r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash d4e95d0d8982bcd07804baf6fc88231c
5027abda0875bd2529dd4d6691784c74da71a9ee
373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3670
Expires: Sat, 04 Feb 2023 05:40:46 GMT
Date: Sat, 04 Feb 2023 04:39:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10603
Expires: Sat, 04 Feb 2023 07:36:19 GMT
Date: Sat, 04 Feb 2023 04:39:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 7d2222d41721947297aaeb5a6e3d0714
04cc1ee417c8bf6338657fd4c2e4e1c1ddfd3065
de0e45969a2ad95e52f7e2fbd0d021d9075dd7b14666c929346efe111f648f7c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE0E45969A2AD95E52F7E2FBD0D021D9075DD7B14666C929346EFE111F648F7C"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9059
Expires: Sat, 04 Feb 2023 07:10:35 GMT
Date: Sat, 04 Feb 2023 04:39:36 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 03:43:35 GMT
content-type: application/json
age: 3361
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Z8YW5Len4DptuW6jaeWBqyFUU+uvLXGnNyzPIChi2NZHBQ/62tpcqInBZNUtor5R/84Z7Wj5xAA=
x-amz-request-id: D976T77VNEWZZFQA
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 03:52:41 GMT
age: 2815
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 04:39:36 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Feb 2023 03:49:07 GMT
age: 3030
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3983
Expires: Sat, 04 Feb 2023 05:46:00 GMT
Date: Sat, 04 Feb 2023 04:39:37 GMT
Connection: keep-alive
push.services.mozilla.com/
34.210.191.84101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.210.191.84:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: wNINAh6N9JZG6DZ2mxrXgw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ekRBHpRhY7eqB5zjU3EfebLuR5g=
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash da29e8386318c46318799d7e2d5f3ff9
95f3cfd63a0cd8fcc89b2efd67e488fc3fb0be72
cb0dba0c73dea77051ffe9f1cea2648b0a139ce94b39aa0b5f6b0df3532c4cac
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "CB0DBA0C73DEA77051FFE9F1CEA2648B0A139CE94B39AA0B5F6B0DF3532C4CAC"
Last-Modified: Fri, 03 Feb 2023 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=1507
Expires: Sat, 04 Feb 2023 05:04:45 GMT
Date: Sat, 04 Feb 2023 04:39:38 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash da29e8386318c46318799d7e2d5f3ff9
95f3cfd63a0cd8fcc89b2efd67e488fc3fb0be72
cb0dba0c73dea77051ffe9f1cea2648b0a139ce94b39aa0b5f6b0df3532c4cac
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "CB0DBA0C73DEA77051FFE9F1CEA2648B0A139CE94B39AA0B5F6B0DF3532C4CAC"
Last-Modified: Fri, 03 Feb 2023 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=1609
Expires: Sat, 04 Feb 2023 05:06:27 GMT
Date: Sat, 04 Feb 2023 04:39:38 GMT
Connection: keep-alive
www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-offers-ME_Batch1_Gen_L1_Tile_243x105.webp
192.229.233.230200 OK 728 B URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-offers-ME_Batch1_Gen_L1_Tile_243x105.webp
IP 192.229.233.230:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 243x105, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash df9f3bf8aa5865301323a569fe62fbe7
93bb04e936f1a56defb6e7bc88e08d24815f5f39
5314ce08621ae1844b4ef0c672d68effcb3ade4009909fdf835c97166fda7500
GET /homepage/spa-assets/images/assets-images-site-hp-assets-offers-ME_Batch1_Gen_L1_Tile_243x105.webp HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://intothekingdom.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 715669
cache-control: max-age=26920000, public
content-type: application/octet-stream
date: Sat, 04 Feb 2023 04:39:38 GMT
etag: "2d8-55f85f12b7740"
expires: Sat, 04 Feb 2023 04:39:39 GMT
last-modified: Mon, 04 Dec 2017 16:09:25 GMT
server: ECS (ska/F710)
strict-transport-security: max-age=31536000
x-boa-requestid: Y9L19VrMJk0N0a32DBldLAAAADY
x-cache: HIT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 728
X-Firefox-Spdy: h2
intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
162.241.217.72200 OK 121 kB URL HTTP/1.1 intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
IP 162.241.217.72:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (63839)
Size 121 kB (121328 bytes)
Hash 3cb64e76056eea096711ecf53757ccff
9a8591eb0945cc1660a04cb65eb6089c21e355eb
bdb4e6619b011b4a739a612cdfa3733993f0a7acf38d56f9929ad38d37471adb
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
NIDS Severity Alert suricata medium ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017
GET /boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H HTTP/1.1
Host: intothekingdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 04:39:37 GMT
Server: nginx/1.21.6
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Server-Cache: true
X-Proxy-Cache: MISS
Transfer-Encoding: chunked
intothekingdom.com/boa23/SUPPORT/css/33986123.css
162.241.217.72200 OK 100 kB URL HTTP/1.1 intothekingdom.com/boa23/SUPPORT/css/33986123.css
IP 162.241.217.72:0
File type ASCII text, with very long lines (62121), with CR, LF line terminators
Hash 28be747bd61d27fd2389b348b075b5e9
91bf9ca62b196d557c5e8965736b0e0cc492e880
20e329e7ee5e25c48723cb518c7cba9f45d30985034b450a1054996928a5b9e7
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
GET /boa23/SUPPORT/css/33986123.css HTTP/1.1
Host: intothekingdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 04:39:37 GMT
Server: Apache
Upgrade: h2,h2c
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:14:58 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Transfer-Encoding: chunked
Content-Type: text/css
intothekingdom.com/boa23/SUPPORT/images/assets-images-site-homepage-sign-in-module-hp-url-example-CSX3e076ebf.png
162.241.217.72200 OK 4.1 kB URL HTTP/1.1 intothekingdom.com/boa23/SUPPORT/images/assets-images-site-homepage-sign-in-module-hp-url-example-CSX3e076ebf.png
IP 162.241.217.72:0
File type PNG image data, 522 x 31, 8-bit/color RGB, non-interlaced\012- data
Hash 8e1041b5b2d8242c565725caf3adc033
96d3d32bc0b0f07acd69046e655ceeb05c5444ea
6d7ac293ab6a5f1f5bddc8d4e59602950fbfa5434d1b50e1a840eab9dd6b4b7c
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
GET /boa23/SUPPORT/images/assets-images-site-homepage-sign-in-module-hp-url-example-CSX3e076ebf.png HTTP/1.1
Host: intothekingdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 04:39:38 GMT
Server: Apache
Last-Modified: Fri, 08 Nov 2019 06:17:24 GMT
Accept-Ranges: bytes
Content-Length: 4102
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Connection: keep-alive
Content-Type: image/png
intothekingdom.com/boa23/SUPPORT/images/assets-images-global-get-app-modal-google-play-badge-CSX89f9024.svg
162.241.217.72200 OK 1.9 kB URL HTTP/1.1 intothekingdom.com/boa23/SUPPORT/images/assets-images-global-get-app-modal-google-play-badge-CSX89f9024.svg
IP 162.241.217.72:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4993), with no line terminators
Hash 6ac58dad08db3042622e59c986c26ef4
04836234382dacac4e87ae0e9d97babd11da2a8f
447bc88b26c7b02608ef90450502d9ecfbf084892748c285fad2f7a02c03c303
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /boa23/SUPPORT/images/assets-images-global-get-app-modal-google-play-badge-CSX89f9024.svg HTTP/1.1
Host: intothekingdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 04:39:38 GMT
Server: Apache
Upgrade: h2,h2c
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 1897
Content-Type: image/svg+xml
intothekingdom.com/boa23/SUPPORT/images/assets-images-site-homepage-logos-new_merrill_desktop_logo-CSX5347e4ce.svg
162.241.217.72200 OK 2.4 kB URL HTTP/1.1 intothekingdom.com/boa23/SUPPORT/images/assets-images-site-homepage-logos-new_merrill_desktop_logo-CSX5347e4ce.svg
IP 162.241.217.72:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (2727)
Hash 7daf007ac6692aa5bdcd253a725a06f0
d9db2452d6ef5ccea120028eac51be634c320119
d1ceb71025bb22fad13542c778320d3e74dafd82d57e893954cea9483891b625
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /boa23/SUPPORT/images/assets-images-site-homepage-logos-new_merrill_desktop_logo-CSX5347e4ce.svg HTTP/1.1
Host: intothekingdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 04:39:38 GMT
Server: Apache
Last-Modified: Fri, 08 Nov 2019 06:17:24 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Connection: keep-alive
Content-Length: 2361
Content-Type: image/svg+xml
intothekingdom.com/boa23/SUPPORT/images/assets-images-global-logos-bac-logo-v2-CSX3648cbbb.svg
162.241.217.72200 OK 1.6 kB URL HTTP/1.1 intothekingdom.com/boa23/SUPPORT/images/assets-images-global-logos-bac-logo-v2-CSX3648cbbb.svg
IP 162.241.217.72:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0f8d2405a798bc80b9e0a306a5031318
ba05d0974bee24634928feaca48801506ea1a786
cfbb0d43b17d7f1f086fc4bcf165bab6cf2a0fa7836b9bbeedd53b5b57a6b1c4
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /boa23/SUPPORT/images/assets-images-global-logos-bac-logo-v2-CSX3648cbbb.svg HTTP/1.1
Host: intothekingdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 04:39:38 GMT
Server: Apache
Upgrade: h2,h2c
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 1605
Content-Type: image/svg+xml
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8438
Expires: Sat, 04 Feb 2023 07:00:16 GMT
Date: Sat, 04 Feb 2023 04:39:38 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8438
Expires: Sat, 04 Feb 2023 07:00:16 GMT
Date: Sat, 04 Feb 2023 04:39:38 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8438
Expires: Sat, 04 Feb 2023 07:00:16 GMT
Date: Sat, 04 Feb 2023 04:39:38 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5801
Expires: Sat, 04 Feb 2023 06:16:19 GMT
Date: Sat, 04 Feb 2023 04:39:38 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F549d8f22-b421-4fad-867d-64232284ffaf.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F549d8f22-b421-4fad-867d-64232284ffaf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9409d3b4b0f8f973d9acab2b744d8dd0
15431d807c3fe818a9b363f1c725c1860e939799
ddde1e1c8faef040370396ccda3a5090e64b63a1bddbe642c128d66849c1caa4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F549d8f22-b421-4fad-867d-64232284ffaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8148
x-amzn-requestid: a9d4782b-b24e-4b72-9994-b9efa680c2fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEEOHxIoAMFvUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8081-1d17982c4fe45adf0704f4c4;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: VkajXQ1KEbO3T3sVDkH6XLx7pKr5cnHC2QOsR1EvKa7-8WPQrVFbXw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
age: 23357
etag: "15431d807c3fe818a9b363f1c725c1860e939799"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
intothekingdom.com/boa23/SUPPORT/images/jdpower.png
162.241.217.72200 OK 20 kB URL HTTP/1.1 intothekingdom.com/boa23/SUPPORT/images/jdpower.png
IP 162.241.217.72:0
File type PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced\012- data
Hash 9dc77c0ad5d86af8bc0ce8534df119f9
8f613dafde65e48b79f591abb9cd17f3674488b4
63b36fc2d96a85f37d1b05907fc5274ffc0a4c43224abd457d74ec847d6208e6
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
GET /boa23/SUPPORT/images/jdpower.png HTTP/1.1
Host: intothekingdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 04:39:38 GMT
Server: Apache
Upgrade: h2,h2c
Connection: keep-alive
Last-Modified: Fri, 17 Jul 2020 07:25:56 GMT
Accept-Ranges: bytes
Content-Length: 19535
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Type: image/png
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cf80667db0c35c9c6139eca4ba5d12fd
4c4cfdc2463e8704a7bf8e1477c43b6adf7c7590
d63e69f4b6ea16333d242bf33d4f02a4a6c96a739ca018d86afc5741d85b774d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13065
x-amzn-requestid: 20c6f462-0f1f-44d1-9b6b-6afbc4e79e8b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpYpcELtIAMFvFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da07d5-44cd803c0feba28919b0a9ec;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 06:33:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T3PhGRcHX1X2hn8K_4587fXBrEyuY5Em-b9Jg41uH4uyQXeFoRBIYg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:55:01 GMT
age: 24277
etag: "4c4cfdc2463e8704a7bf8e1477c43b6adf7c7590"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca17cfb9-5ad6-429a-9791-23b12f01c467.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca17cfb9-5ad6-429a-9791-23b12f01c467.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8bee4ee9542d0c7a9cc8402d60e7cca2
95b8debca975255d2a0a60c5c6dde74040bd2f88
a6c63af682c3d4b11e5af0aa6b72921b8acf72626fb765a60e96d491d2a04c70
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca17cfb9-5ad6-429a-9791-23b12f01c467.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8148
x-amzn-requestid: 6006bf4d-0aef-4eec-a73d-70cb8cad5abd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyDraGO9oAMFscg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd7fe2-1df60a735b30e2d41fd3a435;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:42:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tnqzIXXbcIjPhSnbzsVd2oN_qouQqZqlYGRNOAxlkQgnoI60PHY-CQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:09:44 GMT
age: 23394
etag: "95b8debca975255d2a0a60c5c6dde74040bd2f88"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e245a51-5c03-4b84-b42a-29fa3a7806e9.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e245a51-5c03-4b84-b42a-29fa3a7806e9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65cd12302c9ca5468dbc9a98155970e0
a0c63213c3021e40f8ea54f2da6a5c165ed5cfd1
8463155faca74f13ec4500fed98289d8bfbdc4a989d1cb7580736018eadf1000
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e245a51-5c03-4b84-b42a-29fa3a7806e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7992
x-amzn-requestid: ba4f95d9-6081-4b34-955c-bbe8e7b2335c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEEjGsdIAMF84w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8083-7666baa66ccdec9b5fec8736;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: A3c6sSs_b8KkREPa26a8X9NTEZpHGDjElR9hT-NXwg6dYpeuRNZXfA==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
age: 23357
etag: "a0c63213c3021e40f8ea54f2da6a5c165ed5cfd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd573e5ee-5860-4f00-9316-68ffbc966d73.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd573e5ee-5860-4f00-9316-68ffbc966d73.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bd5f43772dbf673858972c77e1e630d4
94c0a24c5d47a636e45a3694c694815091aee213
0b6c34a934eab27c326dab6c8b90e78e710a948ac7c4bf13ba907b5cda738c3e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd573e5ee-5860-4f00-9316-68ffbc966d73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7692
x-amzn-requestid: 4a8d5bcb-b1a0-4015-9fb1-c00f613de8e5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEEEH5JoAMF0Ew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8080-703ca5a95c06465c080a1c7d;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7sVT1f8RurPSTdULfz7FLHS6c1-6TaaDqyH9hmVBUw8B6A2umK-TtA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:12:57 GMT
age: 23201
etag: "94c0a24c5d47a636e45a3694c694815091aee213"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b2d6920-2a79-45a8-b007-d36cc875c52f.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b2d6920-2a79-45a8-b007-d36cc875c52f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3ac51fd6789cbe19c2d484c9022b0e39
bcba22a7b7f5dd1f59fffd1027e5d7002cecb6e9
300b5e50cb910f9f4905ee7313d98763b68f85f5874db499cc94469fb14cabfe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b2d6920-2a79-45a8-b007-d36cc875c52f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9500
x-amzn-requestid: 8fe94388-e8d9-4329-b73a-e9a356df76bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD9QEA1IAMF3Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8054-51f954ac4bec16d1055e38f5;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FkTJ6wQ4eFYBPDyS0l5vLeWvHHiQIx-cYyFzT4ggHJ8M5Gg3dozFxQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:59:51 GMT
age: 23987
etag: "bcba22a7b7f5dd1f59fffd1027e5d7002cecb6e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
intothekingdom.com/boa23/SUPPORT/images/assets-images-site-homepage-icons-calendar-CSXef62d939.svg
162.241.217.72200 OK 590 B URL HTTP/1.1 intothekingdom.com/boa23/SUPPORT/images/assets-images-site-homepage-icons-calendar-CSXef62d939.svg
IP 162.241.217.72:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1191), with no line terminators
Hash 196dfd9ed235ad884f7d4c4353f40e33
0ff23189da3bce37e6ff44317f511d1a7b8c2eb7
c954cc01b0c3f2f4da7c9f14c6652c261188d1bc729860d7a7659bb541666918
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /boa23/SUPPORT/images/assets-images-site-homepage-icons-calendar-CSXef62d939.svg HTTP/1.1
Host: intothekingdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 04:39:38 GMT
Server: Apache
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Connection: keep-alive
Content-Length: 590
Content-Type: image/svg+xml
intothekingdom.com/boa23/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_icon-CSXbef49635.svg
162.241.217.72200 OK 15 kB URL HTTP/1.1 intothekingdom.com/boa23/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_icon-CSXbef49635.svg
IP 162.241.217.72:0
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 65d21bc531d999d8313f461510ba3975
aa47342a13d4a5137a4553d9dc129383bf5f53de
0748e20b9422a5f4108f46199722c94a29da3c682db150b62b36037dd45c2c6c
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /boa23/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_icon-CSXbef49635.svg HTTP/1.1
Host: intothekingdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 04:39:38 GMT
Server: Apache
Upgrade: h2,h2c
Connection: keep-alive
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 14835
Content-Type: image/svg+xml
intothekingdom.com/boa23/SUPPORT/images/assets-images-site-hp-assets-highlights-consumer-other-en-hl_ntb-03_icon_arp7dcrm_e.svg
162.241.217.72200 OK 548 B URL HTTP/1.1 intothekingdom.com/boa23/SUPPORT/images/assets-images-site-hp-assets-highlights-consumer-other-en-hl_ntb-03_icon_arp7dcrm_e.svg
IP 162.241.217.72:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (777)
Hash 0953f25cf609bbf21c11ca57ad7c652d
f2ca0237d1d5a2862a5975921a4e2259f2715d4e
6bf18af1b86240c1ddc24ac62e2c341ed3bedf45551867bca94980a663405cf0
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /boa23/SUPPORT/images/assets-images-site-hp-assets-highlights-consumer-other-en-hl_ntb-03_icon_arp7dcrm_e.svg HTTP/1.1
Host: intothekingdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 04:39:38 GMT
Server: Apache
Last-Modified: Fri, 17 Jul 2020 07:27:36 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Connection: keep-alive
Content-Length: 548
Content-Type: image/svg+xml
intothekingdom.com/boa23/SUPPORT/images/assets-images-site-hp-assets-highlights-consumer-merrill-en-merrill_rebrand_logo1.svg
162.241.217.72200 OK 3.8 kB URL HTTP/1.1 intothekingdom.com/boa23/SUPPORT/images/assets-images-site-hp-assets-highlights-consumer-merrill-en-merrill_rebrand_logo1.svg
IP 162.241.217.72:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (7267)
Hash 6b93b606c6a07b8630b7313e3b1bdc6f
14e26b4772f7c4e4be429e4a557207722166efeb
b035ef3da552b556ac23ac2973166810ec93204a201913093290d12fc6fb3733
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /boa23/SUPPORT/images/assets-images-site-hp-assets-highlights-consumer-merrill-en-merrill_rebrand_logo1.svg HTTP/1.1
Host: intothekingdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 04:39:38 GMT
Server: Apache
Last-Modified: Fri, 08 Nov 2019 07:23:32 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Connection: keep-alive
Content-Length: 3825
Content-Type: image/svg+xml
intothekingdom.com/boa23/SUPPORT/images/assets-images-global-get-app-modal-Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917-CSXd8fd3663.svg
162.241.217.72200 OK 3.0 kB URL HTTP/1.1 intothekingdom.com/boa23/SUPPORT/images/assets-images-global-get-app-modal-Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917-CSXd8fd3663.svg
IP 162.241.217.72:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7318), with no line terminators
Hash 7d83660f5f4958cd93e22df729f91b45
4411f1e6d15788ca5a97b8a037b4a36335649f2a
9ff59eb97e5c2eba7aad877a965e0a39355e4563ae210b01d7ebf0f7b8e09449
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /boa23/SUPPORT/images/assets-images-global-get-app-modal-Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917-CSXd8fd3663.svg HTTP/1.1
Host: intothekingdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 04:39:38 GMT
Server: Apache
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Connection: keep-alive
Content-Length: 3035
Content-Type: image/svg+xml
www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-pr2_arllmbb5-e.webp
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-pr2_arllmbb5-e.webp
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-pr2_arllmbb5-e.webp HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://intothekingdom.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Sat, 04 Feb 2023 04:39:38 GMT
etag: "16fa-5c016c9cca9c0"
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F708)
set-cookie: TS01794157=01f400e11272eda089a42b594e0dc33d39aa25672922387dbda1e6ccad4e879785a2d86931476f6a4bef3e6b3ae54c8d3eabf270f9; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y93hikiyOVb_fQNusGeZMAAAACY
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-cr2_arllmbb5-e.webp
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-cr2_arllmbb5-e.webp
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-cr2_arllmbb5-e.webp HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://intothekingdom.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Sat, 04 Feb 2023 04:39:38 GMT
etag: "16fa-5c016c9cca9c0"
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F70B)
set-cookie: TS01794157=0126c8e57ff8d3d9f02459c66fc5d731c0926c4af85c58f9bd4c46741e2225d14f83c0bab6b46b44ccc5c1ea0ad79c944932c15b8a; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y93hioOf7EBzq7fCE3FuwwAAAKE
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
intothekingdom.com/boa23/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_lock-CSX6d401b45.svg
162.241.217.72200 OK 326 B URL HTTP/1.1 intothekingdom.com/boa23/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_lock-CSX6d401b45.svg
IP 162.241.217.72:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (587), with no line terminators
Hash ceb057f1be654f083667077633a116ce
335b4b91e1da770d58e8fae198064690d10bae88
f3dbd38295f5d02807f3517a6388c0792ae53585e77236e609c29ba640a1759c
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /boa23/SUPPORT/images/assets-images-site-homepage-icons-get_app_interstitial_lock-CSX6d401b45.svg HTTP/1.1
Host: intothekingdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 04:39:38 GMT
Server: Apache
Last-Modified: Fri, 08 Nov 2019 06:17:22 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Connection: keep-alive
Content-Length: 326
Content-Type: image/svg+xml
www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-tr2_arllmbb5-e.webp
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-tr2_arllmbb5-e.webp
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-tr2_arllmbb5-e.webp HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://intothekingdom.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Sat, 04 Feb 2023 04:39:38 GMT
etag: "16fa-5c016c9cca9c0"
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F713)
set-cookie: TS01794157=01c97de39ceba45f51e7baf8f373a2ab194129d0e6800e4c7a85ddb915632dcaa7d3656c72f96013454c69c2101d0e5eb0ffb576c6; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y93him4AEDzyQ2Z_sFux-wAAAHI
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-nr2_arllmbb5-e.webp
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-nr2_arllmbb5-e.webp
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /hp-assets/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-nr2_arllmbb5-e.webp HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://intothekingdom.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Sat, 04 Feb 2023 04:39:39 GMT
etag: "16fa-5c016c9cca9c0"
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F71D)
set-cookie: TS01794157=0126c8e57f7109302b8e544547cb3de5a17d3387f62c5babb387a7e86ba100da6bc4f4cfc4791177727a1794c804d5ceacd295d883; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y93hi-lxly8_oeGLu08e4AAAAA0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff2
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff2
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff2 HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://intothekingdom.com
Connection: keep-alive
Referer: http://intothekingdom.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sat, 04 Feb 2023 04:39:39 GMT
etag: "16fa-5c016c9cca9c0"
expires: Sun, 04 Feb 2024 04:39:39 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F71D)
set-cookie: TS01794157=0121c3a3812f349704f960681f9eae0ab25b0ed78a9259c22c0004b37d325fde305e24928faaa81f6ce1c6056e65a2a2411e2b3e16; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y93hiyU8JHBk-FD_gRwfLAAAAOM
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff2
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff2
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff2 HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://intothekingdom.com
Connection: keep-alive
Referer: http://intothekingdom.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sat, 04 Feb 2023 04:39:39 GMT
etag: "16fa-5c016c9cca9c0"
expires: Sun, 04 Feb 2024 04:39:39 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F6FC)
set-cookie: TS01794157=01c97de39c4bb820357303c8c3b6f9762d484d7c57cf91069d697b48c00ab7ab5fdb0f52b19db96ae33238a870a80a4465226849c8; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y93hi6H5D83Vtef4WRQZtQAAAPs
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff2
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff2
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff2 HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://intothekingdom.com
Connection: keep-alive
Referer: http://intothekingdom.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sat, 04 Feb 2023 04:39:39 GMT
etag: "16fa-5c016c9cca9c0"
expires: Sun, 04 Feb 2024 04:39:39 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F713)
set-cookie: TS01794157=01c97de39ce55764ec0bc4509b52e7914fffe9ac939169533ad4bf1923ff2f7c690931fdaea4591b442430b7944db15f9fa07cc71c; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y93hi-lxly8_oeGLu08e8AAAACs
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
intothekingdom.com/boa23/SUPPORT/images/192x192-CSXafb7d716.png
162.241.217.72200 OK 8.4 kB URL HTTP/1.1 intothekingdom.com/boa23/SUPPORT/images/192x192-CSXafb7d716.png
IP 162.241.217.72:0
File type PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced\012- data
Hash 67af3bbd46f9947739538d49395d573d
03a34b0aa432274f88862b27ab109f8e26311e72
b47bfe9d7333188f5b2f8690785ccd966d882c2364a5e4e5ae293e02554ad8d8
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
GET /boa23/SUPPORT/images/192x192-CSXafb7d716.png HTTP/1.1
Host: intothekingdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 04:39:39 GMT
Server: Apache
Last-Modified: Fri, 08 Nov 2019 06:52:54 GMT
Accept-Ranges: bytes
Content-Length: 8354
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Connection: keep-alive
Content-Type: image/png
intothekingdom.com/boa23/SUPPORT/images/favicon1.ico
162.241.217.72200 OK 15 kB URL HTTP/1.1 intothekingdom.com/boa23/SUPPORT/images/favicon1.ico
IP 162.241.217.72:0
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash f5cf9991c119848718497291eedfdf12
00aadfc922701304d16aa1d7b888aea549e87578
d5bba1cae66759adfee0d50ab0419e6bb19a48f8c360e4be8e582ba75e7a1402
Analyzer Verdict Alert urlquery phishing Phishing - Bank of America
urlquery phishing Phishing - Bank of America
fortinet Phishing
GET /boa23/SUPPORT/images/favicon1.ico HTTP/1.1
Host: intothekingdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://intothekingdom.com/boa23/SUPPORT/loginweb.php?sslmode=true&access_token=LJFWeJ07bSvrWBhIVYIUn2drSfq5j2xOB9QrrQOvuwJA2vVKVxtnc3Sjy5KkqBFJ4a8gzqBGbVBJOE3H
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 04:39:39 GMT
Server: nginx/1.21.6
Content-Type: image/x-icon
Content-Length: 15086
Last-Modified: Fri, 08 Nov 2019 06:54:10 GMT
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: max-age=A10368000, public
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Server-Cache: true
X-Proxy-Cache: MISS
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.woff HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://intothekingdom.com
Connection: keep-alive
Referer: http://intothekingdom.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sat, 04 Feb 2023 04:39:40 GMT
etag: "16fa-5c016c9cca9c0"
expires: Sun, 04 Feb 2024 04:39:40 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F711)
set-cookie: TS01794157=012ef7d642ce2882a1469977c14ec24eea812a956f44a38fafb2fd3bd5e651fc65949077fd53c65d722ada143eb59b9da878488b9e; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y93hjGqB20m05YrEZlcwGwAAASg
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.woff HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://intothekingdom.com
Connection: keep-alive
Referer: http://intothekingdom.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sat, 04 Feb 2023 04:39:40 GMT
etag: "16fa-5c016c9cca9c0"
expires: Sun, 04 Feb 2024 04:39:40 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F71A)
set-cookie: TS01794157=01c9d1a3a0e3ad4fa7bea063a3ea11c175c627e18d5859469410f8faa2518bcdce82d518842aa5e6c9bfae4b56c9acfedf0a1688e3; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y93hjD6tItfHk98BxgsQ4AAAAEg
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.woff HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://intothekingdom.com
Connection: keep-alive
Referer: http://intothekingdom.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sat, 04 Feb 2023 04:39:40 GMT
etag: "16fa-5c016c9cca9c0"
expires: Sun, 04 Feb 2024 04:39:40 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F71D)
set-cookie: TS01794157=0126c8e57f10d35db570925efa56ef6c1309549248a0b4ae5c8595c3b6d82ac9c7ae878f61c2ef4c21adc7a9f51f8c7025365a579f; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y93hjGFMqwrQlFkhjJx4-wAAABE
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.ttf
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.ttf
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-medium/cnx-medium.ttf HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://intothekingdom.com
Connection: keep-alive
Referer: http://intothekingdom.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sat, 04 Feb 2023 04:39:40 GMT
etag: "16fa-5c016c9cca9c0"
expires: Sun, 04 Feb 2024 04:39:40 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F718)
set-cookie: TS01794157=01f400e1129a37ace2809e74ac93e56d365bb457ecde1a1fb5ea0f7dada68e8827d68104d7ac9f32d051c6c22d0c484a0b3f79e3c0; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y93hjGqB20m05YrEZlcwHgAAAUI
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.ttf
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.ttf
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-regular/cnx-regular.ttf HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://intothekingdom.com
Connection: keep-alive
Referer: http://intothekingdom.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sat, 04 Feb 2023 04:39:40 GMT
etag: "16fa-5c016c9cca9c0"
expires: Sun, 04 Feb 2024 04:39:40 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F709)
set-cookie: TS01794157=01c9d1a3a04669d86785cb58eab3d871edd5c79bcb24082b27235f741f33fcdb4d4407664af89254524750376821ed9ce54448aebc; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y93hjFkoPaiOXtqmLfecrgAAAIw
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2
www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.ttf
192.229.233.230404 Not Found 5.9 kB URL HTTP/2 www1.bac-assets.com/homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.ttf
IP 192.229.233.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (695)
Hash 6d24258adff1d15be9b869205bdc3103
03d411278bde676bb7132325e61cf8052725e6bf
3619992e8edd7cdcfc5f0326be785065a240f8022a689a905f7abefe7f44b20e
GET /homepage/spa-assets/components/utilities/global/sparta-style-utility/3.1.5/font/cnx-light/cnx-light.ttf HTTP/1.1
Host: www1.bac-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://intothekingdom.com
Connection: keep-alive
Referer: http://intothekingdom.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
cache-control: max-age=31536000, public
content-type: text/html
date: Sat, 04 Feb 2023 04:39:41 GMT
etag: "16fa-5c016c9cca9c0"
expires: Sun, 04 Feb 2024 04:39:41 GMT
last-modified: Fri, 16 Apr 2021 13:16:31 GMT
server: ECS (ska/F713)
set-cookie: TS01794157=0121c3a3812d4d0dddd384286ad45df69bb477f3a94f41cd36211ea57486a2df2e41c97867a652746b63bb5cb0d79c6a2f5a3a2d27; Path=/; Secure; HTTPOnly
strict-transport-security: max-age=31536000
x-boa-requestid: Y93hjTcWlSbAU2pkZs5RqAAAARg
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-length: 5882
X-Firefox-Spdy: h2