Report - waterdamage-sanantonio.net/rhdai/mv/auth/erik.infelise/ZXJpay5pbmZlbGlzZUBvaWcuaGhzLmdvdg==

Report Overview

Visited public
2024-03-05 19:18:42
Tags
phishing
URL
waterdamage-sanantonio.net/rhdai/mv/auth/erik.infelise/ZXJpay5pbmZlbGlzZUBvaWcuaGhzLmdvdg==
Finishing URL
aztechosted.com/dude/Newautograb/home/#erik.infelise@oig.hhs.gov
IP / ASN
192.185.99.223
#19871 NETWORK-SOLUTIONS-HOSTING
Title
oig - Mail
Phishing - Generic phishing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2024-03-05 09:07:40	442 B	1.9 kB	142.250.74.74
ka-f.fontawesome.com	3598	2012-10-18	2019-12-17 07:36:13	2024-03-05 05:10:40	2.5 kB	295 kB	172.64.129.7
ocsp.entrust.net	1208	1997-07-28	2014-01-10 03:18:45	2024-03-05 06:52:36	328 B	2.0 kB	184.24.45.171
www.oig.hhs.gov	unknown	unknown	2013-08-03 10:12:58	2023-07-05 18:25:09	503 B	12 kB	158.70.28.12
logo.clearbit.com	27344	2003-07-04	2015-06-30 18:39:45	2024-03-05 09:01:42	438 B	21 kB	143.204.55.61
kit.fontawesome.com	1868	2012-10-18	2019-12-16 20:51:31	2024-03-05 05:10:40	439 B	12 kB	172.64.147.188
waterdamage-sanantonio.net	unknown	2013-03-09	2019-06-12 00:13:03	2024-03-04 16:35:28	545 B	236 B	192.185.99.223
aztechosted.com	unknown	2007-07-06	2019-04-08 18:35:03	2024-03-04 16:35:22	1.4 kB	70 kB	192.254.164.19

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	aztechosted.com/dude/Newautograb/home/#erik.infelise@oig.hhs.gov	ScriptElement	33 kB	2024-03-05	2024-08-20
Pretty URL aztechosted.com/dude/Newautograb/home/#erik.infelise@oig.hhs.gov IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-05 11:01 Last Seen2024-08-20 08:20 Times Seen38 Hash 32a24a8b5e74f9079330f2c0b1ce9af3 f11c9487f50fd59a89a13e4ebd8f50631057fdd3 c81e306073da87fe2439acef8bf3df9bba0a5c2fe49ba4547bebf561388137f5 Loading...

	unknown	ScriptElement	5.2 kB	2024-03-05	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-05 11:01 Last Seen2024-08-20 08:20 Times Seen38 Hash 6391a93ad098c1aa08eafc85f7a5569d 033dfd0052695073e634654400afd3c92070249f f5173246b67827a46a091ff2e4a60a21e99b20685daee0d4172cd60283ede528 Loading...

	kit.fontawesome.com/f6136e9b49.js	ScriptElement	12 kB	2024-03-05	2024-08-20
Pretty URL kit.fontawesome.com/f6136e9b49.js IP 172.64.147.188 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-05 11:01 Last Seen2024-08-20 08:20 Times Seen36 Hash d91fccceeea1ac3d5b1b89dfe626343f f1d8fac2e4e4377989d85630ecae9263401a0b58 2dfc7431f26d322decab9a1746838e2cacc293b4de8b8b930636041dbbbfed13 Loading...

		Size	First Seen	Last Seen
	#1 Write - 82666969124c2c293e1b37f17057b290	11 kB	2024-03-05 11:01	2024-08-20 08:20
Pretty Observations First Seen2024-03-05 11:01 Last Seen2024-08-20 08:20 Times Seen40 Hash 82666969124c2c293e1b37f17057b290 01eddac39afcdfa3ae6984725019af7656082280 8250c8bb643c1da5eb9687781765326ac5522ad844abfc65f8567f3752ba60ed Loading...

HTTP Transactions (14)

	URL	IP	Response	Size
	waterdamage-sanantonio.net/rhdai/mv/auth/erik.infelise/ZXJpay5pbmZlbGlzZUBvaWcuaGhzLmdvdg==	192.185.99.223		0 B
URL waterdamage-sanantonio.net/rhdai/mv/auth/erik.infelise/ZXJpay5pbmZlbGlzZUBvaWcuaGhzLmdvdg== IP 192.185.99.223:0 ASN #19871 NETWORK-SOLUTIONS-HOSTING File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /rhdai/mv/auth/erik.infelise/ZXJpay5pbmZlbGlzZUBvaWcuaGhzLmdvdg== HTTP/1.1 Host: waterdamage-sanantonio.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK refresh: 0;url=https://aztechosted.com/dude/Newautograb/home/#erik.infelise@oig.hhs.gov content-length: 0 content-type: text/html; charset=UTF-8 date: Tue, 05 Mar 2024 19:18:17 GMT server: Apache X-Firefox-Spdy: h2`

	aztechosted.com/dude/Newautograb/home/	192.254.164.19		33 kB
URL aztechosted.com/dude/Newautograb/home/ IP 192.254.164.19:0 ASN #46606 UNIFIEDLAYER-AS-1 File type HTML document, ASCII text, with very long lines (32566) Size 33 kB (32639 bytes) Hash bf6e14e7a0717fa58575766c0668bad6 d63b82ecab161eb6fed21b2999889c0904ccd0bd 2656c381aa48b62112172ac190882468cb23be6ec5a51724c9e62efc0c9b4666 HTTP Headers `GET /dude/Newautograb/home/ HTTP/1.1 Host: aztechosted.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 05 Mar 2024 19:18:17 GMT Server: Apache Last-Modified: Sun, 03 Mar 2024 21:32:10 GMT Accept-Ranges: bytes Content-Length: 32639 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html`

	aztechosted.com/dude/Newautograb/home/css/style.css	192.254.164.19	200 OK	3.5 kB
URL GET HTTP/1.1 aztechosted.com/dude/Newautograb/home/css/style.css IP 192.254.164.19:443 ASN #46606 UNIFIEDLAYER-AS-1 Requested by https://aztechosted.com/dude/Newautograb/home/#erik.infelise@oig.hhs.gov Certificate IssuercPanel, Inc. Subjectaztechosted.com Fingerprint14:19:59:F1:2A:30:97:02:5E:68:A4:67:79:96:BB:69:43:24:8D:6B ValidityMon, 04 Mar 2024 00:00:00 GMT - Sun, 02 Jun 2024 23:59:59 GMT File type ASCII text, with CRLF line terminators Size 3.5 kB (3521 bytes) Hash 275f16ffd56901f0991b29fc426a7526 7d0e49d3bd8e0bb5b5efa0f909b003b658dc7ee1 41e555737268933cfc9d1d1944b01da06010ad5884b195a03dc347316d20c02c HTTP Headers `GET /dude/Newautograb/home/css/style.css HTTP/1.1 Host: aztechosted.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://aztechosted.com/dude/Newautograb/home/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 05 Mar 2024 19:18:18 GMT Server: Apache Last-Modified: Thu, 29 Feb 2024 21:00:24 GMT Accept-Ranges: bytes Content-Length: 3521 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/css`

	fonts.googleapis.com/css?family=Roboto:100,400,500,700	142.250.74.74	200 OK	1.2 kB
URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:100,400,500,700 IP 142.250.74.74:443 ASN #15169 GOOGLE Requested by https://aztechosted.com/dude/Newautograb/home/#erik.infelise@oig.hhs.gov Certificate IssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint48:72:AA:F2:E2:69:76:76:93:18:78:2B:17:6E:20:5F:DF:87:66:5C ValidityMon, 05 Feb 2024 08:19:19 GMT - Mon, 29 Apr 2024 08:19:18 GMT File type gzip compressed data, max compression Size 1.2 kB (1243 bytes) Hash d95a963e2ce885edb90351a56e363217 dc2f7de8ada9040482805e8b576bb076760c72bf 9941712d63332fd956d607d408f142570d6c4497991351a7dd9240c5958ac247 HTTP Headers `GET /css?family=Roboto:100,400,500,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://aztechosted.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Tue, 05 Mar 2024 19:18:19 GMT date: Tue, 05 Mar 2024 19:18:19 GMT cache-control: private, max-age=86400 cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ka-f.fontawesome.com/releases/v6.5.1/webfonts/free-fa-solid-900.woff2	172.64.129.7	200 OK	156 kB
URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.5.1/webfonts/free-fa-solid-900.woff2 IP 172.64.129.7:443 ASN #13335 CLOUDFLARENET Requested by https://aztechosted.com/dude/Newautograb/home/#erik.infelise@oig.hhs.gov Certificate IssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT File type Web Open Font Format (Version 2), TrueType, length 156504, version 773.768 Size 156 kB (156504 bytes) Hash 98ff5c340b38803d09d3f22fd9a00501 a1de0c408906036eb73f7060ce0bf79d98c90eae a93f7f459e0dabc5d86e6b6e3936c07d2dd02b52369f26bb7e8c0005a5d26368 HTTP Headers GET /releases/v6.5.1/webfonts/free-fa-solid-900.woff2 HTTP/1.1 Host: ka-f.fontawesome.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://aztechosted.com DNT: 1 Connection: keep-alive Referer: https://aztechosted.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK date: Tue, 05 Mar 2024 19:18:19 GMT content-type: font/woff2 content-length: 156504 access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 last-modified: Thu, 30 Nov 2023 17:53:29 GMT etag: "98ff5c340b38803d09d3f22fd9a00501" x-amz-server-side-encryption: AES256 cache-control: max-age=31556926 access-control-allow-headers: fa-kit-token x-cache: Hit from cloudfront via: 1.1 bfeef430c7cb0e2bec29d1eb96011e6a.cloudfront.net (CloudFront) x-amz-cf-pop: LHR5-P6 x-amz-cf-id: B7ogRJ2VLGY20Wr4MA5KLDDLq31tcZ435gHviLTcCx8FGHk_ZsCDpw== age: 20311 cf-cache-status: HIT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=swPUFGkj2M0zuOc6JQdnpfpryIi7btJ7xSQF4ZFkYLacvX%2F9b1e9ubNUWixmC8OyVYfu%2BlC5zss0Q86uP1%2BH%2Ff%2Bl0NswkD8aCqG%2BjwzI1hg1U9WqdcSlBcxKdMJmD3zijx5owx6%2BNw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 85fc73861a1b7775-LHR alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	ocsp.entrust.net/	184.24.45.171		1.6 kB
URL ocsp.entrust.net/ IP 184.24.45.171:0 ASN #16625 AKAMAI-AS File type data Size 1.6 kB (1588 bytes) Hash 2f4c93e8878d5eb4bd939783f60a6de5 8eb5b74633567d2e4876b45312638db2740b3939 620b06a74f5f0c38d9a374095d0664e947f2e155df809811bc4dfc12bd52e789 HTTP Headers `POST / HTTP/1.1 Host: ocsp.entrust.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response ETag: "620B06A74F5F0C38D9A374095D0664E947F2E155DF809811BC4DFC12BD52E789" Last-Modified: Tue, 05 Mar 2024 16:00:00 UTC Content-Length: 1588 Cache-Control: public, no-transform, must-revalidate, max-age=3600 Expires: Tue, 05 Mar 2024 20:18:20 GMT Date: Tue, 05 Mar 2024 19:18:20 GMT Connection: keep-alive`

	www.oig.hhs.gov/	158.70.28.12	200 OK	11 kB
URL GET HTTP/1.1 www.oig.hhs.gov/ IP 158.70.28.12:443 ASN #7046 RFC2270-UUNET-CUSTOMER Requested by https://aztechosted.com/dude/Newautograb/home/#erik.infelise@oig.hhs.gov Certificate IssuerEntrust, Inc. Subjectoig.hhs.gov Fingerprint51:DE:49:A1:B2:FF:DD:69:C8:DF:8D:8F:84:45:A0:7C:07:EF:1C:AC ValidityWed, 05 Jul 2023 16:24:37 GMT - Fri, 26 Jul 2024 16:24:36 GMT File type HTML document, ASCII text, with very long lines (345), with CRLF line terminators Size 11 kB (11111 bytes) Hash 39a11f9049d928d6cd3f19ab58a771ca ecb476d16f4e77f42c76ac4bd2f4721a0055d357 38549ffb99bb454a6abf9d137abaa352ac69d78893d5fe08fefcc608a8066c47 HTTP Headers `GET / HTTP/1.1 Host: www.oig.hhs.gov User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://aztechosted.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Tue, 05 Mar 2024 19:18:20 GMT Content-Type: text/html Content-Length: 11111 Connection: keep-alive Cache-Control: private Content-Encoding: gzip Vary: Accept-Encoding Server: Microsoft-IIS/10.0 Set-Cookie: ASPSESSIONIDCASDSQAC=FFKHHAJDFPHHKLEMPOEJLNFI; path=/ X-Powered-By: ASP.NET X-XSS-Protection: 1; mode=block Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains

	logo.clearbit.com/oig.hhs.gov	143.204.55.61	200 OK	20 kB
URL GET HTTP/2 logo.clearbit.com/oig.hhs.gov IP 143.204.55.61:443 ASN #16509 AMAZON-02 Requested by https://aztechosted.com/dude/Newautograb/home/#erik.infelise@oig.hhs.gov Certificate IssuerAmazon Subjectclearbit.com FingerprintCE:16:94:BB:21:1F:D1:5C:C5:B1:B0:D0:51:6C:C5:26:30:0D:59:72 ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT File type PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced Size 20 kB (20151 bytes) Hash 205e10fe135523dd2a2a9e75774d0087 075505d552522f593230415dd22a8ca064a92ade 44916c9c06c7bb667f0ec7bbec269ec324252199bd774f59188cf29d86789c19 HTTP Headers `GET /oig.hhs.gov HTTP/1.1 Host: logo.clearbit.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://aztechosted.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: image/png access-control-allow-origin: * cache-control: public, max-age=2592000 date: Tue, 05 Mar 2024 19:16:45 GMT x-envoy-response-flags: - server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff x-cache: Hit from cloudfront via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-C1 x-amz-cf-id: 33BoLk8C3eQoa8ZYkeHf5L4wgynn0hKZQDLR2W25ckAsCufRQgalYQ== age: 93 X-Firefox-Spdy: h2

	ka-f.fontawesome.com/releases/v6.5.1/css/free-v4-font-face.min.css?token=f6136e9b49	172.64.129.7	200 OK	1.8 kB
URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.5.1/css/free-v4-font-face.min.css?token=f6136e9b49 IP 172.64.129.7:443 ASN #13335 CLOUDFLARENET Requested by https://aztechosted.com/dude/Newautograb/home/#erik.infelise@oig.hhs.gov Certificate IssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT File type ASCII text, with very long lines (1803), with no line terminators Size 1.8 kB (1775 bytes) Hash b0e7ed6622101ceea9a31043809aabaf 22fefad8852cf1d903fc7d99970d572ddc6b613c 5f9c11fbca88fe6e6e8ce0de6c76eaca7b8c258572153af5ff88c831316347d0 HTTP Headers `GET /releases/v6.5.1/css/free-v4-font-face.min.css?token=f6136e9b49 HTTP/1.1 Host: ka-f.fontawesome.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://aztechosted.com/ Origin: https://aztechosted.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 05 Mar 2024 19:18:19 GMT content-type: text/css access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 last-modified: Thu, 30 Nov 2023 17:25:51 GMT etag: W/"cc84affe95dbdd9726525f57d20b4ea6" x-amz-server-side-encryption: AES256 cache-control: max-age=31556926 access-control-allow-headers: fa-kit-token vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 6c2060b8177554cc176ab1e04cbbfe1e.cloudfront.net (CloudFront) x-amz-cf-pop: LHR5-P6 x-amz-cf-id: z5Fw6RDlOiocyYLr_WJ8szjqlmo4R2t1iWvwYvnvGYeWlrKYqS3jGA== age: 20312 cf-cache-status: HIT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ODx39Bgow0PnZZOISTi%2BbeGlZ3Y6LHIL1vPASrECwKr7BsxZt1%2FoDmVwGENfS6SAJTNb2SjYxb4gz9%2B%2BnS80hVXfpmOK%2FD9gOvRZsd55FJk%2FtA4Aiumvjf6fXyvzy8A5sWP7GXN9uA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 85fc7384bfaf7775-LHR content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	ka-f.fontawesome.com/releases/v6.5.1/css/free.min.css?token=f6136e9b49	172.64.129.7	200 OK	103 kB
URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.5.1/css/free.min.css?token=f6136e9b49 IP 172.64.129.7:443 ASN #13335 CLOUDFLARENET Requested by https://aztechosted.com/dude/Newautograb/home/#erik.infelise@oig.hhs.gov Certificate IssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT File type ASCII text, with very long lines (65321) Size 103 kB (103173 bytes) Hash edc53d8d44037708e54122b9e30bb2a1 7210b158d88b1e463ba0b08d26835a9fd4e6c57e b2bfe99e2e78f71c88eb00c49e1392a15531fb6486d0d0c2ea71937dda34deab HTTP Headers `GET /releases/v6.5.1/css/free.min.css?token=f6136e9b49 HTTP/1.1 Host: ka-f.fontawesome.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://aztechosted.com/ Origin: https://aztechosted.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 05 Mar 2024 19:18:19 GMT content-type: text/css access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 last-modified: Thu, 30 Nov 2023 17:25:52 GMT etag: W/"edc53d8d44037708e54122b9e30bb2a1" x-amz-server-side-encryption: AES256 cache-control: max-age=31556926 access-control-allow-headers: fa-kit-token vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 ed7b9b4fb9d1b3bd8eb47afc37a6c75c.cloudfront.net (CloudFront) x-amz-cf-pop: LHR5-P6 x-amz-cf-id: jHL0po6nXjRoPrnmKFQMIA1CNBU8riz_M1KXnHSi6Qeboovsvko1BA== age: 20312 cf-cache-status: HIT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wDdAFzigKjBl4AdkVr7tlme4h76jWE73PdmPxh5A23AOMkOuKcC6JjT17zY8aq91Edmor0txhQQLzb3WMlcqXYFrNBdzK%2B%2F3RVIBnTxFWYfkdEaUPdeBrBpGNRZxI352eA3zhwP2Tg%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 85fc7384cfd27775-LHR content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	ka-f.fontawesome.com/releases/v6.5.1/css/free-v4-shims.min.css?token=f6136e9b49	172.64.129.7	200 OK	28 kB
URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.5.1/css/free-v4-shims.min.css?token=f6136e9b49 IP 172.64.129.7:443 ASN #13335 CLOUDFLARENET Requested by https://aztechosted.com/dude/Newautograb/home/#erik.infelise@oig.hhs.gov Certificate IssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT File type ASCII text, with very long lines (27377) Size 28 kB (27592 bytes) Hash 604d6da359831b0dc67e0f522f1ff94d 48b776b939a780fde0270dedf7cc163d25e28bb1 5031c11dd77875afefe4eeddfaa320af07fdccea327f7416a5ee8980674c9c76 HTTP Headers `GET /releases/v6.5.1/css/free-v4-shims.min.css?token=f6136e9b49 HTTP/1.1 Host: ka-f.fontawesome.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://aztechosted.com/ Origin: https://aztechosted.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 05 Mar 2024 19:18:19 GMT content-type: text/css access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 last-modified: Thu, 30 Nov 2023 17:25:51 GMT etag: W/"604d6da359831b0dc67e0f522f1ff94d" x-amz-server-side-encryption: AES256 cache-control: max-age=31556926 access-control-allow-headers: fa-kit-token vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 a6cdb6375fdb95e7faa936290e4601ac.cloudfront.net (CloudFront) x-amz-cf-pop: LHR5-P6 x-amz-cf-id: MQbA6LEYBW7ro2tC851YtsG3E5Vmc0bF9nPMGpwxdflzoJOOECa8iA== age: 20312 cf-cache-status: HIT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VNlDLA6oQgxkRFvg3gWhNde8OdbWC3865rBqnbZ7BSczwbRdaXBkfbzzAebF7oaUlJTZFxzE1JvbkXlkpvqQMABDl0MU1IWfH3OJCWfYVthZHUONBXtO4%2BnPUjU5qdIu8x49GK5Brw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 85fc7384cfc97775-LHR content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	aztechosted.com/dude/Newautograb/home/	192.254.164.19	200 OK	33 kB
URL User Request GET HTTP/1.1 aztechosted.com/dude/Newautograb/home/ IP 192.254.164.19:443 ASN #46606 UNIFIEDLAYER-AS-1 Certificate IssuercPanel, Inc. Subjectaztechosted.com Fingerprint14:19:59:F1:2A:30:97:02:5E:68:A4:67:79:96:BB:69:43:24:8D:6B ValidityMon, 04 Mar 2024 00:00:00 GMT - Sun, 02 Jun 2024 23:59:59 GMT File type HTML document, ASCII text, with very long lines (32566) Size 33 kB (32639 bytes) Hash bf6e14e7a0717fa58575766c0668bad6 d63b82ecab161eb6fed21b2999889c0904ccd0bd 2656c381aa48b62112172ac190882468cb23be6ec5a51724c9e62efc0c9b4666 HTTP Headers `GET /dude/Newautograb/home/ HTTP/1.1 Host: aztechosted.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 05 Mar 2024 19:18:17 GMT Server: Apache Last-Modified: Sun, 03 Mar 2024 21:32:10 GMT Accept-Ranges: bytes Content-Length: 32639 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html`

	kit.fontawesome.com/f6136e9b49.js	172.64.147.188	200 OK	12 kB
URL GET HTTP/2 kit.fontawesome.com/f6136e9b49.js IP 172.64.147.188:443 ASN #13335 CLOUDFLARENET Requested by https://aztechosted.com/dude/Newautograb/home/#erik.infelise@oig.hhs.gov Certificate IssuerDigiCert Inc Subject.fontawesome.com Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT File type JavaScript source, ASCII text, with very long lines (11461) Size 12 kB (11890 bytes) Hash d91fccceeea1ac3d5b1b89dfe626343f f1d8fac2e4e4377989d85630ecae9263401a0b58 2dfc7431f26d322decab9a1746838e2cacc293b4de8b8b930636041dbbbfed13 HTTP Headers `GET /f6136e9b49.js HTTP/1.1 Host: kit.fontawesome.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://aztechosted.com DNT: 1 Connection: keep-alive Referer: https://aztechosted.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 05 Mar 2024 19:18:19 GMT content-type: text/javascript access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token access-control-allow-methods: GET, OPTIONS access-control-allow-origin: * access-control-max-age: 3000 cache-control: max-age=60, public, stale-while-revalidate=30 vary: origin, accept-encoding, access-control-request-headers, access-control-request-method x-request-id: F7nWA8V3uE_gg_o-z5MB cf-cache-status: REVALIDATED server: cloudflare cf-ray: 85fc73825fbe56bb-OSL content-encoding: gzip X-Firefox-Spdy: h2

	ka-f.fontawesome.com/releases/v6.5.1/css/free-v5-font-face.min.css?token=f6136e9b49	172.64.129.7	200 OK	823 B
URL GET HTTP/2 ka-f.fontawesome.com/releases/v6.5.1/css/free-v5-font-face.min.css?token=f6136e9b49 IP 172.64.129.7:443 ASN #13335 CLOUDFLARENET Requested by https://aztechosted.com/dude/Newautograb/home/#erik.infelise@oig.hhs.gov Certificate IssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT File type ASCII text, with very long lines (845), with no line terminators Size 823 B (823 bytes) Hash e6d3783736d2fad2b606057fbb27accf 42a95cbe55b5192414282a64e5f0a106ebd0cfcd 428e4fa90d3cad30b14fe0c63a3a23e6487de4dad755477a33a385844e5a91a7 HTTP Headers `GET /releases/v6.5.1/css/free-v5-font-face.min.css?token=f6136e9b49 HTTP/1.1 Host: ka-f.fontawesome.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://aztechosted.com/ Origin: https://aztechosted.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 05 Mar 2024 19:18:19 GMT content-type: text/css access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 last-modified: Thu, 30 Nov 2023 17:25:51 GMT etag: W/"496965a55b1faa4d5c41073ef276afc0" x-amz-server-side-encryption: AES256 cache-control: max-age=31556926 access-control-allow-headers: fa-kit-token x-cache: Hit from cloudfront via: 1.1 1fbc4ed92487877d10ad1d7d3fa8355e.cloudfront.net (CloudFront) x-amz-cf-pop: LHR5-P6 x-amz-cf-id: 0nXgxoB6Jzez98h_lNZ2dvJ56qWxlyyqO8W67FzxDR2derZ7bQi7_g== age: 20312 cf-cache-status: HIT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rlQMAhj0NGF9eqfV8%2F%2BBp%2B4D1RhsbEUYthGg9DvShJa3jHWjdbtYe7hLNqf1kuX2%2BPtdqyklBSTxNsDOUplzicJm4EEDDSSINlgt2UgzkJk07AEsAHodpArvZs6plgyf9WcpVUTQ7g%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 85fc7384cfdb7775-LHR content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (14)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size