firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 18 Sep 2022 20:02:58 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pU9R8UZQYRDtS3li9AsahASl40BLz84AmpfnqE0qLWfnnQQNl7Uymg==
Age: 2388
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 861cfa99de956423d917ed0ddbea4b9c
ad65dbc394b48b04a45c205f56af296c8d008db4
5c706b2718b1698995f4feb91223779aef4bf6dc967c31f9ef9a93873197d5f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5C706B2718B1698995F4FEB91223779AEF4BF6DC967C31F9EF9A93873197D5F9"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4947
Expires: Sun, 18 Sep 2022 22:05:13 GMT
Date: Sun, 18 Sep 2022 20:42:46 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 18 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: THjPfpcP9vE9QosPGm3GYWMgZa0dmpCHFQ_hivf6J6hFxS3nh2UkSA==
age: 58053
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 865f584982de13fe1493d7c84eb47d33
dffa68da3ded6d1cfee49aaa72cd2748b613e134
37452f0c880f5ec3436338efb9b7bb49fbeba0166c91660de70046121dc5167c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "37452F0C880F5EC3436338EFB9B7BB49FBEBA0166C91660DE70046121DC5167C"
Last-Modified: Sat, 17 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21562
Expires: Mon, 19 Sep 2022 02:42:08 GMT
Date: Sun, 18 Sep 2022 20:42:46 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Sep 2022 20:42:46 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
mbrindia.org/dcu/php/otp.html
192.185.129.84200 OK 7.7 kB URL HTTP/2 mbrindia.org/dcu/php/otp.html
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2737), with CRLF line terminators
Hash e6f8c9f28bd3d427c5e90afb981d03fc
28ee5fce1438a4fa0f7c293bf609e6283deecfb6
806d0a7e4cc1a1ea2af9c2db2b67b9fbcfb38848b4c7dff9d28276e31ac5ce19
Analyzer Verdict Alert openphish Digital Federal Credit Union
fortinet Phishing
GET /dcu/php/otp.html HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 20:50:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7671
content-type: text/html
date: Sun, 18 Sep 2022 20:42:46 GMT
server: Apache
X-Firefox-Spdy: h2
assets.adobedtm.com/c710ed4af822/4edff89d26dd/launch-1574d0b03693.min.js
23.38.200.237200 OK 74 kB URL HTTP/2 assets.adobedtm.com/c710ed4af822/4edff89d26dd/launch-1574d0b03693.min.js
IP 23.38.200.237:0
File type ASCII text, with very long lines (32768)
Hash c8e5e4603713b2afef04641fbdaadcf8
ba70173dec1981bb9419e44373987917c15512e8
3beb4f3ae29074fd5cfbd0c211659e3fe7499219b644bef22f79e4898cf92427
GET /c710ed4af822/4edff89d26dd/launch-1574d0b03693.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "97a1294fe9ebfd08669e214fcc839024:1658495611.885198"
last-modified: Fri, 22 Jul 2022 13:13:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Sun, 18 Sep 2022 21:42:46 GMT
date: Sun, 18 Sep 2022 20:42:46 GMT
content-length: 73977
access-control-allow-origin: https://mbrindia.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js
23.38.200.237200 OK 1.6 kB URL HTTP/2 assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js
IP 23.38.200.237:0
File type ASCII text, with very long lines (3155)
Hash e672de61b277fc72de4299829bfbb31c
157a7409922d58a02dad3ba879d04eb2a3ef8f3d
e1a1c2a6f2ed4ffb63ebfda157eaf12c6ee3973be4da649eb63e0402c0d29215
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "2d1382c349d480b6b41574ac0c1af066:1644856531.739514"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
expires: Sun, 18 Sep 2022 21:42:46 GMT
date: Sun, 18 Sep 2022 20:42:46 GMT
content-length: 1597
cache-control: no-cache
access-control-allow-origin: https://mbrindia.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
23.38.200.237200 OK 12 kB URL HTTP/2 assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
IP 23.38.200.237:0
File type ASCII text, with very long lines (32768)
Hash e616df092766c7ab7904619f971a35cc
a960429c42802a43e3ce728fc4d1e8bdab10e606
082ae7647bfdb639846791e5c0ca39b96544dff3aed0c365973c9589cd5b091e
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "d860c16ac938f7d839f0ec158d02d0f0:1644856531.418573"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
expires: Sun, 18 Sep 2022 21:42:46 GMT
date: Sun, 18 Sep 2022 20:42:46 GMT
content-length: 12163
cache-control: no-cache
access-control-allow-origin: https://mbrindia.org
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b5ed40c3fe36b481b59f912222735c7c
3343a66310e2b780a87ef3c0c0315a640496cbb6
0d253112650e2c8bcc0510277cc5d9798e48cbba01e382dc978c41cf65ade768
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4263
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 20:42:46 GMT
Last-Modified: Sun, 18 Sep 2022 19:31:43 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e2de0c8d5dbd1bdd73db3380f57b093c
f8b22b9b8f6999e5fe7a6393e9aef29f78a8d2b5
7c9124a975f0fcf4a66deabc6ba4edb185f6afb4bf1efa4387e1962313cbc785
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1233
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 20:42:46 GMT
Last-Modified: Sun, 18 Sep 2022 20:22:13 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e2de0c8d5dbd1bdd73db3380f57b093c
f8b22b9b8f6999e5fe7a6393e9aef29f78a8d2b5
7c9124a975f0fcf4a66deabc6ba4edb185f6afb4bf1efa4387e1962313cbc785
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6552
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 20:42:46 GMT
Last-Modified: Sun, 18 Sep 2022 18:53:34 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
mpsnare.iesnare.com/5.5.0/logo.js
54.228.71.178200 OK 419 B URL HTTP/1.1 mpsnare.iesnare.com/5.5.0/logo.js
IP 54.228.71.178:0
File type ASCII text, with very long lines (377)
Hash c08c0b59ad424acd7ade3d89404cefc8
7779f0e454efd260b740f2917810291bc915957d
57a08520f6a14b4f9845366d650dd48869c7a4777f4d3f9d00309fd8300d439c
GET /5.5.0/logo.js HTTP/1.1
Host: mpsnare.iesnare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Sep 2022 20:42:46 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 06 May 2014 00:01:40 GMT
Expires: Mon, 18 Sep 2023 20:42:46 GMT
Cache-Control: private
p3p: CP="NON DSP COR CURa"
Accept-CH: ua, ua-arch, ua-platform, ua-model, ua-mobile, ua-full-version, ua-platform-version
Strict-Transport-Security: max-age=15552000; includeSubDomains
Content-Encoding: gzip
mpsnare.iesnare.com/general5/wdp.js?loaderVer=5.2.2&compat=false&tp=true&tp_split=false&fp_static=true&fp_dyn=true&flash=false
54.228.71.178200 OK 19 kB URL HTTP/1.1 mpsnare.iesnare.com/general5/wdp.js?loaderVer=5.2.2&compat=false&tp=true&tp_split=false&fp_static=true&fp_dyn=true&flash=false
IP 54.228.71.178:0
File type ASCII text, with very long lines (1038)
Hash 3c7018e3fd28c23946d5aea9b5ba6ab3
19954f9350f4aeb7926bdeddaa35557a35977ea6
5c40ca6780d965b048d0014333b3ddca51e94287b9e67e03c49075026463d10f
GET /general5/wdp.js?loaderVer=5.2.2&compat=false&tp=true&tp_split=false&fp_static=true&fp_dyn=true&flash=false HTTP/1.1
Host: mpsnare.iesnare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Sep 2022 20:42:46 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: io_token_7c6a6574-f011-4c9a-abdd-9894a102ccef=g02cIfknKPl+e01rsl9VfDnsrUfRAAsoWh43zjvlo+Q=;Path=/;Expires=Mon, 18-Sep-2023 20:42:46 GMT;Max-Age=31536000;Secure;HttpOnly;SameSite=None
Cache-Control: no-cache, private
Pragma: no-cache
Expires: 0
p3p: CP="NON DSP COR CURa"
Accept-CH: ua, ua-arch, ua-platform, ua-model, ua-mobile, ua-full-version, ua-platform-version
Strict-Transport-Security: max-age=15552000; includeSubDomains
Content-Encoding: gzip
mbrindia.org/dcu/php/js/config.js
192.185.129.84404 Not Found 355 B URL HTTP/2 mbrindia.org/dcu/php/js/config.js
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash cb50b952a1a41c3358018129e081d511
9b3ce22f173597240fd0c22ff649f3ffb9c6ea99
791b5cb893932898c350d1ec9888ee9c2feaea002431d12e9a1ba29331813be0
Analyzer Verdict Alert fortinet Phishing
GET /dcu/php/js/config.js HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
last-modified: Tue, 09 Aug 2022 20:39:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 355
content-type: text/html
date: Sun, 18 Sep 2022 20:42:46 GMT
server: Apache
X-Firefox-Spdy: h2
mbrindia.org/dcu/php/css/64.64d4d70e.css
192.185.129.84200 OK 455 B URL HTTP/2 mbrindia.org/dcu/php/css/64.64d4d70e.css
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (686)
Hash bb77448b3e374758ad614699a28a1bf6
43206343a345c6d67ffabb3912c94b12957c9a4f
3e609ce05193fff12cb82ccb24233c60cd51e2da2be01de0a569d64ecbd84321
GET /dcu/php/css/64.64d4d70e.css HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 19:50:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 455
content-type: text/css
date: Sun, 18 Sep 2022 20:42:46 GMT
server: Apache
X-Firefox-Spdy: h2
mbrindia.org/dcu/php/css/app.7b1cd472.css
192.185.129.84200 OK 1.1 kB URL HTTP/2 mbrindia.org/dcu/php/css/app.7b1cd472.css
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2620)
Hash 36384a6e74a7b2c7969c04b4b4f8a02c
e193f72978da870f8c80fc83254cc8e9c2cd2114
44c029ac9266329acd70393a312e3b6bfe725bc58217155d2c682dfbf0888fc1
GET /dcu/php/css/app.7b1cd472.css HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 19:51:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1105
content-type: text/css
date: Sun, 18 Sep 2022 20:42:46 GMT
server: Apache
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 18 Sep 2022 20:03:22 GMT
Expires: Sun, 18 Sep 2022 20:13:42 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GVpDo1_bEah8W-G0DL9MnqHBNnL14OAxTERAfPhhnVrRFazrua-tTA==
Age: 2364
mbrindia.org/dcu/php/js/loader_only.js
192.185.129.84404 Not Found 355 B URL HTTP/2 mbrindia.org/dcu/php/js/loader_only.js
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash cb50b952a1a41c3358018129e081d511
9b3ce22f173597240fd0c22ff649f3ffb9c6ea99
791b5cb893932898c350d1ec9888ee9c2feaea002431d12e9a1ba29331813be0
Analyzer Verdict Alert fortinet Phishing
GET /dcu/php/js/loader_only.js HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
last-modified: Tue, 09 Aug 2022 20:39:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 355
content-type: text/html
date: Sun, 18 Sep 2022 20:42:46 GMT
server: Apache
X-Firefox-Spdy: h2
mbrindia.org/dcu/php/js/64.390011c5.js
192.185.129.84404 Not Found 355 B URL HTTP/2 mbrindia.org/dcu/php/js/64.390011c5.js
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash cb50b952a1a41c3358018129e081d511
9b3ce22f173597240fd0c22ff649f3ffb9c6ea99
791b5cb893932898c350d1ec9888ee9c2feaea002431d12e9a1ba29331813be0
Analyzer Verdict Alert fortinet Phishing
GET /dcu/php/js/64.390011c5.js HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
last-modified: Tue, 09 Aug 2022 20:39:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 355
content-type: text/html
date: Sun, 18 Sep 2022 20:42:46 GMT
server: Apache
X-Firefox-Spdy: h2
mbrindia.org/dcu/php/css/2.658b5c49.css
192.185.129.84200 OK 713 B URL HTTP/2 mbrindia.org/dcu/php/css/2.658b5c49.css
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1693)
Hash 454a44c4dcd00a03e00372254e6fe3e8
bc7e5b3ee87ea145249e9157a2fc7726a7322815
5f9aa1bf4b9e9b20f857475ce6baad9306e514e5c1a2b6a753856fd73d16c00e
GET /dcu/php/css/2.658b5c49.css HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 19:50:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 713
content-type: text/css
date: Sun, 18 Sep 2022 20:42:46 GMT
server: Apache
X-Firefox-Spdy: h2
mbrindia.org/dcu/php/css/chunk-common.d06af608.css
192.185.129.84200 OK 3.9 kB URL HTTP/2 mbrindia.org/dcu/php/css/chunk-common.d06af608.css
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (13269)
Hash ea19bd19aa86f954fceedca620ae36e4
a12db9600b1c1bd20c32ce45b5c9f3db7bf64ab5
866f91aab0ba973975cbd7a93fe4e302306e2c2b068f18df1ca46836ed2f0624
GET /dcu/php/css/chunk-common.d06af608.css HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 19:51:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3871
content-type: text/css
date: Sun, 18 Sep 2022 20:42:46 GMT
server: Apache
X-Firefox-Spdy: h2
mbrindia.org/dcu/php/js/chunk-common.112fec58.js
192.185.129.84404 Not Found 355 B URL HTTP/2 mbrindia.org/dcu/php/js/chunk-common.112fec58.js
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash cb50b952a1a41c3358018129e081d511
9b3ce22f173597240fd0c22ff649f3ffb9c6ea99
791b5cb893932898c350d1ec9888ee9c2feaea002431d12e9a1ba29331813be0
Analyzer Verdict Alert fortinet Phishing
GET /dcu/php/js/chunk-common.112fec58.js HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
last-modified: Tue, 09 Aug 2022 20:39:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 355
content-type: text/html
date: Sun, 18 Sep 2022 20:42:46 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash eaa8b4aa123f9dd7237c5c51d2f848d9
1082f5f6ef7229ec76f94f3d236f273b26294563
d1ad33dae2fcab5c7d66875f0e7a01cc30e0b3a031606917fa5448c54f84e20d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 20:42:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
192.124.249.24200 OK 1.8 kB IP 192.124.249.24:0
Hash a0ba3e6d765766c5b65f1c49c945aca6
6e13819c2b77c37f392f48db03eac3c8d367605d
a326fca997f7f9a2385da5b1d2a376489f6a523ad81e7f73c386428e52c9f3bb
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 18 Sep 2022 20:42:47 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 18 Sep 2022 19:02:57 GMT
Expires: Mon, 19 Sep 2022 19:02:57 GMT
ETag: "6e13819c2b77c37f392f48db03eac3c8d367605d"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
192.124.249.24200 OK 1.8 kB IP 192.124.249.24:0
Hash a0ba3e6d765766c5b65f1c49c945aca6
6e13819c2b77c37f392f48db03eac3c8d367605d
a326fca997f7f9a2385da5b1d2a376489f6a523ad81e7f73c386428e52c9f3bb
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 18 Sep 2022 20:42:47 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 18 Sep 2022 19:02:57 GMT
Expires: Mon, 19 Sep 2022 19:02:57 GMT
ETag: "6e13819c2b77c37f392f48db03eac3c8d367605d"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 5fd1174f35b25298fc44a6de1af3f3d6
d45a47995ec34c7df480b3efafb13f55d9df7eb8
f60573eff255ef3d7603ca813f410c30588931b4018ffa0e07fa0bb2653c47af
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5125
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 20:42:47 GMT
Last-Modified: Sun, 18 Sep 2022 19:17:22 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
us.cobrowse.pega.com/cobrowse/loadScripts
54.145.182.159200 OK 508 B URL HTTP/2 us.cobrowse.pega.com/cobrowse/loadScripts
IP 54.145.182.159:0
Hash 9cdb6851bb88c14e6033ca658ac8aa88
ee1d43de555319019f8b0713a683a463803a9b41
fa05f2814bdcd558f6b652532c66d74a995b0a05f464bda6e9375fcb3c02cf82
GET /cobrowse/loadScripts HTTP/1.1
Host: us.cobrowse.pega.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/
Cookie: AWSALBCORS=7a6K3anM7gYpJ3UDTXikldoThB58OBAiz1iPw+QhrBlPyfqaWkQc1Npu/dLu+P7ifh50tuUNhtGgOK3WTHRlfZUn7+tVFAhPcLyX8Dl1yzDQdyUzo4p93jdn/ttv; connect.sid=s%3Ay1G7mh0F4CFeguYaDvrYO6LxJrtIuYCt.o3zj0910oW6xvWXePacgex9hGEbrx3rjXEV%2FpqRHdFA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Sep 2022 20:42:47 GMT
content-type: application/javascript; charset=utf-8
content-length: 508
set-cookie: AWSALB=DdlbHnmSWru7SUMwl49S9+jYTpXVA9IkYsADvTbeoUCIr4kpRfazQYj2dZ1ofmm9GTtQow0lGjSe7AyfoUybfydOWEnjnas2VD0RiaqjPUVQ/ORszRTI8UomdEjJ; Expires=Sun, 25 Sep 2022 20:42:47 GMT; Path=/
AWSALBCORS=DdlbHnmSWru7SUMwl49S9+jYTpXVA9IkYsADvTbeoUCIr4kpRfazQYj2dZ1ofmm9GTtQow0lGjSe7AyfoUybfydOWEnjnas2VD0RiaqjPUVQ/ORszRTI8UomdEjJ; Expires=Sun, 25 Sep 2022 20:42:47 GMT; Path=/; SameSite=None; Secure
server: nginx
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: X-CSRF-Token, X-Requested-With, accept, x-j-token, content-type
etag: W/"1fc-7h1D3lVTGQGfiwcTpoOkY4A6m0E"
X-Firefox-Spdy: h2
mbrindia.org/dcu/php/dcuLogoDark.png
192.185.129.84200 OK 7.7 kB URL HTTP/2 mbrindia.org/dcu/php/dcuLogoDark.png
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 217 x 78, 8-bit/color RGBA, non-interlaced\012- data
Hash ae64e87365d6e6696145c8c53ce3632e
09337bd0289c432bffab6f653297fe2534ad0c68
d1093fceb5f8b35c09e5d3329c8dc55509d7f46096efeea840f6e433212ba45e
GET /dcu/php/dcuLogoDark.png HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 19:49:04 GMT
accept-ranges: bytes
content-length: 7743
content-type: image/png
date: Sun, 18 Sep 2022 20:42:47 GMT
server: Apache
X-Firefox-Spdy: h2
mbrindia.org/js/vendor.e1d2459d.js
192.185.129.84404 Not Found 355 B URL HTTP/2 mbrindia.org/js/vendor.e1d2459d.js
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash cb50b952a1a41c3358018129e081d511
9b3ce22f173597240fd0c22ff649f3ffb9c6ea99
791b5cb893932898c350d1ec9888ee9c2feaea002431d12e9a1ba29331813be0
Analyzer Verdict Alert fortinet Phishing
GET /js/vendor.e1d2459d.js HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
last-modified: Tue, 09 Aug 2022 20:39:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 355
content-type: text/html
date: Sun, 18 Sep 2022 20:42:47 GMT
server: Apache
X-Firefox-Spdy: h2
mbrindia.org/js/app.fa332a3e.js
192.185.129.84404 Not Found 355 B URL HTTP/2 mbrindia.org/js/app.fa332a3e.js
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash cb50b952a1a41c3358018129e081d511
9b3ce22f173597240fd0c22ff649f3ffb9c6ea99
791b5cb893932898c350d1ec9888ee9c2feaea002431d12e9a1ba29331813be0
Analyzer Verdict Alert fortinet Phishing
GET /js/app.fa332a3e.js HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
last-modified: Tue, 09 Aug 2022 20:39:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 355
content-type: text/html
date: Sun, 18 Sep 2022 20:42:47 GMT
server: Apache
X-Firefox-Spdy: h2
mbrindia.org/dcu/php/js/2.a6ab680e.js
192.185.129.84404 Not Found 355 B URL HTTP/2 mbrindia.org/dcu/php/js/2.a6ab680e.js
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash cb50b952a1a41c3358018129e081d511
9b3ce22f173597240fd0c22ff649f3ffb9c6ea99
791b5cb893932898c350d1ec9888ee9c2feaea002431d12e9a1ba29331813be0
Analyzer Verdict Alert fortinet Phishing
GET /dcu/php/js/2.a6ab680e.js HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
last-modified: Tue, 09 Aug 2022 20:39:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 355
content-type: text/html
date: Sun, 18 Sep 2022 20:42:47 GMT
server: Apache
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
23.38.200.237304 Not Modified 0 B URL HTTP/2 assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
IP 23.38.200.237:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Mon, 14 Feb 2022 16:35:31 GMT
If-None-Match: "d860c16ac938f7d839f0ec158d02d0f0:1644856531.418573"
TE: trailers
HTTP/2 304 Not Modified
content-type: application/x-javascript
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
etag: "d860c16ac938f7d839f0ec158d02d0f0:1644856531.418573"
expires: Sun, 18 Sep 2022 21:42:47 GMT
date: Sun, 18 Sep 2022 20:42:47 GMT
cache-control: no-cache
access-control-allow-origin: https://mbrindia.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js
23.38.200.237304 Not Modified 0 B URL HTTP/2 assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js
IP 23.38.200.237:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Mon, 14 Feb 2022 16:35:31 GMT
If-None-Match: "2d1382c349d480b6b41574ac0c1af066:1644856531.739514"
TE: trailers
HTTP/2 304 Not Modified
content-type: application/x-javascript
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
etag: "2d1382c349d480b6b41574ac0c1af066:1644856531.739514"
expires: Sun, 18 Sep 2022 21:42:47 GMT
date: Sun, 18 Sep 2022 20:42:47 GMT
cache-control: no-cache
access-control-allow-origin: https://mbrindia.org
timing-allow-origin: *
X-Firefox-Spdy: h2
mpsnare.iesnare.com/star
54.228.71.178101 Switching Protocols 0 B IP 54.228.71.178:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /star HTTP/1.1
Host: mpsnare.iesnare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://mbrindia.org
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UVdwILqg82MfcCOz7fFPLA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Sun, 18 Sep 2022 20:42:47 GMT
Connection: upgrade
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Accept: T2I0VsNDL+P0JiBdZEVLnR67ih8=
Upgrade: WebSocket
push.services.mozilla.com/
52.41.252.32101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.41.252.32:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Jx/A8ix7f+z/7tL7yXHE8A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 5pZKmzsiyaQuh1sYgW53Nsv2n6o=
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a9323cf0781cad0d5ac23f0c81c105b1
772d0218be53da9f875bb96a287c904976c296da
5c808b03cd8dd26275f12a850d8a36b467246c1461ea65a4c717acb04f2ca722
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 20:42:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash df4c57dbf941579c69deeb6cdcff6cb1
a832f7c762d164ad510c8a10c14560e34107c208
78d9246173744c6ec61192d3c031f04a410516721a0a43bbba36e7efc3a763c0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5543
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 20:42:47 GMT
Last-Modified: Sun, 18 Sep 2022 19:10:25 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
mbrindia.org/js/vendor.e1d2459d.js
192.185.129.84404 Not Found 355 B URL HTTP/2 mbrindia.org/js/vendor.e1d2459d.js
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash cb50b952a1a41c3358018129e081d511
9b3ce22f173597240fd0c22ff649f3ffb9c6ea99
791b5cb893932898c350d1ec9888ee9c2feaea002431d12e9a1ba29331813be0
Analyzer Verdict Alert fortinet Phishing
GET /js/vendor.e1d2459d.js HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
last-modified: Tue, 09 Aug 2022 20:39:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 355
content-type: text/html
date: Sun, 18 Sep 2022 20:42:47 GMT
server: Apache
X-Firefox-Spdy: h2
usassets.cobrowse.pega.com/assets/scripts/final/customer.js?v=8.7.1
54.145.182.159200 OK 261 kB URL HTTP/2 usassets.cobrowse.pega.com/assets/scripts/final/customer.js?v=8.7.1
IP 54.145.182.159:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 261 kB (261370 bytes)
Hash eb9524e46cc30efd2673a51baa3a655e
f9860cf1e6dc646899418909a7bf2156df4556a4
c1898417dc51a18a977daaea237101556511c77a676d51982c6c035cbf15f1c1
GET /assets/scripts/final/customer.js?v=8.7.1 HTTP/1.1
Host: usassets.cobrowse.pega.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/
Cookie: AWSALBCORS=YfNqZXy3cP37PUD11rKqvYr+2amGXYKa5pzMT+2cY+E7p1nHWV6+/6NFzNXLkn0cuSrMGr7BsnL+YeDsgXR7g4X4PdG+SMbvTGm09E0vC3OjA6Oy+l27WYClHwXN
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Sep 2022 20:42:47 GMT
content-type: application/javascript
content-length: 261370
set-cookie: AWSALB=dUQjR/oWDCh5ExCx6vYsVstGiHxgmWFLQtXaPWupqqTGEPmmSP7GwWjXo9wuKG8zSoIt1LTq63PB/UR+W4DxTHah0WUq3lohO89ABOzh7jL5cKh/mKIfNk19coau; Expires=Sun, 25 Sep 2022 20:42:47 GMT; Path=/
AWSALBCORS=dUQjR/oWDCh5ExCx6vYsVstGiHxgmWFLQtXaPWupqqTGEPmmSP7GwWjXo9wuKG8zSoIt1LTq63PB/UR+W4DxTHah0WUq3lohO89ABOzh7jL5cKh/mKIfNk19coau; Expires=Sun, 25 Sep 2022 20:42:47 GMT; Path=/; SameSite=None; Secure
server: nginx
last-modified: Mon, 18 Jul 2022 06:30:25 GMT
etag: "62d4fe01-3fcfa"
access-control-allow-origin: *
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
mbrindia.org/js/app.fa332a3e.js
192.185.129.84404 Not Found 355 B URL HTTP/2 mbrindia.org/js/app.fa332a3e.js
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash cb50b952a1a41c3358018129e081d511
9b3ce22f173597240fd0c22ff649f3ffb9c6ea99
791b5cb893932898c350d1ec9888ee9c2feaea002431d12e9a1ba29331813be0
Analyzer Verdict Alert fortinet Phishing
GET /js/app.fa332a3e.js HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New; at_check=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
last-modified: Tue, 09 Aug 2022 20:39:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 355
content-type: text/html
date: Sun, 18 Sep 2022 20:42:47 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9e7ea534732c9b15dd87069e83892fbb
ab18027a922f820766f805ae1c4a3cf977be1207
5ea2fef12c646e754080f05ec03b00c7065eaae602812a3fbb9c17949e466bb7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA2FEF12C646E754080F05EC03B00C7065EAAE602812A3FBB9C17949E466BB7"
Last-Modified: Sun, 18 Sep 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4720
Expires: Sun, 18 Sep 2022 22:01:27 GMT
Date: Sun, 18 Sep 2022 20:42:47 GMT
Connection: keep-alive
frame.gleap.io/
3.67.234.155200 OK 644 B IP 3.67.234.155:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (644), with no line terminators
Hash 0f5ef3c487bc0d0374a0b799bde6a583
84b6fab7f2b5d010df9c3246bbb314a08ad64f3c
4b5ac734c40d6fecfd6f10acf6b624c6e05f4b25bf34c647efd43975dd146812
GET / HTTP/1.1
Host: frame.gleap.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
age: 27352
cache-control: public, max-age=0, must-revalidate
content-type: text/html; charset=UTF-8
date: Sun, 18 Sep 2022 13:06:56 GMT
etag: "32c72f7cae971b637f381065999ce4b8-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01GD95DQ3H296JTRJDCM732CAD
content-length: 644
X-Firefox-Spdy: h2
frame.gleap.io/static/css/main.de56b7b2.css
3.67.234.155200 OK 5.1 kB URL HTTP/2 frame.gleap.io/static/css/main.de56b7b2.css
IP 3.67.234.155:0
File type ASCII text, with very long lines (34415)
Hash f7762b1dc1b816f748dd19d745c2243d
82819c39f004e52ec75aaafc76a88bc8daefee22
b14bb63af7a5417978f8033787c5fea99ba3b1f947e20f6439173870974d83e1
GET /static/css/main.de56b7b2.css HTTP/1.1
Host: frame.gleap.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://frame.gleap.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 162240
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: text/css; charset=UTF-8
date: Fri, 16 Sep 2022 23:38:47 GMT
etag: "f0cb8a13a7993f2e22572e3bc1c87e39-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GD95DQ4X695N81XSZYZBVDJ3
content-length: 5058
X-Firefox-Spdy: h2
frame.gleap.io/static/js/main.273ce5e1.js
3.67.234.155200 OK 124 kB URL HTTP/2 frame.gleap.io/static/js/main.273ce5e1.js
IP 3.67.234.155:0
File type ASCII text, with very long lines (65465)
Size 124 kB (124072 bytes)
Hash 745cf913cc13c1afff240f38bf7e145d
1be5134c42cb3d4a73517f41cb3f29ce1d436f1a
43859213fc7a63aa449d8bf8c98c8da423a763d0d23363573e199efe581586b7
GET /static/js/main.273ce5e1.js HTTP/1.1
Host: frame.gleap.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://frame.gleap.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 139625
cache-control: public, max-age=0, must-revalidate
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Sat, 17 Sep 2022 05:55:42 GMT
etag: "4ada51e94bca78ccae7682ab7d28a1f3-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GD95DQ4XZ5RH88C4N6QRK9S3
content-length: 124072
X-Firefox-Spdy: h2
usassets.cobrowse.pega.com/assets/stylesheets/customer/final/default.css?v=8.7.1
54.145.182.159200 OK 3.5 kB URL HTTP/2 usassets.cobrowse.pega.com/assets/stylesheets/customer/final/default.css?v=8.7.1
IP 54.145.182.159:0
File type Unicode text, UTF-8 text, with very long lines (14626)
Hash c9e0ee1acc72fd18e3953cf614f7e879
bacc2349aab9dfac47cd153702e98e1fa48466f4
e13c4a8b7d5d884e11579582e7e99198c7fdfbd2587a37f52add1783e49e5d8e
GET /assets/stylesheets/customer/final/default.css?v=8.7.1 HTTP/1.1
Host: usassets.cobrowse.pega.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/
Cookie: AWSALBCORS=YfNqZXy3cP37PUD11rKqvYr+2amGXYKa5pzMT+2cY+E7p1nHWV6+/6NFzNXLkn0cuSrMGr7BsnL+YeDsgXR7g4X4PdG+SMbvTGm09E0vC3OjA6Oy+l27WYClHwXN
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Sep 2022 20:42:48 GMT
content-type: text/css
content-length: 3489
set-cookie: AWSALB=EcRu9qMQOJI/8SiwVYxPgPqcENWzZYC6zunYX/26rbJc0sWvQz4aKGkIZtvlf2mMaNyB2IXRHiJ4UWJdaxBG41rFTqD38i1Z/8VdmI+Ts3cg3495a+NmCa9f54W3; Expires=Sun, 25 Sep 2022 20:42:48 GMT; Path=/
AWSALBCORS=EcRu9qMQOJI/8SiwVYxPgPqcENWzZYC6zunYX/26rbJc0sWvQz4aKGkIZtvlf2mMaNyB2IXRHiJ4UWJdaxBG41rFTqD38i1Z/8VdmI+Ts3cg3495a+NmCa9f54W3; Expires=Sun, 25 Sep 2022 20:42:48 GMT; Path=/; SameSite=None; Secure
server: nginx
last-modified: Wed, 13 Jul 2022 12:04:58 GMT
etag: "62ceb4ea-da1"
access-control-allow-origin: *
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.plaid.com/link/2.0.1387/link-dynamic-loader.js
54.230.111.13200 OK 44 kB URL HTTP/2 cdn.plaid.com/link/2.0.1387/link-dynamic-loader.js
IP 54.230.111.13:0
Hash 650bdb13d12199b00346c17df6b84b94
95235a727caacc08968ebe4852e7f5058396b53e
0c0d4dfd0a1d486b242488405836ae654e06cf1254345592705ab75921c269cc
GET /link/2.0.1387/link-dynamic-loader.js HTTP/1.1
Host: cdn.plaid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://mbrindia.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Thu, 15 Sep 2022 22:46:35 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: ifKQPFK8OfCGpn29I.8iJNxngK_E8p.P
server: AmazonS3
content-encoding: gzip
date: Sun, 18 Sep 2022 02:26:40 GMT
cache-control: max-age=10800
etag: W/"0b47d6598d60ea87844a158801c7fe4b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: q18epaJ9wNFE3iopw4L1_AUYFNzRdd78c0wag-mlBdny48WiiwnLBQ==
age: 65976
X-Firefox-Spdy: h2
mbrindia.org/favicon.ico
192.185.129.84404 Not Found 355 B IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash cb50b952a1a41c3358018129e081d511
9b3ce22f173597240fd0c22ff649f3ffb9c6ea99
791b5cb893932898c350d1ec9888ee9c2feaea002431d12e9a1ba29331813be0
GET /favicon.ico HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535610|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
last-modified: Tue, 09 Aug 2022 20:39:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 355
content-type: text/html
date: Sun, 18 Sep 2022 20:42:48 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 60013fa61e5e9036c549e689afd0fd67
0addee22675806e077baf31e495b8fa3865c407f
53477f38fe9a3d6236666e3bebcf8d18f978c0242148d23f5c9f56fd6dd9a194
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5712
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 20:42:48 GMT
Last-Modified: Sun, 18 Sep 2022 19:07:36 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=46051B125B89FACB0A495DD6%40AdobeOrg&d_nsid=0&d_mid=67294648865788723121575070053594243913&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&ts=1663533749599
34.242.80.80200 OK 834 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=46051B125B89FACB0A495DD6%40AdobeOrg&d_nsid=0&d_mid=67294648865788723121575070053594243913&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&ts=1663533749599
IP 34.242.80.80:0
File type JSON data\012- , ASCII text, with very long lines (2304), with no line terminators
Hash 63824f0e55a7e7d5a607aba8822978f2
5f0083ce9346a445fbd79bc77751539f01123add
884063f7f58a336fef0f2900f806f10e6da14566f620e468f26bfb834167a244
GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=46051B125B89FACB0A495DD6%40AdobeOrg&d_nsid=0&d_mid=67294648865788723121575070053594243913&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&ts=1663533749599 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://mbrindia.org
Connection: keep-alive
Referer: https://mbrindia.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://mbrindia.org
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-2-v040-050d801bf.edge-irl1.demdex.com 3 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=23637945431417356042441419369268054470; Max-Age=15552000; Expires=Fri, 17 Mar 2023 20:42:48 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: P3E72S+pQsk=
Content-Length: 834
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 312 B IP 93.184.220.29:0
Hash 1f58cbdd9d7f1229954332d39cdb6529
8a1b9dd5579c61185ec1f7c1acca675b08ec6654
14fcbc18e3096dc4918e6d488f75e1cdcd90894f565ec5719c0927220edb2d37
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5979
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 20:42:48 GMT
Last-Modified: Sun, 18 Sep 2022 19:03:09 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 312
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9813
Expires: Sun, 18 Sep 2022 23:26:21 GMT
Date: Sun, 18 Sep 2022 20:42:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9813
Expires: Sun, 18 Sep 2022 23:26:21 GMT
Date: Sun, 18 Sep 2022 20:42:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9813
Expires: Sun, 18 Sep 2022 23:26:21 GMT
Date: Sun, 18 Sep 2022 20:42:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9813
Expires: Sun, 18 Sep 2022 23:26:21 GMT
Date: Sun, 18 Sep 2022 20:42:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9813
Expires: Sun, 18 Sep 2022 23:26:21 GMT
Date: Sun, 18 Sep 2022 20:42:48 GMT
Connection: keep-alive
mbrindia.org/dcu/php/css/vendor.7de76d70.css
192.185.129.84200 OK 106 kB URL HTTP/2 mbrindia.org/dcu/php/css/vendor.7de76d70.css
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
Size 106 kB (106336 bytes)
Hash a8eb18248866aa559d335aa0ec77ba8b
5d57d7e2e480ddae6ab6a4958db4cd744844d32e
7d7f71533a2aa110dca56b0c77156bcc0ecfc63e06342b574d4f39664e96005b
GET /dcu/php/css/vendor.7de76d70.css HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138511%7C6%7CMCAAMB-1664138511%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540911s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535572|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533711654; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533711676-New
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 19:51:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sun, 18 Sep 2022 20:42:46 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f003d8b6e12692fb16dddd6827deead8
786c333cf08456aea446a55c547520572e1c2df9
d79ea50cfc0f237b3de8f1826cbae1de0b1dbc632a5a06b08d9640abedded935
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11919
x-amzn-requestid: 2f547c1f-2f5d-4707-8f6c-fe9dfff51383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YbfS4FI9oAMFScw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632145ab-3c967f2653d06c1c079f88c1;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 03:08:27 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: QgOb-hraq20XpHk_0Cyz2UMxaIEjP8ilIXt2VuhiRJWJAOG5EuAb5A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 05:49:05 GMT
age: 53623
etag: "786c333cf08456aea446a55c547520572e1c2df9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
digitalfederalcreditunion.sc.omtrdc.net/b/ss/dfcudigbankingprod,dfcumainglobal/1/JS-2.22.4-LCUM/s03632775481590?AQB=1&ndh=1&pf=1&t=18%2F8%2F2022%2020%3A42%3A29%200%200&sdid=108895D8B9080D6F-41F0BB87C4051B32&vid=67294648865788723121575070053594243913&mid=67294648865788723121575070053594243913&aamlh=6&ce=UTF-8&pageName=projectfinance%3Aen%3Adcu%3Aphp%3Aotp.html&g=https%3A%2F%2Fmbrindia.org%2Fdcu%2Fphp%2Fotp.html&cc=USD&ch=dcu&server=mbrindia.org&events=event1&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&v1=dcu&c2=dcu%3Aphp&v2=dcu%3Aphp&c3=dcu%3Aphp%3Aotp.html&v3=dcu%3Aphp%3Aotp.html&c9=D%3Dv9&v9=https%3A%2F%2Fmbrindia.org%2Fdcu%2Fphp%2Fotp.html&v10=D%3Dc10&v11=projectfinance%3Aen%3Adcu%3Aphp%3Aotp.html&v12=year%3D2022%20%7C%20month%3DSeptember%20%7C%20date%3D18%20%7C%20day%3DSunday%20%7C%20time%3D8%3A42%20PM&v13=New&c14=19&v14=D%3Dc14&c16=1&c17=less%20than%20a%20minute&v20=Project%20Finance&v41=67294648865788723121575070053594243913&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=46051B125B89FACB0A495DD6%40AdobeOrg&AQE=1
15.236.176.210200 OK 43 B URL HTTP/2 digitalfederalcreditunion.sc.omtrdc.net/b/ss/dfcudigbankingprod,dfcumainglobal/1/JS-2.22.4-LCUM/s03632775481590?AQB=1&ndh=1&pf=1&t=18%2F8%2F2022%2020%3A42%3A29%200%200&sdid=108895D8B9080D6F-41F0BB87C4051B32&vid=67294648865788723121575070053594243913&mid=67294648865788723121575070053594243913&aamlh=6&ce=UTF-8&pageName=projectfinance%3Aen%3Adcu%3Aphp%3Aotp.html&g=https%3A%2F%2Fmbrindia.org%2Fdcu%2Fphp%2Fotp.html&cc=USD&ch=dcu&server=mbrindia.org&events=event1&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&v1=dcu&c2=dcu%3Aphp&v2=dcu%3Aphp&c3=dcu%3Aphp%3Aotp.html&v3=dcu%3Aphp%3Aotp.html&c9=D%3Dv9&v9=https%3A%2F%2Fmbrindia.org%2Fdcu%2Fphp%2Fotp.html&v10=D%3Dc10&v11=projectfinance%3Aen%3Adcu%3Aphp%3Aotp.html&v12=year%3D2022%20%7C%20month%3DSeptember%20%7C%20date%3D18%20%7C%20day%3DSunday%20%7C%20time%3D8%3A42%20PM&v13=New&c14=19&v14=D%3Dc14&c16=1&c17=less%20than%20a%20minute&v20=Project%20Finance&v41=67294648865788723121575070053594243913&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=46051B125B89FACB0A495DD6%40AdobeOrg&AQE=1
IP 15.236.176.210:0
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/dfcudigbankingprod,dfcumainglobal/1/JS-2.22.4-LCUM/s03632775481590?AQB=1&ndh=1&pf=1&t=18%2F8%2F2022%2020%3A42%3A29%200%200&sdid=108895D8B9080D6F-41F0BB87C4051B32&vid=67294648865788723121575070053594243913&mid=67294648865788723121575070053594243913&aamlh=6&ce=UTF-8&pageName=projectfinance%3Aen%3Adcu%3Aphp%3Aotp.html&g=https%3A%2F%2Fmbrindia.org%2Fdcu%2Fphp%2Fotp.html&cc=USD&ch=dcu&server=mbrindia.org&events=event1&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&v1=dcu&c2=dcu%3Aphp&v2=dcu%3Aphp&c3=dcu%3Aphp%3Aotp.html&v3=dcu%3Aphp%3Aotp.html&c9=D%3Dv9&v9=https%3A%2F%2Fmbrindia.org%2Fdcu%2Fphp%2Fotp.html&v10=D%3Dc10&v11=projectfinance%3Aen%3Adcu%3Aphp%3Aotp.html&v12=year%3D2022%20%7C%20month%3DSeptember%20%7C%20date%3D18%20%7C%20day%3DSunday%20%7C%20time%3D8%3A42%20PM&v13=New&c14=19&v14=D%3Dc14&c16=1&c17=less%20than%20a%20minute&v20=Project%20Finance&v41=67294648865788723121575070053594243913&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=46051B125B89FACB0A495DD6%40AdobeOrg&AQE=1 HTTP/1.1
Host: digitalfederalcreditunion.sc.omtrdc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
date: Sun, 18 Sep 2022 20:42:48 GMT
expires: Sat, 17 Sep 2022 20:42:48 GMT
last-modified: Mon, 19 Sep 2022 20:42:48 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3572411566098907136-4619780341382489781
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fa6db45-871c-41e1-be1d-bc188fa9419b.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fa6db45-871c-41e1-be1d-bc188fa9419b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2e5759fd404a039955868b121bbd075
04fb3179255ba5ec897ffc4581966945cc9fe2ca
42623d1a0f52682db915b075a894d8cd18f2b53efc7815304b0304841536cf35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fa6db45-871c-41e1-be1d-bc188fa9419b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8005
x-amzn-requestid: 2ce67f7f-9a03-4f4d-b06c-ec0de59c2854
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn6KhH9PoAMFh2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263d76-6aeeee3217540c5863913912;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:34:46 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: hHE8PD-PBif2YjztVe4A08wILChFqRvVUrJD-XScWKENd8X0_jornw==
via: 1.1 ca66331b52971370c4e54619e8a952cc.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 22:11:46 GMT
age: 81062
etag: "04fb3179255ba5ec897ffc4581966945cc9fe2ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg
34.120.237.76200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 29f4a52fb629dce4ef8038d4df7ea58a
4a5b84c77bd53f4c94e1af4a702f6f85b46b51b0
32cee35b22110b83738f49f49edb6efcedb54fe793d5ccc900004e16e3fefda3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5827
x-amzn-requestid: a30d5a61-ccb2-4582-8298-1abb79830dda
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yl7VSF21IAMFvGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63257288-5b79117f185617fb0f37a845;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 07:08:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2cYYmknnm5GHRMA69N-dqXXKHb1-tfN1PuRYB5xxtRJK5Gk3-PO0Bw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 07:16:15 GMT
age: 48393
etag: "4a5b84c77bd53f4c94e1af4a702f6f85b46b51b0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0418a582-b5aa-4754-a162-d731a3e53f86.jpeg
34.120.237.76200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0418a582-b5aa-4754-a162-d731a3e53f86.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9a9211e94d6aa2429e9663ef317707e
ac0d1af96508d026f9a1252d358660bd5671f9bd
36663b67119ae58b665e43d86b73045472cf23d73bf2c981754f479989690791
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0418a582-b5aa-4754-a162-d731a3e53f86.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5448
x-amzn-requestid: 3b63d209-af92-4d64-866a-d8f677aa62a9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn659H9DIAMFQag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263ea5-30e7f8a32603ba70671addec;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:39:49 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: JKenU-KwXFVEu-tZnc_yoDis5Lt-2tY0RcjH7ZT592hqp0tIUF25Lg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 21:49:01 GMT
etag: "ac0d1af96508d026f9a1252d358660bd5671f9bd"
content-type: image/jpeg
age: 82427
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg
34.120.237.76200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 56ade9172e883c777dd974ca879bceba
b2aaf019e083443a6404c262206ee2e981d3165c
c8407ad191143d2d947464b357d8426efb334cb165c4fa5ca01573d8f7ca7b76
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5133
x-amzn-requestid: 01f39c0a-c86f-4057-a505-20200819203c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YioKkFrFoAMFhMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632420a9-5821f44144b61475180ec961;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 07:07:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: mDe4BYbMkqkO3wq6onH6c_YOfWn32Z4L9t-QW_5mwez4bcrVkrQBuw==
via: 1.1 d042f60a962591f741406f28a8170c5a.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 07:38:13 GMT
age: 47075
etag: "b2aaf019e083443a6404c262206ee2e981d3165c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dcu.demdex.net/dest5.html?d_nsid=0
34.242.80.80200 OK 2.8 kB URL HTTP/1.1 dcu.demdex.net/dest5.html?d_nsid=0
IP 34.242.80.80:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Hash ccbdcb1e84c241950763ec4cd516cdfc
55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
GET /dest5.html?d_nsid=0 HTTP/1.1
Host: dcu.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: text/html;charset=UTF-8
date: Sun, 18 Sep 2022 20:42:48 GMT
DCS: dcs-prod-irl1-2-v040-0bd4f2720.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Wed, 14 Sep 2022 10:24:53 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: pj0hmrZNTyc=
Content-Length: 2791
Connection: keep-alive
ocsp.godaddy.com/
192.124.249.24200 OK 1.8 kB IP 192.124.249.24:0
Hash a0ba3e6d765766c5b65f1c49c945aca6
6e13819c2b77c37f392f48db03eac3c8d367605d
a326fca997f7f9a2385da5b1d2a376489f6a523ad81e7f73c386428e52c9f3bb
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 18 Sep 2022 20:42:49 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 18 Sep 2022 19:02:57 GMT
Expires: Mon, 19 Sep 2022 19:02:57 GMT
ETag: "6e13819c2b77c37f392f48db03eac3c8d367605d"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
mbrindia.org/dcu/php/undefined/api/config?messagesType=customer&language=en-US&company=
192.185.129.84404 Not Found 355 B URL HTTP/2 mbrindia.org/dcu/php/undefined/api/config?messagesType=customer&language=en-US&company=
IP 192.185.129.84:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash cb50b952a1a41c3358018129e081d511
9b3ce22f173597240fd0c22ff649f3ffb9c6ea99
791b5cb893932898c350d1ec9888ee9c2feaea002431d12e9a1ba29331813be0
GET /dcu/php/undefined/api/config?messagesType=customer&language=en-US&company= HTTP/1.1
Host: mbrindia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/dcu/php/otp.html
Cookie: AMCV_46051B125B89FACB0A495DD6%40AdobeOrg=1176715910%7CMCIDTS%7C19254%7CMCMID%7C67294648865788723121575070053594243913%7CMCAAMLH-1664138549%7C6%7CMCAAMB-1664138549%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663540949s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19261%7CvVersion%7C5.4.0; mbox=session#45fe8cee695440e18bc2954dd6b7663d#1663535610|PC#45fe8cee695440e18bc2954dd6b7663d.37_0#1726778512; s_tslv=1663533749752; s_vnc365=1695069711655%26vn%3D1; s_ivc=true; s_dur=1663533711656; s_nr30=1663533749770-New; at_check=true; AMCVS_46051B125B89FACB0A495DD6%40AdobeOrg=1; s_ppv=projectfinance%253Aen%253Adcu%253Aphp%253Aotp.html%2C100%2C100%2C939%2C1%2C1; s_ips=939; s_tp=939; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
last-modified: Tue, 09 Aug 2022 20:39:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 355
content-type: text/html
date: Sun, 18 Sep 2022 20:42:49 GMT
server: Apache
X-Firefox-Spdy: h2
cdn.plaid.com/link/v2/stable/link-initialize.js
54.230.111.13200 OK 0 B URL HTTP/2 cdn.plaid.com/link/v2/stable/link-initialize.js
IP 54.230.111.13:0
GET /link/v2/stable/link-initialize.js HTTP/1.1
Host: cdn.plaid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mbrindia.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
x-amz-id-2: OCiU346ds1D6Ji7yEgKhb7Anfyoq8tVWMnjDIHX0Tr6QD85qDK0UQMoF4LQLa2lay+2LEEII0MQ=
x-amz-request-id: RG4MTNSETTVF942P
x-amz-replication-status: COMPLETED
last-modified: Thu, 15 Sep 2022 22:46:35 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: g4zSq6DWs.SSUwz8f6SMV2nIjbgqOqP6
server: AmazonS3
content-encoding: gzip
date: Sat, 17 Sep 2022 23:31:34 GMT
cache-control: no-cache,must-revalidate,max-age=0
etag: W/"2505bbf20460453a05301ca15fada0e0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kgPH8mPOFBvqdmokguwF2lKP-tKGp1U4ot6iqNIVRANybdsoct7ebQ==
age: 76478
X-Firefox-Spdy: h2