Overview

URL ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
IP192.185.129.60
ASNUNIFIEDLAYER-AS-1
Location United States
Report completed2022-09-14 16:42:39 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-09-13 2 ayubrugs.com/UltraBranch/efs/servlet/efs/security.php Alaska USA Federal Credit Union
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-14 2 ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/jquery/jquery.maskedinpu (...) Phishing
2022-09-14 2 ayubrugs.com/UltraBranch/efs/servlet/efs/security.php Phishing
2022-09-14 2 ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/DotNetScripts_v4.js Phishing
2022-09-14 2 ayubrugs.com/UltraBranch/efs/servlet/efs/Scripts/jquery-1.10.2.js Phishing
2022-09-14 2 ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/AriaLib.js Phishing
2022-09-14 2 ayubrugs.com/enroll/ScriptLib/md5.js Phishing
2022-09-14 2 ayubrugs.com/enroll/ScriptLib/md5.js Phishing
2022-09-14 2 ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/jquery/jquery.maskedinpu (...) Phishing
2022-09-14 2 ayubrugs.com/enroll/ScriptLib/md5.js Phishing
2022-09-14 2 ayubrugs.com/enroll/ScriptLib/md5.js Phishing
2022-09-14 2 ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/DotNetScripts_v4.js Phishing
2022-09-14 2 ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/AriaLib.js Phishing
2022-09-14 2 ayubrugs.com/UltraBranch/efs/servlet/efs/Scripts/jquery-1.10.2.js Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (10)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS ocsp.sectigo.com (2) 487 2018-12-17 11:31:55 UTC 2022-09-14 11:54:44 UTC 104.18.32.68
mnemonic passive DNS www.alaskausa.org (14) 258465 2014-07-12 19:45:14 UTC 2022-09-14 06:07:42 UTC 107.162.171.161
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-09-14 12:26:26 UTC 143.204.55.27
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-14 04:48:22 UTC 34.117.237.239
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-14 04:48:23 UTC 54.149.28.179
mnemonic passive DNS ayubrugs.com (39) 0 2016-04-02 15:01:01 UTC 2022-09-14 06:07:52 UTC 192.185.129.60 Unknown ranking
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-14 12:35:36 UTC 34.120.237.76
mnemonic passive DNS r3.o.lencr.org (4) 344 2020-12-02 08:52:13 UTC 2022-09-14 04:47:59 UTC 23.36.77.32
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-14 04:47:55 UTC 143.204.55.49
mnemonic passive DNS ocsp.digicert.com (6) 86 2012-05-21 07:02:23 UTC 2022-09-14 07:25:26 UTC 93.184.220.29


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 192.185.129.60

Date UQ / IDS / BL URL IP
2022-12-05 22:37:45 +0000
0 - 0 - 2 fliq.ae/tmu/ideds 192.185.129.60
2022-12-05 22:37:44 +0000
0 - 0 - 2 fliq.ae/tmu/numstue 192.185.129.60
2022-11-18 08:34:26 +0000
0 - 0 - 3 kitsecellgnt.com/eoq/entacqarsiniouum 192.185.129.60
2022-11-18 08:34:25 +0000
0 - 0 - 3 kitsecellgnt.com/eoq/itcdsiteatpui 192.185.129.60
2022-11-18 08:34:24 +0000
0 - 0 - 3 kitsecellgnt.com/eoq/eulvmeueatrttotpn 192.185.129.60

Last 5 reports on ASN: UNIFIEDLAYER-AS-1

Date UQ / IDS / BL URL IP
2022-12-09 02:03:33 +0000
0 - 0 - 5 webpageconsulting.net/public/zP9PoVlJPWvHzcY5 (...) 66.147.240.98
2022-12-09 02:03:11 +0000
0 - 0 - 5 webpageconsulting.net/public/bfYEN20cbzBL0sRH (...) 66.147.240.98
2022-12-09 02:02:54 +0000
0 - 0 - 5 webpageconsulting.net/public/wEF2AK7YKfmZ59Nn (...) 66.147.240.98
2022-12-09 02:02:17 +0000
0 - 0 - 1 atmos-ent.com/wp-admin/css/asap/Godaddy.zip 74.220.199.6
2022-12-09 02:00:53 +0000
0 - 0 - 60 ab-tdod8.ga/ 142.4.9.156

Last 5 reports on domain: ayubrugs.com

Date UQ / IDS / BL URL IP
2022-09-17 02:28:02 +0000
0 - 0 - 2 ayubrugs.com/UltraBranch/efs/servlet/efs/logi (...) 192.185.129.60
2022-09-17 02:28:00 +0000
0 - 0 - 2 ayubrugs.com/UltraBranch/login.php?cmd=login_ (...) 192.185.129.60
2022-09-16 22:22:35 +0000
0 - 0 - 2 ayubrugs.com/UltraBranch/efs/servlet/efs/logi (...) 192.185.129.60
2022-09-16 15:36:57 +0000
0 - 0 - 2 ayubrugs.com/UltraBranch/efs/servlet/efs/logi (...) 192.185.129.60
2022-09-16 15:36:31 +0000
0 - 0 - 14 ayubrugs.com/UltraBranch/efs/servlet/efs/secu (...) 192.185.129.60

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-10-01 03:35:02 +0000
0 - 0 - 12 cascadiasolutions.ca/en/UltraBranch/efs/servl (...) 172.67.209.163
2022-09-30 22:44:47 +0000
0 - 0 - 2 cascadiasolutions.ca/en/UltraBranch/efs/servl (...) 172.67.209.163
2022-09-30 16:32:12 +0000
0 - 0 - 12 cascadiasolutions.ca/en/UltraBranch/efs/servl (...) 172.67.209.163
2022-09-30 13:25:22 +0000
0 - 0 - 12 cascadiasolutions.ca/en/UltraBranch/efs/servl (...) 172.67.209.163
2022-09-30 02:53:37 +0000
0 - 0 - 11 cascadiasolutions.ca/en/UltraBranch/efs/servl (...) 172.67.209.163


JavaScript

Executed Scripts (18)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (76)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 14 Sep 2022 16:09:37 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: CJMd5448WuQ2G0m6k5oQI0010WWB2tVzyXhMYN6k9ebk6U06iD6E2w==
Age: 1971


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    91dd975a7b17b2922dd23c0e49314e40
Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8178
Expires: Wed, 14 Sep 2022 18:58:46 GMT
Date: Wed, 14 Sep 2022 16:42:28 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.49
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SEYghGfzrElhEwwe0cCajRElzqcVG2yA9L2sqB2hbFDwK-Q3iFO3yQ==
age: 43633
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 14 Sep 2022 16:42:29 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 14 Sep 2022 16:03:22 GMT
Cache-Control: max-age=3600
Expires: Wed, 14 Sep 2022 16:09:31 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Y1dsaYX2NWnxi758375wjr5W9FJTEoU77eqVKGVxIisMSzM5mU8K5g==
Age: 2347


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4954
Cache-Control: 'max-age=158059'
Date: Wed, 14 Sep 2022 16:42:29 GMT
Last-Modified: Wed, 14 Sep 2022 15:19:55 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Z8KLHYe27W+7Od2bzTN2aQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         54.149.28.179
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: aFMgXUr1EpC1D2suwphQadD2pGw=

                                        
                                            GET /UltraBranch/efs/servlet/efs/ScriptLib/jquery/jquery.maskedinput-1.4.1.min.js HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:30 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /UltraBranch/efs/servlet/efs/security.php HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         192.185.129.60
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 14 Sep 2022 16:42:28 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (38668), with CRLF line terminators
Size:   46394
Md5:    cbc4aae1cc728b9399fca33afcb6b83b
Sha1:   bd408aad3e6b2c88e11deec2705d3464d69ed739
Sha256: 4b1176c2f07975af424bd57c016e4fc0d2cf230b0c40d05d7b036dccb11c2909

Alerts:
  Blocklists:
    - openphish: Alaska USA Federal Credit Union
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10061
Expires: Wed, 14 Sep 2022 19:30:12 GMT
Date: Wed, 14 Sep 2022 16:42:31 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10061
Expires: Wed, 14 Sep 2022 19:30:12 GMT
Date: Wed, 14 Sep 2022 16:42:31 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10061
Expires: Wed, 14 Sep 2022 19:30:12 GMT
Date: Wed, 14 Sep 2022 16:42:31 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6078
x-amzn-requestid: e09c099f-5a2d-49d7-b6ab-e16f09c28bd0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavJEEM5IAMFreQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f8a0-0fbb7b3d0cd6fbfa04f5a5d2;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:39:44 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Ur-HTN2DS8b3ojSQldJOZi6YW2wtCwRfbGqxg49ZUJ_00hC_rFxYEw==
via: 1.1 9b21fd56256eda6d1379e32829c4c446.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:51:32 GMT
age: 67859
etag: "33d0dcadaa42179b2eae914c8ad16c9c088afbc9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6078
Md5:    f2157f7cfbdeb607f28ae51eb090f2c3
Sha1:   33d0dcadaa42179b2eae914c8ad16c9c088afbc9
Sha256: 135cd89c2c82f0f5e53d2612d5eac868c175b28a567a07e63a2073942e36a066
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f033f00-b116-4419-9d21-3aed9c73ea2e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8764
x-amzn-requestid: 5f78a61a-f4c3-4f15-80e6-5d3e3e0db46f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YVa6AFvwoAMFyOA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ed83f-3e0fa606132b3cfb771af58d;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 06:57:03 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: kg7T9joYF6fwLTBPrmrAnWfzweJpRedkAlHkMoU5qOICjiElKHVkrQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 22:45:32 GMT
age: 64619
etag: "28d47359e70789115b2954b6c94711bb783b3c8c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8764
Md5:    9d97e56f75165efcc71ae54952ded405
Sha1:   28d47359e70789115b2954b6c94711bb783b3c8c
Sha256: 564eac2ae99724e5f43aa1ae0afe4dec03697f888f51774e70e1b9c273c2d9d6
                                        
                                            GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ControlStyles_v4.css HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:30 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34a3d36b-806f-4fea-a370-b26c1e8473d0.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5988
x-amzn-requestid: a0d81c7a-14e3-443d-8fb7-19241f06d3c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yaux0H77IAMF2_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f80b-0fe6fbbe75e891b925f88dc2;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:37:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 1X79jBMZa4UQmWsLdg_QIg5MQeersp1O3iSgpKd6R2f8Kl7PAJh0hQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:49:32 GMT
etag: "e5b46c3ca439a09950290cada1af5e27cede10f2"
age: 67979
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5988
Md5:    f5befd5bb8e6d5dad2465be69d5a33e4
Sha1:   e5b46c3ca439a09950290cada1af5e27cede10f2
Sha256: 4dc0a3373fb4c1830c4e2420dddbcbe8dceecf10e969cbe8d02368e41207832c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8cb650f7-1b0f-4a3d-898f-97b846afe9db.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10138
x-amzn-requestid: bdf798d9-6729-4363-a900-f32c4041d0c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YU5qsGZ-oAMFQ1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ea311-7b146c0620a83d5c00446f87;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 03:10:09 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OM9K72ukk0cuyR1ZcV5xWXnEd8U9OgeQi7bkCe0Pzn3BfdLMvSdSXg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 03:02:44 GMT
age: 49187
etag: "0617d2e513097ca415a1d07cd39b1cb64d832ecf"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10138
Md5:    0789404fdbe3613d465d8fa89a63d7b8
Sha1:   0617d2e513097ca415a1d07cd39b1cb64d832ecf
Sha256: 80e55e383f354113c3694bbcc00fd1c544a97079bd3c462f1b90e952c0634bac
                                        
                                            GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ExternalTemplateStyles_v4.css HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:30 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2b71bb0-fd92-43d0-8cd0-b426d0b88ee8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 15547
x-amzn-requestid: a78f7d90-84c3-4198-88bf-1d722c37f09f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yauv4EUDoAMF13A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f7ff-49535e5525606250306488ba;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:37:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: yP22CSG5x3BVfq29UMdw30TZcvuaL-kUDgjBZDUEMpRVDWqlZrCgdQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:42:05 GMT
age: 68426
etag: "366b2090d409d694b72b4b4131df46dd65d69c5a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   15547
Md5:    56811a1a20a467464e1f3da171ef8b14
Sha1:   366b2090d409d694b72b4b4131df46dd65d69c5a
Sha256: 4c208fb88884166adf4ecc5882f75948b4a87d85c76ad6e7137e8edbd125c996
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16b1b829-b672-479c-964a-2f636f65f91e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 14151
x-amzn-requestid: d5bc9be4-af3a-40fd-bfc9-1ac4769d2d3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yauv4GhboAMF2dA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f7ff-375df72d2d67582635b9e4ae;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:37:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CZRpgjU_AxNYoyeSTOwhJhONl2DS4pvCLJ62RgAFp0flw-kPz3GkpQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:48:11 GMT
age: 68060
etag: "a3e706d6309e4a9d7b293f2b9255f1550ba5e9b7"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   14151
Md5:    fef8234ab83f6f8f8b29665f592cbc9f
Sha1:   a3e706d6309e4a9d7b293f2b9255f1550ba5e9b7
Sha256: 569c8c9736026fc310e148d4d74081e96a86245baaa1f784280d44a1cbd25ed0
                                        
                                            GET /enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621 HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 14 Sep 2022 16:42:30 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621
Content-Length: 326
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   326
Md5:    dbe7978f2b905c10f56e0f172ac4f341
Sha1:   f8fec15ccb96f120b5befb19b5e7cc2235857968
Sha256: 27ca42dae6e551fbe1e08f10de538818828e9061880fb55ffa2aef08d0ca79af
                                        
                                            GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_UtilityStyles_v4.css HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:30 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
                                        
                                            GET /enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44 HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 14 Sep 2022 16:42:31 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44
Content-Length: 383
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   383
Md5:    53a5f37ece7182289e7e79220c40a35f
Sha1:   478054ccb0ba23b5c33686c84bb72ea90d35f4a5
Sha256: 43393f14a02e188c09898bdb862af06f282a9a96e7ade0712cfaa3a6f633cbab
                                        
                                            GET /enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 14 Sep 2022 16:42:31 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a
Content-Length: 412
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   412
Md5:    3b40690b7aa1d8083b473396d6ecd944
Sha1:   942d544da42e27c0ec077255db363671e4c16ce2
Sha256: 9ba12560331fdd32807622d60ba777eed9db73659f32a86a2a52cddd027a607f
                                        
                                            GET /enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 14 Sep 2022 16:42:31 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a
Content-Length: 433
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   433
Md5:    f63ac8544046df0e7bed686d3182cd23
Sha1:   8daf73edbd741af3e9a6d8523cda3cc6321e53e1
Sha256: 7075dbc8896625467da164d851819ceadf5532923cbe94bf6dbbda30d81a5191
                                        
                                            GET /UltraBranch/efs/servlet/efs/ScriptLib/DotNetScripts_v4.js HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:31 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /UltraBranch/efs/servlet/efs/Scripts/jquery-1.10.2.js HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:31 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /UltraBranch/efs/servlet/efs/ScriptLib/AriaLib.js HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:31 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /enroll/ScriptLib/md5.js HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 14 Sep 2022 16:42:31 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptLib/md5.js
Content-Length: 228
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   228
Md5:    3495f91d65f521742af05ebb011cc4c4
Sha1:   a564825de0f56e00f03c2791521e7e9b2678e5ca
Sha256: 1b0d71fb0502fe1082c6b0c107d040a31fc5b42285dc28705319ca5417253f28

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 14 Sep 2022 16:42:31 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 11:49:47 GMT
Expires: Tue, 20 Sep 2022 11:49:46 GMT
Etag: "e5be3ec55720dad8604cb4c7db9ec6be74effa79"
Cache-Control: max-age=500234,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74aa938a4f5fb4f7-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 14 Sep 2022 16:42:31 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 11:49:47 GMT
Expires: Tue, 20 Sep 2022 11:49:46 GMT
Etag: "e5be3ec55720dad8604cb4c7db9ec6be74effa79"
Cache-Control: max-age=500234,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74aa938aafedb4f7-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Wed, 14 Sep 2022 16:42:31 GMT
Server: ECS (amb/6B9F)
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=136826
Date: Wed, 14 Sep 2022 16:42:31 GMT
Etag: "632177f1-1d7"
Expires: Fri, 16 Sep 2022 06:42:57 GMT
Last-Modified: Wed, 14 Sep 2022 06:42:57 GMT
Server: nginx
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Wed, 14 Sep 2022 16:42:31 GMT
Server: ECS (amb/6BB6)
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Wed, 14 Sep 2022 16:42:31 GMT
Server: ECS (amb/6BC4)
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Wed, 14 Sep 2022 16:42:31 GMT
Server: ECS (amb/6BAE)
Content-Length: 471

                                        
                                            GET /enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621 HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.185.129.60
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
date: Wed, 14 Sep 2022 16:42:31 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   566
Md5:    f09186338d6d993ea8640d9db2ce2c39
Sha1:   797b88a80abd7596eeb04d3258d78dab39f7f462
Sha256: f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
                                        
                                            GET /enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44 HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.185.129.60
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
date: Wed, 14 Sep 2022 16:42:31 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   566
Md5:    f09186338d6d993ea8640d9db2ce2c39
Sha1:   797b88a80abd7596eeb04d3258d78dab39f7f462
Sha256: f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
                                        
                                            GET /enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.185.129.60
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
date: Wed, 14 Sep 2022 16:42:31 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   566
Md5:    f09186338d6d993ea8640d9db2ce2c39
Sha1:   797b88a80abd7596eeb04d3258d78dab39f7f462
Sha256: f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
                                        
                                            GET /enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.185.129.60
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
date: Wed, 14 Sep 2022 16:42:31 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   566
Md5:    f09186338d6d993ea8640d9db2ce2c39
Sha1:   797b88a80abd7596eeb04d3258d78dab39f7f462
Sha256: f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
                                        
                                            GET /enroll/ScriptLib/md5.js HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.185.129.60
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
date: Wed, 14 Sep 2022 16:42:31 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   566
Md5:    f09186338d6d993ea8640d9db2ce2c39
Sha1:   797b88a80abd7596eeb04d3258d78dab39f7f462
Sha256: f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /angelfish.js HTTP/1.1 
Host: www.alaskausa.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         107.162.171.161
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Last-Modified: Thu, 08 Sep 2022 17:42:57 GMT
Accept-Ranges: bytes
ETag: "a289e46eaac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Wed, 14 Sep 2022 16:42:30 GMT
Content-Length: 8704
Via: 1.1 dca1-bit13014
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (826)
Size:   8704
Md5:    23acb6d2cd2e079bfe986f0761b957d5
Sha1:   bb1cf7660324be47645c3e239b6fa51faa7421ea
Sha256: ad8da576b2060355b1ed4f753cb2a19ee37bba690f9fff2442a2654e55f235eb
                                        
                                            GET /css/akusa-express.css HTTP/1.1 
Host: www.alaskausa.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         107.162.171.161
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Last-Modified: Thu, 08 Sep 2022 17:43:07 GMT
Accept-Ranges: bytes
ETag: "5ce15074aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Wed, 14 Sep 2022 16:42:31 GMT
Via: 1.1 dca1-bit13014
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size:   4644
Md5:    825350f09acb37cf5ec0cac6016f5c8d
Sha1:   253d99cb60408d7f60734dcaf60abe848b4281c9
Sha256: 4afa21fd07b5e1574b4637b41e29ae2e93176e941d172c1476ca7fa947f7834e
                                        
                                            GET /js/jsSuite-1.8.js HTTP/1.1 
Host: www.alaskausa.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         107.162.171.161
HTTP/1.1 302 Object moved
Content-Type: text/html
                                        
Cache-Control: private
Location: /pageUnavailable.asp?status=missing
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Wed, 14 Sep 2022 16:42:30 GMT
Via: 1.1 dca1-bit13014
Set-Cookie: ASPSESSIONIDAWDBRSQS=EBBGNFPANENEILOJCAEDNLKN; secure; path=/ TS01682a2f=010d5d6462c7d9d1169a26957fc9498673f4b2555a4bddbe93ddcbcb318c7c3359a088e8ac67c31fc76ff3ee3e49e5e7513ef36d0dd53c25fd6f78fc3651b6f8269f2c87f0; Path=/; Secure; HTTPOnly
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   296
Md5:    33dc966734cea833f261863e35b1f2f3
Sha1:   b1c3e2ea6431645131178005d1eb1677c40cf4e5
Sha256: 21ec73760050529f53f914ef8194651a4c2de4411e4bc36be410947bd3a26dbc
                                        
                                            GET /js/jquery-1.11.3.min.js HTTP/1.1 
Host: www.alaskausa.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         107.162.171.161
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Last-Modified: Thu, 08 Sep 2022 17:44:01 GMT
Accept-Ranges: bytes
ETag: "4dd3aa94aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Wed, 14 Sep 2022 16:42:30 GMT
Via: 1.1 dca1-bit13014
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines (32038)
Size:   45711
Md5:    cf54b56dbd2adb27eb44fe6defb747e6
Sha1:   78e81335c5c317f9d56877d2f011a74a50910dd8
Sha256: 9256346dc8067ab6665a68fe1590b676d13f8ecd353fa2676ec372a2f3338a94
                                        
                                            GET /pageUnavailable.asp?status=missing HTTP/1.1 
Host: www.alaskausa.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         107.162.171.161
HTTP/1.1 200
Content-Type: text/html
                                        
Cache-Control: private
Set-Cookie: ss=c; expires=Fri, 14-Oct-2022 16:42:30 GMT; path=/ lst=915005823; expires=Wed, 14-Sep-2022 16:57:30 GMT; domain=.alaskausa.org; path=/; secure ASPSESSIONIDCWDTAQRB=FEJPNAABDCOAOKEMLIBHNHJO; secure; path=/; HttpOnly TS01682a2f=010d5d6462330746b2677245250b995eb80881ddd93de6fc14f933c11705d7831c029b826bfbfb91063705fb66fb57cef121d9fcbe88f02d31315d9f82bd5d081705f194b9956ef5b513e8057a344118806e6982d7; Path=/; Secure; HTTPOnly TS013395ac=010d5d6462a62e79cdbbbfd8d74a35a0727893246f3de6fc14f933c11705d7831c029b826bc02bb419d59a1490b5540df33d9f54c0d4c4057cf95be5cfdbdcc92c11697c57; path=/; domain=.alaskausa.org; HTTPonly; Secure
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Wed, 14 Sep 2022 16:42:30 GMT
Via: 1.1 dca1-bit13014
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (675), with CRLF, LF line terminators
Size:   13037
Md5:    775e2c235b224692c188b323d8e59685
Sha1:   7e30b22735b9576d13ab93009af346d6648538d3
Sha256: d1f788e0f193ff21b67170504b2879439a5dde5689abb0f2c2491020d3e66b1e
                                        
                                            GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/ControlImages/close.png HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:32 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
                                        
                                            GET /UltraBranch/efs/servlet/efs/ScriptLib/jquery/jquery.maskedinput-1.4.1.min.js HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:32 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /images/nav/EHL_2016_gray.png HTTP/1.1 
Host: www.alaskausa.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         107.162.171.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 08 Sep 2022 17:45:33 GMT
Accept-Ranges: bytes
ETag: "2f19accbaac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Wed, 14 Sep 2022 16:42:31 GMT
Content-Length: 3317
Via: 1.1 dca1-bit13014


--- Additional Info ---
Magic:  PNG image data, 55 x 59, 8-bit colormap, non-interlaced\012- data
Size:   3317
Md5:    859cf2ed8319f4931c1e2371bee8b46d
Sha1:   ff866fe6e3071999e6c057dae5aed927aefd047f
Sha256: 1c7cd686a01f2dcffc1f55119624e9166300721172b4e7ad284ff734bc8db0a1
                                        
                                            GET /images/nav/akusafcu_logo.png HTTP/1.1 
Host: www.alaskausa.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         107.162.171.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 08 Sep 2022 17:45:24 GMT
Accept-Ranges: bytes
ETag: "941b1ac6aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Wed, 14 Sep 2022 16:42:31 GMT
Content-Length: 16228
Via: 1.1 dca1-bit13014


--- Additional Info ---
Magic:  PNG image data, 220 x 70, 8-bit/color RGBA, non-interlaced\012- data
Size:   16228
Md5:    dc43cc5c96d54639189781edf322cac9
Sha1:   26c53d9c975f997481520a336ac5f6a22f115c74
Sha256: 6ceabe544edbb8513733f30b14c1d17a2fa51e461f972c31d17e5450d4718603
                                        
                                            GET /images/images.asp?ref=NCUA_2016_gray.png HTTP/1.1 
Host: www.alaskausa.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         107.162.171.161
HTTP/1.1 200 OK
Content-Type: image/x-png
                                        
Cache-Control: private
Expires: Wed, 14 Sep 2022 16:42:30 GMT
Content-Disposition: filename="ncua_2016_gray.png"
Set-Cookie: lst=20406655; expires=Wed, 14-Sep-2022 16:57:30 GMT; domain=.alaskausa.org; path=/; secure ASPSESSIONIDSGTAABQA=GMDMLCNAPEDJHLEIPCFIHHKK; secure; path=/; HttpOnly TS01682a2f=010d5d6462bb6ab3c1ddd341cf6959904956acf0f40cd6d4d8d33dbf1974764cbe26bf74b89e85457be86c587d7c60ec72f9160e667d588ba32efc1c47af385718aed19f35; Path=/; Secure; HTTPOnly TS013395ac=010d5d64628bd449b956e5a8de99f11eac2b50b0160cd6d4d8d33dbf1974764cbe26bf74b88aa0e87e7491385871acb2d51d7d4279a1ae9fae5d76f6edf3d05c6cefdb1a93; path=/; domain=.alaskausa.org; HTTPonly; Secure
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Wed, 14 Sep 2022 16:42:30 GMT
Connection: close
Via: 1.1 dca1-bit13014
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  PNG image data, 146 x 65, 8-bit colormap, non-interlaced\012- data
Size:   4280
Md5:    38b7240d957be9f71b5271246fb01f67
Sha1:   9007e7baf8e357ac11c8541c871e48960c8d9f30
Sha256: d6641292ca4109173a6ca88b1353f0a6edeaad1c5f90e4c69c6999943109a878
                                        
                                            GET /js/jsSuite-1.8.js HTTP/1.1 
Host: www.alaskausa.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         107.162.171.161
HTTP/1.1 302 Object moved
Content-Type: text/html
                                        
Cache-Control: private
Location: /pageUnavailable.asp?status=missing
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Wed, 14 Sep 2022 16:42:31 GMT
Via: 1.1 dca1-bit13014
Set-Cookie: ASPSESSIONIDCWDTAQRB=GEJPNAABAGDLGAPFMBHHANKA; secure; path=/ TS01682a2f=010d5d6462ded115e2a2bb01df1e9b71f793575b148b41b0cbbc98606efe013001652cc2178458e9cde35f3876b64a76400395712b7a4deac792d438038061c567d137f6ca; Path=/; Secure; HTTPOnly
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   296
Md5:    33dc966734cea833f261863e35b1f2f3
Sha1:   b1c3e2ea6431645131178005d1eb1677c40cf4e5
Sha256: 21ec73760050529f53f914ef8194651a4c2de4411e4bc36be410947bd3a26dbc
                                        
                                            GET /pageUnavailable.asp?status=missing HTTP/1.1 
Host: www.alaskausa.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         107.162.171.161
HTTP/1.1 200
Content-Type: text/html
                                        
Cache-Control: private
Set-Cookie: ss=c; expires=Fri, 14-Oct-2022 16:42:32 GMT; path=/ lst=470180223; expires=Wed, 14-Sep-2022 16:57:32 GMT; domain=.alaskausa.org; path=/; secure ASPSESSIONIDAWDBRSQS=GBBGNFPACJKLBBHICPPFOKIC; secure; path=/; HttpOnly TS01682a2f=010d5d64626481ecc65052982ca22d5851146fe345272f8cad71db2f4d0703c526e38dd898d0547cceb5680771245f52429cef2b1975c0d9aec2f5a67d1286db9ce4c4c014acc964b7b10184040e0443b05d93e53a; Path=/; Secure; HTTPOnly TS013395ac=010d5d64625824d5a318f77d31ac475d339b08442e272f8cad71db2f4d0703c526e38dd898449777e1d33ed86fd2b784615646bcf3652e81cfa0dd704cb8f9d4a4dee75dee; path=/; domain=.alaskausa.org; HTTPonly; Secure
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Wed, 14 Sep 2022 16:42:31 GMT
Via: 1.1 dca1-bit13014
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (675), with CRLF, LF line terminators
Size:   13037
Md5:    775e2c235b224692c188b323d8e59685
Sha1:   7e30b22735b9576d13ab93009af346d6648538d3
Sha256: d1f788e0f193ff21b67170504b2879439a5dde5689abb0f2c2491020d3e66b1e
                                        
                                            GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ControlStyles_v4.css HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:33 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
                                        
                                            GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_UtilityStyles_v4.css HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:33 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
                                        
                                            GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ExternalTemplateStyles_v4.css HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:33 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
                                        
                                            GET /enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621 HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 14 Sep 2022 16:42:33 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621
Content-Length: 326
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   326
Md5:    dbe7978f2b905c10f56e0f172ac4f341
Sha1:   f8fec15ccb96f120b5befb19b5e7cc2235857968
Sha256: 27ca42dae6e551fbe1e08f10de538818828e9061880fb55ffa2aef08d0ca79af
                                        
                                            GET /enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621 HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.185.129.60
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
date: Wed, 14 Sep 2022 16:42:33 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   566
Md5:    f09186338d6d993ea8640d9db2ce2c39
Sha1:   797b88a80abd7596eeb04d3258d78dab39f7f462
Sha256: f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
                                        
                                            GET /enroll/ScriptLib/md5.js HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 14 Sep 2022 16:42:33 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptLib/md5.js
Content-Length: 228
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   228
Md5:    3495f91d65f521742af05ebb011cc4c4
Sha1:   a564825de0f56e00f03c2791521e7e9b2678e5ca
Sha256: 1b0d71fb0502fe1082c6b0c107d040a31fc5b42285dc28705319ca5417253f28

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /enroll/ScriptLib/md5.js HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.185.129.60
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
date: Wed, 14 Sep 2022 16:42:33 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   566
Md5:    f09186338d6d993ea8640d9db2ce2c39
Sha1:   797b88a80abd7596eeb04d3258d78dab39f7f462
Sha256: f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44 HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 14 Sep 2022 16:42:33 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44
Content-Length: 383
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   383
Md5:    53a5f37ece7182289e7e79220c40a35f
Sha1:   478054ccb0ba23b5c33686c84bb72ea90d35f4a5
Sha256: 43393f14a02e188c09898bdb862af06f282a9a96e7ade0712cfaa3a6f633cbab
                                        
                                            GET /enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44 HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.185.129.60
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
date: Wed, 14 Sep 2022 16:42:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   566
Md5:    f09186338d6d993ea8640d9db2ce2c39
Sha1:   797b88a80abd7596eeb04d3258d78dab39f7f462
Sha256: f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
                                        
                                            GET /enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 14 Sep 2022 16:42:34 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a
Content-Length: 412
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   412
Md5:    3b40690b7aa1d8083b473396d6ecd944
Sha1:   942d544da42e27c0ec077255db363671e4c16ce2
Sha256: 9ba12560331fdd32807622d60ba777eed9db73659f32a86a2a52cddd027a607f
                                        
                                            GET /enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.185.129.60
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
date: Wed, 14 Sep 2022 16:42:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   566
Md5:    f09186338d6d993ea8640d9db2ce2c39
Sha1:   797b88a80abd7596eeb04d3258d78dab39f7f462
Sha256: f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
                                        
                                            GET /enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 14 Sep 2022 16:42:34 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a
Content-Length: 433
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   433
Md5:    f63ac8544046df0e7bed686d3182cd23
Sha1:   8daf73edbd741af3e9a6d8523cda3cc6321e53e1
Sha256: 7075dbc8896625467da164d851819ceadf5532923cbe94bf6dbbda30d81a5191
                                        
                                            GET /enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.185.129.60
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
date: Wed, 14 Sep 2022 16:42:34 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   566
Md5:    f09186338d6d993ea8640d9db2ce2c39
Sha1:   797b88a80abd7596eeb04d3258d78dab39f7f462
Sha256: f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
                                        
                                            GET /UltraBranch/efs/servlet/efs/ScriptLib/DotNetScripts_v4.js HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:34 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /UltraBranch/efs/servlet/efs/ScriptLib/AriaLib.js HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:35 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=65
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /UltraBranch/efs/servlet/efs/Scripts/jquery-1.10.2.js HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:35 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=64
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/ControlImages/close.png HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php

                                         
                                         192.185.129.60
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Wed, 14 Sep 2022 16:42:35 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=63
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   358
Md5:    e6380e0c65d744670ca2bdfdebf952e7
Sha1:   72010e09611689dba83d615d7d4e14525584f574
Sha256: a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
                                        
                                            GET /agf.gif?t=pv&pv=%2FUltraBranch%2Fefs%2Fservlet%2Fefs%2Fsecurity.php&tt=Security+Question&vt=new&sc=direct&md=(none)&dp=24&sh=1024&sw=1280&bn=Firefox&bv=96&pn=Linux&pr=x86_64&bl=en-us&js=1.5&hn=ayubrugs.com&vi=22439851&vs=224398511663173742&_=353229&v=040 HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
Cookie: agft=8695a7de5fa8a9a2bf6d7bd9689ae107.22439851; agfs=8695a7de5fa8a9a2bf6d7bd9689ae107.22439851&1663173742&1663173742&direct&(none)&&&&&

                                         
                                         192.185.129.60
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 14 Sep 2022 16:42:35 GMT
Server: Apache
Location: https://ayubrugs.com/agf.gif?t=pv&pv=%2FUltraBranch%2Fefs%2Fservlet%2Fefs%2Fsecurity.php&tt=Security+Question&vt=new&sc=direct&md=(none)&dp=24&sh=1024&sw=1280&bn=Firefox&bv=96&pn=Linux&pr=x86_64&bl=en-us&js=1.5&hn=ayubrugs.com&vi=22439851&vs=224398511663173742&_=353229&v=040
Content-Length: 535
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (401)
Size:   535
Md5:    db0ca98892f9feb73fbe01d1bd0e2f3a
Sha1:   b5a33c28b28784249addc51b51542671889f536d
Sha256: e522e4c04e014fc13038a41dd73bc4d8f8c5e4f3cd49fedaeb12c9d1af678a0d
                                        
                                            GET /css/nav/pgMainEdge.png HTTP/1.1 
Host: www.alaskausa.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         107.162.171.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 08 Sep 2022 17:43:02 GMT
Accept-Ranges: bytes
ETag: "9ece5271aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Wed, 14 Sep 2022 16:42:33 GMT
Content-Length: 960
Via: 1.1 dca1-bit13014
Vary: Accept-Encoding


--- Additional Info ---
Magic:  PNG image data, 1 x 3, 8-bit colormap, non-interlaced\012- data
Size:   960
Md5:    a5ea8f10a3e08ef3bc3acbe1add70acd
Sha1:   3da6cb1b65f0e536b05bb368c1358be49a445341
Sha256: 1fb28d9c14ec42912599df0f34b14c6e6f996084ca13e06bb11dcb4c9459ed34
                                        
                                            GET /css/nav/header_bg.png HTTP/1.1 
Host: www.alaskausa.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alaskausa.org/css/akusa-express.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         107.162.171.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 08 Sep 2022 17:43:06 GMT
Accept-Ranges: bytes
ETag: "4087b673aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Wed, 14 Sep 2022 16:42:34 GMT
Content-Length: 8058
Via: 1.1 dca1-bit13014


--- Additional Info ---
Magic:  PNG image data, 156 x 165, 8-bit/color RGB, non-interlaced\012- data
Size:   8058
Md5:    f420d4563192f414fabc27808342a8b2
Sha1:   80d69a4a339f6ddfe991d41d798d9a58fa0a21ea
Sha256: 5cd6b433131a0f7972117a1de73410cd07059f385b4dceb1e99b1c9dd6351fb6
                                        
                                            GET /agf.gif?t=pv&pv=%2FUltraBranch%2Fefs%2Fservlet%2Fefs%2Fsecurity.php&tt=Security+Question&vt=new&sc=direct&md=(none)&dp=24&sh=1024&sw=1280&bn=Firefox&bv=96&pn=Linux&pr=x86_64&bl=en-us&js=1.5&hn=ayubrugs.com&vi=22439851&vs=224398511663173742&_=353229&v=040 HTTP/1.1 
Host: ayubrugs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ayubrugs.com
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.185.129.60
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=42ba5eb648f987d42aca33900299a7b9; path=/
vary: Accept-Encoding
content-encoding: gzip
content-length: 3416
date: Wed, 14 Sep 2022 16:42:35 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   3416
Md5:    26acc7e8c4e1ea9d5dfbcd0059b9b843
Sha1:   796a18b014337e43ea29aedb0637122d6610bc37
Sha256: 75e899557b5b32aade899085ee13b4ad6c2e850d3fc757d214cb9af6b8249ecf
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.alaskausa.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         107.162.171.161
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Last-Modified: Thu, 08 Sep 2022 17:44:00 GMT
Accept-Ranges: bytes
ETag: "2ac31394aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Wed, 14 Sep 2022 16:42:34 GMT
Content-Length: 1150
Via: 1.1 dca1-bit13014


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    a640140069c78a92f718c9fb63614d72
Sha1:   1418d5de4993b63c2b11a64df62a03ae8ebb8f95
Sha256: 5b8545b9cf60e23bd9c7eacef43e9b85e2843b1d90328b5b6fca9ef851347808
                                        
                                            GET /images/icon-76@2x.png HTTP/1.1 
Host: www.alaskausa.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         107.162.171.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 08 Sep 2022 17:45:21 GMT
Accept-Ranges: bytes
ETag: "607ab4c4aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Wed, 14 Sep 2022 16:42:34 GMT
Content-Length: 21833
Via: 1.1 dca1-bit13014


--- Additional Info ---
Magic:  PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced\012- data
Size:   21833
Md5:    aa361a75d2fd36154747173a3a6cd422
Sha1:   8c14f2c0a0f3b2e1a265313239d6b9f7383808f9
Sha256: 31079b4bcec10fbd6e7530a766c97d05b5bc5e143af55a7599633fe3fd1c955e