Report - www.ngenia.ca/stcu

Report Overview

Submitted URL
www.ngenia.ca/stcu
IP
69.49.244.143
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2023-01-08 03:45:25
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	2.8 kB	142.250.74.131
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	341 B	797 B	93.184.220.29
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	54.148.70.121
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	940 B	34 kB	142.250.74.35
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.3 kB	67 kB	34.120.237.76
www.ngenia.ca	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	6.3 kB	956 kB	69.49.244.143
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	3.5 kB	23.36.77.32

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-01-08	medium	www.ngenia.ca/stcu	Phishing
2023-01-08	medium	www.ngenia.ca/stcu/	Phishing
2023-01-08	medium	www.ngenia.ca/stcu/assets/fonts/Alkami.woff2	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (0)

HTTP Transactions (41)

URL IP Response Size

www.ngenia.ca/stcu

69.49.244.143

301 Moved Permanently

234 B

URL HTTP/1.1
www.ngenia.ca/stcu
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
234 B (234 bytes)
Hash
bb6d76e0eac6ea59ae7149528ecc5f66
1b39d20bd8ca784fadfea3eee13a432798056a73
687b4d731649e26e6bd3bdbe151978c56cbb40edd6af3f1b13b130e7f940f534

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /stcu HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Sun, 08 Jan 2023 03:45:13 GMT
Server: Apache
Location: http://www.ngenia.ca/stcu/
Content-Length: 234
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b782882bdabaf3b08e64120922b4a4b7
2035ed7fc9fb5b6ee9715601ba43de5f94d0c0e9
3fe7d1a9a55b86ec25d02634749ccfae11f3477033ba8cd7ac4131b7948ba619

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FE7D1A9A55B86EC25D02634749CCFAE11F3477033BA8CD7AC4131B7948BA619"
Last-Modified: Sat, 07 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3789
Expires: Sun, 08 Jan 2023 04:48:23 GMT
Date: Sun, 08 Jan 2023 03:45:14 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
516b9d6951b09439a51d5284994ed92f
5c78edb38bae36caa8e2db8ed6635a32e46c91dd
eaaf4ebc59d2a06d02b552154c5adb7c713ffc4a7f5caabcff1c2b4cd6ec5c7b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EAAF4EBC59D2A06D02B552154C5ADB7C713FFC4A7F5CAABCFF1C2B4CD6EC5C7B"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4398
Expires: Sun, 08 Jan 2023 04:58:32 GMT
Date: Sun, 08 Jan 2023 03:45:14 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 08 Jan 2023 03:41:27 GMT
content-type: application/json
age: 227
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
75f0037a1d53a9a5321a796206ec3e24
70d42c9bf1334f20e1cea4ce3c8212e0e780ee77
80ec1e61f9563e799c9f44ea31e616c37daea1b9670091fbbc6efc39ebafe3d3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "80EC1E61F9563E799C9F44EA31E616C37DAEA1B9670091FBBC6EFC39EBAFE3D3"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3478
Expires: Sun, 08 Jan 2023 04:43:12 GMT
Date: Sun, 08 Jan 2023 03:45:14 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 05bzRxc1CTSko1jDa75AsgLc95APw9nU8ca0L0OQL8LHnxYKdMVIZ6FR5ALZRBJ3FggrqqtIlNc=
x-amz-request-id: QXEWQAMGN4Y8AWFE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 08 Jan 2023 03:00:39 GMT
age: 2675
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 08 Jan 2023 03:45:14 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 08 Jan 2023 03:17:21 GMT
age: 1673
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

www.ngenia.ca/stcu/

69.49.244.143

200 OK

23 kB

URL HTTP/1.1
www.ngenia.ca/stcu/
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1233), with CRLF line terminators
Size
23 kB (23127 bytes)
Hash
8c3cc018205053c8342f67290720f05c
6a2ef04c7c8809ab800313656c7f3805a4cc2154
3fa1ca8386893c0b873cb84235378cc63846bf03e2c19b78d1ebe22b10b44952

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /stcu/ HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:13 GMT
Server: Apache
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
8589b6a84dd5a09ec546aff38bbd2515
1c3a3d8a69ae7a3ebda64292caf0e0f5968e81f7
f013da155203f0509d56e8174c2ae5ed23aad413b4391f276efd388519743b17

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1269
Cache-Control: max-age=106965
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 03:45:14 GMT
Etag: "63b9362a-1d7"
Expires: Mon, 09 Jan 2023 09:27:59 GMT
Last-Modified: Sat, 07 Jan 2023 09:06:50 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

www.ngenia.ca/stcu/assets/css/css.css

69.49.244.143

200 OK

2.0 kB

URL HTTP/1.1
www.ngenia.ca/stcu/assets/css/css.css
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text
Size
2.0 kB (1994 bytes)
Hash
a6fa4e0adbbcf8b8ffca24c81b06aed7
760dd454134e036c3d2dd233fe01449aca25f330
234b9bab83aa0c52e9e5192995427a2bc44876cf1a11545ed631f369b8dc6534

HTTP Headers

GET /stcu/assets/css/css.css HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:13 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:46:32 GMT
Accept-Ranges: bytes
Content-Length: 1994
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

www.ngenia.ca/stcu/assets/css/iris.shim.mobile.min.css

69.49.244.143

200 OK

611 B

URL HTTP/1.1
www.ngenia.ca/stcu/assets/css/iris.shim.mobile.min.css
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (557)
Size
611 B (611 bytes)
Hash
2b495c471e337eac5d280f5519c6fc53
285689d6b41833ced6b63a3f82892d2901d4039b
06dee56fb4e2677948bc2f6ce7e20e9900e3c7431843ae3d9c9d975ff03889a7

HTTP Headers

GET /stcu/assets/css/iris.shim.mobile.min.css HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:47:34 GMT
Accept-Ranges: bytes
Content-Length: 611
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

www.ngenia.ca/stcu/assets/css/iris-components.shim.mobile.min.css

69.49.244.143

200 OK

910 B

URL HTTP/1.1
www.ngenia.ca/stcu/assets/css/iris-components.shim.mobile.min.css
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (683)
Size
910 B (910 bytes)
Hash
1f44b333889e3ce2d3afd5241a867df6
479b7744a42f4a791548a78917c6e36171366279
a2846a4052aced6d5dff4411038c7a8eda6eaa668d42c587e246e0c490105147

HTTP Headers

GET /stcu/assets/css/iris-components.shim.mobile.min.css HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:47:00 GMT
Accept-Ranges: bytes
Content-Length: 910
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

push.services.mozilla.com/

54.148.70.121

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.148.70.121:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: SngPpKOnKlH96c1JKl3a4Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: js+8Tv1qO1h4ua3RcKFTz49FPV4=

www.ngenia.ca/stcu/assets/css/iris-foundation.min.css

69.49.244.143

200 OK

51 kB

URL HTTP/1.1
www.ngenia.ca/stcu/assets/css/iris-foundation.min.css
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (50964)
Size
51 kB (51310 bytes)
Hash
0160c354e11f9e1f2ffcd720f880dc2e
7c3b5681a9483a0f37110476e04375e7e88d8fcc
037e5f8a4d2ef765d97f6c14e087cab4f8f27a1ac2a6a7584793b1a76a08fb8f

HTTP Headers

GET /stcu/assets/css/iris-foundation.min.css HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:47:04 GMT
Accept-Ranges: bytes
Content-Length: 51310
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

www.ngenia.ca/stcu/assets/css/isotope.min.css

69.49.244.143

200 OK

17 kB

URL HTTP/1.1
www.ngenia.ca/stcu/assets/css/isotope.min.css
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (5617)
Size
17 kB (16841 bytes)
Hash
aeba7c7542d0cfd5334a1c127c47b3d0
06289d7f44504e7d0449c7b72499a6c290aa2070
ce17c75b21517c0f7d2e84976ebebfcf586738b4a90d24d5b29a881b0ddce584

HTTP Headers

GET /stcu/assets/css/isotope.min.css HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 10:16:44 GMT
Accept-Ranges: bytes
Content-Length: 16841
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

www.ngenia.ca/stcu/assets/css/iris-foundation0.min.css

69.49.244.143

200 OK

51 kB

URL HTTP/1.1
www.ngenia.ca/stcu/assets/css/iris-foundation0.min.css
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (50964)
Size
51 kB (51310 bytes)
Hash
0160c354e11f9e1f2ffcd720f880dc2e
7c3b5681a9483a0f37110476e04375e7e88d8fcc
037e5f8a4d2ef765d97f6c14e087cab4f8f27a1ac2a6a7584793b1a76a08fb8f

HTTP Headers

GET /stcu/assets/css/iris-foundation0.min.css HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:47:14 GMT
Accept-Ranges: bytes
Content-Length: 51310
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

www.ngenia.ca/stcu/assets/css/iris.android.min.css

69.49.244.143

200 OK

100 kB

URL HTTP/1.1
www.ngenia.ca/stcu/assets/css/iris.android.min.css
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (65536), with no line terminators
Size
100 kB (100290 bytes)
Hash
85cd9d4ccf02320c1149fd050588f880
f23c8d62fdff39d4ebd68a174b4437ab8b57406f
4bc15637adde0ad4d43c0fd840f422f5a369d0b2a8032bf19d84eefe5ae31f20

HTTP Headers

GET /stcu/assets/css/iris.android.min.css HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:47:28 GMT
Accept-Ranges: bytes
Content-Length: 100290
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

www.ngenia.ca/stcu/assets/css/theme.mobile.min.css

69.49.244.143

200 OK

112 kB

URL HTTP/1.1
www.ngenia.ca/stcu/assets/css/theme.mobile.min.css
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (65536), with no line terminators
Size
112 kB (112426 bytes)
Hash
7d1b99ff126efe99d98e8cf57bf82d1c
8047d325f60580b92a22d95bd933217363c5eb65
61c3584870ef440104e0519ede77ed37a29487eafb30a8627d9d25f6c8a2a63c

HTTP Headers

GET /stcu/assets/css/theme.mobile.min.css HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:47:50 GMT
Accept-Ranges: bytes
Content-Length: 112426
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

www.ngenia.ca/stcu/assets/css/css0.css

69.49.244.143

200 OK

6.0 kB

URL HTTP/1.1
www.ngenia.ca/stcu/assets/css/css0.css
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text
Size
6.0 kB (6038 bytes)
Hash
423e2cf75eb841586fb2afdef66257d2
2cf38ece76875218e3159767e9c71f37fb55a82e
e0be1d222e2e367ac5106f4aee4830c3de18af1d266f8cde53915e11e8b01bfd

HTTP Headers

GET /stcu/assets/css/css0.css HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:46:40 GMT
Accept-Ranges: bytes
Content-Length: 6038
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

www.ngenia.ca/stcu/assets/css/jquery-ui.min.css

69.49.244.143

200 OK

31 kB

URL HTTP/1.1
www.ngenia.ca/stcu/assets/css/jquery-ui.min.css
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (29517)
Size
31 kB (31322 bytes)
Hash
a5572f750a0871beec3e5c771118f593
152d246c50c28633dd803f49e28fe5d7635701e6
75d3513cd72651dab00071d36b00c1546142fa141167f7fc770af9bce061028e

HTTP Headers

GET /stcu/assets/css/jquery-ui.min.css HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:47:44 GMT
Accept-Ranges: bytes
Content-Length: 31322
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

www.ngenia.ca/stcu/assets/css/iris-components.min.css

69.49.244.143

200 OK

361 kB

URL HTTP/1.1
www.ngenia.ca/stcu/assets/css/iris-components.min.css
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (65310)
Size
361 kB (360735 bytes)
Hash
5f4efcef0bacb24aac4fe30d23a35227
26b4dd9b5b391a2c6056e1e068f182488f03d58b
3540d362cd29f6034b0c706bfa757cff9eb7d89797920b222be6ab58cc8ca333

HTTP Headers

GET /stcu/assets/css/iris-components.min.css HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:46:52 GMT
Accept-Ranges: bytes
Content-Length: 360735
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css

www.ngenia.ca/stcu/assets/css/base.min.css

69.49.244.143

200 OK

2.2 kB

URL HTTP/1.1
www.ngenia.ca/stcu/assets/css/base.min.css
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (2205)
Size
2.2 kB (2247 bytes)
Hash
4865f8669fe9034f06986bd3eaa1916d
a08bd0342480700f5b66d7913d5a3486a7da908f
f555d3efaa4e368224cc19b0b261b00da4183e8a5247d3858e8ce7e2aa764558

HTTP Headers

GET /stcu/assets/css/base.min.css HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:46:26 GMT
Accept-Ranges: bytes
Content-Length: 2247
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

www.ngenia.ca/stcu/assets/css/font-icons.css

69.49.244.143

200 OK

120 kB

URL HTTP/1.1
www.ngenia.ca/stcu/assets/css/font-icons.css
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with CRLF line terminators
Size
120 kB (119892 bytes)
Hash
423e893b42e11a054db0959bd9bc0517
6f6288b2f2d93c1440135b18a57922cd233096bf
71c2307e4e7e4adf455b5bcc8cdfec8740614809c0425587134b3408af8661c8

HTTP Headers

GET /stcu/assets/css/font-icons.css HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:51:04 GMT
Accept-Ranges: bytes
Content-Length: 119892
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
294742535da40d02498d9e1c865d4014
99d45ec581ccba41915745f22da696aa9c5758ea
645f09beffda2d924626cedd5aa832a5a0e1b136ddf3fdc0b65fd9526f8b5531

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 03:45:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.ngenia.ca/stcu/assets/favicons/apple-touch-icon-152x152.png

69.49.244.143

200 OK

1.5 kB

URL HTTP/1.1
www.ngenia.ca/stcu/assets/favicons/apple-touch-icon-152x152.png
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 152 x 152, 8-bit colormap, non-interlaced\012- data
Size
1.5 kB (1498 bytes)
Hash
15a317ab7731ec5af77f6d6edb13570f
85009c56afb89d424b9cc99c5e315cb65c04088e
30561faa0d758a2f3b8eaa3b6756aa967d23e1891bd0f1492010206edc46f846

HTTP Headers

GET /stcu/assets/favicons/apple-touch-icon-152x152.png HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:49:02 GMT
Accept-Ranges: bytes
Content-Length: 1498
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

www.ngenia.ca/stcu/assets/favicons/favicon-16x16.png

69.49.244.143

200 OK

472 B

URL HTTP/1.1
www.ngenia.ca/stcu/assets/favicons/favicon-16x16.png
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size
472 B (472 bytes)
Hash
eb5530bb34e0ca75c9f446f33cca1b62
f85bc5ec8685e17fe45a7fe913a25fc3cc83c7ff
6bd925d1005ffa58279da1025c6ccbbe75825de8206be8dcc6359b16acf31be1

HTTP Headers

GET /stcu/assets/favicons/favicon-16x16.png HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:48:22 GMT
Accept-Ranges: bytes
Content-Length: 472
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
294742535da40d02498d9e1c865d4014
99d45ec581ccba41915745f22da696aa9c5758ea
645f09beffda2d924626cedd5aa832a5a0e1b136ddf3fdc0b65fd9526f8b5531

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 03:45:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
294742535da40d02498d9e1c865d4014
99d45ec581ccba41915745f22da696aa9c5758ea
645f09beffda2d924626cedd5aa832a5a0e1b136ddf3fdc0b65fd9526f8b5531

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 03:45:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

142.250.74.35

200 OK

16 kB

URL HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.ngenia.ca
Connection: keep-alive
Referer: http://www.ngenia.ca/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 04 Jan 2023 19:33:54 GMT
expires: Thu, 04 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 288681
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

142.250.74.35

200 OK

16 kB

URL HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.ngenia.ca
Connection: keep-alive
Referer: http://www.ngenia.ca/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Jan 2023 13:33:13 GMT
expires: Sat, 06 Jan 2024 13:33:13 GMT
cache-control: public, max-age=31536000
age: 137522
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.ngenia.ca/stcu/assets/img/MobileLogo.png

69.49.244.143

200 OK

27 kB

URL HTTP/1.1
www.ngenia.ca/stcu/assets/img/MobileLogo.png
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 900 x 339, 8-bit/color RGBA, non-interlaced\012- data
Size
27 kB (27053 bytes)
Hash
fadf04aeeef2baf1a07ca9b9c9bf294c
c06b32cc9007aca41bdf4e9d183b525702e8eb90
a794676a4c63ac4059ef5b1dd0ce7c3ed92d623a9d9ebf0a0a9f548569a63a78

HTTP Headers

GET /stcu/assets/img/MobileLogo.png HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/assets/css/isotope.min.css

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:46:04 GMT
Accept-Ranges: bytes
Content-Length: 27053
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

www.ngenia.ca/stcu/assets/fonts/Alkami.woff2

69.49.244.143

200 OK

43 kB

URL HTTP/1.1
www.ngenia.ca/stcu/assets/fonts/Alkami.woff2
IP
69.49.244.143:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
Web Open Font Format (Version 2), TrueType, length 42788, version 1.0\012- data
Size
43 kB (42788 bytes)
Hash
59b312cc14171b8be1037c05e4b830b1
7271e053a40555a4702cae4f1d7cacbccb3530ca
1afa9dc7e360a009ac244606b5265dbdb33f418ce3410a683a068c7b40a48825

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /stcu/assets/fonts/Alkami.woff2 HTTP/1.1
Host: www.ngenia.ca
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.ngenia.ca/stcu/assets/css/font-icons.css

HTTP/1.1 200 OK
Date: Sun, 08 Jan 2023 03:45:14 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 09:45:30 GMT
Accept-Ranges: bytes
Content-Length: 42788
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: font/woff2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
294742535da40d02498d9e1c865d4014
99d45ec581ccba41915745f22da696aa9c5758ea
645f09beffda2d924626cedd5aa832a5a0e1b136ddf3fdc0b65fd9526f8b5531

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 03:45:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4090
Expires: Sun, 08 Jan 2023 04:53:26 GMT
Date: Sun, 08 Jan 2023 03:45:16 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fc3fbba-c748-477d-b1a9-4218da052cc0.jpeg

34.120.237.76

200 OK

9.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fc3fbba-c748-477d-b1a9-4218da052cc0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.6 kB (9644 bytes)
Hash
fc604aed78008733f09b024b71a6fda9
0f3f633b0b34ac3662febdc45704362c49622a42
7c4f5871e571148c25f83b8676846ab1b0e82be3f4a1b3fb7c05bfe23e29c1b5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fc3fbba-c748-477d-b1a9-4218da052cc0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9644
x-amzn-requestid: 63281b3f-e673-4836-9729-7f595b0fb8b3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZDu5FkioAMF9tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b9e65f-5869b987090de6f758472be9;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 21:38:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JsNm98uTnFfNyDnk651OGxB92JTaNKc7H92yP3FCBhUb9BBsFs-Ygg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 21:44:42 GMT
age: 21634
etag: "0f3f633b0b34ac3662febdc45704362c49622a42"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (13626 bytes)
Hash
afcc8f4875f4b74ca0640829b689731e
584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df
3e487396389c4330abc99bc99053eecc6aaf56f7afa398d70c30e1f4709577a0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 13626
x-amzn-requestid: 4769eaeb-0c78-4054-ad47-eefdd6ab2d03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eWHMZErbIAMF6sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8b8b5-4c7bacfe060899044e361f70;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 00:11:33 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: H3uGFYbyPSwFZQCvn99EtVQw1Xz9DBbTgrK2FmfoKYBcZXkj60CbuQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 abbf2df97f9d83839470842dc2e68cb6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 13:36:28 GMT
age: 50928
etag: "584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe514d6b4-d121-4306-bf86-188898b1c740.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10213 bytes)
Hash
e1d3a5afe71c33a0928253dc81735e84
25517ce8122b9437315c60d8b8c068f910c01be5
79e5d18713508554e76e4bfeeb641d11452474bcb5777d29b2d74128545bc8bb

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe514d6b4-d121-4306-bf86-188898b1c740.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 10213
x-amzn-requestid: e7de15d5-c17e-445b-bab9-673e2a5705d4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZDuGHKeoAMFgbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b9e65a-79ada7ed7c2010b74f951166;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 21:38:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: onW_axkXuUl2JmLRjzOqJTy6pCmJpGpOjztM3pOkr-ZPAzzNtTmMPg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 21:44:42 GMT
age: 21634
etag: "25517ce8122b9437315c60d8b8c068f910c01be5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F973f3653-99a9-4d8b-a3ca-26124b0a7350.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11694 bytes)
Hash
9c7a07834f3ef5cfbd27c91b49c2df3e
5f53a0fd71f8ba434419f6c43e922d785302a7fa
43fe896ad03ec8ca66cccca45cf4edebf2d6b2801fe0b10e5cf215a753fb1d34

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F973f3653-99a9-4d8b-a3ca-26124b0a7350.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 11694
x-amzn-requestid: 840b4dd7-e46f-4e7c-8d4f-711d2aab8595
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eJ4C9GjVIAMFfhg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b3d3ac-134744d563ff9f7455c10c72;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 07:05:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: NKMYtNmSuvrXPstZaEeOXBgJm7TW-AahjcU_3HotwVdyx5pryt06_Q==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 12:50:43 GMT
age: 53673
etag: "5f53a0fd71f8ba434419f6c43e922d785302a7fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5941f04b-d952-4fae-85f3-c1bff0c5cdf4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.4 kB (5399 bytes)
Hash
50dd2e696e0a1a48dbcd4d1b8bc907e7
e2e91a662b66969e9f848927911128abf06121d2
ccef677139534fdf8de161c8dc8f4bd48f92546bfa0f3ae23d1457e381d5b3b9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5941f04b-d952-4fae-85f3-c1bff0c5cdf4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 5399
x-amzn-requestid: 8a055705-ca07-4b8d-8767-210322697e27
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eMnz9FQkIAMFUBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b4ece5-292906a73d727ee2454e6a11;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 03:05:09 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Nug5Gd-a5TFCM1EXrg7DcKRe7KR5Yr5M_Qxz_NS6da4YkblpH1oFkg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 07:09:23 GMT
age: 74153
etag: "e2e91a662b66969e9f848927911128abf06121d2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9dc47a4-a4c6-419a-a3a4-8f9104d7903d.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10285 bytes)
Hash
aa7c2273cc951c105b70b0609924ba61
4e6b0302f3aa61553128d453e4c9fed886773500
320f73b9188e0d59868a47bb60c5fabf45d4f754fd934cb5082ef6ef98d4cc57

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9dc47a4-a4c6-419a-a3a4-8f9104d7903d.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 10285
x-amzn-requestid: 720699b5-142f-40e8-b42f-ebf8b0fac767
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZDuqGP8IAMFhtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b9e65d-480527ba582bb5a458ce1b24;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 21:38:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hacziPAK6XADBjc0ewKd4EUwY49f3xDpl6r3xzJMsYPGuJQe4hBfFQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 21:44:42 GMT
age: 21634
etag: "4e6b0302f3aa61553128d453e4c9fed886773500"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (0)

HTTP Transactions (41)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type