firefox.settings.services.mozilla.com/v1/
18.165.201.17200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 18.165.201.17:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 23 Sep 2022 22:05:16 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 955b5f6b59fedae13d00dcc66f7085f2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: FZ7Ab7aFoNEf4uznpRo-Af7fXeUjPOcmqBpaAThD8jO5wtUtVs7o6g==
Age: 1732
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 09a973de929ab7452edc342c780d3668
3f14f6e0a36f76863c0aea6fb561c266404a7ea3
e82ca5f310e37267fbf792427747e65c2bb35e684d3f629c0aa302f688bc4f80
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E82CA5F310E37267FBF792427747E65C2BB35E684D3F629C0AA302F688BC4F80"
Last-Modified: Fri, 23 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6461
Expires: Sat, 24 Sep 2022 00:21:49 GMT
Date: Fri, 23 Sep 2022 22:34:08 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
108.156.28.39200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 108.156.28.39:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Sep 2022 04:13:03 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 2fe8f7f5aca4ab098dc7bad8e97a06dc.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: hrTOLoCS1PbR2SWdSX1-mnRjWNY0w8OCmrwGFJsqW9Cb20NRmpZTtw==
age: 66066
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 23 Sep 2022 22:34:08 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
18.165.201.17200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 18.165.201.17:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Expires, Alert, Content-Length, ETag, Cache-Control, Content-Type, Backoff, Pragma, Last-Modified
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 23 Sep 2022 22:33:04 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Fri, 23 Sep 2022 22:37:13 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 835f3c9e7c3bc0e7766edf13dac581de.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: TF_lx6QP_ObJAgzdfqiKBAE0_rjTJyV3LHIwDM0VoMkqJbVmO2dV4Q==
Age: 68
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash f714931cf870bfa33815fd259b7246fd
38e411ef8ca1b31ead8415ee5f21d98bd9653a86
897675130112daff8bdf6fa25b56faa4b9fdb367daca2b2645ed65c83a2e423f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1578
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 22:34:08 GMT
Last-Modified: Fri, 23 Sep 2022 22:07:50 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
35.161.230.192101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.161.230.192:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +mwRAYZ5npnFA4ExBqh9cQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: NrpjGXtueOAFrQhzVyBEaqCbS1k=
emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
116.0.20.85301 Moved Permanently 0 B URL HTTP/1.1 emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert openphish Navy Federal Credit Union
fortinet Phishing
GET /wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php HTTP/1.1
Host: emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Date: Fri, 23 Sep 2022 22:34:08 GMT
Server: Apache
X-Powered-By: PHP/7.4.27
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Location: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2976
Expires: Fri, 23 Sep 2022 23:23:46 GMT
Date: Fri, 23 Sep 2022 22:34:10 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2976
Expires: Fri, 23 Sep 2022 23:23:46 GMT
Date: Fri, 23 Sep 2022 22:34:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5039669-74cb-4d54-9208-94257c765b35.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5039669-74cb-4d54-9208-94257c765b35.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 55d224ac83a417772c98bc5080fb6689
a30f9044330824e70dde0dcc785890d981e6fdf5
b2ea4dea200109019a65834b98e31e8fac718a199513810a2819858be2b4470a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5039669-74cb-4d54-9208-94257c765b35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9935
x-amzn-requestid: 9eb8463d-172a-40a2-8eed-3c97b1260afe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sQ5FARoAMFXQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e2738-3709a2f22ecc033532223b26;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:38:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: e5eETCL5yFnoG4HPx0Qv8hjGnlXx5vOL4syMx9uato8nuIHkSvMezg==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:58:23 GMT
age: 2147
etag: "a30f9044330824e70dde0dcc785890d981e6fdf5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1500786-3bbf-46d0-b16e-4aff6d48a585.jpeg
34.120.237.76200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1500786-3bbf-46d0-b16e-4aff6d48a585.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f10a12719b387d176497669ba75f0acc
16e42ba7b20555bf5a8615e5f4bb561204aeeb5a
0cb2231817387d43a490565b61e24ea7a3cfcff3281f4ab4379a882cc5c3173f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1500786-3bbf-46d0-b16e-4aff6d48a585.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14579
x-amzn-requestid: bce2c126-0883-4255-9246-d8055860f898
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcCj6FYCoAMF9Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217e18-66ba2e5d64b6a5b32b7ab36b;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:09:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: igIWZ2IhMA_GIovp4HgIHtGeDt5xoX0iThoQFKjnNJUYP_uMdO7FHw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 22:11:52 GMT
age: 1338
etag: "16e42ba7b20555bf5a8615e5f4bb561204aeeb5a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09db434-67f2-44ab-86f2-081df7e6af92.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09db434-67f2-44ab-86f2-081df7e6af92.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57b0e3ac4e16f6dc66a26a4389761d0a
e2e1b87dc1e205d437648f89cd6d0ad21019d662
1e2cd2c842e3aea339ba0c18267af45fd110e70d6e86ad1dab7b65b007afcc16
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09db434-67f2-44ab-86f2-081df7e6af92.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8208
x-amzn-requestid: 0a3396bb-f9c8-4209-9df7-d12b6f47f491
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7tqDGeloAMF7PQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e2973-4f084a72306cb5a630102476;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:47:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: sKQoG6j2WyBNPBhY_X800fh91RS-afKY7mIC7PJUmG67h15S-HqzsQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:51:17 GMT
etag: "e2e1b87dc1e205d437648f89cd6d0ad21019d662"
content-type: image/jpeg
age: 2573
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F860e3a33-2946-4ad5-9687-6cc6953b920d.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F860e3a33-2946-4ad5-9687-6cc6953b920d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4a034f8a3f2e69e852a69075d20b0e3
a7a6043178f05f547a08808ea8b34a6703154b42
8f1a045214d7049cb9f9a1ab2c55b6753907741b7cbfcb2e02f916f95a56ddcc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F860e3a33-2946-4ad5-9687-6cc6953b920d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5179
x-amzn-requestid: 57451c31-0b96-4aa5-ae63-54f949ab3d68
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sQlGrRIAMFklA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e2736-0bd483e47d880a837c7316ce;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:58 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OEBChdfqreTTNtWpSQfl4Eqsjj--P1EoJsFESumBcVJHdFNGSpN7gQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:48:26 GMT
age: 2744
etag: "a7a6043178f05f547a08808ea8b34a6703154b42"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F993a9251-cb79-4060-b043-aacb127c6565.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F993a9251-cb79-4060-b043-aacb127c6565.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f727cc665bfa383779422949037a83a7
24d4dcad1590e79e89a1ffe343bd7fe616528c5a
72dc66286d9ea7b71b6c9a116ff69380a97253c73f1ba2a5b3da34790e321e05
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F993a9251-cb79-4060-b043-aacb127c6565.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8907
x-amzn-requestid: 974b20af-4775-45bd-9e3f-55e5aa363c2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sQRGPtIAMFZCw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e2734-18aebf577efb8aaa0182aeed;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ANAYROIRBWe_Y5TxqYp9IDnqnuOHQGjvyj1K8Z85m7C9DGCXXuQ-Cw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:48:31 GMT
age: 2739
etag: "24d4dcad1590e79e89a1ffe343bd7fe616528c5a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3cb80186-265b-4b0a-a4b1-38aef341bfc9.jpeg
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3cb80186-265b-4b0a-a4b1-38aef341bfc9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 33edd8fdf7032227386d1514f99b2c4a
9fa34e0e3d456ed38d6e94911bf24990ed33ab0c
1d8ebbea41da3fbb5bd6784635f176bce0697a290635808166d269202bd3defa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3cb80186-265b-4b0a-a4b1-38aef341bfc9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8557
x-amzn-requestid: 51f41597-b094-47d7-b372-4c4c0236577f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7tAXEO3oAMFTWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e2868-30ad6e877ee82fcc4d17a7e6;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:43:04 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bdBMNkuaglxOH1MgjC9wBgjWCi-XbYkdmzA22QMnM89SVtY54WeCsw==
via: 1.1 bd6f70221217681265382902c6157c76.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 22:12:49 GMT
age: 1281
etag: "9fa34e0e3d456ed38d6e94911bf24990ed33ab0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
116.0.20.85404 Not Found 84 kB URL HTTP/1.1 www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (8047), with CRLF, LF line terminators
Hash 976135163891dcfd1c14e2283ec0233f
408cecde559e7e279b30703b8a01fec185f39a5b
18f4bed9267fcc343cb2f1fc963b4552f250170f197021b3de7692413e609fb3
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 404 Not Found
Date: Fri, 23 Sep 2022 22:34:10 GMT
Server: Apache
X-Powered-By: PHP/7.4.27
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.emc.org.au/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.emc.org.au/wp-content/themes/agama/assets/js/functions.js?ver=1.1.5
116.0.20.85200 OK 23 kB URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama/assets/js/functions.js?ver=1.1.5
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
Hash eded0d68a6e540434c17b78175996f21
a1177527111d3cf149e17ebd62a471030bfc6e9b
7d8a206313792ee612f515b883798d75f6ce75ce4d9cac76672a39c5e1870a18
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/agama/assets/js/functions.js?ver=1.1.5 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:12 GMT
Server: Apache
Last-Modified: Tue, 19 Apr 2022 00:20:44 GMT
Accept-Ranges: bytes
Content-Length: 23019
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.emc.org.au/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
116.0.20.85200 OK 89 kB URL HTTP/1.1 www.emc.org.au/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (43771)
Hash b7915926fe42d76e9c802353ab01dae4
3a8192a4312f25f53de25b100d62829c0f14d67c
d7705700d24d5919255576642ad2c28bfc790390b7183a369038ff5c1e814d51
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:12 GMT
Server: Apache
Last-Modified: Fri, 23 Sep 2022 03:28:29 GMT
Accept-Ranges: bytes
Content-Length: 88932
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.emc.org.au/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
116.0.20.85200 OK 19 kB URL HTTP/1.1 www.emc.org.au/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (15660)
Hash 32beb68a374e3aeac00abdf9e12b84ea
b5d18aa625e8696dd9d07cd0869337717b211ae0
5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:12 GMT
Server: Apache
Last-Modified: Fri, 23 Sep 2022 03:28:30 GMT
Accept-Ranges: bytes
Content-Length: 18617
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
www.emc.org.au/wp-content/themes/agama/assets/css/font-awesome.min.css?ver=4.7.0
116.0.20.85200 OK 31 kB URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama/assets/css/font-awesome.min.css?ver=4.7.0
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/agama/assets/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:12 GMT
Server: Apache
Last-Modified: Tue, 19 Apr 2022 00:20:44 GMT
Accept-Ranges: bytes
Content-Length: 31000
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.emc.org.au/wp-content/themes/agama-blue/style.css?ver=1.1.5
116.0.20.85200 OK 3.4 kB URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama-blue/style.css?ver=1.1.5
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type HTML document, ASCII text, with very long lines (456)
Hash 16b433c6e1d181e77f93cfbafb51af65
d6ee663d6851f21cf27fea7082938be14027ff2e
37384bb07adc9dbf67cdc13ce85bc46c1d9173dc079411aaad2f28cb758f735d
GET /wp-content/themes/agama-blue/style.css?ver=1.1.5 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:13 GMT
Server: Apache
Last-Modified: Sat, 05 Feb 2022 05:24:12 GMT
Accept-Ranges: bytes
Content-Length: 3416
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.emc.org.au/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.7.7
116.0.20.85200 OK 14 kB URL HTTP/1.1 www.emc.org.au/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.7.7
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (13766)
Hash d12d247100a2aa484fa050fbbcd904c0
bb484ccf69df39dce4b821c36e0a8354c1423af5
3adcf1b172631008be7d4276379dc62eda2af457fb3baa55a0f86e493ab101d8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.7.7 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:13 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 07:10:53 GMT
Accept-Ranges: bytes
Content-Length: 13805
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.emc.org.au/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.3.1
116.0.20.85200 OK 3.4 kB URL HTTP/1.1 www.emc.org.au/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.3.1
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (3432)
Hash 9a9ecfe405e38be1cf08b752d3afbda9
8f55bc1619b42231d464bf965c67cfddf6b29df9
b9b869f479a2181cbc0c5d8b6e5bb8bb9cbf81d59a18d056681d8b3de448b1d4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.3.1 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:13 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 22:54:27 GMT
Accept-Ranges: bytes
Content-Length: 3433
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.emc.org.au/wp-content/themes/agama/assets/css/animate.min.css?ver=3.5.1
116.0.20.85200 OK 56 kB URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama/assets/css/animate.min.css?ver=3.5.1
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (55728)
Hash bbd481acc4688db3b0d7e4b6592e47b3
889fbad8a6bc9ce7e6b8f464961c29e13656305c
01eb82dd42f331969d90e15b87fb84e27b99878c34797425c44ab1dce61a51b7
GET /wp-content/themes/agama/assets/css/animate.min.css?ver=3.5.1 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:13 GMT
Server: Apache
Last-Modified: Tue, 19 Apr 2022 00:20:44 GMT
Accept-Ranges: bytes
Content-Length: 55918
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.emc.org.au/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
116.0.20.85200 OK 11 kB URL HTTP/1.1 www.emc.org.au/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (11126)
Hash 79b4956b7ec478ec10244b5e2d33ac7d
a46025b9d05e3df30d610a8aef14f392c7058dc9
029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:13 GMT
Server: Apache
Last-Modified: Fri, 23 Sep 2022 03:28:30 GMT
Accept-Ranges: bytes
Content-Length: 11224
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.emc.org.au/wp-content/themes/agama-blue/assets/js/agama-blue.js?ver=1.1.5
116.0.20.85200 OK 495 B URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama-blue/assets/js/agama-blue.js?ver=1.1.5
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
Hash 01943cb646298fb614578e8c17c07775
e92e3ae6a318bd8540e2a2d14308751a2e7eac59
5a0eb79e65aefc14e80b360f89c053d10c69f2f837693c838b7c154545720f6a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/agama-blue/assets/js/agama-blue.js?ver=1.1.5 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:13 GMT
Server: Apache
Last-Modified: Sat, 05 Feb 2022 05:24:12 GMT
Accept-Ranges: bytes
Content-Length: 495
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.emc.org.au/wp-content/themes/agama/style.css?ver=1.1.5
116.0.20.85200 OK 92 kB URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama/style.css?ver=1.1.5
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type Unicode text, UTF-8 text, with very long lines (524)
Hash 1acf9bf5f2449e34efeb881794ae6da4
a4fd41d9bb6451c80ff266752a0913ec8e057ea0
7b400cd9d661279f39aba0c347c742210a3221ee1f12c25803c049314407334e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/agama/style.css?ver=1.1.5 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:12 GMT
Server: Apache
Last-Modified: Tue, 19 Apr 2022 00:20:52 GMT
Accept-Ranges: bytes
Content-Length: 92169
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.emc.org.au/wp-content/themes/agama/assets/css/bootstrap.min.css?ver=4.1.3
116.0.20.85200 OK 166 kB URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama/assets/css/bootstrap.min.css?ver=4.1.3
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (65324)
Size 166 kB (166248 bytes)
Hash 324bb6a643fc1c8553f2c6267470c715
7dd0098e5c3d6d8d88723023f0d7f3a81a7fc50b
5f1db41a230d3f97152420d426d59f58a2049f7b3a196f802b5996d1e15d0112
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/agama/assets/css/bootstrap.min.css?ver=4.1.3 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:12 GMT
Server: Apache
Last-Modified: Tue, 19 Apr 2022 00:20:44 GMT
Accept-Ranges: bytes
Content-Length: 166248
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.emc.org.au/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.3.1
116.0.20.85200 OK 8.0 kB URL HTTP/1.1 www.emc.org.au/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.3.1
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (8016), with no line terminators
Hash a889ab4fcd44175db4bf271c83c50d37
dd57bf2e29b28491b610fcb758d8ab53f3c6649d
d2f2fe7e10c8a8cf933afea3f0fb4a89cf74262405024cd908e7d59f5f03c16c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.3.1 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:13 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 22:54:27 GMT
Accept-Ranges: bytes
Content-Length: 8016
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.emc.org.au/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.7.7
116.0.20.85200 OK 166 kB URL HTTP/1.1 www.emc.org.au/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.7.7
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (65497)
Size 166 kB (165666 bytes)
Hash d6bec858d8753af0a43abda4f98f51ce
cbe8ff62d7e2b3553fea7887567384067a574ce2
b565a52be57ce739615a573520217c33bded28111fa20b62fdf26b7bab7e84d7
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.7.7 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:13 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 07:10:53 GMT
Accept-Ranges: bytes
Content-Length: 165666
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.emc.org.au/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
116.0.20.85200 OK 90 kB URL HTTP/1.1 www.emc.org.au/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (65447)
Hash 02dd5d04add4759122013c5ab4dc5cc2
a45a56e396ac549b4ff39b696ce9e0c16a7612de
bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:13 GMT
Server: Apache
Last-Modified: Fri, 23 Sep 2022 03:28:30 GMT
Accept-Ranges: bytes
Content-Length: 89521
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.emc.org.au/wp-content/themes/agama/assets/js/plugins.js?ver=1.1.5
116.0.20.85200 OK 203 kB URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama/assets/js/plugins.js?ver=1.1.5
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type Unicode text, UTF-8 text, with very long lines (25283)
Size 203 kB (203443 bytes)
Hash 770c1f92eab684ce336946f216ca9f7b
53ec8b1eaf109e13b1cee6c135a279eda28bab74
fe74ea41fde41bc4d2c8c4d805c1f14977dd30c981a448532fc9d04c90022682
GET /wp-content/themes/agama/assets/js/plugins.js?ver=1.1.5 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:13 GMT
Server: Apache
Last-Modified: Tue, 19 Apr 2022 00:20:44 GMT
Accept-Ranges: bytes
Content-Length: 203443
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.emc.org.au/wp-content/uploads/2019/07/The-Early-Morning-Centre-UnitingCare-Canberra-City.png
116.0.20.85200 OK 74 kB URL HTTP/1.1 www.emc.org.au/wp-content/uploads/2019/07/The-Early-Morning-Centre-UnitingCare-Canberra-City.png
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type PNG image data, 1334 x 863, 8-bit/color RGBA, interlaced\012- data
Hash 262a0bfcf96e933f4cc5488445aa3164
cf389a71ba47c2ae4593d487356d0b58e8b13c8c
dc82652918f396b126abdf2f6afbf7e7e1392dd6c260b3f0454925a90d5761dd
GET /wp-content/uploads/2019/07/The-Early-Morning-Centre-UnitingCare-Canberra-City.png HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:15 GMT
Server: Apache
Last-Modified: Fri, 26 Jul 2019 03:11:07 GMT
Accept-Ranges: bytes
Content-Length: 73945
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.emc.org.au/wp-content/uploads/2019/01/EMC-web.png
116.0.20.85200 OK 74 kB URL HTTP/1.1 www.emc.org.au/wp-content/uploads/2019/01/EMC-web.png
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type PNG image data, 1334 x 863, 8-bit/color RGBA, interlaced\012- data
Hash 262a0bfcf96e933f4cc5488445aa3164
cf389a71ba47c2ae4593d487356d0b58e8b13c8c
dc82652918f396b126abdf2f6afbf7e7e1392dd6c260b3f0454925a90d5761dd
GET /wp-content/uploads/2019/01/EMC-web.png HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:15 GMT
Server: Apache
Last-Modified: Mon, 21 Jan 2019 03:25:53 GMT
Accept-Ranges: bytes
Content-Length: 73945
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.emc.org.au/wp-content/fonts/raleway/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrcVIT9d4cw.woff
116.0.20.85200 OK 21 kB URL HTTP/1.1 www.emc.org.au/wp-content/fonts/raleway/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrcVIT9d4cw.woff
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type Web Open Font Format, TrueType, length 20972, version 1.1\012- data
Hash a326c47c3038ee95e834af4137354081
328ed7688bb9083e97c264b52d3068a6cf320a53
7b39693e5b25e6747c407920eaf32ace22b70c5753dc45b33e9a2885d297cfb9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/fonts/raleway/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrcVIT9d4cw.woff HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:15 GMT
Server: Apache
Last-Modified: Tue, 26 Jul 2022 06:31:51 GMT
Accept-Ranges: bytes
Content-Length: 20972
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: font/woff
www.emc.org.au/wp-content/fonts/nunito/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTQ3iazbXWjQeQ.woff
116.0.20.85200 OK 18 kB URL HTTP/1.1 www.emc.org.au/wp-content/fonts/nunito/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTQ3iazbXWjQeQ.woff
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type Web Open Font Format, TrueType, length 17652, version 1.1\012- data
Hash 73b0684efc210f64a5d5b8654ea75e15
8d8d529a928f84b31c4ecd5407823ed205cf00cf
a83a13e096c461cdd51be50e77eaab24c6c76c88e9a7a6bf29af6882f146623d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/fonts/nunito/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTQ3iazbXWjQeQ.woff HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:15 GMT
Server: Apache
Last-Modified: Tue, 26 Jul 2022 06:31:48 GMT
Accept-Ranges: bytes
Content-Length: 17652
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: font/woff
www.emc.org.au/wp-content/fonts/nunito/XRXI3I6Li01BKofiOc5wtlZ2di8HDFwmdTQ3iazbXWjQeQ.woff
116.0.20.85200 OK 17 kB URL HTTP/1.1 www.emc.org.au/wp-content/fonts/nunito/XRXI3I6Li01BKofiOc5wtlZ2di8HDFwmdTQ3iazbXWjQeQ.woff
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type Web Open Font Format, TrueType, length 17380, version 1.1\012- data
Hash 731b44a918030a3b627e19ee3c5d8a5d
193baee3e73ed5ea1de0cadf2528e66175a2a4b4
90d58b0b54efd8f906bb4e65aaf304600803d4119a6b809393bcc9c7d6ed7007
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/fonts/nunito/XRXI3I6Li01BKofiOc5wtlZ2di8HDFwmdTQ3iazbXWjQeQ.woff HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:15 GMT
Server: Apache
Last-Modified: Tue, 26 Jul 2022 06:31:49 GMT
Accept-Ranges: bytes
Content-Length: 17380
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: font/woff
www.emc.org.au/wp-content/uploads/2019/07/cropped-The-Early-Morning-Centre-site-icon-192x192.png
116.0.20.85200 OK 9.5 kB URL HTTP/1.1 www.emc.org.au/wp-content/uploads/2019/07/cropped-The-Early-Morning-Centre-site-icon-192x192.png
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 7542a61261ee26cf9f683b5d33ddf19d
cc0c7a23f16cfeecb4296a8074f4f5510f9e3793
822f1b713b131c4ab69832972bbe3f246aa6fc9f26bce46ed0c7e851511f7ab8
GET /wp-content/uploads/2019/07/cropped-The-Early-Morning-Centre-site-icon-192x192.png HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:15 GMT
Server: Apache
Last-Modified: Fri, 26 Jul 2019 03:10:50 GMT
Accept-Ranges: bytes
Content-Length: 9492
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.emc.org.au/wp-content/uploads/2019/07/cropped-The-Early-Morning-Centre-site-icon-32x32.png
116.0.20.85200 OK 804 B URL HTTP/1.1 www.emc.org.au/wp-content/uploads/2019/07/cropped-The-Early-Morning-Centre-site-icon-32x32.png
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 179500bf9d88579fd6183ae440e0bcf0
e987432a50d27c0d6ba3e66a1ce9d1f053485667
47d0594c8290f005040c3b586977c1cc085172686d9ae08bba14b1fed716dcb3
GET /wp-content/uploads/2019/07/cropped-The-Early-Morning-Centre-site-icon-32x32.png HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:15 GMT
Server: Apache
Last-Modified: Fri, 26 Jul 2019 03:10:50 GMT
Accept-Ranges: bytes
Content-Length: 804
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
www.emc.org.au/wp-content/uploads/2019/05/Light-through-tree-1920x535.jpg
116.0.20.85200 OK 700 kB URL HTTP/1.1 www.emc.org.au/wp-content/uploads/2019/05/Light-through-tree-1920x535.jpg
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=1333, bps=206, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left, width=2000], progressive, precision 8, 1920x535, components 3\012- data
Size 700 kB (700226 bytes)
Hash 396c6c3ca72bcce09120cf4630dea64c
b8f68328a67cb5f2aeb71bef0b4443753411dd88
e678ce54b1e113c30b16afef02537532d9e3d0747319d00dee3f05d9b0778874
GET /wp-content/uploads/2019/05/Light-through-tree-1920x535.jpg HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgNFOAA_Authlogin.jsp/step2.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:15 GMT
Server: Apache
Last-Modified: Wed, 01 May 2019 01:49:27 GMT
Accept-Ranges: bytes
Content-Length: 700226
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
www.emc.org.au/wp-content/themes/agama/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
116.0.20.85200 OK 77 kB URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 116.0.20.85:0
ASN #38719 Dreamscape Networks Limited
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wp-content/themes/agama/assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.emc.org.au/wp-content/themes/agama/assets/css/font-awesome.min.css?ver=4.7.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 22:34:15 GMT
Server: Apache
Last-Modified: Tue, 19 Apr 2022 00:20:44 GMT
Accept-Ranges: bytes
Content-Length: 77160
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: font/woff2