Report - idahocuprotection.ml/

Report Overview

Submitted URL
idahocuprotection.ml/
IP
66.29.134.57
ASN
#22612 NAMECHEAP-NET
Submitted
2022-11-23 18:47:41
Access
Website Title
Final URL
Tags
None
urlquery detections
Phishing - Idaho Central Credit Union

Detections

urlquery
24
Network Intrusion Detection
0
Threat Detection Systems
64

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
idahocuprotection.ml	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	8.7 kB	834 kB	66.29.134.57
ajax.aspnetcdn.com	693	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	389 B	31 kB	152.199.19.160
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	44.237.93.5
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	796 B	2.4 kB	34.102.187.140
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.9 kB	34.160.144.191
cdnjs.cloudflare.com	235	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	842 B	13 kB	104.17.24.14
code.jquery.com	634	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	787 B	31 kB	69.16.175.42
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	39 kB	34.120.237.76
stackpath.bootstrapcdn.com	2467	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	435 B	23 kB	104.18.11.207
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	4.4 kB	23.36.77.32
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	2.8 kB	93.184.220.29

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union
2022-11-23	medium	idahocuprotection.ml/	Idaho Central Credit Union

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-23	medium	idahocuprotection.ml/	Phishing
2022-11-23	medium	idahocuprotection.ml/modules/column/shortcode/assets/actions.js	Phishing
2022-11-23	medium	idahocuprotection.ml/lib/css/dist/library/google-play-badge.svg	Phishing
2022-11-23	medium	idahocuprotection.ml/lib/css/dist/library/app-store-badge.svg	Phishing
2022-11-23	medium	idahocuprotection.ml/lib/css/dist/library/Alkami.woff2	Phishing
2022-11-23	medium	idahocuprotection.ml/lib/css/dist/library/KFOmCnqEu92Fr1Mu4mxK.woff2	Phishing
2022-11-23	medium	idahocuprotection.ml/	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	code.jquery.com/jquery-3.3.1.slim.min.js	70 kB	2023-03-07	2024-04-26
Pretty URL code.jquery.com/jquery-3.3.1.slim.min.js IP 69.16.175.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:54 Last Seen2024-04-26 09:58:04 Times Seen8378 Hash 99b0a83cf1b0b1e2cb16041520e87641 bc5836992c0b260496ba520fe1336d499bf06eb7 dde76b9b2b90d30eb97fc81f06caa8c338c97b688cea7d2729c88f529f32fbb1 Loading...

	code.jquery.com/jquery-3.2.1.min.js	87 kB	2023-03-07	2024-04-26
Pretty URL code.jquery.com/jquery-3.2.1.min.js IP 69.16.175.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-04-26 17:17:17 Times Seen62781 Hash c9f5aeeca3ad37bf2aa006139b935f0a 1055018c28ab41087ef9ccefe411606893dabea2 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de Loading...

	stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js	51 kB	2023-03-07	2024-04-26
Pretty URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.11.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:37 Last Seen2024-04-26 15:59:47 Times Seen6332 Hash ce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339 Loading...

	cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js	20 kB	2023-03-07	2024-04-26
Pretty URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:54 Last Seen2024-04-26 15:59:47 Times Seen7696 Hash 6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5 Loading...

	unknown	0 B	2023-03-07	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-26 17:25:40 Times Seen37097368 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	idahocuprotection.ml/	269 B	2023-03-07	2024-04-23
Pretty URL idahocuprotection.ml/ IP 66.29.134.57 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:48 Last Seen2024-04-23 19:17:51 Times Seen443 Hash 9678fd11bd7c60e14caf05ff2b1925e6 ab1b4abd43e151663158be81c1a9cd04f2c846cd 8fc4e1e3c24d30d70225dd53e8e936af38f1472fb365181710f7b4a973c0c1d5 Loading...

	idahocuprotection.ml/modules/column/shortcode/assets/actions.js	1.3 kB	2023-03-07	2024-04-06
Pretty URL idahocuprotection.ml/modules/column/shortcode/assets/actions.js IP 66.29.134.57 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:48 Last Seen2024-04-06 05:47:03 Times Seen469 Hash baef84e203e58801d16d5d460360570e fc4e9a602bdb59fc7056cb6e53686ad6a992774e 8bcecbd1eeb6e999bc9583d1e35c12a74d044dba44ee22e185e138f05ca05414 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js	20 kB	2023-03-07	2024-04-26
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:35 Last Seen2024-04-26 08:12:20 Times Seen3637 Hash 053305c2b293c27c02523cda42962c09 556b0af7346b9e21a8eea1be8b195b563169ecd5 be483938eb34538b970684f72e312f62652e84b42b7ad86953962d1ce2217c44 Loading...

	idahocuprotection.ml/	416 B	2023-03-07	2024-02-20
Pretty URL idahocuprotection.ml/ IP 66.29.134.57 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 17:54:38 Last Seen2024-02-20 17:41:20 Times Seen109 Hash 5767a3ff27a180b5dd0ef59443281fef e086edd5ef3bba7d32597a57ad4c85d091399dbb 6a645569919d7189cadc439a72a9d49a2a48c184ac67bc0bc7a2e72709a4e7d1 Loading...

HTTP Transactions (50)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3313
Expires: Wed, 23 Nov 2022 19:42:43 GMT
Date: Wed, 23 Nov 2022 18:47:30 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
770d09773b5f304acf141fd66a4862b4
5ddc46ab75de26c858a9a6f6d1beaaec9bb181f5
c7bcc6928fa1c0bb225ce8a2f6badd6cb1bd6ea002fb808ed34e8dafbd7b3b26

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6281
Cache-Control: max-age=149307
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:47:30 GMT
Etag: "637df674-1d7"
Expires: Fri, 25 Nov 2022 12:15:57 GMT
Last-Modified: Wed, 23 Nov 2022 10:31:16 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 23 Nov 2022 18:18:49 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1721
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5070
Expires: Wed, 23 Nov 2022 20:12:00 GMT
Date: Wed, 23 Nov 2022 18:47:30 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: mzT53xqn2Uj3qmPKMhg1v/Ob6hz163O5XJqyGUYeUMRbD6A5serKjye1lh0n3iKOuUymcsXMv4uk/+oUwVYMQQ==
x-amz-request-id: 5NGBRYZJSVMJVVY1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 23 Nov 2022 18:40:06 GMT
age: 444
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 18:47:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 23 Nov 2022 18:08:53 GMT
cache-control: public,max-age=3600
age: 2318
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

idahocuprotection.ml/

66.29.134.57

206 Partial Content

50 kB

URL HTTP/1.1
idahocuprotection.ml/
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
Unicode text, UTF-8 text, with very long lines (15346), with CRLF line terminators
Size
50 kB (49506 bytes)
Hash
9023b36e029ae93071d8120401a84e40
c2fda7174e8637450fba0efc7ce058743ada7b91
7b218c0a150fa82f0ffa3bda923f2936bd2d16dd22da15e5ea76637af1f139f4

Detections

Analyzer	Verdict	Alert
openphish	Idaho Central Credit Union
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Range: bytes=14236-
If-Range: Fri, 11 Mar 2022 17:00:28 GMT

HTTP/1.1 206 Partial Content
Date: Wed, 23 Nov 2022 18:47:30 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 17:00:28 GMT
Accept-Ranges: bytes
Content-Length: 49506
Content-Range: bytes 14236-63741/63742
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js

104.17.24.14

200 OK

6.5 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (20322)
Size
6.5 kB (6458 bytes)
Hash
df9fe6d48e380554eb0ec9687bed3246
207263d754220200c1916edfbda262f62223ecf5
91d57502b7260e6752c2b5f1636d77707929fa9f09da28589691e61816a448f9

HTTP Headers

GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://idahocuprotection.ml
Connection: keep-alive
Referer: http://idahocuprotection.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:47:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 12272498
expires: Mon, 13 Nov 2023 18:47:31 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=veq2ywEvJsOMEB6iNCuj8QSiZ95e4U3EFtOD9tsL1oP%2FBnhvdJlDAvCiQVL2xo0mYCVa1yXRqK2CwAUNjsJk9XJwrg3SmRRjdXoAgOgtHYTAE7LKU1OKgEvgPSHuQ9LL5qp11T9U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76ec12e57e11b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js

104.17.24.14

200 OK

4.5 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
4.5 kB (4517 bytes)
Hash
e40e054c5726f042bad463e3774a2777
5c9413b72837a440b327444104830c35ae3b052c
fcc8a86d2e89e8fbe9815d50c23bf205191ab8a6c0bec67358cd975d94283ff8

HTTP Headers

GET /ajax/libs/jquery.mask/1.14.10/jquery.mask.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://idahocuprotection.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:47:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 4517
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-4e98"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3034366
expires: Mon, 13 Nov 2023 18:47:31 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c76Nb1HOnOlCeMkiRD6F0ayWHfbEop1ll4aVAgvo19IajobvtOPd5kZ5w6k2dSKA863Xi6DvCf15ifpKt7sm8H0ceThT4ONh1RYQ7G%2FauWJTipf7kWNtL80J2HQWFhRn5Ailkukk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76ec12e579fab4ed-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js

152.199.19.160

200 OK

30 kB

URL HTTP/2
ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js
IP
152.199.19.160:0
ASN
#15133 EDGECAST

File type
ASCII text, with very long lines (65451)
Size
30 kB (30394 bytes)
Hash
a263be51483c81a54aa8c85104a93e55
555a54a73531c553bd2aede6abc25c128b63312e
b2f13ad730928958c09d89e6e32bb6a227c0260d032a39ca464d998a59e57a66

HTTP Headers

GET /ajax/jQuery/jquery-3.3.1.min.js HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://idahocuprotection.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 22230746
cache-control: public,max-age=31536000
content-type: application/javascript
date: Wed, 23 Nov 2022 18:47:31 GMT
etag: "80288516b793d31:0"
last-modified: Mon, 22 Jan 2018 19:27:49 GMT
server: ECAcc (ska/F7A8)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 30394
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
8decaadbcb0c69a906c8bf71e6b3c3a4
f44a711439756490b4555f8e370068dfb8678b03
5b9187a2745a33f4a3d2f0f748b62b581536578a12f252712d848dfc5028827a

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6081
Cache-Control: max-age=136517
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:47:31 GMT
Etag: "637dc548-118"
Expires: Fri, 25 Nov 2022 08:42:48 GMT
Last-Modified: Wed, 23 Nov 2022 07:01:28 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 280

code.jquery.com/jquery-3.2.1.min.js

69.16.175.42

200 OK

30 kB

URL HTTP/2
code.jquery.com/jquery-3.2.1.min.js
IP
69.16.175.42:0
ASN
#20446 STACKPATH-CDN

File type
ASCII text, with very long lines (32058)
Size
30 kB (30125 bytes)
Hash
148f8d3ffd9cc02048c5f4d1cc83c407
9f2b89cfd151be6a29b4d43ad64d164fb8471046
4dc681da48ba2b417e613e8e027ff5322963c3a3697a8ba97973cfefb48def5e

HTTP Headers

GET /jquery-3.2.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://idahocuprotection.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:47:31 GMT
content-encoding: gzip
content-length: 30125
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15283"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669229251.dop218.sk1.t,1669229251.cds236.sk1.hn,1669229251.cds222.sk1.c
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
eb52164d651f5f45416e873aec29eb04
405b29bb7e7cd4367cf82988f8603e53db65f139
ed885e05db822ff30fe951e10b6d4f21e574d053939afca792992a1549a15301

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3445
Cache-Control: max-age=141407
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:47:31 GMT
Etag: "637de2ad-1d7"
Expires: Fri, 25 Nov 2022 10:04:18 GMT
Last-Modified: Wed, 23 Nov 2022 09:06:53 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
8decaadbcb0c69a906c8bf71e6b3c3a4
f44a711439756490b4555f8e370068dfb8678b03
5b9187a2745a33f4a3d2f0f748b62b581536578a12f252712d848dfc5028827a

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6081
Cache-Control: max-age=136517
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 18:47:31 GMT
Etag: "637dc548-118"
Expires: Fri, 25 Nov 2022 08:42:48 GMT
Last-Modified: Wed, 23 Nov 2022 07:01:28 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 280

idahocuprotection.ml/lib/css/dist/library/base.min.css

66.29.134.57

200 OK

1.8 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/base.min.css
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (1790)
Size
1.8 kB (1832 bytes)
Hash
d2b6fc1fe921f745d3790abc456b1841
210dbd69c0c0ff5040e5aede6f465e604e8ba13c
afe099dbea10e1d7859cd31a5f54abdf088c3afe1bb814961095689a1cfdcab2

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/base.min.css HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:31 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:02 GMT
Accept-Ranges: bytes
Content-Length: 1832
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

idahocuprotection.ml/lib/css/dist/library/iris.shim.mobile.min.css

66.29.134.57

200 OK

611 B

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/iris.shim.mobile.min.css
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (557)
Size
611 B (611 bytes)
Hash
2b495c471e337eac5d280f5519c6fc53
285689d6b41833ced6b63a3f82892d2901d4039b
06dee56fb4e2677948bc2f6ce7e20e9900e3c7431843ae3d9c9d975ff03889a7

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/iris.shim.mobile.min.css HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:31 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:02 GMT
Accept-Ranges: bytes
Content-Length: 611
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

idahocuprotection.ml/lib/css/dist/library/iris-components.shim.mobile.min.css

66.29.134.57

200 OK

865 B

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/iris-components.shim.mobile.min.css
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (637)
Size
865 B (865 bytes)
Hash
d4ebbfcbabe59db68a636bbb719ff7d4
1043b791989cbfa4467a4fa9266179476082b7b9
4c7b591f19c35000858633e0610ae0b2b4db8fbfd71bb1864ea4c9bde1958575

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/iris-components.shim.mobile.min.css HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:31 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:02 GMT
Accept-Ranges: bytes
Content-Length: 865
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

idahocuprotection.ml/lib/css/dist/library/theme.mobile.min.css

66.29.134.57

200 OK

111 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/theme.mobile.min.css
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (65536), with no line terminators
Size
111 kB (110676 bytes)
Hash
6a5d83aea45b017f728e94272a522b92
0654308df25779e5cc20a2b56dc2dd3dd1352206
a9c592c559f77590dcb4bb20cd5ce43329ba969a2635dc9e59bbd67a046cc9f0

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/theme.mobile.min.css HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:31 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:04 GMT
Accept-Ranges: bytes
Content-Length: 110676
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

push.services.mozilla.com/

44.237.93.5

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.237.93.5:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: j+Ylfu50sleI1tvKc2PMiA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: asdGDnO7RmqY+ett6QmK2HVyOCg=

idahocuprotection.ml/lib/css/dist/library/font-icons.css

66.29.134.57

200 OK

118 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/font-icons.css
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with CRLF line terminators
Size
118 kB (117897 bytes)
Hash
519d30e7c61190de08b836d9ab1eff99
df2a728b7944c25ad17a77594fe6c2e576572b41
a861602a90703087154c0d8a128116b0184bf3e1d9f3285f63c4820f162051d0

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/font-icons.css HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:31 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:02 GMT
Accept-Ranges: bytes
Content-Length: 117897
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

idahocuprotection.ml/lib/css/dist/library/isotope.1.5.3.min.css

66.29.134.57

200 OK

5.1 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/isotope.1.5.3.min.css
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (2884)
Size
5.1 kB (5057 bytes)
Hash
b5560502a47ac17af7a14f280d1fb48d
88b8b2e860c4caa88e0d0b60dc8bc0345b8fec25
bcf82308a4a42f5785de42dda6584b42785e242cc336bd5d8e937b6e2d0d816e

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/isotope.1.5.3.min.css HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:31 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:04 GMT
Accept-Ranges: bytes
Content-Length: 5057
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

idahocuprotection.ml/lib/css/dist/library/iris-foundation.min.css

66.29.134.57

200 OK

51 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/iris-foundation.min.css
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (50964)
Size
51 kB (51310 bytes)
Hash
b8c864cda1f61ea4ffc57ba52f038a41
5c8784412d182c24f931531629a9bcf1455e9e76
f6fca06e2aac270b488f73bcf0a10d249e2722a015135e60dbb49360c5335a72

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/iris-foundation.min.css HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:31 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:02 GMT
Accept-Ranges: bytes
Content-Length: 51310
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

idahocuprotection.ml/lib/css/dist/library/iris.android.min.css

66.29.134.57

200 OK

98 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/iris.android.min.css
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (65536), with no line terminators
Size
98 kB (97729 bytes)
Hash
5d8ed49993cc583d958521060b9d9937
b377d956778bcfc54979f44ba694135ad0315c44
b5d26eda18452e19202f5218866799d5351f0ef7c880cf518c96b964292436f3

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/iris.android.min.css HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:31 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:02 GMT
Accept-Ranges: bytes
Content-Length: 97729
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

idahocuprotection.ml/lib/css/dist/library/iris-foundation.min-1.css

66.29.134.57

200 OK

51 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/iris-foundation.min-1.css
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (50964)
Size
51 kB (51310 bytes)
Hash
0160c354e11f9e1f2ffcd720f880dc2e
7c3b5681a9483a0f37110476e04375e7e88d8fcc
037e5f8a4d2ef765d97f6c14e087cab4f8f27a1ac2a6a7584793b1a76a08fb8f

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/iris-foundation.min-1.css HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:31 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:02 GMT
Accept-Ranges: bytes
Content-Length: 51310
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

idahocuprotection.ml/lib/css/dist/library/Authentication-Isotope.min.css

66.29.134.57

200 OK

2.3 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/Authentication-Isotope.min.css
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (2246)
Size
2.3 kB (2306 bytes)
Hash
eb1f4362c3c9376996435fa88d50011b
19bcf35a2cd8df458a33aa8bd6eac9e657bb7d40
0e4d1ad359d7116aab9a7c46316d0aca3d732fc81eecde5df7377b7b9c4c181b

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/Authentication-Isotope.min.css HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:31 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:04 GMT
Accept-Ranges: bytes
Content-Length: 2306
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

idahocuprotection.ml/modules/column/shortcode/assets/style.css

66.29.134.57

200 OK

414 B

URL HTTP/1.1
idahocuprotection.ml/modules/column/shortcode/assets/style.css
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with CRLF line terminators
Size
414 B (414 bytes)
Hash
f9653fbeecf34b04791fee59eb3e253b
fcbbad7c6616682a22a9d0de09d715c61cb17722
7924e7e8b95825e4cefbfc31444ea9247e1b0d04cb066b56f06addf9cc7c5eaf

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /modules/column/shortcode/assets/style.css HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:31 GMT
Server: Apache
Last-Modified: Tue, 16 Nov 2021 14:01:14 GMT
Accept-Ranges: bytes
Content-Length: 414
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css

idahocuprotection.ml/lib/css/dist/library/css.css

66.29.134.57

200 OK

1.7 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/css.css
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text
Size
1.7 kB (1727 bytes)
Hash
363b2929d52f8ad3f958bf2be1abceca
1916e268dd08780e3c503a1acc17d9631dbfed07
b8e1da3f5b2cffe37b94533052d546d2da4663f9ee412a98d7b498db13866e56

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/css.css HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:31 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:02 GMT
Accept-Ranges: bytes
Content-Length: 1727
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

idahocuprotection.ml/lib/css/dist/library/jquery-ui.min.css

66.29.134.57

200 OK

28 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/jquery-ui.min.css
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (26296)
Size
28 kB (28101 bytes)
Hash
f04105b66cbe2ab8a11a530bb72088fe
560d97610ab7c27da57cf6a89a55a877fe0ff785
83513c38af08dd2a2232b410ae7406edb223c9bd7ed8bf884e24bf09aca0be88

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/jquery-ui.min.css HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:31 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:02 GMT
Accept-Ranges: bytes
Content-Length: 28101
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

idahocuprotection.ml/modules/column/shortcode/assets/actions.js

66.29.134.57

200 OK

1.3 kB

URL HTTP/1.1
idahocuprotection.ml/modules/column/shortcode/assets/actions.js
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with CRLF line terminators
Size
1.3 kB (1291 bytes)
Hash
baef84e203e58801d16d5d460360570e
fc4e9a602bdb59fc7056cb6e53686ad6a992774e
8bcecbd1eeb6e999bc9583d1e35c12a74d044dba44ee22e185e138f05ca05414

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union
fortinet	Phishing

HTTP Headers

GET /modules/column/shortcode/assets/actions.js HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:32 GMT
Server: Apache
Last-Modified: Tue, 16 Nov 2021 13:48:10 GMT
Accept-Ranges: bytes
Content-Length: 1291
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

idahocuprotection.ml/lib/css/dist/library/iris-components.min.css

66.29.134.57

200 OK

182 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/iris-components.min.css
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
ASCII text, with very long lines (65309)
Size
182 kB (182484 bytes)
Hash
662e8bcd210a3ddef5d0a5bd4da9cfd4
90715ef7583d41cc48be76a049523968386e0603
81f7da9e5ed534c6ac7ad9a0c45927f2c3c716cb15b3480aadb9dbe54f4bcb8a

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/iris-components.min.css HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:31 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:02 GMT
Accept-Ranges: bytes
Content-Length: 182484
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

idahocuprotection.ml/lib/css/dist/library/google-play-badge.svg

66.29.134.57

200 OK

9.3 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/google-play-badge.svg
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size
9.3 kB (9332 bytes)
Hash
5e01637f08de80e8c27c414687738968
2d4fe2500bb550dc45c048e78aa62356fb4cbc2c
2dcf765854f1fe869b1674016feb1638870c1066f156f8d7dfd47b53d0dc093f

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union
fortinet	Phishing

HTTP Headers

GET /lib/css/dist/library/google-play-badge.svg HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:32 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:08 GMT
Accept-Ranges: bytes
Content-Length: 9332
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/svg+xml

idahocuprotection.ml/lib/css/dist/library/app-store-badge.svg

66.29.134.57

200 OK

11 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/app-store-badge.svg
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1356), with CRLF line terminators
Size
11 kB (10850 bytes)
Hash
1b65926236d951b2af57201b275f595b
1ce3e7bf2853a59f0fc9ad064e1fd48260da0f38
86c9954e1457d27db013c1f10a96ffaba845e5af7765c4ef9df4ac1549e47d67

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union
fortinet	Phishing

HTTP Headers

GET /lib/css/dist/library/app-store-badge.svg HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:32 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:08 GMT
Accept-Ranges: bytes
Content-Length: 10850
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/svg+xml

idahocuprotection.ml/modules/column/shortcode/assets/loading.gif

66.29.134.57

200 OK

39 kB

URL HTTP/1.1
idahocuprotection.ml/modules/column/shortcode/assets/loading.gif
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
GIF image data, version 89a, 200 x 200\012- data
Size
39 kB (38636 bytes)
Hash
d10ef01e81faa2c2d812bdf670b4e072
77d09a57b2091fd7665dff763a5eab23e0ff907e
5e3d5246b17e19e65385092db07554d8e1c5c4a226a6d7f97824b8e1e8571e34

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /modules/column/shortcode/assets/loading.gif HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:32 GMT
Server: Apache
Last-Modified: Sat, 11 Aug 2018 13:03:52 GMT
Accept-Ranges: bytes
Content-Length: 38636
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/gif

idahocuprotection.ml/lib/css/dist/library/MobileLogo.png

66.29.134.57

200 OK

6.9 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/MobileLogo.png
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
PNG image data, 285 x 132, 8-bit/color RGBA, non-interlaced\012- data
Size
6.9 kB (6884 bytes)
Hash
793de00c2e5c94dfe4d879e33f78ef40
1fbca0c5c7261136ba2dcbf11b98c975d442e8f0
2dc417c13f956f7a5f91634d4629bcc1492ac237ba8839f8513227ae02b510d2

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/MobileLogo.png HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/lib/css/dist/library/Authentication-Isotope.min.css

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:32 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:04 GMT
Accept-Ranges: bytes
Content-Length: 6884
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

idahocuprotection.ml/lib/css/dist/library/Alkami.woff2

66.29.134.57

200 OK

42 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/Alkami.woff2
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
Web Open Font Format (Version 2), TrueType, length 41968, version 1.0\012- data
Size
42 kB (41968 bytes)
Hash
8d282cf189126ee65e485fafccac5e97
e074f487e8e008ba9bd658712455379a867c9e1a
9460128bedffc7c32dfdd79353d72b1f0d0764a514acc2ffb743e37c9b673290

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union
fortinet	Phishing

HTTP Headers

GET /lib/css/dist/library/Alkami.woff2 HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://idahocuprotection.ml/lib/css/dist/library/font-icons.css

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:32 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:04 GMT
Accept-Ranges: bytes
Content-Length: 41968
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: font/woff2

idahocuprotection.ml/lib/css/dist/library/KFOmCnqEu92Fr1Mu4mxK.woff2

66.29.134.57

200 OK

16 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
Web Open Font Format (Version 2), TrueType, length 15688, version 1.0\012- data
Size
16 kB (15688 bytes)
Hash
aa23b7b4bcf2b8f0e876106bb3de69c6
106ac454ba4e503e0a1cd15e1275130918049182
cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union
fortinet	Phishing

HTTP Headers

GET /lib/css/dist/library/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://idahocuprotection.ml/lib/css/dist/library/css.css

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:32 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:04 GMT
Accept-Ranges: bytes
Content-Length: 15688
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: font/woff2

idahocuprotection.ml/lib/css/dist/library/android-chrome-192x192.png

66.29.134.57

200 OK

1.4 kB

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/android-chrome-192x192.png
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Size
1.4 kB (1384 bytes)
Hash
617c4058b7a5608d8794cfb57c722d5e
f12b2ca683ad372cc2a27a2fb3ab39d86187d2cd
532ab0216976347b86739466a2366f058dacb5a6741aedd9242d0c898841692e

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/android-chrome-192x192.png HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:32 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:02 GMT
Accept-Ranges: bytes
Content-Length: 1384
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png

idahocuprotection.ml/lib/css/dist/library/favicon-16x16.png

66.29.134.57

200 OK

342 B

URL HTTP/1.1
idahocuprotection.ml/lib/css/dist/library/favicon-16x16.png
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size
342 B (342 bytes)
Hash
553313d2cf760cf8c4bec228a2a34ac0
48609c9c8ec7b062dce1ec1b562e38265dc37a42
251892031689419e0abf81a0a9f215501b8db25a697db488386784447467f815

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Idaho Central Credit Union
openphish	Idaho Central Credit Union

HTTP Headers

GET /lib/css/dist/library/favicon-16x16.png HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahocuprotection.ml/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:32 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 16:07:02 GMT
Accept-Ranges: bytes
Content-Length: 342
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5931
Expires: Wed, 23 Nov 2022 20:26:24 GMT
Date: Wed, 23 Nov 2022 18:47:33 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5931
Expires: Wed, 23 Nov 2022 20:26:24 GMT
Date: Wed, 23 Nov 2022 18:47:33 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5931
Expires: Wed, 23 Nov 2022 20:26:24 GMT
Date: Wed, 23 Nov 2022 18:47:33 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45ca81c5-d11a-4d86-a922-dbdce0f6b46c.jpeg

34.120.237.76

200 OK

5.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45ca81c5-d11a-4d86-a922-dbdce0f6b46c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.0 kB (4977 bytes)
Hash
0cc111ba6ae699fca7fbff3490640960
18084197b48ea3b4a143636250396e8791d0285f
34fbba92e665ad371ea2bd1a871251cf0c5b7832d6f4661b21b2cfbd7f786923

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45ca81c5-d11a-4d86-a922-dbdce0f6b46c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4977
x-amzn-requestid: 3e56de91-7ed1-4b1e-b230-5f19b2cc6601
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bxQKBHzdIAMFpUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376c70c-41c572d27999534d3c198372;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 23:43:08 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 414rX74hOWUS2W1d9SVHs7McxZ4QDE249cjU-1EyIe0nMkZrQz2rrQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 3236f234d59c0fda99b416088c283260.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:56:48 GMT
age: 75045
etag: "18084197b48ea3b4a143636250396e8791d0285f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44f9633f-15fe-459e-aebf-06d2b582efa8.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.8 kB (9766 bytes)
Hash
3e8d7af3a5d030774447a0f71c7824f0
663cace8681891ad55943dd0273493aa9474d102
22068df04672281e392caa485259df103d591ab247c3eb5e0ccba10ffd8a9ef0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44f9633f-15fe-459e-aebf-06d2b582efa8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9766
x-amzn-requestid: ca8b7a9f-3c1a-419d-953e-2944bf820e5e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBcR_Hd4IAMFWUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d40d9-4ca5e9b2476a47cd199b9cba;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:36:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RZqqB_Aaam7hYpdAB2fbx-i3iQth9M-OgA25IgCB5Uz0swqVi3-bVg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:48:19 GMT
age: 75554
etag: "663cace8681891ad55943dd0273493aa9474d102"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js

104.18.11.207

200 OK

22 kB

URL HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js
IP
104.18.11.207:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (50395)
Size
22 kB (21963 bytes)
Hash
b32d62f292d204c7012809074208091a
dd5fa6a324f5cd045bf7bd82951fc22586818e2a
40d61f70ea25ecf9d48a5e1a07372b2d7ac550d06497c4b4ad5bda243bbce4c9

HTTP Headers

GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://idahocuprotection.ml
Connection: keep-alive
Referer: http://idahocuprotection.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:47:31 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/15/2022 10:39:35
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1054
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: f053923d3fa204bd8d91413779d28e15
cdn-cache: HIT
cf-cache-status: HIT
age: 18451
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 76ec12e5dff9b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F719df867-6e3b-42ad-bb29-bacd6908c756.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.7 kB (5721 bytes)
Hash
858121146f13af8b53e7bfb9d143490c
2a0aa4d6e3d648b23e15db38559fa9be9ca2cdd8
5c79f7d9479cdaca6fca1abc2af768f8dbe2e7df70959a6620c676a4a4060b9e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F719df867-6e3b-42ad-bb29-bacd6908c756.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5721
x-amzn-requestid: d6a84920-e8e5-4160-aea1-ccabce26d36f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bvCq5EH4IAMFlSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375e4ab-7835c4341c7b2fb700784aa2;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 07:37:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KX8eExctOwlkCuEo1G-yxhL4FaM-DquAvgfYTjwekflhfWccr5LU1Q==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 05:08:10 GMT
age: 49163
etag: "2a0aa4d6e3d648b23e15db38559fa9be9ca2cdd8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cb92473-220a-4ebb-b8d8-6c17618bc006.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.3 kB (4308 bytes)
Hash
bd62f641e9d58eee10e41db0fa00b5f2
4210e5f150a49d6f6ee26cbb11ded8173ab8cf74
5858451bf7cac97b8881dde7e3197110fa8639c1d94b51934859669c51221e1a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cb92473-220a-4ebb-b8d8-6c17618bc006.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4308
x-amzn-requestid: 7db10594-4acc-448d-b724-1c4bc8ec42ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IrVFtRoAMFTzg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee48-0a466f6b0bd48f3532216bca;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EZ6DqZY1DDMr_jSZs-aGTsD37q6dKLIEk9XJhKRTNOjjxfU-lWh8eg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:50:14 GMT
age: 75439
etag: "4210e5f150a49d6f6ee26cbb11ded8173ab8cf74"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d582ed2-f829-4647-9113-832d4500a207.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.1 kB (9138 bytes)
Hash
6d2c986e076309d51d199332caebb07a
343a5bfba0f8fec28f9345f276b44f44c6eaf6a6
64e6fba6a45c70c1db6040a2273472774c00257bef373cc45b6ca00cb819681a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d582ed2-f829-4647-9113-832d4500a207.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9138
x-amzn-requestid: 524e565e-a9fb-45f9-b786-d64cf26a3cdf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBcAAHG8IAMFhwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d4066-3689e70e6212e9e77dc134f4;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:34:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cwu__NPGaU0zyAG0H1yZhmjGsFzvNmzsGv6Zt9hrF5gwSysEio2MjA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:09:16 GMT
age: 74297
etag: "343a5bfba0f8fec28f9345f276b44f44c6eaf6a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

idahocuprotection.ml/

66.29.134.57

200 OK

0 B

URL HTTP/1.1
idahocuprotection.ml/
IP
66.29.134.57:0
ASN
#22612 NAMECHEAP-NET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	Idaho Central Credit Union
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: idahocuprotection.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 18:47:30 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 17:00:28 GMT
Accept-Ranges: bytes
Content-Length: 63742
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

code.jquery.com/jquery-3.3.1.slim.min.js

69.16.175.42

200 OK

0 B

URL HTTP/2
code.jquery.com/jquery-3.3.1.slim.min.js
IP
69.16.175.42:0
ASN
#20446 STACKPATH-CDN

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /jquery-3.3.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://idahocuprotection.ml
Connection: keep-alive
Referer: http://idahocuprotection.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 23 Nov 2022 18:47:31 GMT
content-encoding: gzip
content-length: 24038
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-1111d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669229251.dop212.sk1.t,1669229251.cds231.sk1.hn,1669229251.cds230.sk1.c
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP