Report - ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html

Report Overview

Submitted URL
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
IP
217.160.0.137
ASN
#8560 IONOS SE
Submitted
2024-04-19 20:54:24
Access
public
Website Title
America First Credit Union
Final URL
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html#wa=wsignin1.0&rpsnv=13&ct=1539585327&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d715d44a2-2f11-4282-f625-a066679e96e2&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015&domain=
Tags
afcu financial phishing
urlquery detections
Phishing - America First Credit Union

Detections

urlquery
15
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-19	856 B	55 kB	151.101.194.137
ariaagents.co.uk	unknown	2018-12-04	2021-01-10	2024-03-18	9.0 kB	846 kB	217.160.0.137
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15	2024-04-18	470 B	52 kB	104.18.11.207
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-19	911 B	13 kB	104.17.25.14
ajax.aspnetcdn.com	693	2010-10-12	2012-05-24	2024-04-18	425 B	31 kB	152.199.19.160

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-16	medium	ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html	America First Credit Union

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	code.jquery.com/jquery-3.2.1.min.js	87 kB	2023-03-07	2024-05-02
Pretty URL code.jquery.com/jquery-3.2.1.min.js IP 151.101.194.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-02 18:41:02 Times Seen64001 Hash c9f5aeeca3ad37bf2aa006139b935f0a 1055018c28ab41087ef9ccefe411606893dabea2 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de Loading...

	code.jquery.com/jquery-3.3.1.slim.min.js	70 kB	2023-03-07	2024-05-02
Pretty URL code.jquery.com/jquery-3.3.1.slim.min.js IP 151.101.194.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:54 Last Seen2024-05-02 05:44:47 Times Seen8466 Hash 99b0a83cf1b0b1e2cb16041520e87641 bc5836992c0b260496ba520fe1336d499bf06eb7 dde76b9b2b90d30eb97fc81f06caa8c338c97b688cea7d2729c88f529f32fbb1 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js	20 kB	2023-03-07	2024-05-01
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:35 Last Seen2024-05-01 23:56:35 Times Seen3649 Hash 053305c2b293c27c02523cda42962c09 556b0af7346b9e21a8eea1be8b195b563169ecd5 be483938eb34538b970684f72e312f62652e84b42b7ad86953962d1ce2217c44 Loading...

	ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/index_1.html#https%3A/secure.americafirst.com	0 B	2023-03-07	2024-05-02
Pretty URL ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/index_1.html#https%3A/secure.americafirst.com IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-02 18:47:25 Times Seen37279125 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/asset/analytics/ads/js/actions.js	1.3 kB	2023-03-07	2024-04-23
Pretty URL ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/asset/analytics/ads/js/actions.js IP 217.160.0.137 ASN #8560 IONOS SE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:34:37 Last Seen2024-04-23 19:17:51 Times Seen165 Hash bfef294446761f81225bda51229dfdad 930cedeac977eb7ad969772600deffaff8174dc0 3006a7f5d160a928d4f8fe1572e645d91201447f88257ed27022ff07beffb8dd Loading...

	cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js	20 kB	2023-03-07	2024-05-01
Pretty URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:54 Last Seen2024-05-01 18:49:05 Times Seen7776 Hash 6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5 Loading...

	stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js	51 kB	2023-03-07	2024-05-01
Pretty URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.11.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:37 Last Seen2024-05-01 18:49:05 Times Seen6394 Hash ce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339 Loading...

	ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js	87 kB	2023-03-07	2024-05-02
Pretty URL ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js IP 152.199.19.160 ASN #15133 EDGECAST Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-05-02 18:46:45 Times Seen107772 Hash a09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef Loading...

	ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html	408 B	2023-03-07	2024-04-23
Pretty URL ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html IP 217.160.0.137 ASN #8560 IONOS SE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:09:13 Last Seen2024-04-23 19:17:51 Times Seen24 Hash aa393fe014ff7f6be5fee2e064eb187d a6dae5fad7c0aaf834a6c73ee6af15a9e77863cd c4461c5ec20937eddbc525b72bf033e6fc8b021b4db530716e6c2a21c181d8da Loading...

	ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html	269 B	2023-03-07	2024-04-23
Pretty URL ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html IP 217.160.0.137 ASN #8560 IONOS SE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:48 Last Seen2024-04-23 19:17:51 Times Seen443 Hash 9678fd11bd7c60e14caf05ff2b1925e6 ab1b4abd43e151663158be81c1a9cd04f2c846cd 8fc4e1e3c24d30d70225dd53e8e936af38f1472fb365181710f7b4a973c0c1d5 Loading...

HTTP Transactions (22)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js

104.17.25.14

200 OK

6.5 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (20322)
Size
6.5 kB (6458 bytes)
Hash
6b08ddc901000d51fa1f06a35518f302
bafe987c18cbe0587de3e6360e7da40a2885614b
02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5

HTTP Headers

GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ariaagents.co.uk
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 20:53:58 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 257632
expires: Wed, 09 Apr 2025 20:53:58 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ETryWFg5a0zrfKVvF85e13jLjIvW%2FCOiPIHsfv8rR1mZH2JJV1tVTupWmOnofBgcjsDD8j%2BXSjWipVQ7ktC4u0mzeO%2Bx78nqpdnPXHabO0lBKZPpfj62CVM3XJUCUu5ofbRhNjUz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 876fc97dbe937127-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js

104.17.25.14

200 OK

4.5 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text
Size
4.5 kB (4517 bytes)
Hash
053305c2b293c27c02523cda42962c09
556b0af7346b9e21a8eea1be8b195b563169ecd5
be483938eb34538b970684f72e312f62652e84b42b7ad86953962d1ce2217c44

HTTP Headers

GET /ajax/libs/jquery.mask/1.14.10/jquery.mask.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 20:53:58 GMT
content-type: application/javascript; charset=utf-8
content-length: 4517
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-4e98"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 256526
expires: Wed, 09 Apr 2025 20:53:58 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YfgeLgDwGldFVl4ZIknkODSXpB9IYt%2F1TocDfLptcezAcBVKWE%2FYMcfPB1a8Boh92NUd5wwzKFl2aSfJrCr5tp470NF%2BOw9bXpt8wRbGhcMlpsX5vST%2B%2BKR6r95tPTQ8C6GZhEJd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 876fc97dc84e5697-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js

152.199.19.160

200 OK

30 kB

URL GET HTTP/2
ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js
IP
152.199.19.160:443
ASN
#15133 EDGECAST

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerDigiCert Inc
Subject*.vo.msecnd.net
Fingerprint86:E0:37:E4:B1:31:51:81:DD:54:33:82:FF:4D:EB:D1:15:5F:65:C4
ValidityTue, 30 Jan 2024 00:00:00 GMT - Thu, 30 Jan 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
30 kB (30394 bytes)
Hash
a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

HTTP Headers

GET /ajax/jQuery/jquery-3.3.1.min.js HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 2226838
cache-control: public,max-age=31536000
content-type: application/javascript
date: Fri, 19 Apr 2024 20:53:58 GMT
etag: "80288516b793d31:0"
last-modified: Mon, 22 Jan 2018 19:27:49 GMT
server: ECAcc (ska/F6AE)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 30394
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.2.1.min.js

151.101.194.137

200 OK

30 kB

URL GET HTTP/2
code.jquery.com/jquery-3.2.1.min.js
IP
151.101.194.137:443
ASN
#54113 FASTLY

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32058)
Size
30 kB (30125 bytes)
Hash
c9f5aeeca3ad37bf2aa006139b935f0a
1055018c28ab41087ef9ccefe411606893dabea2
87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

HTTP Headers

GET /jquery-3.2.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15283"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 19 Apr 2024 20:53:58 GMT
age: 8108604
x-served-by: cache-lga21971-LGA, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 29, 289842
x-timer: S1713560038.088833,VS0,VE0
vary: Accept-Encoding
content-length: 30125
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/368f9486f1d69178fbf8bf2dcfbc491b23e4b261.png

217.160.0.137

200 OK

3.6 kB

URL GET HTTP/2
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/368f9486f1d69178fbf8bf2dcfbc491b23e4b261.png
IP
217.160.0.137:443
ASN
#8560 IONOS SE

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
PNG image data, 277 x 94, 8-bit/color RGBA, non-interlaced
Size
3.6 kB (3580 bytes)
Hash
aa3ffca4509491de728b7f7e60a7ef63
368f9486f1d69178fbf8bf2dcfbc491b23e4b261
83b34f00b6612015c941c3865d2c047ae5ce567f13530491ac4ed773b13b1bd3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - America First Credit Union

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/adobe/data/js/css/368f9486f1d69178fbf8bf2dcfbc491b23e4b261.png HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 3580
date: Fri, 19 Apr 2024 20:53:58 GMT
server: Apache
last-modified: Sun, 20 Feb 2022 10:38:52 GMT
etag: "dfc-5d870b8ce0700"
accept-ranges: bytes
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/asset/analytics/ads/js/style.css

217.160.0.137

200 OK

414 B

URL GET HTTP/2
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/asset/analytics/ads/js/style.css
IP
217.160.0.137:443
ASN
#8560 IONOS SE

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
414 B (414 bytes)
Hash
f9653fbeecf34b04791fee59eb3e253b
fcbbad7c6616682a22a9d0de09d715c61cb17722
7924e7e8b95825e4cefbfc31444ea9247e1b0d04cb066b56f06addf9cc7c5eaf

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - America First Credit Union

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/asset/analytics/ads/js/style.css HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-length: 414
date: Fri, 19 Apr 2024 20:53:58 GMT
server: Apache
last-modified: Tue, 16 Nov 2021 13:01:14 GMT
etag: "19e-5d0e7852e9a80"
accept-ranges: bytes
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/app.76ff82e5.css

217.160.0.137

200 OK

2.6 kB

URL GET HTTP/2
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/app.76ff82e5.css
IP
217.160.0.137:443
ASN
#8560 IONOS SE

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
ASCII text, with very long lines (2555), with no line terminators
Size
2.6 kB (2555 bytes)
Hash
45fdfaabff062b120c343417bdb06350
332147dbfd8ffbb33144494cc90abe385ed6dff2
ff7c1455abe0a7bc7da593da4f46d258b47b70c61cd37b2f2890f8063930d034

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - America First Credit Union

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/adobe/data/js/css/app.76ff82e5.css HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-length: 2555
date: Fri, 19 Apr 2024 20:53:58 GMT
server: Apache
last-modified: Sun, 20 Feb 2022 10:38:54 GMT
etag: "9fb-5d870b8ec8b80"
accept-ranges: bytes
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/logo-desktop-inverse.a3a99f3a.png

217.160.0.137

200 OK

8.9 kB

URL GET HTTP/2
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/logo-desktop-inverse.a3a99f3a.png
IP
217.160.0.137:443
ASN
#8560 IONOS SE

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
PNG image data, 390 x 134, 8-bit/color RGBA, non-interlaced
Size
8.9 kB (8898 bytes)
Hash
a3a99f3aea38a0574c84d332fc5f871f
5a3bcb4c445e47551ad7fb98a1d57a34432c298d
c9a0078a7b8e70e1437317247095c89510a6c40bdb3bb37a26318133e2c1ab54

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - America First Credit Union

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/adobe/data/js/css/logo-desktop-inverse.a3a99f3a.png HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 8898
date: Fri, 19 Apr 2024 20:53:58 GMT
server: Apache
last-modified: Sun, 20 Feb 2022 10:38:54 GMT
etag: "22c2-5d870b8ec8b80"
accept-ranges: bytes
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.3.1.slim.min.js

151.101.194.137

200 OK

24 kB

URL GET HTTP/2
code.jquery.com/jquery-3.3.1.slim.min.js
IP
151.101.194.137:443
ASN
#54113 FASTLY

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65247)
Size
24 kB (24038 bytes)
Hash
99b0a83cf1b0b1e2cb16041520e87641
bc5836992c0b260496ba520fe1336d499bf06eb7
dde76b9b2b90d30eb97fc81f06caa8c338c97b688cea7d2729c88f529f32fbb1

HTTP Headers

GET /jquery-3.3.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ariaagents.co.uk
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1111d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 19 Apr 2024 20:53:58 GMT
age: 18759438
x-served-by: cache-lga21982-LGA, cache-hel1410032-HEL
x-cache: HIT, HIT
x-cache-hits: 97, 173680
x-timer: S1713560038.128504,VS0,VE0
vary: Accept-Encoding
content-length: 24038
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/21d7d23b5082cfbd7662ecf888a9879cef5e3b6d.png

217.160.0.137

200 OK

2.0 kB

URL GET HTTP/2
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/21d7d23b5082cfbd7662ecf888a9879cef5e3b6d.png
IP
217.160.0.137:443
ASN
#8560 IONOS SE

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
PNG image data, 55 x 62, 8-bit/color RGBA, non-interlaced
Size
2.0 kB (1998 bytes)
Hash
ae659b5597c9500445cc6f80a4281459
21d7d23b5082cfbd7662ecf888a9879cef5e3b6d
a6690102b24638424202c679e3c3fafe83bdaa641e40dca06968bcad77f70821

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - America First Credit Union

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/adobe/data/js/css/21d7d23b5082cfbd7662ecf888a9879cef5e3b6d.png HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 1998
date: Fri, 19 Apr 2024 20:53:58 GMT
server: Apache
last-modified: Sun, 20 Feb 2022 10:38:54 GMT
etag: "7ce-5d870b8ec8b80"
accept-ranges: bytes
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/78bdeddcd621c8d0d38dce1c2bfedd9330602f96.png

217.160.0.137

200 OK

2.9 kB

URL GET HTTP/2
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/78bdeddcd621c8d0d38dce1c2bfedd9330602f96.png
IP
217.160.0.137:443
ASN
#8560 IONOS SE

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
PNG image data, 99 x 40, 8-bit/color RGBA, non-interlaced
Size
2.9 kB (2913 bytes)
Hash
6265054874bcf3c370bef6bb64646fe9
78bdeddcd621c8d0d38dce1c2bfedd9330602f96
df808b2ea829eac97e99d46d91fa6a005269d58a9dfd57ff40f7084e6f027f7b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - America First Credit Union

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/adobe/data/js/css/78bdeddcd621c8d0d38dce1c2bfedd9330602f96.png HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 2913
date: Fri, 19 Apr 2024 20:53:58 GMT
server: Apache
last-modified: Sun, 20 Feb 2022 10:38:54 GMT
etag: "b61-5d870b8ec8b80"
accept-ranges: bytes
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/chunk-vendors.eab46e62.css

217.160.0.137

200 OK

717 kB

URL GET HTTP/2
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/chunk-vendors.eab46e62.css
IP
217.160.0.137:443
ASN
#8560 IONOS SE

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (60387)
Size
717 kB (716803 bytes)
Hash
fa58619b967a7b4a132981b548401f8d
abd8234b95cc2bf19fa27f3afa472beb7ce3aa9d
dd66ac6aaff011d49ba95602e75d12741be4e1cdb6a3ab587233a5f5879a6eae

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - America First Credit Union

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/adobe/data/js/css/chunk-vendors.eab46e62.css HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-length: 716803
date: Fri, 19 Apr 2024 20:53:58 GMT
server: Apache
last-modified: Sun, 20 Feb 2022 10:38:54 GMT
etag: "af003-5d870b8ec8b80"
accept-ranges: bytes
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/asset/analytics/ads/js/loading.gif

217.160.0.137

200 OK

39 kB

URL GET HTTP/2
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/asset/analytics/ads/js/loading.gif
IP
217.160.0.137:443
ASN
#8560 IONOS SE

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
GIF image data, version 89a, 200 x 200
Size
39 kB (38636 bytes)
Hash
d10ef01e81faa2c2d812bdf670b4e072
77d09a57b2091fd7665dff763a5eab23e0ff907e
5e3d5246b17e19e65385092db07554d8e1c5c4a226a6d7f97824b8e1e8571e34

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - America First Credit Union

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/asset/analytics/ads/js/loading.gif HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/gif
content-length: 38636
date: Fri, 19 Apr 2024 20:53:58 GMT
server: Apache
last-modified: Sat, 11 Aug 2018 11:03:52 GMT
etag: "96ec-57326d0c3d600"
accept-ranges: bytes
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/asset/analytics/ads/js/actions.js

217.160.0.137

200 OK

1.3 kB

URL GET HTTP/2
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/asset/analytics/ads/js/actions.js
IP
217.160.0.137:443
ASN
#8560 IONOS SE

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
1.3 kB (1340 bytes)
Hash
bfef294446761f81225bda51229dfdad
930cedeac977eb7ad969772600deffaff8174dc0
3006a7f5d160a928d4f8fe1572e645d91201447f88257ed27022ff07beffb8dd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - America First Credit Union

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/asset/analytics/ads/js/actions.js HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/javascript
content-length: 1340
date: Fri, 19 Apr 2024 20:53:58 GMT
server: Apache
last-modified: Mon, 21 Feb 2022 14:29:04 GMT
etag: "53c-5d8880de7cc00"
accept-ranges: bytes
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/d4c16de980048679c0662f782e29945ab5125717.png

217.160.0.137

200 OK

3.3 kB

URL GET HTTP/2
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/d4c16de980048679c0662f782e29945ab5125717.png
IP
217.160.0.137:443
ASN
#8560 IONOS SE

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
PNG image data, 250 x 54, 8-bit/color RGBA, non-interlaced
Size
3.3 kB (3311 bytes)
Hash
cf4f20bf0af1f7b4b77126ac20180c2c
d4c16de980048679c0662f782e29945ab5125717
986dae282bc4d35f7234bbf7c3eafd4b4bb990b89143be1f5c8a8aa4a04ee2b4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - America First Credit Union

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/adobe/data/js/css/d4c16de980048679c0662f782e29945ab5125717.png HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 3311
date: Fri, 19 Apr 2024 20:53:58 GMT
server: Apache
last-modified: Sun, 20 Feb 2022 10:38:54 GMT
etag: "cef-5d870b8ec8b80"
accept-ranges: bytes
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/roboto-latin-500.020c97dc.woff2

217.160.0.137

200 OK

16 kB

URL GET HTTP/2
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/roboto-latin-500.020c97dc.woff2
IP
217.160.0.137:443
ASN
#8560 IONOS SE

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15872, version 1.0
Size
16 kB (15872 bytes)
Hash
020c97dc8e0463259c2f9df929bb0c69
8f956a31154047d1b6527b63db2ecf0f3a463f24
24369e1b2461af9dcefecaf9cc93d64cf22a4c5bac32506100b9e21014507bcf

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - America First Credit Union

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/adobe/data/js/css/roboto-latin-500.020c97dc.woff2 HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/chunk-vendors.eab46e62.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 15872
date: Fri, 19 Apr 2024 20:53:58 GMT
server: Apache
last-modified: Sun, 20 Feb 2022 10:38:54 GMT
etag: "3e00-5d870b8ec8b80"
accept-ranges: bytes
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/roboto-latin-400.479970ff.woff2

217.160.0.137

200 OK

16 kB

URL GET HTTP/2
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/roboto-latin-400.479970ff.woff2
IP
217.160.0.137:443
ASN
#8560 IONOS SE

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15736, version 1.0
Size
16 kB (15736 bytes)
Hash
479970ffb74f2117317f9d24d9e317fe
81c796737cbe44d4a719777f0aff14b73a3efb1e
48c3fa6f86c54f1d9bb519220713d4b0a1f8cd1a589a3c03b9fa82e98ecb13e3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - America First Credit Union

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/adobe/data/js/css/roboto-latin-400.479970ff.woff2 HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/chunk-vendors.eab46e62.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 15736
date: Fri, 19 Apr 2024 20:53:58 GMT
server: Apache
last-modified: Sun, 20 Feb 2022 10:38:54 GMT
etag: "3d78-5d870b8ec8b80"
accept-ranges: bytes
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/favicon.ico

217.160.0.137

200 OK

1.2 kB

URL GET HTTP/2
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/favicon.ico
IP
217.160.0.137:443
ASN
#8560 IONOS SE

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Size
1.2 kB (1150 bytes)
Hash
5f0fb15bba173e0aa54bd6434418f8fe
fc16c82f44707eb5045be0f68cfcfce4a4ac29d9
0534a1a2f971f20a153479d5e01ad4051a8af96221bb5f7c80ff06a759d1ea2e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - America First Credit Union

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/adobe/data/js/css/favicon.ico HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 1150
date: Fri, 19 Apr 2024 20:53:58 GMT
server: Apache
last-modified: Sun, 20 Feb 2022 10:38:54 GMT
etag: "47e-5d870b8ec8b80"
accept-ranges: bytes
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html

217.160.0.137

200 OK

13 kB

URL User Request GET HTTP/2
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
IP
217.160.0.137:443
ASN
#8560 IONOS SE

Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
13 kB (13162 bytes)
Hash
e9036b94b9c16400514d4fd972edeba3
f1cb3cc45f119a0d8584b192b1c973e4fe5d5a5b
82c21d11da77f34b74fde6177607a1fe68e38b87e7c8b9d29a7dfc409be369f4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	America First Credit Union

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/indexs.html HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
date: Fri, 19 Apr 2024 20:53:57 GMT
server: Apache
last-modified: Sun, 20 Feb 2022 12:14:18 GMT
etag: W/"82c1-5d8720e19da80"
content-encoding: gzip
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/index_1.html

217.160.0.137

8.8 kB

URL
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/index_1.html
IP
217.160.0.137:0
ASN
#8560 IONOS SE

Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
8.8 kB (8849 bytes)
Hash
4dc58af15db97e8cad84c2b8fa5cb6fb
939166997909edc5e8d4b5a5d8bd82411b4bb336
69273e22b8370a2dca9b7723b97221dff7151ce07ccc3ade8c2497d7733db405

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/adobe/data/js/css/index_1.html HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/html
date: Fri, 19 Apr 2024 20:53:58 GMT
server: Apache
last-modified: Sun, 20 Feb 2022 10:38:56 GMT
etag: W/"1b9d-5d870b90b1000"
content-encoding: gzip
X-Firefox-Spdy: h2

ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/index_1.html

217.160.0.137

200 OK

7.1 kB

URL GET HTTP/2
ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/adobe/data/js/css/index_1.html
IP
217.160.0.137:443
ASN
#8560 IONOS SE

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerDigiCert Inc
Subjectwww.ariaagents.co.uk
FingerprintD3:86:5B:E1:FC:27:D1:F0:89:3C:31:C2:88:26:5E:23:E7:0E:65:51
ValiditySat, 13 Jan 2024 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (7345), with no line terminators
Size
7.1 kB (7069 bytes)
Hash
fdcad69bfca7e5ebdc641cf45dfe6e09
d1cf19c8c93dc749bb30c49e1a266e3ab97b80e1
11671e318009b14ad9758c1661bec071be131f17752388fdafd1bf0754b47dcb

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - America First Credit Union

HTTP Headers

GET /AmericaFCU-Utah/americafirst.com/adobe/data/js/css/index_1.html HTTP/1.1
Host: ariaagents.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
date: Fri, 19 Apr 2024 20:53:58 GMT
server: Apache
last-modified: Sun, 20 Feb 2022 10:38:56 GMT
etag: W/"1b9d-5d870b90b1000"
content-encoding: gzip
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js

104.18.11.207

200 OK

51 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ariaagents.co.uk/AmericaFCU-Utah/americafirst.com/indexs.html
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (50395)
Size
51 kB (50676 bytes)
Hash
ce6e785579ae4cb555c9de311d1b9271
5ef2c15b47d7290698c737676ba9c3056b45f2e8
0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339

HTTP Headers

GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ariaagents.co.uk
DNT: 1
Connection: keep-alive
Referer: https://ariaagents.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 20:53:58 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 03/18/2024 13:32:40
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: d59691f9735e4d30786c500f06a28f71
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 876fc97dcdd4b521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML