| gateway-web.fit.interac.ca/en/CAGQrVbg/46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C |  45.60.87.208 | 302 Found | 0 B |
URL User Request GET HTTP/2gateway-web.fit.interac.ca/en/CAGQrVbg/46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C IP45.60.87.208:443
CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en/CAGQrVbg/46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: Apache-Coyote/1.1
set-cookie: ADRUM_BTa="R:0|g:45f91d3e-f385-40dc-b4ea-739628289518"; Version=1; Max-Age=30; Path=/; Secure
ADRUM_BTa="R:0|g:45f91d3e-f385-40dc-b4ea-739628289518|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; Version=1; Max-Age=30; Path=/; Secure
SameSite=None; Expires=Thu, 18-Apr-2024 09:08:04 GMT; Path=/; Secure
visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; expires=Thu, 17 Apr 2025 22:44:33 GMT; HttpOnly; path=/; Domain=.fit.interac.ca
incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; path=/; Domain=.fit.interac.ca
location: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
content-length: 0
date: Thu, 18 Apr 2024 09:07:34 GMT
x-incap-sess-cookie-hdr: 5zRMDZI22RdPz4u/Lt7ICNbiIGYAAAAAb0EGjr6vU3+sgEBePPFKzQ==
x-cdn: Imperva
x-iinfo: 10-3280942-3280944 NNNN CT(129 132 0) RT(1713431254173 32) q(0 0 2 1) r(4 4) U11
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/gzip_e3f8682a0138743a00ae4205532233e3/gateway/gatewayInitJS.js | 45.60.87.208 | 200 OK | 581 B |
URL GET HTTP/2gateway-web.fit.interac.ca/gzip_e3f8682a0138743a00ae4205532233e3/gateway/gatewayInitJS.js IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (428) Hashe3f8682a0138743a00ae4205532233e3 e02701e2ea473402728df576fce6e780927384eb d1edfc0790366f7ad281548a12707239fe8d54f5e5ec09e08471fc7f1e4faf65
GET /gzip_e3f8682a0138743a00ae4205532233e3/gateway/gatewayInitJS.js HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: 2740050219
last-modified: Sun, 06 Nov 2005 12:00:00 GMT
content-type: text/javascript;charset=UTF-8
content-length: 581
content-encoding: gzip
cache-control: max-age=314714836, public
expires: Sat, 08 Apr 2034 21:54:51 GMT
date: Thu, 18 Apr 2024 09:07:35 GMT
x-cdn: Imperva
x-iinfo: 10-3280942-3278934 2CNN RT(1713431254173 1071) q(0 0 0 -1) r(0 0) U18
X-Firefox-Spdy: h2
|
|
| etransfer-notification.interac.ca/images/own/etransfer_logo.svg | 143.204.55.102 | 200 OK | 3.5 kB |
URL GET HTTP/2etransfer-notification.interac.ca/images/own/etransfer_logo.svg IP143.204.55.102:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.interac.ca Fingerprint4D:C1:A1:72:82:A8:0F:50:41:8E:F3:11:56:0C:33:0E:E6:6F:B6:20 ValidityThu, 14 Dec 2023 00:00:00 GMT - Mon, 13 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash039abb1715208aabbfd733097697c70a cb74dc2666f278d03017a091c427f43d06ef3a3c 2cc0d2da3df362a41c529546ec109192feee1c804ba930c85b0977f1224a7eea
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /images/own/etransfer_logo.svg HTTP/1.1
Host: etransfer-notification.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3483
last-modified: Wed, 28 Apr 2021 17:19:31 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 17 Apr 2024 10:51:55 GMT
etag: "039abb1715208aabbfd733097697c70a"
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hEEDz8-dajhwytsVgaUL7kYrv_tn1lbQnKRp1UzF7SOMjPfUWI0DmQ==
age: 80141
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000006_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 5.1 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000006_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash5bdfa6d5ad7e09aa1d979d8c45508ad7 09bcd6ddcab894921fc8d46d565d365ecf0c7e09 94cee90303fbc11e769c3d0eb8f72017acb4b390c6800f3cdfffed066a9a2986
GET /fit/en/logo_CA000006_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 5108
date: Wed, 17 Apr 2024 09:13:36 GMT
last-modified: Mon, 28 Nov 2022 19:21:15 GMT
etag: "5bdfa6d5ad7e09aa1d979d8c45508ad7"
x-amz-meta-title: logo_CA000006_FULL_IMAGE.svg
x-amz-version-id: j5CmGvsY57Tmw_QCi8LTX.t50o129Gwu
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mqO1AMEkJEZHWgc5L5_Uz8JIvIPgv6j5mbkVUaibCckzF8TvhCBo8w==
age: 86040
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000003_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 5.4 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000003_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashf1ee251f868c6eb7184d795d62c3eb8a f2b8ec28647076273a8cef3f8506e8fa60dff596 9e787eb9727523cc7aa0efa3c0c3debdd36ed2e59503b9b59881d7e5e0b8fc7d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /fit/en/logo_CA000003_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 5370
date: Wed, 17 Apr 2024 09:13:36 GMT
last-modified: Mon, 25 Jan 2021 22:13:23 GMT
etag: "f1ee251f868c6eb7184d795d62c3eb8a"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: og55zDzZlLF3dSMMVxAzSUAJ8Tll902Of8y7-U1SKPGGRS47Q4ckpw==
age: 86040
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA002004_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 964 B |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA002004_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash6dbd95cf8a336ada55aa66884829bd5a e699d784042dc501df68268d6c8168ae54286ec6 2d70de35d8125369775a01fb1f1e58ab5f937843dc024eaeb5c2ff42dd5b9ac3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /fit/en/logo_CA002004_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 964
date: Wed, 17 Apr 2024 09:13:36 GMT
last-modified: Mon, 25 Jan 2021 22:14:01 GMT
etag: "6dbd95cf8a336ada55aa66884829bd5a"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Jj1Lh3lqgeYVteRVVkIRBE2RvcDgjhmOfaj77TeKHRTqr7kccaWLNQ==
age: 86040
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000809_038860000_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 5.1 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000809_038860000_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash7d3eb118d9adb15d5076ef3d619f0fbb 7ca9a973036b64fc89e334b56543f3a7af6beacf eeee06dc7ba17e58ad4d75cadb3e2ee7964bcd30b6d583c6e99c96d03f4f2c4a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /fit/en/logo_CA000809_038860000_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 5076
date: Wed, 17 Apr 2024 09:13:36 GMT
last-modified: Mon, 25 Jan 2021 22:13:23 GMT
etag: "7d3eb118d9adb15d5076ef3d619f0fbb"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cPt5HkoRZHFP7YbYRSdov6EfXTyjjjYlIwAxhADXahriIka8cB4o9A==
age: 86040
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000010_000030800_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 3.5 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000010_000030800_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash4ae63bb14ee1a4778fe21ed2676c1bf7 626ab53de8a24ed3e66316c77f62b54b94c8aaa2 61b0e17966b86a5019fae9fcb7b7280a4859ceaf803a89463bffcf333d6e266f
GET /fit/en/logo_CA000010_000030800_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3486
date: Wed, 17 Apr 2024 09:13:36 GMT
last-modified: Wed, 05 Jul 2023 17:32:28 GMT
etag: "4ae63bb14ee1a4778fe21ed2676c1bf7"
x-amz-server-side-encryption: AES256
x-amz-meta-title: logo_CA000010_000030800_FULL_IMAGE.svg
x-amz-version-id: pLUAee5BYqakF8TLY.nxfrxdqP1EuQjJ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AtWsC5IEEMlJ0djlj0_BRoCq0LuZa3UM0u_2GB_RX3cNN4mmL2sy3A==
age: 86040
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA001004_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 964 B |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA001004_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash6dbd95cf8a336ada55aa66884829bd5a e699d784042dc501df68268d6c8168ae54286ec6 2d70de35d8125369775a01fb1f1e58ab5f937843dc024eaeb5c2ff42dd5b9ac3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /fit/en/logo_CA001004_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 964
date: Wed, 17 Apr 2024 09:13:36 GMT
last-modified: Mon, 25 Jan 2021 22:14:01 GMT
etag: "6dbd95cf8a336ada55aa66884829bd5a"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 09420uMHLiCVUFAhhqTGun9gEjNtDQraQzlH0NUsr_0w6Cl_DeJLnQ==
age: 86040
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000869_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 14 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000869_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash06c21259fc6570fc36952ba41873895c e552438c30e55d41776ace00c5b9503f34e58aaa d6de4bbcdd6827121e96ce2fad826669da1b24e63fe6f467b92c6d56348f5d46
GET /fit/en/logo_CA000869_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 13855
date: Wed, 17 Apr 2024 09:13:36 GMT
last-modified: Thu, 22 Apr 2021 22:49:19 GMT
etag: "06c21259fc6570fc36952ba41873895c"
x-amz-meta-title: logo_CA000869_FULL_IMAGE.svg
x-amz-version-id: Ftzxqv40xpfbfsscVjb2Nrzodomr91Qt
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0lOcMYE2fC6n1oLo3CsyJAfx-a3XlSWS7CW4h2rLoIIQItx0Jhi-EQ==
age: 86040
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000001_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 5.2 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000001_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash2bcc1700517e379a6595af20b5eb258a a5650b9076432d53aca473dc62fe5de3d7e637c5 db09fc1f3c7b0968d63c6a084b54917225fc17f172eee60a3086ce9ea51fa9b7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /fit/en/logo_CA000001_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 5178
date: Wed, 17 Apr 2024 09:13:36 GMT
last-modified: Mon, 25 Jan 2021 22:13:23 GMT
etag: "2bcc1700517e379a6595af20b5eb258a"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YMtIZTRjb1PYH3Zwu8acwIpNAB0PjOoDE5KC5iQLakUIb6aVaXEgfw==
age: 86040
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000815_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 3.3 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000815_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash046a05427a89f63ac2b0448366537e4b 34ee9e8ffbdafd4bc9cfc9b210b527f9e99482fa a262df60dceadf67bfdd1fdcd8fd1fc940d332b874e227275aeaee49d878e018
GET /fit/en/logo_CA000815_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3263
date: Thu, 18 Apr 2024 06:46:25 GMT
last-modified: Mon, 25 Jan 2021 22:14:01 GMT
etag: "046a05427a89f63ac2b0448366537e4b"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ts2Hbp9_-cCkew7n3skwJ22xTqZZr0uXOreLJ8oAZDMSx-88RgocPQ==
age: 8471
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000837_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 3.5 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000837_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hasheb51ada0dc8ef769a5d39399c5c27649 bd5e723ff34e0782e7ada013d97375e52917ddf7 fe790203d627713953e9e50255fee1feb140e12f31c40ec392bca4a3446030a9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /fit/en/logo_CA000837_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3487
date: Wed, 17 Apr 2024 09:13:36 GMT
last-modified: Mon, 25 Jan 2021 22:14:01 GMT
etag: "eb51ada0dc8ef769a5d39399c5c27649"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aPimvPLY0gbftRkTVItqEr-ogf-azHqacz98M34kPOZ1A_uGCh5j6Q==
age: 86040
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000374_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 4.1 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000374_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash8662830e6a88ada2e6a97148d49abb84 49356bb0575a4713c14024dcee35456ae6cea450 23c114e3ec79756211bcce3b84bd8840ab443e2221cf903002dfb563af40f257
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /fit/en/logo_CA000374_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 4081
date: Thu, 18 Apr 2024 06:46:25 GMT
last-modified: Fri, 23 Apr 2021 21:27:10 GMT
etag: "8662830e6a88ada2e6a97148d49abb84"
x-amz-meta-title: logo_CA000374_FULL_IMAGE.svg
x-amz-version-id: T_Q73.zVs16wpvoaYvF8oEDLcW1jCJAU
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hdIP-E6Wqq9UO7N62EecPuDq2g4z-JVgwQBW8XKMDg9RvsWyKVYF_g==
age: 8471
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000004_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 964 B |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000004_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash6dbd95cf8a336ada55aa66884829bd5a e699d784042dc501df68268d6c8168ae54286ec6 2d70de35d8125369775a01fb1f1e58ab5f937843dc024eaeb5c2ff42dd5b9ac3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /fit/en/logo_CA000004_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 964
date: Thu, 18 Apr 2024 06:46:25 GMT
last-modified: Mon, 25 Jan 2021 22:13:23 GMT
etag: "6dbd95cf8a336ada55aa66884829bd5a"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ef5Q-a3_ygI2V69goA4kuJM6b8KADIgGd7XgcpEFoYn610QcXVStTA==
age: 8471
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000010_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 2.7 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000010_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hasha926fa0161bdfda89e1385cc67b8afe8 dd07e8603ba170799e220f1493ce72ea22d4c380 37da78b49454e16bc1a3d1336b20439d8cf69efd1f0854b3f4a67e59921c9ed1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /fit/en/logo_CA000010_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 2738
date: Wed, 17 Apr 2024 09:13:36 GMT
last-modified: Mon, 25 Jan 2021 22:13:23 GMT
etag: "a926fa0161bdfda89e1385cc67b8afe8"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3Ej5-6hYjRFWwaMNTgYIHZ3APN1kEZwSpj_xnG42dl75vMl3It1aMQ==
age: 86040
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000241_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 12 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000241_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash4559d2b841c7c74ad15c366a0a96d35c 02aa1db0f91f728e42881394fc6e0b0d55f08c45 95e97f8e3191224d65cdf5e81149cd8960ff1d86c5596871c5df9e458381071f
GET /fit/en/logo_CA000241_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 11553
date: Thu, 18 Apr 2024 06:46:25 GMT
last-modified: Thu, 23 Feb 2023 19:08:18 GMT
etag: "4559d2b841c7c74ad15c366a0a96d35c"
x-amz-server-side-encryption: AES256
x-amz-meta-title: logo_CA000241_FULL_IMAGE.svg
x-amz-version-id: IhRf5SpnH2SjLsQk9iib5ZAwd3INwWNP
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yG6mh7UbcKQ2MeRWrbOO8qYT74028PSNCcVW3n_mGMNlf48n8Z3DBQ==
age: 8471
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000540_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 4.7 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000540_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashe13906e8b36af3ce9efc4e35dcf6869d 56e7e14e16422783471efc8cb5b5e030b3791c1c 5396aa1d4deab7cc88a7b61247f4645d9999bee01614e6e7bd9fe9302b7f9967
GET /fit/en/logo_CA000540_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 4677
date: Thu, 18 Apr 2024 06:46:25 GMT
last-modified: Tue, 01 Mar 2022 17:37:20 GMT
etag: "e13906e8b36af3ce9efc4e35dcf6869d"
x-amz-meta-title: logo_CA000540_FULL_IMAGE.svg
x-amz-version-id: YDOXViGoDJJ01.P6HhB7SEq_lVEezOAJ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kJ5-ur46v4fI8NT2rF-wj2xX07rXv_vIJdkIO3q0_9OSTjxMo4TzUw==
age: 8471
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000002_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 4.6 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000002_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hasha2b8c12131177b25ce0676ba26dafede b658495cc2b3e839ceac8b25c27cf1d1358d7e52 0bd4b1d9e850b3ab2cae714fdb098f63a56bb1f55975351735caf04e4e2a2552
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /fit/en/logo_CA000002_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 4648
date: Wed, 17 Apr 2024 09:13:36 GMT
last-modified: Mon, 25 Jan 2021 22:13:23 GMT
etag: "a2b8c12131177b25ce0676ba26dafede"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hMCX1Q7WanSLeoJrkkudZKNIhxHJ2nCECEeeWwqaPKaNCvcwu9unZw==
age: 86040
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000614_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 7.1 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000614_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash7f93c07fc45ff4b4be039e72da0675c2 42204b74fad2757af07aa5cbc11ba69314a097d5 da103dbb9c83919e677d0c4de46025b4c4153daadb6e27942a65d5723f3a338f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /fit/en/logo_CA000614_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 7148
date: Wed, 17 Apr 2024 09:13:36 GMT
last-modified: Mon, 25 Jan 2021 22:13:23 GMT
etag: "7f93c07fc45ff4b4be039e72da0675c2"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bI0HTm-DTEosIp5g4qZO9DNX0PGpjTKShmwtYcrFZA9bnnntuUBLtQ==
age: 86040
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000219_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 3.3 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000219_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash66a0b0ecd28bc75ed2d4ef124bed2ce9 1ed04bf04a16d5b5a77b394c0d788d67ddf68cbe f20957245ccf4ae9c38287fad8f482c27a44d0ea75033d9527c759956d3c824f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /fit/en/logo_CA000219_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3289
date: Thu, 18 Apr 2024 06:46:25 GMT
last-modified: Mon, 25 Jan 2021 22:13:23 GMT
etag: "66a0b0ecd28bc75ed2d4ef124bed2ce9"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JjhWelhfE-mhfB3NaIXnBqqCCXD-LFAOzU-Becl8e2KKNG69eGfXxw==
age: 8471
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000320_FULL_IMAGE.svg | 54.230.111.58 | 200 OK | 4.2 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000320_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashe338bef4f6aa2340bcc7f445c55be529 184b67d5daf5f7d7e1f76bcc50e157a0674425eb 21a124e62995056691b9813647f29adedf09026a0f8cbab63d6010c2dea31145
GET /fit/en/logo_CA000320_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 4197
date: Wed, 17 Apr 2024 09:13:36 GMT
last-modified: Wed, 19 Jan 2022 20:28:26 GMT
etag: "e338bef4f6aa2340bcc7f445c55be529"
x-amz-meta-title: logo_CA000320_FULL_IMAGE.svg
x-amz-version-id: G56OjM0.1RnxW9QOmBl3vy5AaVvfl3Qt
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 792etRflIuDpjyAtuRwMuCZ1_vziJxKZjf3JECCYVTTX3rIMkPyMzw==
age: 86040
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-5SR238 | 142.250.74.168 | 200 OK | 99 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-5SR238 IP142.250.74.168:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (15188) Hash268710967a2e65d673d301214573abfc de8e6438a9644b96a5da9a0d3824f204b05837b9 95b7a2a1a5fc5204452923d3b0ff2a354413a69113661a5d5ce539afec0b94b1
GET /gtm.js?id=GTM-5SR238 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 09:07:35 GMT
expires: Thu, 18 Apr 2024 09:07:35 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 99369
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/gzip_abb2fc7f5b2a03c43bc913f8130e26f6/gateway/GTIe8CSS.css | 45.60.87.208 | 200 OK | 6.1 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/gzip_abb2fc7f5b2a03c43bc913f8130e26f6/gateway/GTIe8CSS.css IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (31332), with no line terminators Hashabb2fc7f5b2a03c43bc913f8130e26f6 6d65ac38e37331f1e5cf4ff9192293de03d633d2 916e6021441b48949eaa0c275629be64ceba00bdcf852330316a4c47ec1a0c99
GET /gzip_abb2fc7f5b2a03c43bc913f8130e26f6/gateway/GTIe8CSS.css HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Apache-Coyote/1.1
cache-control: public, max-age=315360000, post-check=315360000, pre-check=315360000
last-modified: Sun, 06 Nov 2005 12:00:00 GMT
etag: 2740050219
expires: Tue, 18 Apr 2034 09:07:35 GMT
content-encoding: gzip
content-type: text/css;charset=UTF-8
content-length: 6138
date: Thu, 18 Apr 2024 09:07:35 GMT
x-cdn: Imperva
x-iinfo: 10-3280942-3272340 2NNN RT(1713431254173 1068) q(0 0 0 -1) r(3 3) U18
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/gzip_d41d8cd98f00b204e9800998ecf8427e/gateway/TMHeader.js | 45.60.87.208 | 200 OK | 20 B |
URL GET HTTP/2gateway-web.fit.interac.ca/gzip_d41d8cd98f00b204e9800998ecf8427e/gateway/TMHeader.js IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typegzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT) Hash3970e82605c7d109bb348fc94e9eecc0 e03849ea786b9f7b28a35c17949e85a93eb1cff1 f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967
GET /gzip_d41d8cd98f00b204e9800998ecf8427e/gateway/TMHeader.js HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Apache-Coyote/1.1
cache-control: public, max-age=315360000, post-check=315360000, pre-check=315360000
last-modified: Sun, 06 Nov 2005 12:00:00 GMT
etag: 2740050219
expires: Tue, 18 Apr 2034 09:07:35 GMT
content-encoding: gzip
content-type: text/javascript;charset=UTF-8
content-length: 20
date: Thu, 18 Apr 2024 09:07:35 GMT
x-cdn: Imperva
x-iinfo: 10-3280942-3244533 2NNN RT(1713431254173 1072) q(0 0 0 -1) r(4 4) U18
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/gzip_d534c27e189b0a49e098a6ef33477f73/gateway/generalCSS.css | 45.60.87.208 | 200 OK | 3.9 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/gzip_d534c27e189b0a49e098a6ef33477f73/gateway/generalCSS.css IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (16962), with no line terminators Hashd534c27e189b0a49e098a6ef33477f73 38b00b0851ed7ea9dcde514cd680c599afce7be8 169ab263f661ef50eab404e6be618a16523d35822615ebb6d9d29228945ea7d5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /gzip_d534c27e189b0a49e098a6ef33477f73/gateway/generalCSS.css HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Apache-Coyote/1.1
cache-control: public, max-age=315360000, post-check=315360000, pre-check=315360000
last-modified: Sun, 06 Nov 2005 12:00:00 GMT
etag: 2740050219
expires: Tue, 18 Apr 2034 09:07:35 GMT
content-encoding: gzip
content-type: text/css;charset=UTF-8
content-length: 3872
date: Thu, 18 Apr 2024 09:07:35 GMT
x-cdn: Imperva
x-iinfo: 10-3280942-3278939 2NNN RT(1713431254173 1066) q(0 0 0 -1) r(4 4) U18
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=2&cb=176068070 | 45.60.87.208 | 200 OK | 20 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=2&cb=176068070 IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash18d9ad2432d06fe90d56d60ea20c0171 2f488a706682804ad41ff5070a82aca2082c2f32 4e9b6f13f711117611e96dab63ff80fc18a6713690a3cca1d0320257993dc7a6
GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=2&cb=176068070 HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/javascript
content-encoding: gzip
x-robots-tag: noindex
content-length: 20479
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/gzip_af190cd10264ae05d11e0da925f8e828/gateway/searchCSS.css | 45.60.87.208 | 200 OK | 1.9 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/gzip_af190cd10264ae05d11e0da925f8e828/gateway/searchCSS.css IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (7624), with no line terminators Hashaf190cd10264ae05d11e0da925f8e828 a066317f0a22a0ef903640d4dff9f9028bc7b97d 84e6b556c5980d85323a4b5de0916453f0c76e1bb967d20a670c3c2cfaae6777
GET /gzip_af190cd10264ae05d11e0da925f8e828/gateway/searchCSS.css HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Apache-Coyote/1.1
cache-control: public, max-age=315360000, post-check=315360000, pre-check=315360000
last-modified: Sun, 06 Nov 2005 12:00:00 GMT
etag: 2740050219
expires: Tue, 18 Apr 2034 09:07:36 GMT
content-encoding: gzip
content-type: text/css;charset=UTF-8
content-length: 1927
date: Thu, 18 Apr 2024 09:07:35 GMT
x-cdn: Imperva
x-iinfo: 10-3280942-3278934 2NNN RT(1713431254173 1074) q(0 2 2 -1) r(6 6) U18
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-5F21NM3TH6&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 100 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-5F21NM3TH6&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size100 kB (100160 bytes) Hash35b2ae0c299ed26f29bf56299ee7ee9a 6ae6e5d0ee1da5304d7e9098af1fdc174809f852 c17e66129e09791ec84b6613e0d7cf6a1a03fb6d4bb8454d090d31b49d4e492c
GET /gtag/js?id=G-5F21NM3TH6&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 09:07:36 GMT
expires: Thu, 18 Apr 2024 09:07:36 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100160
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/destination?id=DC-4168148&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 72 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=DC-4168148&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hash3b54477aed90591e7cfb793ea6f44260 c67b9f139a6eb08d88c9902cf247b363e3bdfc51 9e317e51a52ff81b81849c9b9c29f996e5d90f3342f4585d0237dd55ad5cb434
GET /gtag/destination?id=DC-4168148&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 09:07:36 GMT
expires: Thu, 18 Apr 2024 09:07:36 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72277
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=G-3PFFYSG26F&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 100 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-3PFFYSG26F&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size100 kB (100108 bytes) Hashaf53a9245919a5bf5aadd50592b2301a 9dd61b396c9f7e9fc2cedc6f0d46f377f18deef3 5dba8421e868c500e785166973d3f77d9bfb7b8c648dbb5aee46ef80b9eea574
GET /gtag/js?id=G-3PFFYSG26F&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 09:07:36 GMT
expires: Thu, 18 Apr 2024 09:07:36 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100108
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| gateway-web.fit.interac.ca/gzip_f1f816f2feab195f99c037aee4b07b1/gateway/allModuleJS.js | 45.60.87.208 | 200 OK | 5.7 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/gzip_f1f816f2feab195f99c037aee4b07b1/gateway/allModuleJS.js IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2200) Hash0f1f816f2feab195f99c037aee4b07b1 47dc5ffaaaab3bb6189828b0f53f356617fb5ca7 057023cd2b4a13a2f8d3ec44f7def0743584c7ab65dacdffd929246967387450
GET /gzip_f1f816f2feab195f99c037aee4b07b1/gateway/allModuleJS.js HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Apache-Coyote/1.1
cache-control: public, max-age=315360000, post-check=315360000, pre-check=315360000
last-modified: Sun, 06 Nov 2005 12:00:00 GMT
etag: 2740050219
expires: Tue, 18 Apr 2034 09:07:36 GMT
content-encoding: gzip
content-type: text/javascript;charset=UTF-8
content-length: 5749
date: Thu, 18 Apr 2024 09:07:35 GMT
x-cdn: Imperva
x-iinfo: 10-3280942-3278939 2NNN RT(1713431254173 1689) q(0 0 0 -1) r(1 1) U18
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/gzip_1636a7e3eaac35bfb3c33ceabdbebdd3/gateway/navJS.js | 45.60.87.208 | 200 OK | 847 B |
URL GET HTTP/2gateway-web.fit.interac.ca/gzip_1636a7e3eaac35bfb3c33ceabdbebdd3/gateway/navJS.js IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (507) Hash1636a7e3eaac35bfb3c33ceabdbebdd3 710384dbcef59ebf77da4b7f4fe04c8039f99451 caf9c5dc2c7cec87d84b7acb8a4869e854a477bf42efdb5da5f7b4e91bc470c8
GET /gzip_1636a7e3eaac35bfb3c33ceabdbebdd3/gateway/navJS.js HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Apache-Coyote/1.1
cache-control: public, max-age=315360000, post-check=315360000, pre-check=315360000
last-modified: Sun, 06 Nov 2005 12:00:00 GMT
etag: 2740050219
expires: Tue, 18 Apr 2034 09:07:36 GMT
content-encoding: gzip
content-type: text/javascript;charset=UTF-8
content-length: 847
date: Thu, 18 Apr 2024 09:07:35 GMT
x-cdn: Imperva
x-iinfo: 10-3280942-3248278 2NNN RT(1713431254173 1687) q(0 0 0 -1) r(4 4) U18
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/_Incapsula_Resource?SWKMTFSR=1&e=0.004300355511007825 | 45.60.87.208 | 200 OK | 1 B |
URL GET HTTP/2gateway-web.fit.interac.ca/_Incapsula_Resource?SWKMTFSR=1&e=0.004300355511007825 IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typevery short file (no magic) Hashc4ca4238a0b923820dcc509a6f75849b 356a192b7913b04c54574d18c28d46e6395428ab 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
GET /_Incapsula_Resource?SWKMTFSR=1&e=0.004300355511007825 HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7; _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0; ___utmvc=4bz0bhW9ee81jHJl4sASmwTJddtHjUvxDBP24/U/tLMSkS4MGjk97m5hOHuGoxaNR7CcaMKz4nLdG/O2BbEd56i88l/1Nqdizez2r/LltMTF6Q2Vk2mhrESDLNqQN7szTRD9kK52d28mNfCAFAjg3bGj1B3xxfzS4CKDpxVOGJK8yJiniZCSbG6xFzFQiM0dGpv0PRztFpihpWS0uQXj8jbPzLowj6LkII1+g56M9x7P24b3qUyscMuWPuDYHQTqqcM1x9EW9b6canJXdf10iCPNm3zwH1ZYB7hMWSoHiDiuL61uS4lSjyvsW+sXEVDXlLynDxnnXe7IGXn7a56g9PEFC6kxCsle7wi5sWB6SE69P7h9I8fVxcapS0FxRZH7KGoJ591N+Mm2qRN5hqX5fPiMU0u4chrP7W5cA04xJGJQEwtMBhpbUyHUakmu8s7Z+HmwxcafueSXQQwdSPzXFmmKXEwQCi4qymW0UvKiRi3iDjKMBvDhG5/kzgwVRg9oLFRjJ4JAqlVbtNu3TBsef2wmSycmY6Az3j6AMhcIA/vmXkG+PEGMnnbvRcgy/EOk3Ugnd8w0gAFgs8/F6HlRtDko7zWu1ASkotboo7VQstzUCwkr7Lv+y//jN1tPZkbfjy7SSqWrx2M4JlwWhVvNo5pD0xM6uShNKjgwn0cNjfg73l1GpIBnbxhhmTG/y8Hp5PGT8bwrfrS/IzvXbEl2o4fOv3J60Qf7PqSFzWQzn2noniXozbx9aTXvtb70XorB7vgwlNkTVwwWwoAaYL8NgwJm9y86u3wYH/vDoJh/91uJ7jd+20iugQP+ujXCikdgCCigHPG+sLXkMUMkYT7427JShXnG6rQ5Iue5p9N01mMoYu69ISONOLXi20GBaH+35zK3FH7cX4ubIHqeBLA3u/hxe1qom0VwEZFdFtHOvq6di4FUsJFqFcrusZybAxyfwl2tv6f6JpzjC9c3P+2NBHnKEhs6JWbG37TWEWFsFbBYjkUMFcDANvxV97rtysAhJzAzP7D9/1iznjf1QFrH3iZKjUghN8NqWF5rVJt6aUtllYPu2QBRbSvkWG6Les4GydpD+vaQKeGLiNy1DC4oKheNFdoOPePjDikH0PxnbLfJ/rOiHDAGDRMArWCSizRC293ClqJ5nY8VW8ytPTHKtvcTyfiAX4KmWZJJtGzpFWQ3uXpVo8h+4UktpTQpuR/IBw14vH1wfmN+ttI8eg9HU82BI315EVJ976PoSsi+t4YxEMMRfNBk1L0hMVie6l2HcXB6qFc3tqBex+Tw0KvBdi0fenouYFep2CP1I3sRAY6yT2tWEvbsYWpO6lbw3QTI9aIrqmVzyng/dePX1uoveFeuWvQrMltYM1wE/bGN/tz2Q++0M7Res/uAzc7X9pZV/g5Ff/QTQdA+89yNSG2hvKsMJTCiDmDGquK/4yuWvlDHgz/owdQqrCiwqNDu4UVNEZDMxjzPxi/vOh+4mKhtcnonlnnlR+Xm02tOI3hUSDi675RVhw3tldkBUCAzh6osI+T836w0VrTPs4iTdKrZXKoeubHaTriTqScHQyM3N7RgNDVX+ZODnctE+aiLPcVdLdKztcBOlujhCDya9V2zUHcKzpV9onAiZMn2IGneGhSnLPZzvp6zgr4aGmVk0xw0ajFs3WAHgFjO9oI6snvWPUFaxqGx6OVjnRE8y6G5mOnv3M6tvT4uN6E6ukFdERePd6oV8Oz5c1Rk4kcPOxWf+ULSWapPBW6/2+mr9lYSWq38ECN5jWojlMswX3pumsznWW41AwSbuUTm7Jbx4w3k9AH9Jy94rohjB9Li0T0xQ2PpCPLjyej09M4h2+zHsJjrb50cgpis4Cyoo13yUZSK+u31S+lphrwlMMx79MV1qGfEdLmRIV8ZXDWoEOtET0fDwvJ+jMupabU5+8sWpoeBk7tSPX/zszO2tSFF3KWJ3VoPbQ5mfwbxYg2B+Jm5QzMaoh8p53Ab9r9qxdSxWW0YhDyrxsmI52l9s1TYzSrIFLi8X+/4pr2UIpLshClbhP3j4CvUypPS87hh1GmkEaWMTizh/aEzbJB8k2mMY2G+OyFximX4uhBA6ztivaXbUA9mMun5ULs7zp9C11SzRIMSa5aRsMXxToNIBEHfYEHZy1M4alIYasqtlvWKHf+/3ztArWhXwMTnFLrH4qEPrjFkMp8ko/861LyN/1I529F2dxE9P34G/zpo0ZjAFJnFf6hf+WcyK1JmC2BqQHb1Db4r2aJaXmuOHIwQHBdYYBOiGuczBnzaD0Y/kp3FuPyq8SdGZuTeQ/TMXtnWn6d+DnMyDfRPnjnbJzd2cOjXWEpfP00Wd2v/1TjDaDxab59rq35+OY69UqO3sn9P+Cv3LRP56ld5uL7DPVezfag9Tcn+wtwzihFMOE5csSfFM9iSP7FLdVWC+i0U4aZLwLwMpQDT6xjy3vTNIGqGKLUsyX5SsfdrXk+J1hgcbauFzDJBO00HyEU+UgpYGPWfBNn50gv1732msNNtDyZkbmEoCrl899BQP7AXJpSy3DrePCjnqbFUTl0i8shU60TYaZ8jrzeYntQILooSJ8fjKzekK+pLW6YAcjXp8cGtXp1yGZ1esSJoXvD9qut6vIu9uWBI07AzVTKrjFGYzmBl0wF1WSiZqaxW2QWo1raaheL6xMW4XX8bSrs048DRbGwa2kxtIA1MG8E4rtT/Q1+FvS+lJja0qZcMosaRgv9v4bBKgZaefCxH/B5I5SSB/bqZbv77mH4HJQAxDEFfL0ec8d/WKpjnTgYAu32zaV0RR7rLJ4txRkHprkaWG5dJsipYCPF2mnyO5iyv/ZBdUbj14OMrXxs57MY8DytJDnTb/x6DOAPa3Vx5pkFEordkzMcsZGlnZXN0PTE5NzM0MyxzPTc0NmM4M2E1ODI4MTk0OTI5ZjljYTM4ODk0YWI4Njg1OWY4ODg1OWM4OGE5OTZhNGE0NmM3ODgzYWQ5ZGE2NzA2YmFjN2Q5ZTk2YTA3NDcw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: text/plain
x-robots-tag: noindex
content-length: 1
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery-mobile-theme/themes/interac-jqm.min.css | 45.60.87.208 | 200 OK | 270 B |
URL GET HTTP/2gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery-mobile-theme/themes/interac-jqm.min.css IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (697), with no line terminators Hash745235c26c54c8d8dfe842eae0f81c22 ada1c6f02af1481a7c7254a3e612e56ee8f78e56 9990c44b20b507ba7382cfdd553b0a56d10871147a09bc8e42903b92d0c12e10
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /resources/newgateway/vendor/jquery-mobile-theme/themes/interac-jqm.min.css HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7; _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0; ___utmvc=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
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "8366ca23"
last-modified: Wed, 17 Jan 2024 16:05:42 GMT
content-type: text/css;charset=UTF-8
content-length: 270
content-encoding: gzip
cache-control: max-age=86400, public
expires: Fri, 19 Apr 2024 09:07:36 GMT
date: Thu, 18 Apr 2024 09:07:36 GMT
set-cookie: ___utmvc=a; Max-Age=0; path=/; expires=Mon, 15 Apr 2024 22:34:53 GMT
x-cdn: Imperva
x-iinfo: 10-3280942-0 0CNN RT(1713431254173 2388) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.css | 45.60.87.208 | 200 OK | 139 B |
URL GET HTTP/2gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.css IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
Hashafeb58f81025db3c4c458053ee90f1d5 365ed2a145eb0f798b7d594eef477ecc285a9a53 e11049e59ca2f627b228848ae53684a258f986bba99a1ea36234787fde7e114a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.css HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7; _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "3c43777e"
last-modified: Wed, 17 Jan 2024 16:05:42 GMT
content-type: text/css;charset=UTF-8
content-length: 139
content-encoding: gzip
cache-control: max-age=86400, public
expires: Fri, 19 Apr 2024 09:07:36 GMT
date: Thu, 18 Apr 2024 09:07:36 GMT
x-cdn: Imperva
x-iinfo: 10-3280942-0 0CNN RT(1713431254173 2543) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.js | 45.60.87.208 | 200 OK | 5.0 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.js IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (13097), with no line terminators Hashf01666ac29a79065d56050f33a52f049 08882f5b26a67060cb1199ea7fc84423d7c20ff7 dc3d535926f878f06e73076f0df2d3a7216096108ae40bb9ef8cc2e95270b138
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.js HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7; _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "a91c3e7f"
last-modified: Wed, 17 Jan 2024 16:05:42 GMT
content-type: text/javascript;charset=UTF-8
content-length: 5045
content-encoding: gzip
cache-control: max-age=86400, public
expires: Fri, 19 Apr 2024 09:07:36 GMT
date: Thu, 18 Apr 2024 09:07:36 GMT
x-cdn: Imperva
x-iinfo: 10-3280942-0 0CNN RT(1713431254173 2554) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/resources/images/en/fiLogo/logo_default.png | 45.60.87.208 | 200 OK | 925 B |
URL GET HTTP/2gateway-web.fit.interac.ca/resources/images/en/fiLogo/logo_default.png IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typePNG image data, 131 x 28, 8-bit/color RGB, non-interlaced Hash18562e20382a736b8f542489a93b4326 d28627689f288ad395bd47d8c2f7a55c4f8ebd7a 07326558ce73fcc5030f70a6ea13aa407f07bb96129c319eff73d0c42b298cd4
GET /resources/images/en/fiLogo/logo_default.png HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7; _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Apache-Coyote/1.1
last-modified: Wed, 17 Jan 2024 16:05:42 GMT
accept-ranges: bytes
content-type: image/png;charset=UTF-8
content-length: 925
date: Thu, 18 Apr 2024 09:07:37 GMT
x-cdn: Imperva
x-iinfo: 10-3280942-3248278 2NNN RT(1713431254173 2688) q(0 0 0 -1) r(1 1) U18
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.js | 45.60.87.208 | 200 OK | 17 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.js IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
Hash246ccd36792423763a501e9c371d72f5 b075b01b2da661f5f38c7d462f2c2df678d1518a fca52a43aa200a5cc90500223630a10622a8865f56f85180dafdaa99aed6683e
GET /resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.js HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7; _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Apache-Coyote/1.1
last-modified: Wed, 17 Jan 2024 16:05:42 GMT
accept-ranges: bytes
content-type: text/javascript;charset=UTF-8
date: Thu, 18 Apr 2024 09:07:35 GMT
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 10-3280942-3272340 2NYN RT(1713431254173 2219) q(0 0 0 -1) r(2 2) U18
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000558_FULL_IMAGE.svg | 54.230.111.58 | 403 Forbidden | 7.9 kB |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000558_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
Hashd121ed7d4886df55c7f55ed9c425e264 3cf56f15faef0382a1e3393d0ab92d06f5d4225a bddebd7de611fd4fb304755dd539bf8b6f63821150bae00f3374fb56c6ec8e75
GET /fit/en/logo_CA000558_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Cookie: _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
content-type: application/xml
server: AmazonS3
date: Thu, 18 Apr 2024 09:07:36 GMT
x-cache: Error from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uyKo1vHK45lrD7YEPU-VRMxngfyNRNWDqkkjHrOc8gHlfykhhQHjSg==
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/getAllFisandCus.do?lang=en&fiListOption=null | 45.60.87.208 | 200 OK | 20 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/getAllFisandCus.do?lang=en&fiListOption=null IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
Hashbc4faaf041d5e4b058258835e5f7e0e6 41edc5a77bbaebf0bc82e41adf04048671fe89e8 dbc4b749e84287208173e49d01b9e081886aeb10fcfcad166226786950349578
GET /getAllFisandCus.do?lang=en&fiListOption=null HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7; _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Apache-Coyote/1.1
set-cookie: ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; Version=1; Max-Age=0; Path=/; Secure
ADRUM_BT1="R:0|i:84701|e:72"; Version=1; Max-Age=0; Path=/; Secure
adrum_0: g:fa583718-0241-404d-abbe-602ef81ce377
adrum_1: n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56
adrum_2: i:84705
content-type: application/json;charset=ISO-8859-1
date: Thu, 18 Apr 2024 09:07:35 GMT
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 10-3280942-3280965 PNYN RT(1713431254173 2227) q(0 1 1 -1) r(2 2) U12
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/resources/newgateway/images/icons-svg/close-icon.svg | 45.60.87.208 | 200 OK | 1.3 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/resources/newgateway/images/icons-svg/close-icon.svg IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (1330), with no line terminators Hash10634b885815c16c8ff6a03f9b329a75 ab20455c5fea3f29a009633f4b8d4fa1d6737b55 a987444b3a1625532c32383f4f19cea8e2e7bef57b93264b42c2adfa82b50de8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /resources/newgateway/images/icons-svg/close-icon.svg HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Apache-Coyote/1.1
last-modified: Wed, 17 Jan 2024 16:05:42 GMT
accept-ranges: bytes
content-type: image/svg+xml;charset=UTF-8
date: Thu, 18 Apr 2024 09:07:35 GMT
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 10-3280942-3280965 PNYN RT(1713431254173 1075) q(0 3 3 -1) r(5 5) U18
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000559_FULL_IMAGE.svg | 54.230.111.58 | 403 Forbidden | 0 B |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000559_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fit/en/logo_CA000559_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Cookie: _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: application/xml
server: AmazonS3
date: Thu, 18 Apr 2024 09:07:36 GMT
x-cache: Error from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: r-rt2vUVSCQZ5TwQKgjd4rDtiJa1F4uLHff5OXBflDK7cCc8OopTKw==
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/favicon.ico | 45.60.87.208 | 200 OK | 1.2 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/favicon.ico IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash366eee8a47c8d4f1e708d1596a351965 3476768ab02e91d3123e130891f2a99cdc3e8a91 37193d4255a390543f95008b423a9c327803f63ca66f39fe2d2600151251cf43
GET /favicon.ico HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7; _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Apache-Coyote/1.1
last-modified: Wed, 17 Jan 2024 16:05:42 GMT
accept-ranges: bytes
content-type: application/octet-stream;charset=UTF-8
content-length: 1150
date: Thu, 18 Apr 2024 09:07:37 GMT
x-cdn: Imperva
x-iinfo: 10-3280942-3280965 PNNN RT(1713431254173 2894) q(0 0 0 -1) r(1 1) U12
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000621_FULL_IMAGE.svg | 54.230.111.58 | 403 Forbidden | 0 B |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000621_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fit/en/logo_CA000621_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Cookie: _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: application/xml
server: AmazonS3
date: Thu, 18 Apr 2024 09:07:36 GMT
x-cache: Error from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0PHQ7YP0dSX8Y3H5i2f3ud9jydRXsVOU9gADt13kEiJXcmCxipgzPw==
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000998_FULL_IMAGE.svg | 54.230.111.58 | 403 Forbidden | 0 B |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000998_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fit/en/logo_CA000998_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: application/xml
date: Thu, 18 Apr 2024 09:07:35 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f7rGt4ulUPmQTSXTuCzAWc1-97c75rXp9RsCawryNTnFXCXEXv239w==
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery.mobile-1.4.5/jquery.mobile.structure-1.4.5.min.css | 45.60.87.208 | 200 OK | 69 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery.mobile-1.4.5/jquery.mobile.structure-1.4.5.min.css IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (65398) Hash1544ca9f803edff31be0577b9f985853 12db16f24c602523fe6610221b56928fc090da96 e1d94776078325c58b4cd50eedb8a10e8db7860d5d353618934b117057f8db8c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /resources/newgateway/vendor/jquery.mobile-1.4.5/jquery.mobile.structure-1.4.5.min.css HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7; _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Apache-Coyote/1.1
last-modified: Wed, 17 Jan 2024 16:05:42 GMT
accept-ranges: bytes
content-type: text/css;charset=UTF-8
date: Thu, 18 Apr 2024 09:07:35 GMT
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 10-3280942-3244533 2NYN RT(1713431254173 2217) q(0 0 0 -1) r(2 2) U18
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery-mobile-theme/themes/jquery.mobile.icons.min.css | 45.60.87.208 | 200 OK | 127 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery-mobile-theme/themes/jquery.mobile.icons.min.css IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (65398) Size127 kB (127053 bytes) Hash1299bcc0c86b9c76f6c8730d3ea5a8ae 6355ddce07865d75088f1fe3fbeea8a0c20f24da dc32dc43be1675a0e6ce0af34e8e5339e35651e26c70d6d00d0102830b7894d7
GET /resources/newgateway/vendor/jquery-mobile-theme/themes/jquery.mobile.icons.min.css HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7; _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Apache-Coyote/1.1
last-modified: Wed, 17 Jan 2024 16:05:42 GMT
accept-ranges: bytes
content-type: text/css;charset=UTF-8
date: Thu, 18 Apr 2024 09:07:35 GMT
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 10-3280942-3278939 2NYN RT(1713431254173 2214) q(0 0 0 -1) r(2 2) U18
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/gzip_5a5877ca34034008d7f643254180fd0e/gateway/vendorJS.js | 45.60.87.208 | 200 OK | 159 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/gzip_5a5877ca34034008d7f643254180fd0e/gateway/vendorJS.js IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size159 kB (158802 bytes) Hash5a5877ca34034008d7f643254180fd0e a858a6c60ad07fc7fe6ca14d24eb2091e8e1c8c3 a3ee664b3de72360fba0c99ad23ab06aa48a477a4735f01c48ba1ff62d0f77f0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /gzip_5a5877ca34034008d7f643254180fd0e/gateway/vendorJS.js HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Apache-Coyote/1.1
cache-control: public, max-age=315360000, post-check=315360000, pre-check=315360000
last-modified: Sun, 06 Nov 2005 12:00:00 GMT
etag: 2740050219
expires: Tue, 18 Apr 2034 09:07:35 GMT
content-encoding: gzip
content-type: text/javascript;charset=UTF-8
date: Thu, 18 Apr 2024 09:07:35 GMT
x-cdn: Imperva
x-iinfo: 10-3280942-3254469 2NNN RT(1713431254173 1070) q(0 0 0 -1) r(4 4) U18
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000998_FULL_IMAGE.svg | 54.230.111.58 | 403 Forbidden | 0 B |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000998_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fit/en/logo_CA000998_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Cookie: _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: application/xml
server: AmazonS3
date: Thu, 18 Apr 2024 09:07:36 GMT
x-cache: Error from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5BjwxOEoV6Kl74n81xHt_1MD2Kyj7q3xJicdiX8DBu7F927rDEd4gw==
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C | 45.60.87.208 | 200 OK | 137 kB |
URL User Request GET HTTP/2gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C IP45.60.87.208:443
CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
Size137 kB (136707 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ADRUM_BTa="R:0|g:45f91d3e-f385-40dc-b4ea-739628289518|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Apache-Coyote/1.1
set-cookie: ADRUM_BTa="R:0|g:45f91d3e-f385-40dc-b4ea-739628289518|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; Version=1; Max-Age=0; Path=/; Secure
ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51"; Version=1; Max-Age=30; Path=/; Secure
ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; Version=1; Max-Age=30; Path=/; Secure
SameSite=None; Expires=Thu, 18-Apr-2024 09:08:05 GMT; Path=/; Secure
ADRUM_BT1="R:0|i:84701"; Version=1; Max-Age=30; Path=/; Secure
ADRUM_BT1="R:0|i:84701|e:72"; Version=1; Max-Age=30; Path=/; Secure
JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; Path=/; Secure
org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; Path=/
GW=c73ece91-414f-4888-b0d6-70354969d4b7; Expires=Mon, 01-Dec-2070 11:49:43 GMT; Secure
x-powered-by: JSP/2.2
cache-control: no-cache
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-type: text/html;charset=UTF-8
content-language: en
date: Thu, 18 Apr 2024 09:07:34 GMT
x-incap-sess-cookie-hdr: mlANQ6POK2tPz4u/Lt7ICNbiIGYAAAAA3AdCp7pQHK5dnlMQfMCphA==
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 10-3280942-3280944 PNYN RT(1713431254173 460) q(0 0 0 -1) r(2 2) U12
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/resources/newgateway/images/icons-svg/question-mark.svg | 45.60.87.208 | 200 OK | 1.2 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/resources/newgateway/images/icons-svg/question-mark.svg IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash394d860e5cc882d2d89d27e5faf94fa7 01edd864c047563734438ce8d2618bd687d82064 2eb4b6d9ee766bea2ce9619cb129a71ed4c68b962053cc8c10b3efbd578b9ae5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /resources/newgateway/images/icons-svg/question-mark.svg HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; ADRUM_BTa="R:0|g:f9453b6f-53cd-4d7d-83ae-b7f9f809ff51|n:customer1_0e1293e8-58c6-46ac-aec5-52ae80b39c56"; ADRUM_BT1="R:0|i:84701|e:72"; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Apache-Coyote/1.1
last-modified: Wed, 17 Jan 2024 16:05:42 GMT
accept-ranges: bytes
content-type: image/svg+xml;charset=UTF-8
date: Thu, 18 Apr 2024 09:07:35 GMT
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 10-3280942-3280965 NNYN CT(113 117 0) RT(1713431254173 1073) q(0 0 2 -1) r(3 3) U18
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000621_FULL_IMAGE.svg | 54.230.111.58 | 403 Forbidden | 0 B |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000621_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fit/en/logo_CA000621_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: application/xml
date: Thu, 18 Apr 2024 09:07:35 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: a0k2zneLRLj1wR7rCWyQ2iLqo_YIf9GAGii4VUpDvBA_zk1DhFFtEA==
X-Firefox-Spdy: h2
|
|
| etransfer-content.qasit.interac.ca/fit/en/logo_CA000559_FULL_IMAGE.svg | 54.230.111.58 | 403 Forbidden | 0 B |
URL GET HTTP/2etransfer-content.qasit.interac.ca/fit/en/logo_CA000559_FULL_IMAGE.svg IP54.230.111.58:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.qasit.interac.ca Fingerprint7E:43:6E:57:DF:79:77:BD:CC:4D:D2:C5:8F:FB:A8:23:BE:34:E7:7E ValidityMon, 26 Jun 2023 00:00:00 GMT - Fri, 26 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fit/en/logo_CA000559_FULL_IMAGE.svg HTTP/1.1
Host: etransfer-content.qasit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: application/xml
date: Thu, 18 Apr 2024 09:07:35 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HS3zHOAvoDMN3WxbekpHC79EMx6HDMuUzv_LWlm7v3fpXMyZdR0OBw==
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery.mobile-1.4.5/jquery.mobile.structure-1.4.5.min.css | 45.60.87.208 | 200 OK | 69 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery.mobile-1.4.5/jquery.mobile.structure-1.4.5.min.css IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (65398) Hash1544ca9f803edff31be0577b9f985853 12db16f24c602523fe6610221b56928fc090da96 e1d94776078325c58b4cd50eedb8a10e8db7860d5d353618934b117057f8db8c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Interac e-Transfer |
GET /resources/newgateway/vendor/jquery.mobile-1.4.5/jquery.mobile.structure-1.4.5.min.css HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7; _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Apache-Coyote/1.1
last-modified: Wed, 17 Jan 2024 16:05:42 GMT
accept-ranges: bytes
content-type: text/css;charset=UTF-8
date: Thu, 18 Apr 2024 09:07:37 GMT
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 10-3280942-3272340 2NYN RT(1713431254173 2511) q(0 0 0 -1) r(2 2) U18
X-Firefox-Spdy: h2
|
|
| gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery-mobile-theme/themes/jquery.mobile.icons.min.css | 45.60.87.208 | 200 OK | 127 kB |
URL GET HTTP/2gateway-web.fit.interac.ca/resources/newgateway/vendor/jquery-mobile-theme/themes/jquery.mobile.icons.min.css IP45.60.87.208:443
Requested byhttps://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C CertificateIssuerDigiCert Inc Subject*.fit.interac.ca Fingerprint0C:E8:5E:7E:E1:CC:98:80:00:85:26:D8:F5:43:F0:54:07:EB:72:36 ValidityThu, 06 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (65398) Size127 kB (127053 bytes) Hash1299bcc0c86b9c76f6c8730d3ea5a8ae 6355ddce07865d75088f1fe3fbeea8a0c20f24da dc32dc43be1675a0e6ce0af34e8e5339e35651e26c70d6d00d0102830b7894d7
GET /resources/newgateway/vendor/jquery-mobile-theme/themes/jquery.mobile.icons.min.css HTTP/1.1
Host: gateway-web.fit.interac.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gateway-web.fit.interac.ca/RP.do?pID=CAGQrVbg&lang=en&lvt=46EF3E151E31100E797E17E33E561CF665DF34AF79D385A6A5BEF1040365413C
Cookie: SameSite=None; visid_incap_2069034=TeH6xWUJQNSUodSu4ZkYEtbiIGYAAAAAQUIPAAAAAACrCp8gQVnwJbbwgl/8MhDD; incap_ses_633_2069034=qGVRNLHwZHpPz4u/Lt7ICNbiIGYAAAAAFb1hotgq2a1xddQQ/69jEQ==; JSESSIONID=9n97BSf8+o+H+k4ANjN8lvqv; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; GW=c73ece91-414f-4888-b0d6-70354969d4b7; _ga_5F21NM3TH6=GS1.1.1713431256.1.0.1713431256.0.0.0; _ga=GA1.1.575646580.1713431256; _gcl_au=1.1.1192424566.1713431256; _ga_3PFFYSG26F=GS1.1.1713431256.1.0.1713431256.0.0.0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Apache-Coyote/1.1
last-modified: Wed, 17 Jan 2024 16:05:42 GMT
accept-ranges: bytes
content-type: text/css;charset=UTF-8
date: Thu, 18 Apr 2024 09:07:37 GMT
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 10-3280942-3254469 2NYN RT(1713431254173 2458) q(0 0 0 -1) r(1 1) U18
X-Firefox-Spdy: h2
|
|
0.0.0.0