Report - jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep

Report Overview

Visited public
2025-02-21 23:31:19
Tags
URL
jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep
Finishing URL
jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep
IP / ASN
45.60.243.243
#19551 INCAPSULA
Title
jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.gstatic.com	unknown	2008-02-11	2014-04-02	2025-02-19	1.7 kB	148 kB	142.250.74.35
fonts.googleapis.com	8877	2005-01-25	2012-05-23	2025-02-19	472 B	50 kB	142.250.74.138
jpm.njcourts.gov	unknown	unknown	2019-02-04	2025-02-19	9.8 kB	28 kB	45.60.243.243

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-02-21 23:30:49	high	45.60.243.243	Client IP	ETPRO EXPLOIT_KIT Possible Evil Redirect Leading to EK Dec 04 2016

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	jpm.njcourts.gov/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3	ScriptElement	87 kB	2025-02-21	2025-02-21
Pretty URL jpm.njcourts.gov/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3 IP 45.60.243.243 ASN #19551 INCAPSULA Introduced by scriptElement Embedded in HTML false Observations First Seen2025-02-21 23:31 Last Seen2025-02-21 23:31 Times Seen1 Hash 0e2ea273e290c2c706acd51091d0bf7a c8ca55547f0af3da5f8cee02e935383e5875a530 32fce67ff12602669559a7585f82b88d013cf8f3c2cf2e7676045ce2e2db90f6 Loading...

HTTP Transactions (10)

URL IP Response Size

jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep

45.60.243.243

403 Forbidden

840 B

URL User Request GET HTTP/1.1
jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep
IP
45.60.243.243:80
ASN
#19551 INCAPSULA

File type
HTML document, ASCII text, with very long lines (840), with no line terminators
Size
840 B (840 bytes)
Hash
7e97b6f3a44d80fad28522b1551a0c0b
3704a34bfe14a6960570253d145abf6ec8e34f27
5752f4731fd54c4fba815e8c534d700ec99b10c65bdedd89ddda64f84ac1f3f3

HTTP Headers

GET /externalusers/ajax.exe?m7ezj0ep HTTP/1.1
Host: jpm.njcourts.gov
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
content-type: text/html
cache-control: no-cache, no-store
content-length: 840
x-iinfo: 5-5687770-0 0NNN RT(1740180648738 39) q(0 -1 -1 0) r(0 -1) B16 U18
set-cookie: visid_incap_2548102=8Ck+Xkm3TCCblySneeUFFqgMuWcAAAAAQUIPAAAAAABfCHI/8AKQ4GTou6bSuzmT; expires=Sat, 21 Feb 2026 22:39:42 GMT; HttpOnly; path=/; Domain=.njcourts.gov
incap_ses_631_2548102=w9opH58I2iGeFmira8PBCKgMuWcAAAAAFWHlt/6B1CsiHfaeCHmisA==; path=/; Domain=.njcourts.gov
X-Firefox-Spdy: h2

jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep

45.60.243.243

403 Forbidden

839 B

URL User Request GET HTTP/1.1
jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep
IP
45.60.243.243:80
ASN
#19551 INCAPSULA

File type
HTML document, ASCII text, with very long lines (839), with no line terminators
Size
839 B (839 bytes)
Hash
3dbfe10d125adc5d9daa2eb85c4fa7b5
592e617e25a78653b6621af733f6109aca9a98fb
aee3bafd9afb7b4f97e304bf803e6f12976f21034919a1866b2d265e6cf01fee

HTTP Headers

GET /externalusers/ajax.exe?m7ezj0ep HTTP/1.1
Host: jpm.njcourts.gov
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: visid_incap_2548102=8Ck+Xkm3TCCblySneeUFFqgMuWcAAAAAQUIPAAAAAABfCHI/8AKQ4GTou6bSuzmT; incap_ses_631_2548102=w9opH58I2iGeFmira8PBCKgMuWcAAAAAFWHlt/6B1CsiHfaeCHmisA==
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
Content-Length: 839
X-Iinfo: 2-3495413-0 0NNN RT(1740180649041 0) q(0 -1 -1 -1) r(0 -1) B16 U18

jpm.njcourts.gov/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3

45.60.243.243

200 OK

21 kB

URL GET HTTP/1.1
jpm.njcourts.gov/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3
IP
45.60.243.243:80
ASN
#19551 INCAPSULA

Requested by
http://jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep

File type
ASCII text, with very long lines (65536), with no line terminators
Size
21 kB (20567 bytes)
Hash
0e2ea273e290c2c706acd51091d0bf7a
c8ca55547f0af3da5f8cee02e935383e5875a530
32fce67ff12602669559a7585f82b88d013cf8f3c2cf2e7676045ce2e2db90f6

Detections

NIDS	Severity	Alert
suricata	high	ETPRO EXPLOIT_KIT Possible Evil Redirect Leading to EK Dec 04 2016

HTTP Headers

GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3 HTTP/1.1
Host: jpm.njcourts.gov
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep
Cookie: visid_incap_2548102=8Ck+Xkm3TCCblySneeUFFqgMuWcAAAAAQUIPAAAAAABfCHI/8AKQ4GTou6bSuzmT; incap_ses_631_2548102=w9opH58I2iGeFmira8PBCKgMuWcAAAAAFWHlt/6B1CsiHfaeCHmisA==
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: application/javascript
Content-Encoding: gzip
X-Robots-Tag: noindex
Content-Length: 20567

jpm.njcourts.gov/_Incapsula_Resource?SWKMTFSR=1&e=0.1444792778884859

45.60.243.243

200 OK

1 B

URL GET HTTP/1.1
jpm.njcourts.gov/_Incapsula_Resource?SWKMTFSR=1&e=0.1444792778884859
IP
45.60.243.243:80
ASN
#19551 INCAPSULA

Requested by
http://jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

HTTP Headers

GET /_Incapsula_Resource?SWKMTFSR=1&e=0.1444792778884859 HTTP/1.1
Host: jpm.njcourts.gov
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep
Cookie: visid_incap_2548102=8Ck+Xkm3TCCblySneeUFFqgMuWcAAAAAQUIPAAAAAABfCHI/8AKQ4GTou6bSuzmT; incap_ses_631_2548102=w9opH58I2iGeFmira8PBCKgMuWcAAAAAFWHlt/6B1CsiHfaeCHmisA==; ___utmvc=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
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: text/plain
X-Robots-Tag: noindex
Content-Length: 1
Set-Cookie: ___utmvc=a; Max-Age=0; path=/; expires=Tue, 18 Feb 2025 22:25:41 GMT

jpm.njcourts.gov/_Incapsula_Resource?CWUDNSAI=1&xinfo=2-3495413-0%200NNN%20RT%281740180649041%200%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29%20B16%20U18&incident_id=631000290013222558-18067681915111234&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET

45.60.243.243

200 OK

3.9 kB

URL GET HTTP/1.1
jpm.njcourts.gov/_Incapsula_Resource?CWUDNSAI=1&xinfo=2-3495413-0%200NNN%20RT%281740180649041%200%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29%20B16%20U18&incident_id=631000290013222558-18067681915111234&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET
IP
45.60.243.243:80
ASN
#19551 INCAPSULA

Requested by
http://jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep

File type
HTML document, ASCII text, with very long lines (4074), with CRLF line terminators
Size
3.9 kB (3904 bytes)
Hash
e9823d83b803cd4c0cba4cc71953c0a7
43e9bed0b0b6368c43959e94ecacb849625af56e
6187e151be195afd139f503c28baf5fccc2d68363a3ab375d13dd4496ea6c703

HTTP Headers

GET /_Incapsula_Resource?CWUDNSAI=1&xinfo=2-3495413-0%200NNN%20RT%281740180649041%200%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29%20B16%20U18&incident_id=631000290013222558-18067681915111234&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET HTTP/1.1
Host: jpm.njcourts.gov
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep
Cookie: visid_incap_2548102=8Ck+Xkm3TCCblySneeUFFqgMuWcAAAAAQUIPAAAAAABfCHI/8AKQ4GTou6bSuzmT; incap_ses_631_2548102=w9opH58I2iGeFmira8PBCKgMuWcAAAAAFWHlt/6B1CsiHfaeCHmisA==; ___utmvc=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
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: text/html
Content-Encoding: gzip
X-Robots-Tag: noindex
Content-Length: 3904

jpm.njcourts.gov/favicon.ico

45.60.243.243

403 Forbidden

732 B

URL GET HTTP/1.1
jpm.njcourts.gov/favicon.ico
IP
45.60.243.243:80
ASN
#19551 INCAPSULA

Requested by
http://jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep

File type
HTML document, ASCII text, with very long lines (732), with no line terminators
Size
732 B (732 bytes)
Hash
e316a0afe6e4f29029700124a2382150
9fe5ab356a2117c2c6c753b7e4884178ba76bbf5
4f697b06cff471ae981657f3cba9bc06220d2131b42173df8ea7a10ccd0b6e8a

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: jpm.njcourts.gov
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://jpm.njcourts.gov/externalusers/ajax.exe?m7ezj0ep
Cookie: visid_incap_2548102=8Ck+Xkm3TCCblySneeUFFqgMuWcAAAAAQUIPAAAAAABfCHI/8AKQ4GTou6bSuzmT; incap_ses_631_2548102=w9opH58I2iGeFmira8PBCKgMuWcAAAAAFWHlt/6B1CsiHfaeCHmisA==
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
Content-Length: 732
X-Iinfo: 0-2037166-0 0NNN RT(1740180649299 160) q(0 -1 -1 -1) r(0 -1) B16 U18

fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2

142.250.74.35

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
http://jpm.njcourts.gov/_Incapsula_Resource?CWUDNSAI=1&xinfo=2-3495413-0%200NNN%20RT%281740180649041%200%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29%20B16%20U18&incident_id=631000290013222558-18067681915111234&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintE1:4C:7D:BD:65:DC:FC:CD:59:FD:40:F4:A9:EE:C2:BA:91:98:B2:3D
ValidityMon, 03 Feb 2025 08:37:09 GMT - Mon, 28 Apr 2025 08:37:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48496, version 1.0
Size
48 kB (48496 bytes)
Hash
8b7943a41013101d892c4684617ed41d
1853b95f5ae2cc51c89edf6f2c44a676efe31f3b
9d9e7b21769c8048b64fbdc1743c32641c3aa1c70c37197987ffe14d0f0508cd

HTTP Headers

GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://jpm.njcourts.gov
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48496
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Feb 2025 10:09:01 GMT
expires: Fri, 20 Feb 2026 10:09:01 GMT
cache-control: public, max-age=31536000
age: 134508
last-modified: Mon, 29 Jul 2024 22:47:09 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700&display=swap

142.250.74.138

200 OK

49 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700&display=swap
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
http://jpm.njcourts.gov/_Incapsula_Resource?CWUDNSAI=1&xinfo=2-3495413-0%200NNN%20RT%281740180649041%200%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29%20B16%20U18&incident_id=631000290013222558-18067681915111234&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintD9:DA:31:61:C2:D7:49:CF:50:B6:1B:FE:BA:EC:9D:12:91:8D:10:AC
ValidityMon, 03 Feb 2025 08:37:09 GMT - Mon, 28 Apr 2025 08:37:08 GMT

File type
gzip compressed data, max compression
Size
49 kB (49258 bytes)
Hash
d6208f706b3409c38e6512e46e88ba81
0d0cfdf1ae0bbcf99558fca7f96bc6ed16f27784
700bc86fc4b54cebd7101333f0f7269356e9cd86d42ac9dc7fd455402d07cabc

HTTP Headers

GET /css2?family=Inter:wght@300;400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://jpm.njcourts.gov/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 21 Feb 2025 23:30:49 GMT
date: Fri, 21 Feb 2025 23:30:49 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2

142.250.74.35

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
http://jpm.njcourts.gov/_Incapsula_Resource?CWUDNSAI=1&xinfo=2-3495413-0%200NNN%20RT%281740180649041%200%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29%20B16%20U18&incident_id=631000290013222558-18067681915111234&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintE1:4C:7D:BD:65:DC:FC:CD:59:FD:40:F4:A9:EE:C2:BA:91:98:B2:3D
ValidityMon, 03 Feb 2025 08:37:09 GMT - Mon, 28 Apr 2025 08:37:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48496, version 1.0
Size
48 kB (48496 bytes)
Hash
8b7943a41013101d892c4684617ed41d
1853b95f5ae2cc51c89edf6f2c44a676efe31f3b
9d9e7b21769c8048b64fbdc1743c32641c3aa1c70c37197987ffe14d0f0508cd

HTTP Headers

GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://jpm.njcourts.gov
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48496
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Feb 2025 10:09:01 GMT
expires: Fri, 20 Feb 2026 10:09:01 GMT
cache-control: public, max-age=31536000
age: 134509
last-modified: Mon, 29 Jul 2024 22:47:09 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2

142.250.74.35

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
http://jpm.njcourts.gov/_Incapsula_Resource?CWUDNSAI=1&xinfo=2-3495413-0%200NNN%20RT%281740180649041%200%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29%20B16%20U18&incident_id=631000290013222558-18067681915111234&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintE1:4C:7D:BD:65:DC:FC:CD:59:FD:40:F4:A9:EE:C2:BA:91:98:B2:3D
ValidityMon, 03 Feb 2025 08:37:09 GMT - Mon, 28 Apr 2025 08:37:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48496, version 1.0
Size
48 kB (48496 bytes)
Hash
8b7943a41013101d892c4684617ed41d
1853b95f5ae2cc51c89edf6f2c44a676efe31f3b
9d9e7b21769c8048b64fbdc1743c32641c3aa1c70c37197987ffe14d0f0508cd

HTTP Headers

GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://jpm.njcourts.gov
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48496
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Feb 2025 10:09:01 GMT
expires: Fri, 20 Feb 2026 10:09:01 GMT
cache-control: public, max-age=31536000
age: 134509
last-modified: Mon, 29 Jul 2024 22:47:09 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (10)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by