4ade4a41400fad13ced21cab
1efecdf4c1b05b6d8d5d1c6fe1e499bdd391533b8b6195db46b3b70b46a174de
GET /public/ HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBSOEQ3ZUE4eUczOU1yVHlRWEcyQ2c9PSIsInZhbHVlIjoiMU4vWDJoaGNnV0JQZytSR0J3TjBRYUdENVhRVTY0RnAxS2JJTFN4N0YxSGNRbEsybXdFdjh3b0hKbjhoT0pjbjRaanZDc2E4UGd3akVycjEvT016Z1NxV1hjUmhQdkNLTjRsTGhsb1FRQXNLekRIY1o0V1RNblBrbHM1VmhXelEiLCJtYWMiOiI2M2MwMjMxMmM5MDRiMjgyN2IxZTE5ZDg0Mjk2NzhkNTliOGI2MzE3OGQ5YjIxNzdmZGZkODExOGYwYzBlNTg3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InlNZHlaTHR2cDZJUjc3ZXpCQUovZGc9PSIsInZhbHVlIjoiUktONVNib29FVDA2K0V5R0N0MDJsRWFUTEhCaUl3ZWR6amxjMUhEU0h6WTVzbWZiNGlDQkdSVlNQMjcxazZiS0lTYXlNdG1Gb1ZKVTJtVVl5aGpxNmJQYTQ3Skh2SGpCbmdZYmk5SC95cUtIZnBCSXpTV3dCUFNDRXYxcjVzK0IiLCJtYWMiOiJjOTg5ZGQ2NGExOTg5NTEyNTUzZDhhYmMzMjIyMDEwOGEzZTFkMzRmZGU5ODBkMWQ5ZWRiOGUzZjkwY2M3MzA3IiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:28 GMT
Server: Apache
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6Im11UmtkNHMwcEx5ZGpKZWt3UitYT3c9PSIsInZhbHVlIjoiekZEVmtpdllDelhZc2dMem1XTCtwbmVkbzNscWs4bXZEcVFra3N6TjdGWW9hTXVoQVQ5dkg2ZlYyK2JoR0I0dGwxT0Q3ckFBdnhEQmJSUy9uMVpSaWp2UlRHQjJPSEpBT1dXM2dPd2c1MmJEZUVob2pXWHNTU0lYNHJ0TkV6MnEiLCJtYWMiOiI5MmEwYzZmNDQwNjRkMzE1ZDVlYTdkMjRiMjg4MjEzN2Y2ZDgyNWI3MmJlZWI1ZjZlZjYyNWQ1NTMyMWMzYzdlIiwidGFnIjoiIn0%3D; expires=Tue, 05-Dec-2023 12:27:28 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IkhQMk1iZkFVdGp4Y21BcVY4OW1kcnc9PSIsInZhbHVlIjoiYXlKOGVZOU5aVlR2UkRheVdvb1dhWTJ1NlU3NUlaWm90RDlrUk00UFg1SnpDK09rWmZQQTc2UlFVQlp0eG9pSnI5blh5RGV0NHRPckZPQ1plZXNpS2xUOGZwbzlIc1I3WmdkZzYwTmkvZnNzNjhXWkVtT0JCNHYwRHo3UnR1NFoiLCJtYWMiOiJmZTFjM2Y0ZTRkNjVkZTVmZjZjMDVkYmE0ZTMxN2Y1N2UxMWQ2NDVmNjYyNGNhZTc2MzU3OTM4OWMyNmU1Y2EzIiwidGFnIjoiIn0%3D; expires=Tue, 05-Dec-2023 12:27:28 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js
151.101.65.229404 Not Found 55 B URL GET HTTP/3 cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js
IP 151.101.65.229:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with no line terminators
Hash 2ccf42e1d8ce91dc28fc42053a58924f
66ec924f0d32dfb06bf0dda1133bd4b884b2d83d
51311bb7fe0896738e7bb28de627f8ad47495c61d8840e5921460123484560a5
GET /gh/killbot-org/Killbot-JS@latest/dist/main.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=600, s-maxage=600
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/plain; charset=utf-8
etag: W/"38-ZuySTw0y37Br8N2hEzvUuISy2D0"
content-encoding: br
accept-ranges: bytes
date: Tue, 05 Dec 2023 10:27:29 GMT
age: 358
x-served-by: cache-fra-etou8220062-FRA, cache-bma1666-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 55
X-Firefox-Spdy: h2
package.dittugarments.com/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss/
167.114.30.172301 Moved Permanently 281 B URL User Request GET HTTP/1.1 package.dittugarments.com/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss/
IP 167.114.30.172:443
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c0c3adf4e00c985bdd3d09a19771c4ee
b5a8e98c23fa8382279ffab11e1b1b54c6e0abda
305897e7d72575bf7caec4fb2ce799e4501a8667ba746f2d9e617dfa09b8252d
GET /cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss/ HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/
Cookie: XSRF-TOKEN=eyJpdiI6Im11UmtkNHMwcEx5ZGpKZWt3UitYT3c9PSIsInZhbHVlIjoiekZEVmtpdllDelhZc2dMem1XTCtwbmVkbzNscWs4bXZEcVFra3N6TjdGWW9hTXVoQVQ5dkg2ZlYyK2JoR0I0dGwxT0Q3ckFBdnhEQmJSUy9uMVpSaWp2UlRHQjJPSEpBT1dXM2dPd2c1MmJEZUVob2pXWHNTU0lYNHJ0TkV6MnEiLCJtYWMiOiI5MmEwYzZmNDQwNjRkMzE1ZDVlYTdkMjRiMjg4MjEzN2Y2ZDgyNWI3MmJlZWI1ZjZlZjYyNWQ1NTMyMWMzYzdlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhQMk1iZkFVdGp4Y21BcVY4OW1kcnc9PSIsInZhbHVlIjoiYXlKOGVZOU5aVlR2UkRheVdvb1dhWTJ1NlU3NUlaWm90RDlrUk00UFg1SnpDK09rWmZQQTc2UlFVQlp0eG9pSnI5blh5RGV0NHRPckZPQ1plZXNpS2xUOGZwbzlIc1I3WmdkZzYwTmkvZnNzNjhXWkVtT0JCNHYwRHo3UnR1NFoiLCJtYWMiOiJmZTFjM2Y0ZTRkNjVkZTVmZjZjMDVkYmE0ZTMxN2Y1N2UxMWQ2NDVmNjYyNGNhZTc2MzU3OTM4OWMyNmU1Y2EzIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 05 Dec 2023 10:27:29 GMT
Server: Apache
Location: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Content-Length: 281
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js
151.101.65.229404 Not Found 55 B URL GET HTTP/3 cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js
IP 151.101.65.229:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with no line terminators
Hash 2ccf42e1d8ce91dc28fc42053a58924f
66ec924f0d32dfb06bf0dda1133bd4b884b2d83d
51311bb7fe0896738e7bb28de627f8ad47495c61d8840e5921460123484560a5
GET /gh/killbot-org/Killbot-JS@latest/dist/main.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 55
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=600, s-maxage=600
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/plain; charset=utf-8
etag: W/"38-ZuySTw0y37Br8N2hEzvUuISy2D0"
content-encoding: br
accept-ranges: bytes
date: Tue, 05 Dec 2023 10:27:31 GMT
age: 360
x-served-by: cache-fra-etou8220062-FRA, cache-bma1662-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/css/all.min.css
104.17.25.14200 OK 17 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/css/all.min.css
IP 104.17.25.14:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65317)
Hash 6386fb409d4a2abc96eee7be8f6d4cc4
09102cfc60efb430a25ee97cee9a6a35df6dfc59
0df5a33710e433de1f5415b1d47e4130ca7466aee5b81955f1045c4844bbb3ed
GET /ajax/libs/font-awesome/6.1.1/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://package.dittugarments.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:27:31 GMT
content-type: text/css; charset=utf-8
content-length: 17041
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "623a082a-4291"
last-modified: Tue, 22 Mar 2022 17:32:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 61108
expires: Sun, 24 Nov 2024 10:27:31 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BEzcKMPAidrLe9AFAJJOrvQEAQqBpCq7ejKb5XO8IMjgWIBoN7MkhJpYBsf2p2uFpDkbmPAANzgBUcGMyaYnw3sH3sAXtSJzJG8F4etPZZRsOZRIEAlucdEi%2BYScaU9BLwKMwye3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 830b98db4bbfb4ff-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
167.114.30.172200 OK 22 kB URL User Request GET HTTP/1.1 package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
IP 167.114.30.172:443
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 711cb4973b4e768e478f639a1315c222
223fe8192e6e6ae5c2fafc6c9af072a7ff408667
d8e16b0b4c169fa393bf53e1a9a56e3bad578d827a893f678e2da6d378b15e7c
GET /public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://package.dittugarments.com/public/
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Im11UmtkNHMwcEx5ZGpKZWt3UitYT3c9PSIsInZhbHVlIjoiekZEVmtpdllDelhZc2dMem1XTCtwbmVkbzNscWs4bXZEcVFra3N6TjdGWW9hTXVoQVQ5dkg2ZlYyK2JoR0I0dGwxT0Q3ckFBdnhEQmJSUy9uMVpSaWp2UlRHQjJPSEpBT1dXM2dPd2c1MmJEZUVob2pXWHNTU0lYNHJ0TkV6MnEiLCJtYWMiOiI5MmEwYzZmNDQwNjRkMzE1ZDVlYTdkMjRiMjg4MjEzN2Y2ZDgyNWI3MmJlZWI1ZjZlZjYyNWQ1NTMyMWMzYzdlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhQMk1iZkFVdGp4Y21BcVY4OW1kcnc9PSIsInZhbHVlIjoiYXlKOGVZOU5aVlR2UkRheVdvb1dhWTJ1NlU3NUlaWm90RDlrUk00UFg1SnpDK09rWmZQQTc2UlFVQlp0eG9pSnI5blh5RGV0NHRPckZPQ1plZXNpS2xUOGZwbzlIc1I3WmdkZzYwTmkvZnNzNjhXWkVtT0JCNHYwRHo3UnR1NFoiLCJtYWMiOiJmZTFjM2Y0ZTRkNjVkZTVmZjZjMDVkYmE0ZTMxN2Y1N2UxMWQ2NDVmNjYyNGNhZTc2MzU3OTM4OWMyNmU1Y2EzIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:31 GMT
Server: Apache
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; expires=Tue, 05-Dec-2023 12:27:31 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D; expires=Tue, 05-Dec-2023 12:27:31 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
package.dittugarments.com/public/dinzab/newcc.css
167.114.30.172200 OK 5.2 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/newcc.css
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
Hash a8802c7108e75bd512824b11af10a5e7
0af53e81447c67be4d787fea0f6ef8c82008e4ea
6c37a32274d58b55fc113546582236826b279eb6d667ecbf86e73823713da4f9
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/newcc.css HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:31 GMT
Server: Apache
Last-Modified: Thu, 02 Jun 2022 12:41:52 GMT
Accept-Ranges: bytes
Content-Length: 5211
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
cdnjs.cloudflare.com/ajax/libs/imask/3.4.0/imask.min.js
104.17.25.14200 OK 11 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/imask/3.4.0/imask.min.js
IP 104.17.25.14:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (45552)
Hash 79c82646b886e08184f7b9fff25e64ff
804b4b0f8f3443ff05833e33fb5b76780ffafe25
8b76b3502583edddf22df0b9c6ee640053a2cdfeaa113ceff3ea9b61d1f6410d
GET /ajax/libs/imask/3.4.0/imask.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 10:27:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 10899
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e9f-b217"
last-modified: Mon, 04 May 2020 16:11:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1059718
expires: Sun, 24 Nov 2024 10:27:31 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vfd3mLyeefMNDTn0wXjL0PkS621cXv9VyrhFNnVlDoTfKOkxu6aDGUXz3SMFm1HBMTnm9jVmsxXQjfogYNNARDQAGV6ND3F9a1dJFpLW4A5I%2BakvF%2Bg4x4wKfKMAABhkeLtfo9Cy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 830b98dc5ce35685-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.1/js/all.min.js
104.17.25.14200 OK 338 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.1/js/all.min.js
IP 104.17.25.14:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65351)
Size 338 kB (338270 bytes)
Hash 61008443488f4e7f60d5a5055483187e
b56375acc5e062f79280440459d0d7b0f10a290b
1d3f596f76f53d53ef7cb1ffeffd6f791b54bd639b42e4f23e7f2d7b36f91c48
GET /ajax/libs/font-awesome/5.8.1/js/all.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://package.dittugarments.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 10:27:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 338270
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e60-1125c9"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 444620
expires: Sun, 24 Nov 2024 10:27:31 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B3%2BYuqJsg5vFlvwp7rGmKZZ5kitqXvsnGJxsW956jAViRR1jWlvVhNNmiffXwOQGmsDyAci53vX5pXVmaMY5FThr%2FPeRxzm6gTWqugcR%2B3OhH%2BdZUeC1LCaEvLuQgA3AH5XiR0nl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 830b98dc6cea5685-OSL
alt-svc: h3=":443"; ma=86400
code.jquery.com/jquery-1.12.4.min.js
151.101.2.137200 OK 34 kB URL GET HTTP/2 code.jquery.com/jquery-1.12.4.min.js
IP 151.101.2.137:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (32077)
Hash 4f252523d4af0b478c810c2547a63e19
5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
GET /jquery-1.12.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-17b8b"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 05 Dec 2023 10:27:31 GMT
age: 6971446
x-served-by: cache-lga21956-LGA, cache-bma1660-BMA
x-cache: HIT, HIT
x-cache-hits: 232, 47773
x-timer: S1701772052.966378,VS0,VE0
vary: Accept-Encoding
content-length: 33738
X-Firefox-Spdy: h2
cdn.s-pass.org/SPASSDATA/media/cache/portail_vignette_xl/SPASSDATA/attachments/2022_02/17/114223-serencontrer-messages-solid.png
104.26.11.170200 OK 5.0 kB URL GET HTTP/2 cdn.s-pass.org/SPASSDATA/media/cache/portail_vignette_xl/SPASSDATA/attachments/2022_02/17/114223-serencontrer-messages-solid.png
IP 104.26.11.170:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerCloudflare, Inc.
Subjects-pass.org
Fingerprint66:7C:47:A7:D2:1D:EF:BF:C1:BB:CD:FD:25:D2:A3:44:EF:B6:EE:C9
ValidityThu, 07 Sep 2023 00:00:00 GMT - Fri, 06 Sep 2024 23:59:59 GMT
File type PNG image data, 640 x 512, 8-bit colormap, non-interlaced\012- data
Hash faa2a37bbdf6a4d7eb92f4df1396e1bc
b63e5a7323f771d2294a58b3251bb6036ae33fce
cff8856b01d09b6e68b3d6b75172ea259363b4268be55229a963e86edc77e627
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /SPASSDATA/media/cache/portail_vignette_xl/SPASSDATA/attachments/2022_02/17/114223-serencontrer-messages-solid.png HTTP/1.1
Host: cdn.s-pass.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:27:31 GMT
content-type: image/png
content-length: 4984
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1313415
etag: "620e522e-140a87"
last-modified: Thu, 17 Feb 2022 13:48:30 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-xss-protection: 1; mode=block
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1120258
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YuCeviPHzxVpj3WJ9mlA8pSsyQSGTdjiGd5nV%2FyIGZ8660bDfeeXzv6fKQZXNtpFgiBQnimDr5FVd9jhbYAhJ1GAyQrwPif2hD39zrCoNbVxwd5L18oeoF6%2FKYmEB7ON"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830b98dcd84a5687-OSL
X-Firefox-Spdy: h2
package.dittugarments.com/public/dinzab/font-awesome.min.css
167.114.30.172200 OK 31 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/font-awesome.min.css
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/font-awesome.min.css HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:32 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 07:05:50 GMT
Accept-Ranges: bytes
Content-Length: 31000
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
package.dittugarments.com/public/dinzab/intlTelInput.css
167.114.30.172200 OK 25 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/intlTelInput.css
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
Hash bd1fe63547e380ddfdd79c4cea97cc1e
d5546e0d88b001b6ceb1a06fbf6a47e31214e9de
51198a6581f3fdd8b035268f775b1a6f519ee61b3e2a22da4a6fe2b2647b145b
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/intlTelInput.css HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:32 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 07:05:50 GMT
Accept-Ranges: bytes
Content-Length: 24631
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
package.dittugarments.com/public/dinzab/data.js
167.114.30.172200 OK 12 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/data.js
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type Unicode text, UTF-8 text, with very long lines (9881)
Hash a2b78e86240966cda00a463614e4f3dd
a2606f30f77bb9f235746059db16b0ee8b585c31
55e47db856701715f613de8674bd0c67604cc304514b791bed402866d18c8557
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/data.js HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:32 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 07:05:50 GMT
Accept-Ranges: bytes
Content-Length: 12100
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
package.dittugarments.com/public/dinzab/mine.js
167.114.30.172200 OK 1.6 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/mine.js
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
Hash f11ee1ccf373dd137b7ad18e4ee2f69e
26baf7db3e340be99ece82b37d294b80c373fd12
71b8a934f8936288d42fe9fd426ff18cbc1fe54070617fd62420025da56b662e
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/mine.js HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:32 GMT
Server: Apache
Last-Modified: Mon, 17 Oct 2022 08:48:22 GMT
Accept-Ranges: bytes
Content-Length: 1604
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
package.dittugarments.com/public/dinzab/card.js
167.114.30.172200 OK 59 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/card.js
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type Unicode text, UTF-8 text, with very long lines (51786)
Hash 30e93a747ba8285615cfbc3643dc1a62
3a55f9d6ac708f519d351ea0b69083457778ec9d
18c4b9b4c27233b541a47300a4ee98239e1f8dec4bbcd9fabb6bdad12ca82025
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/card.js HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:32 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 07:05:50 GMT
Accept-Ranges: bytes
Content-Length: 58666
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
package.dittugarments.com/public/dinzab/intlTelInput.js
167.114.30.172200 OK 89 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/intlTelInput.js
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type Unicode text, UTF-8 text, with very long lines (9885)
Hash 9146aa46d1f409004183b86f202c4607
717a6d53527fe31ec1c4eef9022b06e5d4d6f6a5
b188900aaff98a87fc69519ab04437aa735708b4b92f2adcab6937d2a1d42e37
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/intlTelInput.js HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:32 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 07:05:50 GMT
Accept-Ranges: bytes
Content-Length: 89336
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
package.dittugarments.com/public/dinzab/countrySelect.js
167.114.30.172200 OK 37 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/countrySelect.js
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type Unicode text, UTF-8 text, with very long lines (347)
Hash ee3d5d4880b5dac09d9ca3c23cdd28da
f95728f89723a079442d67ed6aa38abf8ecab4fd
657baddf2724ae4570fa40c00dddefa3379b5709ac06ceb536f6177a1bfc394f
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/countrySelect.js HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:32 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 07:05:50 GMT
Accept-Ranges: bytes
Content-Length: 36634
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
package.dittugarments.com/public/dinzab/app.js
167.114.30.172200 OK 920 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/app.js
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type Unicode text, UTF-8 text, with very long lines (7706), with CRLF line terminators
Size 920 kB (920095 bytes)
Hash 508afd6ff9ab52ce8f480d35568038d1
b5d9891100e0dce59cee59b75a098a1ae64c779b
8af18273c1833477cf810c4e3a76f483b6a6064571d25ea7742d8708378c8f09
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/app.js HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:31 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 07:05:50 GMT
Accept-Ranges: bytes
Content-Length: 920095
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
package.dittugarments.com/public/dinzab/app.css
167.114.30.172200 OK 914 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/app.css
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type assembler source, ASCII text
Size 914 kB (913520 bytes)
Hash 74d0401d2b753a90be1d872aaa6e94b4
386f08a79bdc853e8a81585efcfc35ca90a49687
0762226aa4722b7c5349c825388089b0e3f8cdde6dd5dbb5f002d4fb014f568f
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/app.css HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:32 GMT
Server: Apache
Last-Modified: Thu, 02 Jun 2022 17:04:20 GMT
Accept-Ranges: bytes
Content-Length: 913520
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js
151.101.65.229404 Not Found 55 B URL GET HTTP/3 cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js
IP 151.101.65.229:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with no line terminators
Hash 2ccf42e1d8ce91dc28fc42053a58924f
66ec924f0d32dfb06bf0dda1133bd4b884b2d83d
51311bb7fe0896738e7bb28de627f8ad47495c61d8840e5921460123484560a5
GET /gh/killbot-org/Killbot-JS@latest/dist/main.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
content-length: 55
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=600, s-maxage=600
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/plain; charset=utf-8
etag: W/"38-ZuySTw0y37Br8N2hEzvUuISy2D0"
content-encoding: br
accept-ranges: bytes
date: Tue, 05 Dec 2023 10:27:32 GMT
age: 361
x-served-by: cache-fra-etou8220062-FRA, cache-bma1662-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
package.dittugarments.com/public/dinzab/logo.png
167.114.30.172200 OK 2.0 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/logo.png
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type PNG image data, 214 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d14ab93691604e826e1319d53599eb9
78724360e9d25da584445b851e37bca05abe6b85
3f0c62b5ccdcdbf3b3ae3885f1e6959e2d937eba9b29dea9a6bdb98788041756
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/logo.png HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:32 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 07:05:50 GMT
Accept-Ranges: bytes
Content-Length: 1998
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
code.jquery.com/jquery-1.12.4.min.js
151.101.2.137200 OK 34 kB URL GET HTTP/2 code.jquery.com/jquery-1.12.4.min.js
IP 151.101.2.137:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (32077)
Hash 4f252523d4af0b478c810c2547a63e19
5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
GET /jquery-1.12.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-17b8b"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 05 Dec 2023 10:27:32 GMT
age: 6971447
x-served-by: cache-lga21956-LGA, cache-bma1660-BMA
x-cache: HIT, HIT
x-cache-hits: 232, 47774
x-timer: S1701772053.953207,VS0,VE0
vary: Accept-Encoding
content-length: 33738
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/imask/3.4.0/imask.min.js
104.17.25.14200 OK 11 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/imask/3.4.0/imask.min.js
IP 104.17.25.14:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (45552)
Hash 79c82646b886e08184f7b9fff25e64ff
804b4b0f8f3443ff05833e33fb5b76780ffafe25
8b76b3502583edddf22df0b9c6ee640053a2cdfeaa113ceff3ea9b61d1f6410d
GET /ajax/libs/imask/3.4.0/imask.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 10:27:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 10899
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e9f-b217"
last-modified: Mon, 04 May 2020 16:11:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1059720
expires: Sun, 24 Nov 2024 10:27:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DhtTiwpp0OnDQFNYja8B8kVIuslj01kikjfzeww4UMHgcsBV%2BxPtp7H%2Bbuvin0GzfjcMKHLr2AMmMYRYFaAFM6yIzgAqDersWsPPHBP87BDrsLqy8HuLQPdlfqOZ8o%2F43SQkJh5K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 830b98e34c845685-OSL
alt-svc: h3=":443"; ma=86400
package.dittugarments.com/public/dinzab/app.js
167.114.30.172200 OK 920 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/app.js
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type Unicode text, UTF-8 text, with very long lines (7706), with CRLF line terminators
Size 920 kB (920095 bytes)
Hash 508afd6ff9ab52ce8f480d35568038d1
b5d9891100e0dce59cee59b75a098a1ae64c779b
8af18273c1833477cf810c4e3a76f483b6a6064571d25ea7742d8708378c8f09
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/app.js HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:33 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 07:05:50 GMT
Accept-Ranges: bytes
Content-Length: 920095
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
package.dittugarments.com/public/dinzab/data.js
167.114.30.172200 OK 12 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/data.js
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type Unicode text, UTF-8 text, with very long lines (9881)
Hash a2b78e86240966cda00a463614e4f3dd
a2606f30f77bb9f235746059db16b0ee8b585c31
55e47db856701715f613de8674bd0c67604cc304514b791bed402866d18c8557
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/data.js HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:33 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 07:05:50 GMT
Accept-Ranges: bytes
Content-Length: 12100
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
package.dittugarments.com/public/dinzab/card.js
167.114.30.172200 OK 59 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/card.js
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type Unicode text, UTF-8 text, with very long lines (51786)
Hash 30e93a747ba8285615cfbc3643dc1a62
3a55f9d6ac708f519d351ea0b69083457778ec9d
18c4b9b4c27233b541a47300a4ee98239e1f8dec4bbcd9fabb6bdad12ca82025
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/card.js HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:33 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 07:05:50 GMT
Accept-Ranges: bytes
Content-Length: 58666
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
package.dittugarments.com/public/dinzab/mine.js
167.114.30.172200 OK 1.6 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/mine.js
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
Hash f11ee1ccf373dd137b7ad18e4ee2f69e
26baf7db3e340be99ece82b37d294b80c373fd12
71b8a934f8936288d42fe9fd426ff18cbc1fe54070617fd62420025da56b662e
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/mine.js HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:33 GMT
Server: Apache
Last-Modified: Mon, 17 Oct 2022 08:48:22 GMT
Accept-Ranges: bytes
Content-Length: 1604
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.1/js/all.min.js
104.17.25.14200 OK 338 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.1/js/all.min.js
IP 104.17.25.14:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65351)
Size 338 kB (338270 bytes)
Hash 61008443488f4e7f60d5a5055483187e
b56375acc5e062f79280440459d0d7b0f10a290b
1d3f596f76f53d53ef7cb1ffeffd6f791b54bd639b42e4f23e7f2d7b36f91c48
GET /ajax/libs/font-awesome/5.8.1/js/all.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://package.dittugarments.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 10:27:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 338270
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e60-1125c9"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 444622
expires: Sun, 24 Nov 2024 10:27:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2x%2FD1oueA2aGO4EcS0uD181LTiIgUyM5tlK%2BabQDHN0Ihqezllnug3a%2BG8jT8Vly2%2FYu29MZT7JZEuCDyz%2BzOi1pTfglLQdw8sGYsL%2FXeA0LYcdZpewht7fgGwbh6FXEDNaIUqHJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 830b98e8ba4d5685-OSL
alt-svc: h3=":443"; ma=86400
package.dittugarments.com/public/dinzab/intlTelInput.js
167.114.30.172200 OK 89 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/intlTelInput.js
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type Unicode text, UTF-8 text, with very long lines (9885)
Hash 9146aa46d1f409004183b86f202c4607
717a6d53527fe31ec1c4eef9022b06e5d4d6f6a5
b188900aaff98a87fc69519ab04437aa735708b4b92f2adcab6937d2a1d42e37
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/intlTelInput.js HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:34 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 07:05:50 GMT
Accept-Ranges: bytes
Content-Length: 89336
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
package.dittugarments.com/public/dinzab/countrySelect.js
167.114.30.172200 OK 37 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/countrySelect.js
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type Unicode text, UTF-8 text, with very long lines (347)
Hash ee3d5d4880b5dac09d9ca3c23cdd28da
f95728f89723a079442d67ed6aa38abf8ecab4fd
657baddf2724ae4570fa40c00dddefa3379b5709ac06ceb536f6177a1bfc394f
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/countrySelect.js HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:34 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 07:05:50 GMT
Accept-Ranges: bytes
Content-Length: 36634
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/javascript
package.dittugarments.com/public/dinzab/flagscountry.png
167.114.30.172200 OK 66 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/flagscountry.png
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type PNG image data, 5630 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash ae33acae404631e997ef8d91dae08ccd
19fae9a6aa4bb419eba378b0d0573906dc1be38a
38025784bedeb5e4cae496b131c85cabbd95ae0b1c0a3c9d9cb474d7262db04b
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/flagscountry.png HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:34 GMT
Server: Apache
Last-Modified: Wed, 22 Sep 2021 16:06:48 GMT
Accept-Ranges: bytes
Content-Length: 65960
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: image/png
package.dittugarments.com/public/dinzab/favicon.gif
167.114.30.172200 OK 2.2 kB URL GET HTTP/1.1 package.dittugarments.com/public/dinzab/favicon.gif
IP 167.114.30.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectwww.parcel.dittugarments.com
Fingerprint47:76:07:51:B1:1D:92:BF:78:40:6A:2E:8E:28:9C:87:F7:89:13:56
ValidityMon, 20 Nov 2023 20:23:20 GMT - Sun, 18 Feb 2024 20:23:19 GMT
File type MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel\012- data
Hash a6f1af8e79a11829ba9a66474b06bb97
d99e3ec7747c865033a8dfad43c9f49634404bc1
b0dbd00f3650fa6b931e678a9d8f79a405d23c7adf111ab91b1a01a0e7109807
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /public/dinzab/favicon.gif HTTP/1.1
Host: package.dittugarments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Cookie: XSRF-TOKEN=eyJpdiI6IkRYVHZ2U3FPdHBORENZYTN5Sk8zbnc9PSIsInZhbHVlIjoieVY0TGNhVUs4UVc1a0M2RzVnTXFWRDc0T2hDT0lNS09hUGRPcWg4aUZKMHB2NllTYWtCenZ5bE5LUjV5YzIzcXNGcVRLR2RMeThDUHh1Z1FKSWxOeVF4cXRDMkN1Z1BPYzZEVWNHcVdxZHMrZEpKajlOb0VJL3BPSkpSRDNLdEIiLCJtYWMiOiI4YzU5ZmFlNjc4NmQ0YWY4OWNkNDIyMTkzZDRjOTNiYTI2NmIyM2MyNzUxMjMxMWJlNmZjNGQ5ODIyMzg2NWYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE2Z09ZbllpU29QVWcwNXFhU1hPSnc9PSIsInZhbHVlIjoicWRUbW53c2VodUtlemVLb0ZGeEQrYnhwQ2w5VEtYaFUvcTByWFpsSEpLSVVtVldjR3crS1dXelFTUC9tZnVpRDJiUWZLYUtwamhDaHJTMHVtTXA5SmpaYXJBS3RFTlcwUm9kR2Q0MmcxNHh1dVh6QWFFdG52VmdQNENzRCtucEciLCJtYWMiOiJmZjMyZTdhNDcyYmRiMWY0OGU1ZWI1NDgzNGI0Zjk3ZmJmN2ZjNTdiNzMzNTZiYmMwOTk1ZjVmYjdjOTg4ZTZlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:27:34 GMT
Server: Apache
Last-Modified: Tue, 31 May 2022 07:05:50 GMT
Accept-Ranges: bytes
Content-Length: 2238
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: image/gif
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
54.146.26.172 0 B URL ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
IP 54.146.26.172:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false HTTP/1.1
Host: ws-mt1.pusher.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://package.dittugarments.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lPjqdDF2E5DO/76Al2eFcQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 05 Dec 2023 10:27:35 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ebhekC/9TZ+yzFW31V3nUyG5b5A=
Sec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover; server_no_context_takeover
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
54.158.182.23 0 B URL ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
IP 54.158.182.23:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false HTTP/1.1
Host: ws-mt1.pusher.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://package.dittugarments.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 97jtwENmSIanrE9zB8zz6A==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 05 Dec 2023 10:27:35 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: GRzGQyn4fIXzQFuW5xSun0M+bUY=
Sec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover; server_no_context_takeover
sockjs-mt1.pusher.com/pusher/app/bc5ba70500b3342fb1aa/905/3lsommg7/xhr_streaming?protocol=7&client=js&version=7.0.3&t=1701772062296&n=1
34.201.239.212204 No Content 0 B URL OPTIONS HTTP/2 sockjs-mt1.pusher.com/pusher/app/bc5ba70500b3342fb1aa/905/3lsommg7/xhr_streaming?protocol=7&client=js&version=7.0.3&t=1701772062296&n=1
IP 34.201.239.212:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectsockjs-mt1.pusher.com
Fingerprint0D:D2:31:02:FF:57:E9:AF:23:47:25:1D:B7:1C:66:F3:1A:4E:DA:5C
ValiditySun, 12 Nov 2023 01:30:52 GMT - Sat, 10 Feb 2024 01:30:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pusher/app/bc5ba70500b3342fb1aa/905/3lsommg7/xhr_streaming?protocol=7&client=js&version=7.0.3&t=1701772062296&n=1 HTTP/1.1
Host: sockjs-mt1.pusher.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://package.dittugarments.com/
Origin: https://package.dittugarments.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-origin: https://package.dittugarments.com
vary: Origin
access-control-allow-headers: content-type
access-control-allow-credentials: true
cache-control: public, max-age=31536000
expires: Wed, 04 Dec 2024 10:27:36 GMT
access-control-allow-methods: OPTIONS, POST
access-control-max-age: 31536000
date: Tue, 05 Dec 2023 10:27:36 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
sockjs-mt1.pusher.com/pusher/app/bc5ba70500b3342fb1aa/505/2hq0mj7a/xhr_streaming?protocol=7&client=js&version=7.0.3&t=1701772062307&n=1
34.201.239.212204 No Content 0 B URL OPTIONS HTTP/2 sockjs-mt1.pusher.com/pusher/app/bc5ba70500b3342fb1aa/505/2hq0mj7a/xhr_streaming?protocol=7&client=js&version=7.0.3&t=1701772062307&n=1
IP 34.201.239.212:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectsockjs-mt1.pusher.com
Fingerprint0D:D2:31:02:FF:57:E9:AF:23:47:25:1D:B7:1C:66:F3:1A:4E:DA:5C
ValiditySun, 12 Nov 2023 01:30:52 GMT - Sat, 10 Feb 2024 01:30:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pusher/app/bc5ba70500b3342fb1aa/505/2hq0mj7a/xhr_streaming?protocol=7&client=js&version=7.0.3&t=1701772062307&n=1 HTTP/1.1
Host: sockjs-mt1.pusher.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://package.dittugarments.com/
Origin: https://package.dittugarments.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-origin: https://package.dittugarments.com
vary: Origin
access-control-allow-headers: content-type
access-control-allow-credentials: true
cache-control: public, max-age=31536000
expires: Wed, 04 Dec 2024 10:27:36 GMT
access-control-allow-methods: OPTIONS, POST
access-control-max-age: 31536000
date: Tue, 05 Dec 2023 10:27:36 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
cdn.lr-in.com/logger-1.min.js
104.21.234.145200 OK 846 kB URL GET HTTP/2 cdn.lr-in.com/logger-1.min.js
IP 104.21.234.145:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerLet's Encrypt
Subjectlr-in.com
Fingerprint06:C7:A4:83:83:3B:72:D9:6B:66:09:15:2F:3A:52:FD:1F:E4:05:24
ValiditySun, 12 Nov 2023 13:20:34 GMT - Sat, 10 Feb 2024 13:20:33 GMT
Size 846 kB (846393 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /logger-1.min.js HTTP/1.1
Host: cdn.lr-in.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:27:31 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
cross-origin-resource-policy: cross-origin
etag: W/"005d938d68d6486d3a3995d83dafb80b6f92d96ce6ccec75169b0f59a5359bdb"
last-modified: Mon, 04 Dec 2023 21:49:30 GMT
strict-transport-security: max-age=31556926
x-served-by: cache-bma1663-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1701726605.418089,VS0,VE157
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 24
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oa8vYfcPGeKp9C68ANM8eHWbAWShjKCCoNbnFsGoYVGlJ3SjnHAxRU6F8rmbUD3SMnjmt0oPSppgAaNGl2TlrmEXDQL7qhXMFHUKpC0RvfHXVZvhONfyNAx5FPrtX5Iu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830b98dbbcc7569b-OSL
content-encoding: br
X-Firefox-Spdy: h2
dispatching-centre.lasamericascargo.com/images/foo.png
0.0.0.0 0 B URL GET dispatching-centre.lasamericascargo.com/images/foo.png
IP 0.0.0.0:0
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/foo.png HTTP/1.1
Host: dispatching-centre.lasamericascargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
fonts.googleapis.com/css?family=Raleway|Rock+Salt|Source+Code+Pro:300,400,600
142.250.74.42200 OK 9.0 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Raleway|Rock+Salt|Source+Code+Pro:300,400,600
IP 142.250.74.42:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (9264), with no line terminators
Hash 3a28ee17cf6392c31edb349ab60d2a22
615c29fd9e9d5b5363092aa2fa2894183114d32d
3a3e7ac57b9005210c74a4643889c4fa39d4a384599f9dd7fc16053db74a2070
GET /css?family=Raleway|Rock+Salt|Source+Code+Pro:300,400,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://package.dittugarments.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 05 Dec 2023 10:27:31 GMT
date: Tue, 05 Dec 2023 10:27:31 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
54.146.26.172101 Switching Protocols 0 B URL GET HTTP/1.1 ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
IP 54.146.26.172:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerAmazon
Subjectpusher.com
Fingerprint7F:21:03:8F:D0:81:ED:06:33:D6:8D:83:17:DA:79:19:72:2E:BF:39
ValiditySun, 25 Jun 2023 00:00:00 GMT - Wed, 24 Jul 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false HTTP/1.1
Host: ws-mt1.pusher.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://package.dittugarments.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lPjqdDF2E5DO/76Al2eFcQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 05 Dec 2023 10:27:35 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ebhekC/9TZ+yzFW31V3nUyG5b5A=
Sec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover; server_no_context_takeover
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
54.158.182.23101 Switching Protocols 0 B URL GET HTTP/1.1 ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
IP 54.158.182.23:443
Requested by https://package.dittugarments.com/public/cZ7JZu2DUYMwjlbwZblnLlMz9fXTbWss
Certificate IssuerAmazon
Subjectpusher.com
Fingerprint7F:21:03:8F:D0:81:ED:06:33:D6:8D:83:17:DA:79:19:72:2E:BF:39
ValiditySun, 25 Jun 2023 00:00:00 GMT - Wed, 24 Jul 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false HTTP/1.1
Host: ws-mt1.pusher.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://package.dittugarments.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 97jtwENmSIanrE9zB8zz6A==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 05 Dec 2023 10:27:35 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: GRzGQyn4fIXzQFuW5xSun0M+bUY=
Sec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover; server_no_context_takeover