urlquery - report: www.citizenshelp.edns.biz/login_auth.php?onlineid=9045095400954905409adkjer43434343&username=$username

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	Sent bytes	Received bytes	IP
contile.services.mozilla.com (1)	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333	229	34.117.237.239
ocsp.usertrust.com (5)	899	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1710	13895	104.18.32.68
ocsp.sectigo.com (5)	487	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1700	4815	104.18.32.68
r3.o.lencr.org (4)	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1352	3547	23.36.76.226
ocsp.digicert.com (2)	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682	1593	93.184.220.29
firefox.settings.services.mozilla.com (2)	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782	2373	34.102.187.140
content-signature-2.cdn.mozilla.net (1)	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413	5844	34.160.144.191
login.regions.com (13)	132494	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	5968	1393031	205.255.100.240
push.services.mozilla.com (1)	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606	127	54.187.102.159
nexus.ensighten.com (3)	2786	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1599	5460	54.230.111.14
data.privacy.ensighten.com (1)	11126	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	801	176	63.34.68.24
www.citizenshelp.edns.biz (3)	0	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1268	14572	3.139.61.63
img-getpocket.cdn.mozilla.net (6)	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3246	55867	34.120.237.76

Scan Date	Severity	Indicator	Comment
2022-11-27	medium	www.citizenshelp.edns.biz/login_auth.php?onlineid=9045095400954905409adkjer (...)	Regions Financial Corporation
2022-11-28	medium	www.citizenshelp.edns.biz/	Regions Financial Corporation

Scan Date	Severity	Indicator	Comment
2022-11-28	medium	www.citizenshelp.edns.biz/Assets/Scripts/regionslib.min.js	Phishing

Date	UQ / IDS / BL	URL	IP
2022-11-30 18:22:15 UTC	8 - 0 - 6	www.citizenshelp.edns.biz/login.php?online_id (...)	3.139.61.63
2022-11-30 18:22:09 UTC	8 - 0 - 6	www.citizenshelp.edns.biz/login.php?online_id (...)	3.139.61.63
2022-11-30 18:22:06 UTC	8 - 0 - 6	www.citizenshelp.edns.biz/login.php?online_id (...)	3.139.61.63
2022-11-30 18:22:06 UTC	8 - 0 - 6	www.citizenshelp.edns.biz/login.php?online_id (...)	3.139.61.63
2022-11-30 18:11:00 UTC	8 - 0 - 13	citizenshelp.edns.biz/login.php?online_id=33b (...)	3.139.61.63

Date	UQ / IDS / BL	URL	IP
2023-06-01 05:00:36 UTC	0 - 1 - 0	www.njqcjy.com/3.exe	75.2.18.233
2023-06-01 05:00:23 UTC	0 - 1 - 0	ww12.bobbyudoh.com/wp-admin/verification/step (...)	75.2.81.221
2023-06-01 05:00:23 UTC	0 - 2 - 0	ww12.bobbyudoh.com/wp-admin/verification/step (...)	75.2.81.221
2023-06-01 05:00:10 UTC	0 - 1 - 0	www.njqcjy.com/1.exe	75.2.18.233
2023-06-01 04:58:43 UTC	0 - 0 - 2	go.rdrm1.click/go/3217fab2-ddfa-48c3-b6aa-fc8 (...)	3.70.16.242

Date	UQ / IDS / BL	URL	IP
2023-05-30 14:35:20 UTC	3 - 12 - 2	sec-kfcu.edns.biz/	204.16.169.54
2023-05-24 09:59:29 UTC	3 - 14 - 2	hfvur734yhwueh.edns.biz/qr/	188.127.225.187
2023-05-23 02:36:35 UTC	3 - 14 - 5	www.delisatayloeipointonline.edns.biz/	204.16.169.54
2023-05-22 12:51:25 UTC	3 - 12 - 5	www.delisatayloeipointonline.edns.biz/	204.16.169.54
2023-05-22 07:59:32 UTC	23 - 20 - 0	delisatayloeipointonline.edns.biz/	18.217.132.103

Date	UQ / IDS / BL	URL	IP
2022-11-29 05:31:15 UTC	5 - 0 - 7	citizenshelp.edns.biz/login_auth.php?onlineid (...)	3.139.61.63
2022-11-29 03:36:16 UTC	4 - 0 - 5	citizenshelp.edns.biz/login_auth.php?onlineid (...)	3.139.61.63
2022-11-29 02:44:32 UTC	5 - 0 - 7	citizenshelp.edns.biz/login_auth.php?onlineid (...)	3.139.61.63
2022-11-29 02:09:53 UTC	5 - 0 - 7	citizenshelp.edns.biz/login_auth.php?onlineid (...)	3.139.61.63
2022-11-28 16:28:16 UTC	4 - 0 - 5	citizenshelp.edns.biz/login_auth.php?onlineid (...)	3.139.61.63

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1" Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2931 Expires: Mon, 28 Nov 2022 12:22:32 GMT Date: Mon, 28 Nov 2022 11:33:41 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: cdbad2434b7d127a4fc769807a9dc3e7 Sha1: fa98cd9fc2309ab4423f33f683d17bdb17d76713 Sha256: 560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
GET /login_auth.php?onlineid=9045095400954905409adkjer43434343&username=$username HTTP/1.1 Host: www.citizenshelp.edns.biz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	3.139.61.63 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Mon, 28 Nov 2022 11:33:41 GMT Server: Apache Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (858), with CRLF line terminators Size: 13351 Md5: d769a18e95f070245783cf66113dd137 Sha1: e72b9eceb5f93ba4da0eb0857fd7e21c66ce24bb Sha256: 81e5577b27901a0f3874d75b4a432056268db3c482e7b8d7465ad8877ca5328d urlquery: - DynDNS domain detected Blocklists: - openphish: Regions Financial Corporation
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 3126 Cache-Control: max-age=85778 Date: Mon, 28 Nov 2022 11:33:41 GMT Etag: "63833c71-1d7" Expires: Tue, 29 Nov 2022 11:23:19 GMT Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT Server: ECS (ska/F70B) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 64b2a23eab6e5ae8c010ec7242be930c Sha1: 0673e4385ba01a5a245711bab96cafc34f765793 Sha256: 64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=18397 Expires: Mon, 28 Nov 2022 16:40:18 GMT Date: Mon, 28 Nov 2022 11:33:41 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3b56944f0e5716fd4fad2ec18994d4be Sha1: 61cafa4de31ba960d1145ec37272f6f6b6944e0c Sha256: 4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Mon, 28 Nov 2022 11:19:32 GMT cache-control: public,max-age=3600 age: 849 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 567df7db606cf5d0871aa5bc9311b6da Sha1: 4263faac7cbab2fcaf6661911dcad5091c06be17 Sha256: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: feVL37kNojGC3nS5EMweayP60xB4pyMnmhrQSCPbLDCGM8mM2DnUkmF80wKKoXiIkNyCyO2Y2q4= x-amz-request-id: 10ANQDY5M2QKYEAZ content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Mon, 28 Nov 2022 10:42:01 GMT age: 3100 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Mon, 28 Nov 2022 11:33:41 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /Assets/Scripts/regionslib.min.js HTTP/1.1 Host: www.citizenshelp.edns.biz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/login_auth.php?onlineid=9045095400954905409adkjer43434343&username=$username	3.139.61.63 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Mon, 28 Nov 2022 11:33:41 GMT Server: Apache Content-Length: 315 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 315 Md5: a34ac19f4afae63adc5d2f7bc970c07f Sha1: a82190fc530c265aa40a045c21770d967f4767b8 Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3 urlquery: - DynDNS domain detected Blocklists: - openphish: Regions Financial Corporation - fortinet: Phishing
GET /Assets/Scripts/login.min.js?v=h2l4kwjSmFhsosN9YheUZsPHCE_r3xd9N8PjjY8kk9s HTTP/1.1 Host: www.citizenshelp.edns.biz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/login_auth.php?onlineid=9045095400954905409adkjer43434343&username=$username	3.139.61.63 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Mon, 28 Nov 2022 11:33:41 GMT Server: Apache Content-Length: 315 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 315 Md5: a34ac19f4afae63adc5d2f7bc970c07f Sha1: a82190fc530c265aa40a045c21770d967f4767b8 Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3 urlquery: - DynDNS domain detected
POST / HTTP/1.1 Host: ocsp.usertrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	104.18.32.68 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 11:33:42 GMT Content-Length: 2236 Connection: keep-alive Last-Modified: Sat, 26 Nov 2022 22:12:16 GMT Expires: Sat, 03 Dec 2022 22:12:15 GMT Etag: "2c855f5c168265f7bf98378cf2e82f28a9d5e4c5" Cache-Control: max-age=602814,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb4 X-Frame-Options: SAMEORIGIN CF-Cache-Status: HIT Age: 81 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 7712ca497f900b41-OSL --- Additional Info --- Magic: data Size: 2236 Md5: 9528a39b26cafcf8779822971b40b755 Sha1: 2c855f5c168265f7bf98378cf2e82f28a9d5e4c5 Sha256: 5389e2832f7479cdf129d5b675ab33feae4edc285d2da3f5dd6007d84b99bbe2
POST / HTTP/1.1 Host: ocsp.usertrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	104.18.32.68 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 11:33:42 GMT Content-Length: 2236 Connection: keep-alive Last-Modified: Sat, 26 Nov 2022 22:12:16 GMT Expires: Sat, 03 Dec 2022 22:12:15 GMT Etag: "2c855f5c168265f7bf98378cf2e82f28a9d5e4c5" Cache-Control: max-age=602814,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb4 X-Frame-Options: SAMEORIGIN CF-Cache-Status: HIT Age: 81 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 7712ca497c920afa-OSL --- Additional Info --- Magic: data Size: 2236 Md5: 9528a39b26cafcf8779822971b40b755 Sha1: 2c855f5c168265f7bf98378cf2e82f28a9d5e4c5 Sha256: 5389e2832f7479cdf129d5b675ab33feae4edc285d2da3f5dd6007d84b99bbe2
POST / HTTP/1.1 Host: ocsp.usertrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	104.18.32.68 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 11:33:42 GMT Content-Length: 2236 Connection: keep-alive Last-Modified: Sat, 26 Nov 2022 22:12:16 GMT Expires: Sat, 03 Dec 2022 22:12:15 GMT Etag: "2c855f5c168265f7bf98378cf2e82f28a9d5e4c5" Cache-Control: max-age=602814,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb4 X-Frame-Options: SAMEORIGIN CF-Cache-Status: HIT Age: 81 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 7712ca498cc8b4f3-OSL --- Additional Info --- Magic: data Size: 2236 Md5: 9528a39b26cafcf8779822971b40b755 Sha1: 2c855f5c168265f7bf98378cf2e82f28a9d5e4c5 Sha256: 5389e2832f7479cdf129d5b675ab33feae4edc285d2da3f5dd6007d84b99bbe2
POST / HTTP/1.1 Host: ocsp.usertrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	104.18.32.68 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 11:33:42 GMT Content-Length: 2236 Connection: keep-alive Last-Modified: Sat, 26 Nov 2022 22:12:16 GMT Expires: Sat, 03 Dec 2022 22:12:15 GMT Etag: "2c855f5c168265f7bf98378cf2e82f28a9d5e4c5" Cache-Control: max-age=602814,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb4 X-Frame-Options: SAMEORIGIN CF-Cache-Status: HIT Age: 81 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 7712ca4988340b3d-OSL --- Additional Info --- Magic: data Size: 2236 Md5: 9528a39b26cafcf8779822971b40b755 Sha1: 2c855f5c168265f7bf98378cf2e82f28a9d5e4c5 Sha256: 5389e2832f7479cdf129d5b675ab33feae4edc285d2da3f5dd6007d84b99bbe2
POST / HTTP/1.1 Host: ocsp.usertrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	104.18.32.68 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 11:33:42 GMT Content-Length: 2236 Connection: keep-alive Last-Modified: Sat, 26 Nov 2022 22:12:16 GMT Expires: Sat, 03 Dec 2022 22:12:15 GMT Etag: "2c855f5c168265f7bf98378cf2e82f28a9d5e4c5" Cache-Control: max-age=602814,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb4 X-Frame-Options: SAMEORIGIN CF-Cache-Status: HIT Age: 81 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 7712ca498c4b0b39-OSL --- Additional Info --- Magic: data Size: 2236 Md5: 9528a39b26cafcf8779822971b40b755 Sha1: 2c855f5c168265f7bf98378cf2e82f28a9d5e4c5 Sha256: 5389e2832f7479cdf129d5b675ab33feae4edc285d2da3f5dd6007d84b99bbe2
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	104.18.32.68 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 11:33:42 GMT Content-Length: 471 Connection: keep-alive Last-Modified: Sun, 27 Nov 2022 06:52:54 GMT Expires: Sun, 04 Dec 2022 06:52:53 GMT Etag: "47dc6843e6e5088b113f52e9b008e8359d30fbca" Cache-Control: max-age=500950,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb1 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7712ca49ac4a0b59-OSL --- Additional Info --- Magic: data Size: 471 Md5: 5234010fa022c0e1c61fb4dafdf0d65e Sha1: 47dc6843e6e5088b113f52e9b008e8359d30fbca Sha256: 474f80ea5b77a163b35cee30bf27572e068f1a06d7b2f8c5c7ab745e30697154
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	104.18.32.68 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 11:33:42 GMT Content-Length: 471 Connection: keep-alive Last-Modified: Sun, 27 Nov 2022 06:52:54 GMT Expires: Sun, 04 Dec 2022 06:52:53 GMT Etag: "47dc6843e6e5088b113f52e9b008e8359d30fbca" Cache-Control: max-age=500950,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb6 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7712ca49a8b2b521-OSL --- Additional Info --- Magic: data Size: 471 Md5: 5234010fa022c0e1c61fb4dafdf0d65e Sha1: 47dc6843e6e5088b113f52e9b008e8359d30fbca Sha256: 474f80ea5b77a163b35cee30bf27572e068f1a06d7b2f8c5c7ab745e30697154
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Mon, 28 Nov 2022 11:11:12 GMT cache-control: public,max-age=3600 age: 1350 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /Assets/Styles/olbAuth.min.css?v=nXgpgIhKDDpWMfVTTAqVfQjXFAl6JN6bf-1rEIQG11w HTTP/1.1 Host: login.regions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	205.255.100.240 HTTP/1.1 200 OK Content-Type: text/css Age: 70588 Date: Sun, 27 Nov 2022 15:57:15 GMT Cache-Control: max-age= 86400 Connection: Keep-Alive Via: NS-CACHE-12-A ETag: "1d89e1433061ab6" Cteonnt-Length: 2230 Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT Accept-Ranges: bytes Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-UA-Compatible: IE=Edge Content-Encoding: gzip Content-Length: 928 Strict-Transport-Security: max-age=157680000 --- Additional Info --- Magic: ASCII text, with very long lines (2230), with no line terminators Size: 928 Md5: 252e3fa4c636b2c75f403bd2085860c9 Sha1: 601cb4429bf458737878ae6af466c03202ac96b9 Sha256: b3eef33ba7daa155c8efb6339667005b794478453dbee055ac8f8034581f5dd9
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	104.18.32.68 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 11:33:42 GMT Content-Length: 471 Connection: keep-alive Last-Modified: Sun, 27 Nov 2022 06:52:54 GMT Expires: Sun, 04 Dec 2022 06:52:53 GMT Etag: "47dc6843e6e5088b113f52e9b008e8359d30fbca" Cache-Control: max-age=500950,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb6 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7712ca49aed5b52d-OSL --- Additional Info --- Magic: data Size: 471 Md5: 5234010fa022c0e1c61fb4dafdf0d65e Sha1: 47dc6843e6e5088b113f52e9b008e8359d30fbca Sha256: 474f80ea5b77a163b35cee30bf27572e068f1a06d7b2f8c5c7ab745e30697154
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	104.18.32.68 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 11:33:42 GMT Content-Length: 471 Connection: keep-alive Last-Modified: Sun, 27 Nov 2022 06:52:54 GMT Expires: Sun, 04 Dec 2022 06:52:53 GMT Etag: "47dc6843e6e5088b113f52e9b008e8359d30fbca" Cache-Control: max-age=500950,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb2 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7712ca49e80d1c12-OSL --- Additional Info --- Magic: data Size: 471 Md5: 5234010fa022c0e1c61fb4dafdf0d65e Sha1: 47dc6843e6e5088b113f52e9b008e8359d30fbca Sha256: 474f80ea5b77a163b35cee30bf27572e068f1a06d7b2f8c5c7ab745e30697154
GET /Assets/Styles/Common.css?v=5-dD3SDWyYd6oqbtYnVWMkfQPvL7YH9QTq8oDnvMbK0 HTTP/1.1 Host: login.regions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	205.255.100.240 HTTP/1.1 200 OK Content-Type: text/css Age: 12583 Date: Mon, 28 Nov 2022 08:04:00 GMT Cache-Control: max-age= 86400 Connection: Keep-Alive Via: NS-CACHE-12-A ETag: "1d89e14330635aa" Server: nginx Content-Length: 2726 Cteonnt-Length: 10154 Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT Accept-Ranges: bytes X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-UA-Compatible: IE=Edge Content-Encoding: gzip Strict-Transport-Security: max-age=157680000 --- Additional Info --- Magic: Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Size: 2726 Md5: 8cf5f37cc74d1df1f834fd03b868ce6a Sha1: d04df4c6924fdcee78e8c9d6cbc716ff2f9fb84e Sha256: 1123960a16276e53f926a3d8d31d2381c9599c08b5530f393c022cab55051949
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5704 Cache-Control: max-age=169697 Date: Mon, 28 Nov 2022 11:33:42 GMT Etag: "63847a2f-1d7" Expires: Wed, 30 Nov 2022 10:41:59 GMT Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT Server: ECS (ska/F70B) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 7ab2ef968cb6a3078f4b9cb2dda813d4 Sha1: e669116047ca058a2c1b2999ff0ea8682719162c Sha256: 6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: OC2RRmXTWCQIXy/zSWGd5w== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	54.187.102.159 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: zSkMHgOrk0GFz++tbXK4i1HKGxw= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	104.18.32.68 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 11:33:42 GMT Content-Length: 471 Connection: keep-alive Last-Modified: Sun, 27 Nov 2022 06:52:54 GMT Expires: Sun, 04 Dec 2022 06:52:53 GMT Etag: "47dc6843e6e5088b113f52e9b008e8359d30fbca" Cache-Control: max-age=500950,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb3 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7712ca49acb5b4fd-OSL --- Additional Info --- Magic: data Size: 471 Md5: 5234010fa022c0e1c61fb4dafdf0d65e Sha1: 47dc6843e6e5088b113f52e9b008e8359d30fbca Sha256: 474f80ea5b77a163b35cee30bf27572e068f1a06d7b2f8c5c7ab745e30697154
GET /Assets/Styles/Library/Transmit/xmui-no-vars.css?v=27_x0mg1W6CZZnEL--AiaqVsSOXDJ9i9i-DjWZ9cLH4 HTTP/1.1 Host: login.regions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	205.255.100.240 HTTP/1.1 200 OK Content-Type: text/css Age: 12583 Date: Mon, 28 Nov 2022 08:03:59 GMT Cache-Control: max-age= 86400 Content-Length: 368074 Connection: Keep-Alive Via: NS-CACHE-12-A ETag: "1d89e14330dfd18" Server: nginx Cteonnt-Length: 782104 Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT Accept-Ranges: bytes X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-UA-Compatible: IE=Edge Content-Encoding: gzip Strict-Transport-Security: max-age=157680000 --- Additional Info --- Magic: ASCII text, with very long lines (65452), with CRLF line terminators Size: 368074 Md5: 0b8ea106c66c30533dadbf3d5e21c4d9 Sha1: 64aedc1a8d4e43f4bb1f4e205b6d89995ae71a7f Sha256: 9d2618e2906f86faf90b00e273a30e6749a74de8e160b7b94ebf4a3329e93640
GET /Assets/Scripts/regionslib.min.js?v=HtUVOJTWK1iZpw0Gl8w-cTMxKyTuHCjdJolqYBbsuBM HTTP/1.1 Host: login.regions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	205.255.100.240 HTTP/1.1 200 OK Content-Type: application/javascript Age: 70586 Date: Sun, 27 Nov 2022 15:57:17 GMT Cache-Control: max-age= 86400 Content-Length: 500902 Connection: Keep-Alive Via: NS-CACHE-12-A ETag: "1d89e1433099aa7" Server: nginx Cteonnt-Length: 1018023 Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT Accept-Ranges: bytes X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-UA-Compatible: IE=Edge Content-Encoding: gzip Strict-Transport-Security: max-age=157680000 --- Additional Info --- Magic: Unicode text, UTF-8 text, with very long lines (52355), with CRLF line terminators Size: 500902 Md5: 09247d70b6308684ca73df90ca007f04 Sha1: 5ff4f8d68ac876e37ab6e5b5c390c7860a75af17 Sha256: 1fe8648257a084401a738fd392e6b084cc9af85a1f57d2071b5c380c596086d3
GET /Assets/Styles/Library/Transmit/xmui.css?v=SicNklE1Ktl1QEjtpmgbhUZP0kpreO2AmgaagwSXy6Y HTTP/1.1 Host: login.regions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	205.255.100.240 HTTP/1.1 200 OK Content-Type: text/css Age: 12584 Date: Mon, 28 Nov 2022 08:03:59 GMT Cache-Control: max-age= 86400 Content-Length: 373379 Connection: Keep-Alive Via: NS-CACHE-12-A ETag: "1d89e14330a6a36" Server: nginx Cteonnt-Length: 817206 Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT Accept-Ranges: bytes X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-UA-Compatible: IE=Edge Content-Encoding: gzip Strict-Transport-Security: max-age=157680000 --- Additional Info --- Magic: ASCII text, with very long lines (2787), with CRLF line terminators Size: 373379 Md5: 5b80c878acfe7edc78fdb0f9b69f6ed6 Sha1: db75442f21d7c1d7915d1663655837fec7f34ddb Sha256: 65f038c9902bed1837abfc48d6ff47caae1626d5adb4f1d9fa5c9b82f344fb5c
GET /Assets/Styles/Library/RegionsBootstrap/com-regions.css?v=x8e3dLnyxkyEVEuSBGXOJRTOWxTEMSxtwzaycyozII8 HTTP/1.1 Host: login.regions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	205.255.100.240 HTTP/1.1 200 OK Content-Type: text/css Age: 25421 Date: Mon, 28 Nov 2022 04:30:03 GMT Cache-Control: max-age= 86400 Content-Length: 51826 Connection: Keep-Alive Via: NS-CACHE-12-A ETag: "1d89e143303d0de" Server: nginx Cteonnt-Length: 377566 Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT Accept-Ranges: bytes X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-UA-Compatible: IE=Edge Content-Encoding: gzip Strict-Transport-Security: max-age=157680000 --- Additional Info --- Magic: ASCII text, with very long lines (373), with CRLF line terminators Size: 51826 Md5: 5d5e1bb702e81ae01a65d9ef9925b127 Sha1: 02b5e9f70b3cf8beac814c63a6611f3ba3096ccd Sha256: bb02a428210d3c428b7cb9ad35c97a5af9201410918fdeb9fc4fc4f6691327f2
GET /Assets/Images/member-fdic.svg HTTP/1.1 Host: login.regions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	205.255.100.240 HTTP/1.1 200 OK Content-Type: image/svg+xml Age: 70588 Date: Sun, 27 Nov 2022 15:57:16 GMT Cache-Control: max-age= 86400 Connection: Keep-Alive Via: NS-CACHE-12-A ETag: "1d89e1433060571" Cteonnt-Length: 6001 Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT Accept-Ranges: bytes Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-UA-Compatible: IE=Edge Content-Encoding: gzip Content-Length: 2658 Strict-Transport-Security: max-age=157680000 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 2658 Md5: 9f916a7d4f52f51e29ac9c9fadc35657 Sha1: ec533c6011e98385ebae3ecb8dc627dbb333a176 Sha256: dbb862450b7142804757948e11f3e2725c7c98fe70dec02be15d554f1574b46d
GET /Assets/Images/regions-logo-no-r.svg HTTP/1.1 Host: login.regions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	205.255.100.240 HTTP/1.1 200 OK Content-Type: image/svg+xml Age: 70587 Date: Sun, 27 Nov 2022 15:57:17 GMT Cache-Control: max-age= 86400 Connection: Keep-Alive Via: NS-CACHE-12-A ETag: "1d89e14330607fb" Server: nginx Content-Length: 2317 Cteonnt-Length: 5627 Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT Accept-Ranges: bytes X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-UA-Compatible: IE=Edge Content-Encoding: gzip Strict-Transport-Security: max-age=157680000 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1024), with CRLF line terminators Size: 2317 Md5: 09b5b623e8f257f194c1d6178e4276da Sha1: 89cfeb67179afd19be6ab4b819ece0edb8e5d7c6 Sha256: c623ecf4b7273233b5401dec704c1004a04457a06d58c49a104dda685082700d
GET /Assets/Images/equal-housing-lender.svg HTTP/1.1 Host: login.regions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	205.255.100.240 HTTP/1.1 200 OK Content-Type: image/svg+xml Age: 70587 Date: Sun, 27 Nov 2022 15:57:17 GMT Cache-Control: max-age= 86400 Connection: Keep-Alive Via: NS-CACHE-12-A ETag: "1d89e1433061cce" Server: nginx Content-Length: 1671 Cteonnt-Length: 3790 Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT Accept-Ranges: bytes X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-UA-Compatible: IE=Edge Content-Encoding: gzip Strict-Transport-Security: max-age=157680000 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 1671 Md5: c710a257048b5bb8b6d8aef70c363219 Sha1: 581ce9e34c8ea7ab115f5082a7643381b5b7fc1d Sha256: 065fd777fef53a2c5fdc1836f65449ab2586c1d9ec8f835645a1eced5cb90c7d
GET /Assets/Styles/Library/RegionsBootstrap/fonts/source-sans-pro-regular-webfont.woff HTTP/1.1 Host: login.regions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: http://www.citizenshelp.edns.biz Connection: keep-alive Referer: https://login.regions.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	205.255.100.240 HTTP/1.1 200 OK Content-Type: application/font-woff Age: 70587 Date: Sun, 27 Nov 2022 15:57:18 GMT Cache-Control: max-age= 86400 Connection: Keep-Alive Via: NS-CACHE-12-A ETag: "1d89e14330658d4" Server: nginx Content-Length: 19156 Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT Accept-Ranges: bytes X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-UA-Compatible: IE=Edge Strict-Transport-Security: max-age=157680000 --- Additional Info --- Magic: Web Open Font Format, TrueType, length 19156, version 1.0\012- data Size: 78764 Md5: 4ee453943a2bc0671c89a26ea9a060a1 Sha1: d7e7f70c8bc760871b4249ec805ba4241f9e4475 Sha256: 519f0a4770c4cd013efc3e571819a788045c92d434e6336ddef75e8a57a6ca7c
GET /Assets/favicon.ico HTTP/1.1 Host: login.regions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	205.255.100.240 HTTP/1.1 200 OK Content-Type: image/x-icon Age: 70586 Date: Sun, 27 Nov 2022 15:57:19 GMT Cache-Control: max-age= 86400 Connection: Keep-Alive Via: NS-CACHE-12-A ETag: "1d89e1433061ebe" Content-Length: 3262 Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT Accept-Ranges: bytes Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-UA-Compatible: IE=Edge Strict-Transport-Security: max-age=157680000 --- Additional Info --- Magic: MS Windows icon resource - 1 icon, 32x32, 24 bits/pixel\012- data Size: 3262 Md5: 061c115987e92592f3dc2c867de9adf9 Sha1: 3d2d5762c3d47e90fd76470a1c93d0161ea9a2cd Sha256: f51d5e6454326b4c4af313f023c469e69e86078b027538b3413326aa77e7a1af
GET /regions/transmit-prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/regions/transmit-prod/code/&publishedOn=Mon%20Jul%2018%2018:22:05%20GMT%202022&ClientID=1202&PageID=http%3A%2F%2Fwww.citizenshelp.edns.biz%2Flogin_auth.php%3Fonlineid%3D9045095400954905409adkjer43434343%26username%3D%24username HTTP/1.1 Host: nexus.ensighten.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/	54.230.111.14 HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 286 Connection: keep-alive Server: nginx Date: Mon, 28 Nov 2022 11:33:43 GMT Expires: Mon, 28 Nov 2022 11:33:42 GMT Cache-Control: no-cache, no-store X-Cache: Miss from cloudfront Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: Ha09owIIdV6PlHzAtc1FPakigVvNMfN7Sm6qeTu5D4wa9dOM-gMI3w== --- Additional Info --- Magic: ASCII text Size: 286 Md5: 34293cdc4264708df6f99abd0b93a5cf Sha1: 2b86656c4f522218d7c49da162931fb119c54714 Sha256: 4dba5f121cee4b08222bdb017af8c27d2944bd6223be3a2b432b0585dad8edf1
GET /regions/transmit-prod/code/58d5327b63e00f1c85018253fedac26c.js?conditionId0=423026 HTTP/1.1 Host: nexus.ensighten.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/	54.230.111.14 HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Date: Sat, 23 Jul 2022 12:32:15 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 02 Feb 2022 22:05:06 GMT ETag: W/"f5224128e8349e9c9d11c7ec8e21c9ab" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: wfcwXJ4mPt5O6i11mEoQpTmDgLJtaR3D Server: AmazonS3 Content-Encoding: gzip Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: HqFftNYe0IRrHmCXBOp5m9OgMLwQYaVLHhTkQ5FOKe2qT-KP9Oxgag== Age: 11055689 --- Additional Info --- Magic: ASCII text, with very long lines (2990) Size: 3703 Md5: da98db8a507c052ed9eb7dcd22a7b868 Sha1: 35bf7c9a8da9c0221d5e551654e7d28cee702126 Sha256: 7e9db0c2da9849b725fb58a7b0d59451ca3d11c579cdbab13faa806c9b0d5254
GET /error/e.gif?msg=can%27t%20access%20property%20%22resolve%22%2C%20Bootstrapper.data%20is%20undefined&lnn=16&fn=http%3A%2F%2Fnexus.ensighten.com%2Fregions%2Ftransmit-prod%2Fcode%2F58d5327b63e00f1c85018253fedac26c.js%3FconditionId0%3D423026&cid=1202&client=regions&publishPath=transmit-prod&rid=-1&did=-1&errorName=TypeError HTTP/1.1 Host: nexus.ensighten.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/	54.230.111.14 HTTP/1.1 204 No Content Content-Length: 0 Connection: keep-alive Server: CloudFront Date: Mon, 28 Nov 2022 00:20:40 GMT Cache-Control: no-cache, no-store X-Cache: Hit from cloudfront Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: drM2Nai1u0oTHXzzrJwb79q6GB7eh80Zy_YlgVvj5gJYda92VLRoDA== Age: 40383 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /privacy/v1/b/r.rnc?n=0&c=1202&i=7njuv8&p=transmit-prod&s=333&d=8BV7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNTcUAPAnY2xpZW50SWQiOjEyMDIsInB1Ymxpc2hQYXRoIjoidHJhbnNtaXQtcHJvZCIsImluc3RhbmNlMADyTiI3bmp1djgiLCJwYWNrZXQiOjAsIm1vZGUiOiJvYnNlcnZlIiwiY29va2llcyI6e30sImVudmlyb25tZW50Ijoibm9uZSIsInJlcXVlc3RzIjpbeyJkZXN0aW5hdLkAYCIsInR5cFEA8A9iaWxsaW5nIiwic3RhcnQiOjE2Njk2MzUyMjMyNjhaAMBkIjotMSwic291cmMyAAIrAGF0dXMiOiJmAEBhc29uZQDUXSwiZGF0YVBhdHRlchIAsGxpc3QiOltdLCJpCwHwADY2OTYzNTIyMzI2OH1dfQ HTTP/1.1 Host: data.privacy.ensighten.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www.citizenshelp.edns.biz/	63.34.68.24 HTTP/1.1 204 No Content Server: nginx Date: Mon, 28 Nov 2022 11:33:43 GMT Connection: keep-alive Expires: Mon, 28 Nov 2022 11:33:42 GMT Cache-Control: no-cache, no-store --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10318 Expires: Mon, 28 Nov 2022 14:25:41 GMT Date: Mon, 28 Nov 2022 11:33:43 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10318 Expires: Mon, 28 Nov 2022 14:25:41 GMT Date: Mon, 28 Nov 2022 11:33:43 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa0bb072-3065-47f5-88ac-e3977adf0cba.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 3532 x-amzn-requestid: 12f95833-5aca-4633-8eac-011f194953ff x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cJWisFi5IAMFgCQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63806add-77d024405c7fe57124c4ae1c;Sampled=0 x-amzn-remapped-date: Fri, 25 Nov 2022 07:12:29 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: FfwgJjX9r1rqeeN9Va2apka3gXe6L610KxF8UHT5AzbM-wZtMqQDBA== via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 05:33:40 GMT age: 21603 etag: "cd268c0301ee9ec2de1aaaf5fff3efede4973916" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 3532 Md5: f7d70dfcfffed4941f9766906c52776c Sha1: cd268c0301ee9ec2de1aaaf5fff3efede4973916 Sha256: 024dcb67aca1c6491ca045b1384b623ff934362b77bac2916ad2744e5c6c4bd2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8885 x-amzn-requestid: 71b8367f-f79f-42a7-bcb8-c441a154babf x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cGDTEFSeIAMF3rg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637f18e0-631b775d3430a8c30c3b4420;Sampled=0 x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: jsmd6yxjJxLMEgv1jDa87iEoZXL2OuALsmUZ9Nxx1rUN-xOTdtN1-A== via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 10:13:33 GMT age: 4810 etag: "70c2a238f06ca7e56ef80c83738e081bf0de3330" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8885 Md5: 3a1a4e00f1f15827cf651f373863c379 Sha1: 70c2a238f06ca7e56ef80c83738e081bf0de3330 Sha256: 3d936e1f0c96297f121faece12d6f8173e12eed5087165cd4eefc0fab368419f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56dccc9-321b-431e-8a92-49471e788b4b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11165 x-amzn-requestid: 9e35d865-adea-4d2a-b20f-beb014cdd42f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR6_JE2VIAMFYgQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d860-7cf4db38152cdfa1448cba3d;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT x-amz-cf-pop: SFO5-C3, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 4YRocKXYUOkfho0bEHNX0xMxhhKNH2Cm3XtQDtQK7x2dFOsipPjfCw== via: 1.1 dec8fa38a453902521b941c7cd70d33c.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 22:26:45 GMT age: 47218 etag: "65941dd34eb1063a3f7fe2b6790a11a484a06b9a" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 11165 Md5: a8935783026c10470f60033d3a860f7b Sha1: 65941dd34eb1063a3f7fe2b6790a11a484a06b9a Sha256: e88c706458faf5b5512212692392c7c1a0d8e60af62962267166f5cb60ee9c89
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9430 x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR7wyGCIIAMFhgw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: NMMuQ1NNks65LJK_HDAK69MfCJ3pS0Y6VzBs8_5Oku64v4FSWADCdw== via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 22:01:46 GMT age: 48717 etag: "075531f525e625b117b2497f31139c9824d0e9c5" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9430 Md5: 1f434933b5bd6377d299ada22d1ae7ef Sha1: 075531f525e625b117b2497f31139c9824d0e9c5 Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6376 x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR6_KGeaoAMFb_Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q== via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 22:01:46 GMT age: 48718 etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6376 Md5: 78b1389f425425d0450c94d900404dc4 Sha1: 53b12a8702f7c5b7cc697e2a24da824d9434be65 Sha256: 0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56d2fad-ed89-4d96-831f-7f8467b7079b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10119 x-amzn-requestid: 20bfd6a6-2981-42ca-8997-9363676773c1 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR782HEZIAMFTKQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d9eb-552581a92a69d6cd322bf334;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:07 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: _jTN1lFL0_PS-9DYgE6O2V6s6AYnlGJs0xCEHn761Mxq_asytlaRoQ== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 21:51:40 GMT age: 49324 etag: "9a3ca698ca1aeae695923277ed2244465e01a1ea" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10119 Md5: 15bd53848c7082464273007e010c54e0 Sha1: 9a3ca698ca1aeae695923277ed2244465e01a1ea Sha256: 36cfa29965173ea683992d4b436f393e92c978350347f869355d933613e2c005
GET /Assets/Styles/Library/RegionsBootstrap/fonts/source-sans-pro-700-webfont.woff HTTP/1.1 Host: login.regions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: http://www.citizenshelp.edns.biz Connection: keep-alive Referer: https://login.regions.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	205.255.100.240 HTTP/1.1 200 OK Content-Type: application/font-woff Age: 70591 Date: Sun, 27 Nov 2022 15:57:14 GMT Cache-Control: max-age= 86400 Connection: Keep-Alive Via: NS-CACHE-12-A ETag: "1d89e1433065b20" Server: nginx Content-Length: 18720 Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT Accept-Ranges: bytes X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-UA-Compatible: IE=Edge Strict-Transport-Security: max-age=157680000 --- Additional Info --- Magic: Size: 0 Md5: Sha1: Sha256:
GET /Assets/Styles/Library/RegionsBootstrap/fonts/source-sans-pro-600-webfont.woff HTTP/1.1 Host: login.regions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: http://www.citizenshelp.edns.biz Connection: keep-alive Referer: https://login.regions.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	205.255.100.240 HTTP/1.1 200 OK Content-Type: application/font-woff Age: 70586 Date: Sun, 27 Nov 2022 15:57:19 GMT Cache-Control: max-age= 86400 Connection: Keep-Alive Via: NS-CACHE-12-A ETag: "1d89e143306586c" Server: nginx Content-Length: 19052 Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT Accept-Ranges: bytes X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-UA-Compatible: IE=Edge Strict-Transport-Security: max-age=157680000 --- Additional Info --- Magic: Size: 0 Md5: Sha1: Sha256:

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.76.226

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1" 

                                            
                                                
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=2931 

                                            
                                                
Expires: Mon, 28 Nov 2022 12:22:32 GMT 

                                            
                                                
Date: Mon, 28 Nov 2022 11:33:41 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    cdbad2434b7d127a4fc769807a9dc3e7

                                                Sha1:   fa98cd9fc2309ab4423f33f683d17bdb17d76713

                                                Sha256: 560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             93.184.220.29

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Age: 3126 

                                            
                                                
Cache-Control: max-age=85778 

                                            
                                                
Date: Mon, 28 Nov 2022 11:33:41 GMT 

                                            
                                                
Etag: "63833c71-1d7" 

                                            
                                                
Expires: Tue, 29 Nov 2022 11:23:19 GMT 

                                            
                                                
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT 

                                            
                                                
Server: ECS (ska/F70B) 

                                            
                                                
X-Cache: HIT 

                                            
                                                
Content-Length: 471 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   471

                                                Md5:    64b2a23eab6e5ae8c010ec7242be930c

                                                Sha1:   0673e4385ba01a5a245711bab96cafc34f765793

                                                Sha256: 64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff 

                                            
                                                
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
content-length: 939 

                                            
                                                
via: 1.1 google 

                                            
                                                
date: Mon, 28 Nov 2022 11:19:32 GMT 

                                            
                                                
cache-control: public,max-age=3600 

                                            
                                                
age: 849 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    567df7db606cf5d0871aa5bc9311b6da

                                                Sha1:   4263faac7cbab2fcaf6661911dcad5091c06be17

                                                Sha256: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
server: nginx 

                                            
                                                
date: Mon, 28 Nov 2022 11:33:41 GMT 

                                            
                                                
content-length: 12 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
via: 1.1 google 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.usertrust.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             104.18.32.68

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Mon, 28 Nov 2022 11:33:42 GMT 

                                            
                                                
Content-Length: 2236 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Last-Modified: Sat, 26 Nov 2022 22:12:16 GMT 

                                            
                                                
Expires: Sat, 03 Dec 2022 22:12:15 GMT 

                                            
                                                
Etag: "2c855f5c168265f7bf98378cf2e82f28a9d5e4c5" 

                                            
                                                
Cache-Control: max-age=602814,s-maxage=1800,public,no-transform,must-revalidate 

                                            
                                                
X-CCACDN-Proxy-ID: mcdpinlb4 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
CF-Cache-Status: HIT 

                                            
                                                
Age: 81 

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Vary: Accept-Encoding 

                                            
                                                
Server: cloudflare 

                                            
                                                
CF-RAY: 7712ca497c920afa-OSL 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   2236

                                                Md5:    9528a39b26cafcf8779822971b40b755

                                                Sha1:   2c855f5c168265f7bf98378cf2e82f28a9d5e4c5

                                                Sha256: 5389e2832f7479cdf129d5b675ab33feae4edc285d2da3f5dd6007d84b99bbe2

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.usertrust.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             104.18.32.68

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Mon, 28 Nov 2022 11:33:42 GMT 

                                            
                                                
Content-Length: 2236 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Last-Modified: Sat, 26 Nov 2022 22:12:16 GMT 

                                            
                                                
Expires: Sat, 03 Dec 2022 22:12:15 GMT 

                                            
                                                
Etag: "2c855f5c168265f7bf98378cf2e82f28a9d5e4c5" 

                                            
                                                
Cache-Control: max-age=602814,s-maxage=1800,public,no-transform,must-revalidate 

                                            
                                                
X-CCACDN-Proxy-ID: mcdpinlb4 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
CF-Cache-Status: HIT 

                                            
                                                
Age: 81 

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Vary: Accept-Encoding 

                                            
                                                
Server: cloudflare 

                                            
                                                
CF-RAY: 7712ca4988340b3d-OSL 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   2236

                                                Md5:    9528a39b26cafcf8779822971b40b755

                                                Sha1:   2c855f5c168265f7bf98378cf2e82f28a9d5e4c5

                                                Sha256: 5389e2832f7479cdf129d5b675ab33feae4edc285d2da3f5dd6007d84b99bbe2

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.sectigo.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             104.18.32.68

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Mon, 28 Nov 2022 11:33:42 GMT 

                                            
                                                
Content-Length: 471 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Last-Modified: Sun, 27 Nov 2022 06:52:54 GMT 

                                            
                                                
Expires: Sun, 04 Dec 2022 06:52:53 GMT 

                                            
                                                
Etag: "47dc6843e6e5088b113f52e9b008e8359d30fbca" 

                                            
                                                
Cache-Control: max-age=500950,s-maxage=1800,public,no-transform,must-revalidate 

                                            
                                                
X-CCACDN-Proxy-ID: mcdpinlb1 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
CF-Cache-Status: DYNAMIC 

                                            
                                                
Server: cloudflare 

                                            
                                                
CF-RAY: 7712ca49ac4a0b59-OSL 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   471

                                                Md5:    5234010fa022c0e1c61fb4dafdf0d65e

                                                Sha1:   47dc6843e6e5088b113f52e9b008e8359d30fbca

                                                Sha256: 474f80ea5b77a163b35cee30bf27572e068f1a06d7b2f8c5c7ab745e30697154

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control 

                                            
                                                
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
content-length: 329 

                                            
                                                
via: 1.1 google 

                                            
                                                
date: Mon, 28 Nov 2022 11:11:12 GMT 

                                            
                                                
cache-control: public,max-age=3600 

                                            
                                                
age: 1350 

                                            
                                                
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                            
                                                
etag: "1648230346554" 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.sectigo.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             104.18.32.68

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Mon, 28 Nov 2022 11:33:42 GMT 

                                            
                                                
Content-Length: 471 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Last-Modified: Sun, 27 Nov 2022 06:52:54 GMT 

                                            
                                                
Expires: Sun, 04 Dec 2022 06:52:53 GMT 

                                            
                                                
Etag: "47dc6843e6e5088b113f52e9b008e8359d30fbca" 

                                            
                                                
Cache-Control: max-age=500950,s-maxage=1800,public,no-transform,must-revalidate 

                                            
                                                
X-CCACDN-Proxy-ID: mcdpinlb6 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
CF-Cache-Status: DYNAMIC 

                                            
                                                
Server: cloudflare 

                                            
                                                
CF-RAY: 7712ca49aed5b52d-OSL 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   471

                                                Md5:    5234010fa022c0e1c61fb4dafdf0d65e

                                                Sha1:   47dc6843e6e5088b113f52e9b008e8359d30fbca

                                                Sha256: 474f80ea5b77a163b35cee30bf27572e068f1a06d7b2f8c5c7ab745e30697154

                                        
                                            GET /Assets/Styles/Common.css?v=5-dD3SDWyYd6oqbtYnVWMkfQPvL7YH9QTq8oDnvMbK0 HTTP/1.1 

                                        
                                            
Host: login.regions.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.citizenshelp.edns.biz/ 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             205.255.100.240

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: text/css

                                            

                                            
                                                
Age: 12583 

                                            
                                                
Date: Mon, 28 Nov 2022 08:04:00 GMT 

                                            
                                                
Cache-Control: max-age=     86400 

                                            
                                                
Connection: Keep-Alive 

                                            
                                                
Via: NS-CACHE-12-A 

                                            
                                                
ETag: "1d89e14330635aa" 

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 2726 

                                            
                                                
Cteonnt-Length: 10154 

                                            
                                                
Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT 

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
X-Frame-Options: DENY 

                                            
                                                
X-Content-Type-Options: nosniff 

                                            
                                                
X-XSS-Protection: 1; mode=block 

                                            
                                                
X-UA-Compatible: IE=Edge 

                                            
                                                
Content-Encoding: gzip 

                                            
                                                
Strict-Transport-Security: max-age=157680000 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

                                                Size:   2726

                                                Md5:    8cf5f37cc74d1df1f834fd03b868ce6a

                                                Sha1:   d04df4c6924fdcee78e8c9d6cbc716ff2f9fb84e

                                                Sha256: 1123960a16276e53f926a3d8d31d2381c9599c08b5530f393c022cab55051949

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: OC2RRmXTWCQIXy/zSWGd5w== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                        
                                             54.187.102.159

                                            
                                                HTTP/1.1 101 Switching Protocols

                                            

                                            
                                                
Connection: Upgrade 

                                            
                                                
Upgrade: websocket 

                                            
                                                
Sec-WebSocket-Accept: zSkMHgOrk0GFz++tbXK4i1HKGxw= 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /Assets/Styles/Library/Transmit/xmui-no-vars.css?v=27_x0mg1W6CZZnEL--AiaqVsSOXDJ9i9i-DjWZ9cLH4 HTTP/1.1 

                                        
                                            
Host: login.regions.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.citizenshelp.edns.biz/ 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             205.255.100.240

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: text/css

                                            

                                            
                                                
Age: 12583 

                                            
                                                
Date: Mon, 28 Nov 2022 08:03:59 GMT 

                                            
                                                
Cache-Control: max-age=     86400 

                                            
                                                
Content-Length: 368074 

                                            
                                                
Connection: Keep-Alive 

                                            
                                                
Via: NS-CACHE-12-A 

                                            
                                                
ETag: "1d89e14330dfd18" 

                                            
                                                
Server: nginx 

                                            
                                                
Cteonnt-Length: 782104 

                                            
                                                
Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT 

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
X-Frame-Options: DENY 

                                            
                                                
X-Content-Type-Options: nosniff 

                                            
                                                
X-XSS-Protection: 1; mode=block 

                                            
                                                
X-UA-Compatible: IE=Edge 

                                            
                                                
Content-Encoding: gzip 

                                            
                                                
Strict-Transport-Security: max-age=157680000 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (65452), with CRLF line terminators

                                                Size:   368074

                                                Md5:    0b8ea106c66c30533dadbf3d5e21c4d9

                                                Sha1:   64aedc1a8d4e43f4bb1f4e205b6d89995ae71a7f

                                                Sha256: 9d2618e2906f86faf90b00e273a30e6749a74de8e160b7b94ebf4a3329e93640

                                        
                                            GET /Assets/Styles/Library/Transmit/xmui.css?v=SicNklE1Ktl1QEjtpmgbhUZP0kpreO2AmgaagwSXy6Y HTTP/1.1 

                                        
                                            
Host: login.regions.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.citizenshelp.edns.biz/ 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             205.255.100.240

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: text/css

                                            

                                            
                                                
Age: 12584 

                                            
                                                
Date: Mon, 28 Nov 2022 08:03:59 GMT 

                                            
                                                
Cache-Control: max-age=     86400 

                                            
                                                
Content-Length: 373379 

                                            
                                                
Connection: Keep-Alive 

                                            
                                                
Via: NS-CACHE-12-A 

                                            
                                                
ETag: "1d89e14330a6a36" 

                                            
                                                
Server: nginx 

                                            
                                                
Cteonnt-Length: 817206 

                                            
                                                
Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT 

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
X-Frame-Options: DENY 

                                            
                                                
X-Content-Type-Options: nosniff 

                                            
                                                
X-XSS-Protection: 1; mode=block 

                                            
                                                
X-UA-Compatible: IE=Edge 

                                            
                                                
Content-Encoding: gzip 

                                            
                                                
Strict-Transport-Security: max-age=157680000 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (2787), with CRLF line terminators

                                                Size:   373379

                                                Md5:    5b80c878acfe7edc78fdb0f9b69f6ed6

                                                Sha1:   db75442f21d7c1d7915d1663655837fec7f34ddb

                                                Sha256: 65f038c9902bed1837abfc48d6ff47caae1626d5adb4f1d9fa5c9b82f344fb5c

                                        
                                            GET /Assets/Images/member-fdic.svg HTTP/1.1 

                                        
                                            
Host: login.regions.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.citizenshelp.edns.biz/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             205.255.100.240

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: image/svg+xml

                                            

                                            
                                                
Age: 70588 

                                            
                                                
Date: Sun, 27 Nov 2022 15:57:16 GMT 

                                            
                                                
Cache-Control: max-age=     86400 

                                            
                                                
Connection: Keep-Alive 

                                            
                                                
Via: NS-CACHE-12-A 

                                            
                                                
ETag: "1d89e1433060571" 

                                            
                                                
Cteonnt-Length: 6001 

                                            
                                                
Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT 

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Server: Microsoft-IIS/10.0 

                                            
                                                
X-Frame-Options: DENY 

                                            
                                                
X-Content-Type-Options: nosniff 

                                            
                                                
X-XSS-Protection: 1; mode=block 

                                            
                                                
X-UA-Compatible: IE=Edge 

                                            
                                                
Content-Encoding: gzip 

                                            
                                                
Content-Length: 2658 

                                            
                                                
Strict-Transport-Security: max-age=157680000 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators

                                                Size:   2658

                                                Md5:    9f916a7d4f52f51e29ac9c9fadc35657

                                                Sha1:   ec533c6011e98385ebae3ecb8dc627dbb333a176

                                                Sha256: dbb862450b7142804757948e11f3e2725c7c98fe70dec02be15d554f1574b46d

                                        
                                            GET /Assets/Images/equal-housing-lender.svg HTTP/1.1 

                                        
                                            
Host: login.regions.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.citizenshelp.edns.biz/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             205.255.100.240

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: image/svg+xml

                                            

                                            
                                                
Age: 70587 

                                            
                                                
Date: Sun, 27 Nov 2022 15:57:17 GMT 

                                            
                                                
Cache-Control: max-age=     86400 

                                            
                                                
Connection: Keep-Alive 

                                            
                                                
Via: NS-CACHE-12-A 

                                            
                                                
ETag: "1d89e1433061cce" 

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 1671 

                                            
                                                
Cteonnt-Length: 3790 

                                            
                                                
Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT 

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
X-Frame-Options: DENY 

                                            
                                                
X-Content-Type-Options: nosniff 

                                            
                                                
X-XSS-Protection: 1; mode=block 

                                            
                                                
X-UA-Compatible: IE=Edge 

                                            
                                                
Content-Encoding: gzip 

                                            
                                                
Strict-Transport-Security: max-age=157680000 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators

                                                Size:   1671

                                                Md5:    c710a257048b5bb8b6d8aef70c363219

                                                Sha1:   581ce9e34c8ea7ab115f5082a7643381b5b7fc1d

                                                Sha256: 065fd777fef53a2c5fdc1836f65449ab2586c1d9ec8f835645a1eced5cb90c7d

                                        
                                            GET /Assets/favicon.ico HTTP/1.1 

                                        
                                            
Host: login.regions.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.citizenshelp.edns.biz/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             205.255.100.240

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: image/x-icon

                                            

                                            
                                                
Age: 70586 

                                            
                                                
Date: Sun, 27 Nov 2022 15:57:19 GMT 

                                            
                                                
Cache-Control: max-age=     86400 

                                            
                                                
Connection: Keep-Alive 

                                            
                                                
Via: NS-CACHE-12-A 

                                            
                                                
ETag: "1d89e1433061ebe" 

                                            
                                                
Content-Length: 3262 

                                            
                                                
Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT 

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Server: Microsoft-IIS/10.0 

                                            
                                                
X-Frame-Options: DENY 

                                            
                                                
X-Content-Type-Options: nosniff 

                                            
                                                
X-XSS-Protection: 1; mode=block 

                                            
                                                
X-UA-Compatible: IE=Edge 

                                            
                                                
Strict-Transport-Security: max-age=157680000 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  MS Windows icon resource - 1 icon, 32x32, 24 bits/pixel\012- data

                                                Size:   3262

                                                Md5:    061c115987e92592f3dc2c867de9adf9

                                                Sha1:   3d2d5762c3d47e90fd76470a1c93d0161ea9a2cd

                                                Sha256: f51d5e6454326b4c4af313f023c469e69e86078b027538b3413326aa77e7a1af

                                        
                                            GET /regions/transmit-prod/code/58d5327b63e00f1c85018253fedac26c.js?conditionId0=423026 HTTP/1.1 

                                        
                                            
Host: nexus.ensighten.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.citizenshelp.edns.biz/

                                        
                                             54.230.111.14

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/javascript; charset=utf-8

                                            

                                            
                                                
Transfer-Encoding: chunked 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Date: Sat, 23 Jul 2022 12:32:15 GMT 

                                            
                                                
x-amz-replication-status: COMPLETED 

                                            
                                                
Last-Modified: Wed, 02 Feb 2022 22:05:06 GMT 

                                            
                                                
ETag: W/"f5224128e8349e9c9d11c7ec8e21c9ab" 

                                            
                                                
x-amz-server-side-encryption: AES256 

                                            
                                                
Cache-Control: max-age=315360000 

                                            
                                                
x-amz-version-id: wfcwXJ4mPt5O6i11mEoQpTmDgLJtaR3D 

                                            
                                                
Server: AmazonS3 

                                            
                                                
Content-Encoding: gzip 

                                            
                                                
Vary: Accept-Encoding 

                                            
                                                
X-Cache: Hit from cloudfront 

                                            
                                                
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront) 

                                            
                                                
X-Amz-Cf-Pop: OSL50-P1 

                                            
                                                
X-Amz-Cf-Id: HqFftNYe0IRrHmCXBOp5m9OgMLwQYaVLHhTkQ5FOKe2qT-KP9Oxgag== 

                                            
                                                
Age: 11055689 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (2990)

                                                Size:   3703

                                                Md5:    da98db8a507c052ed9eb7dcd22a7b868

                                                Sha1:   35bf7c9a8da9c0221d5e551654e7d28cee702126

                                                Sha256: 7e9db0c2da9849b725fb58a7b0d59451ca3d11c579cdbab13faa806c9b0d5254

                                        
                                            GET /privacy/v1/b/r.rnc?n=0&c=1202&i=7njuv8&p=transmit-prod&s=333&d=8BV7InZlcnNpb24iOiIxLjAuMCIsImdhdGV3YXkiOiIyLjMuNTcUAPAnY2xpZW50SWQiOjEyMDIsInB1Ymxpc2hQYXRoIjoidHJhbnNtaXQtcHJvZCIsImluc3RhbmNlMADyTiI3bmp1djgiLCJwYWNrZXQiOjAsIm1vZGUiOiJvYnNlcnZlIiwiY29va2llcyI6e30sImVudmlyb25tZW50Ijoibm9uZSIsInJlcXVlc3RzIjpbeyJkZXN0aW5hdLkAYCIsInR5cFEA8A9iaWxsaW5nIiwic3RhcnQiOjE2Njk2MzUyMjMyNjhaAMBkIjotMSwic291cmMyAAIrAGF0dXMiOiJmAEBhc29uZQDUXSwiZGF0YVBhdHRlchIAsGxpc3QiOltdLCJpCwHwADY2OTYzNTIyMzI2OH1dfQ HTTP/1.1 

                                        
                                            
Host: data.privacy.ensighten.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www.citizenshelp.edns.biz/

                                        
                                             63.34.68.24

                                            
                                                HTTP/1.1 204 No Content

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Date: Mon, 28 Nov 2022 11:33:43 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Expires: Mon, 28 Nov 2022 11:33:42 GMT 

                                            
                                                
Cache-Control: no-cache, no-store 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.76.226

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                            
                                                
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=10318 

                                            
                                                
Expires: Mon, 28 Nov 2022 14:25:41 GMT 

                                            
                                                
Date: Mon, 28 Nov 2022 11:33:43 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 8885 

                                            
                                                
x-amzn-requestid: 71b8367f-f79f-42a7-bcb8-c441a154babf 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: cGDTEFSeIAMF3rg= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-637f18e0-631b775d3430a8c30c3b4420;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT 

                                            
                                                
x-amz-cf-pop: SEA19-C2 

                                            
                                                
x-cache: Miss from cloudfront 

                                            
                                                
x-amz-cf-id: jsmd6yxjJxLMEgv1jDa87iEoZXL2OuALsmUZ9Nxx1rUN-xOTdtN1-A== 

                                            
                                                
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Mon, 28 Nov 2022 10:13:33 GMT 

                                            
                                                
age: 4810 

                                            
                                                
etag: "70c2a238f06ca7e56ef80c83738e081bf0de3330" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8885

                                                Md5:    3a1a4e00f1f15827cf651f373863c379

                                                Sha1:   70c2a238f06ca7e56ef80c83738e081bf0de3330

                                                Sha256: 3d936e1f0c96297f121faece12d6f8173e12eed5087165cd4eefc0fab368419f

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 9430 

                                            
                                                
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: cR7wyGCIIAMFhgw= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT 

                                            
                                                
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: NMMuQ1NNks65LJK_HDAK69MfCJ3pS0Y6VzBs8_5Oku64v4FSWADCdw== 

                                            
                                                
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Sun, 27 Nov 2022 22:01:46 GMT 

                                            
                                                
age: 48717 

                                            
                                                
etag: "075531f525e625b117b2497f31139c9824d0e9c5" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9430

                                                Md5:    1f434933b5bd6377d299ada22d1ae7ef

                                                Sha1:   075531f525e625b117b2497f31139c9824d0e9c5

                                                Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56d2fad-ed89-4d96-831f-7f8467b7079b.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 10119 

                                            
                                                
x-amzn-requestid: 20bfd6a6-2981-42ca-8997-9363676773c1 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: cR782HEZIAMFTKQ= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-6383d9eb-552581a92a69d6cd322bf334;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:07 GMT 

                                            
                                                
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                            
                                                
x-cache: Miss from cloudfront 

                                            
                                                
x-amz-cf-id: _jTN1lFL0_PS-9DYgE6O2V6s6AYnlGJs0xCEHn761Mxq_asytlaRoQ== 

                                            
                                                
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Sun, 27 Nov 2022 21:51:40 GMT 

                                            
                                                
age: 49324 

                                            
                                                
etag: "9a3ca698ca1aeae695923277ed2244465e01a1ea" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10119

                                                Md5:    15bd53848c7082464273007e010c54e0

                                                Sha1:   9a3ca698ca1aeae695923277ed2244465e01a1ea

                                                Sha256: 36cfa29965173ea683992d4b436f393e92c978350347f869355d933613e2c005

                                        
                                            GET /Assets/Styles/Library/RegionsBootstrap/fonts/source-sans-pro-600-webfont.woff HTTP/1.1 

                                        
                                            
Host: login.regions.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: identity 

                                        
                                            
Origin: http://www.citizenshelp.edns.biz 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://login.regions.com/ 

                                        
                                            
Sec-Fetch-Dest: font 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             205.255.100.240

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/font-woff

                                            

                                            
                                                
Age: 70586 

                                            
                                                
Date: Sun, 27 Nov 2022 15:57:19 GMT 

                                            
                                                
Cache-Control: max-age=     86400 

                                            
                                                
Connection: Keep-Alive 

                                            
                                                
Via: NS-CACHE-12-A 

                                            
                                                
ETag: "1d89e143306586c" 

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 19052 

                                            
                                                
Last-Modified: Fri, 22 Jul 2022 21:44:20 GMT 

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
X-Frame-Options: DENY 

                                            
                                                
X-Content-Type-Options: nosniff 

                                            
                                                
X-XSS-Protection: 1; mode=block 

                                            
                                                
X-UA-Compatible: IE=Edge 

                                            
                                                
Strict-Transport-Security: max-age=157680000 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  

                                                Size:   0

                                                Md5:    

                                                Sha1:   

                                                Sha256:

URL	www.citizenshelp.edns.biz/login_auth.php?onlineid=9045095400954905409adkjer43434343&username=$username
IP	3.139.61.63 (United States)
ASN	#16509 AMAZON-02
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access
Report completed	2022-11-28 11:33:52 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	3
urlquery alerts	4 DynDNS domain detected
Tags	None

Overview

Domain Summary (13)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 3.139.61.63

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: edns.biz

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (47)

Overview

Domain Summary (13)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 3.139.61.63

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: edns.biz

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (47)

Network Intrusion Detection Systems