Report - murphyultralight.com/kh/Citadelebanka/kod.php

Report Overview

Submitted URL
murphyultralight.com/kh/Citadelebanka/kod.php
IP
69.49.247.78
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2023-02-03 14:01:59
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.9 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
online.citadele.lv	unknown	2017-01-30T07:19:04Z	2023-03-10T15:21:14Z	6.5 kB	520 kB	193.178.178.229
translate.googleapis.com	1005	2012-05-31T09:21:21Z	2023-03-13T08:44:18Z	420 B	4.5 kB	172.217.21.170
ocsp.sectigo.com	487	2019-11-29T12:50:24Z	2023-03-13T08:22:43Z	340 B	964 B	172.64.155.188
aom4xb8tdrlhdtb6f2aalrwsceqj3f5asvbrwej2728776004e55613cam1.e.aa.online-metrix.net	unknown			642 B	436 B	91.235.134.131
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	67 kB	34.120.237.76
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
murphyultralight.com	unknown	2021-08-17T15:33:15Z	2023-03-05T15:39:37Z	474 B	11 kB	69.49.247.78
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-13T06:00:13Z	1.7 kB	3.7 kB	93.184.220.29
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-13T05:09:47Z	1.7 kB	3.5 kB	216.58.211.3
content.citadele.lv	unknown	2020-03-13T09:12:02Z	2023-03-10T15:21:07Z	25 kB	205 kB	91.235.133.182
ocsp.securetrust.com	18792	2019-12-23T04:05:54Z	2023-03-13T06:00:58Z	344 B	793 B	95.101.10.123
aom4xb8tdrlhdtb6f2aalrwsceqj3f5asvbrwej25927d1a1c998a260am1.e.aa.online-metrix.net	unknown			642 B	436 B	91.235.134.131
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2.4 kB	6.2 kB	23.36.76.226
www.gstatic.com	unknown	2016-07-26T11:37:06Z	2023-03-13T07:57:11Z	426 B	2.5 kB	142.250.74.35

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-02-02	medium	murphyultralight.com/kh/Citadelebanka/kod.php	Citadele Banka

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-03	medium	murphyultralight.com/kh/Citadelebanka/kod.php	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (21)

	URL	Size	First Seen	Last Seen
	online.citadele.lv/ibbf/js/ibbf-verrel-107_6_0.js	113 kB	2023-03-13	2023-03-13
Pretty URL online.citadele.lv/ibbf/js/ibbf-verrel-107_6_0.js IP 193.178.178.229 ASN #16279 AS Citadele banka Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:08:06 Last Seen2023-03-13 18:21:40 Times Seen1 Hash e80bc4391a0bc6edf2768840484fefd0 501f3d61c88d08773d8191ad907f0ef082b9a5c0 595e6aeafee37de0817760fab715360d1f80aa35ffee9f0f577c2b5d10c7bcf7 Loading...

	online.citadele.lv/ibbf/js/views/forgotPassword-verrel-107_6_0.js	2.4 kB	2023-03-13	2023-03-13
Pretty URL online.citadele.lv/ibbf/js/views/forgotPassword-verrel-107_6_0.js IP 193.178.178.229 ASN #16279 AS Citadele banka Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:52:03 Last Seen2023-03-13 15:52:03 Times Seen1 Hash 5ae2dab110a5bb532da1f5b8b8b3573f 40437617190cf20e6e505cbdc5fdfe2c7c395bba b5fd36f52bf4d87bc62aec1731ce2f56239f26a6f03117d75ce644a79afe0dce Loading...

	online.citadele.lv/ibbf/js/inline-verrel-107_6_0.js	1.3 kB	2023-03-13	2023-03-13
Pretty URL online.citadele.lv/ibbf/js/inline-verrel-107_6_0.js IP 193.178.178.229 ASN #16279 AS Citadele banka Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:08:06 Last Seen2023-03-13 18:21:40 Times Seen1 Hash 84a611e0a750055687cc6b2a8014a047 6eb5135d6439343a8438eef276815f4d1f40aba9 70d67e16582c01bcab3586df8d92cb28c35663a6ea9ebf6d89cf001be72507ad Loading...

	content.citadele.lv/9v7yes47asrb4wtj.js?m3eonqti9f4lmo17=aom4xb8t&1scbqqn1yefouone=63f0229c-c7a6-41da-8fe1-574e7e611e1c	96 kB	2023-03-13	2023-03-13
Pretty URL content.citadele.lv/9v7yes47asrb4wtj.js?m3eonqti9f4lmo17=aom4xb8t&1scbqqn1yefouone=63f0229c-c7a6-41da-8fe1-574e7e611e1c IP 91.235.133.182 ASN #30286 THM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:52:03 Last Seen2023-03-13 15:52:03 Times Seen1 Hash 111b54e0456e7b88170ff6d5800307e5 70e4903ec0b41a3d6ee7c3204abee2fb8b27dd45 4a735a34f5664af6b56733cd227356fb0747c61ad6f1b44b7b2f59f6ba2f928e Loading...

	murphyultralight.com/kh/Citadelebanka/kod.php	15 B	2023-03-11	2024-01-20
Pretty URL murphyultralight.com/kh/Citadelebanka/kod.php IP 69.49.247.78 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 22:25:00 Last Seen2024-01-20 16:05:45 Times Seen8 Hash 74313278dd88b44649370865451c1304 20eb9dac61d9f6627aacaaa4e1ddda0b23eb2681 674f77109adeefe845e686b54e2a0264faee8cc209ac05e7989f7ba1dac2bd05 Loading...

	content.citadele.lv/Wve-s7cOmQFNpnmQ?e0a73e48b9366abd=j8bjMR_-BYjmZXruxBwPf_btxnU4Gl2ENGG_QXSjpYfk3cHmq_QGX8H18_iSxrOBmLFX2a4hHOohJKFlAbu07WM5TP50w61TlsHaDJWbvLAUXKhT6DEXQ5FhQ7_KNzQkTQnKni1oo-hVZUkMrWMYAr-_YxzlBrsblpc6M2jS7VZXxAK-5NXn_ggO07b1kocQoEVjSa5BjqS3VFhI&jb=3730242668716777354e6b6e7770266a736f35446b6e757026687362773d44697265666d7a246873603f4e6b7a67646f7a2d323031303d	327 kB	2023-03-13	2023-03-13
Pretty URL content.citadele.lv/Wve-s7cOmQFNpnmQ?e0a73e48b9366abd=j8bjMR_-BYjmZXruxBwPf_btxnU4Gl2ENGG_QXSjpYfk3cHmq_QGX8H18_iSxrOBmLFX2a4hHOohJKFlAbu07WM5TP50w61TlsHaDJWbvLAUXKhT6DEXQ5FhQ7_KNzQkTQnKni1oo-hVZUkMrWMYAr-_YxzlBrsblpc6M2jS7VZXxAK-5NXn_ggO07b1kocQoEVjSa5BjqS3VFhI&jb=3730242668716777354e6b6e7770266a736f35446b6e757026687362773d44697265666d7a246873603f4e6b7a67646f7a2d323031303d IP 91.235.133.182 ASN #30286 THM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:52:03 Last Seen2023-03-13 15:52:03 Times Seen1 Hash fb283515d73f2955066bff356b2e0184 64c24a8386436e8b3e8ec0c4341852ca5ee2dfa4 52b6b43635ae9bed80afb689577506551691581195c694f8ad8d8f9055b2d363 Loading...

	content.citadele.lv/UzBWWmeTV0CWxzpI?1773e29a3a00158c=tcoRhVzEn2kktlk7EK4V_NDDPUTy5_8dQka3SU-ody_UrQXjs4MZfYcCl5zQn1p_BvtKtcJ7l31U-d4ZawYELmSn03i5hXa5-BNvZrghM1Y8Gaz1hkFP2TXU-uoOKhB9DrDEB2UaFA9WbDVRJHQqL9PwfvKRiMx-dZTslwvRLfJlkSDW27yYNDgd3vwDDnbDe0QBtKK8PxpeclssnT4	93 kB	2023-03-13	2023-03-13
Pretty URL content.citadele.lv/UzBWWmeTV0CWxzpI?1773e29a3a00158c=tcoRhVzEn2kktlk7EK4V_NDDPUTy5_8dQka3SU-ody_UrQXjs4MZfYcCl5zQn1p_BvtKtcJ7l31U-d4ZawYELmSn03i5hXa5-BNvZrghM1Y8Gaz1hkFP2TXU-uoOKhB9DrDEB2UaFA9WbDVRJHQqL9PwfvKRiMx-dZTslwvRLfJlkSDW27yYNDgd3vwDDnbDe0QBtKK8PxpeclssnT4 IP 91.235.133.182 ASN #30286 THM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:52:03 Last Seen2023-03-13 15:52:03 Times Seen1 Hash b44ce00503d2cb2be2c4e510d6569102 78dcb50273226a320c2b90913891d2fc5108760f 576a0bb4f08a624df0081edff24b0aff87225acfb7d1497f8467fff25450887e Loading...

	online.citadele.lv/ibbf/js/tags/wwQtPMzdY-verrel-107_6_0.js	3.5 kB	2023-03-13	2023-03-13
Pretty URL online.citadele.lv/ibbf/js/tags/wwQtPMzdY-verrel-107_6_0.js IP 193.178.178.229 ASN #16279 AS Citadele banka Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:08:06 Last Seen2023-03-13 18:21:40 Times Seen1 Hash b2ac7afe2b067fd0c3a2214a8b8f53d4 b0c5ba03fd72dc185c0f238da992a2eda53a610b f23b3762ecef168c22ef9f014903b9cbaf63b7221dc68b8f64f6e4493a516746 Loading...

	content.citadele.lv/nnsxpcuohckvd816.js?sn88w215nfg4sq99=aom4xb8t&z0wmsegk1e8jat9m=63f0229c-c7a6-41da-8fe1-574e7e611e1c	96 kB	2023-03-13	2023-03-13
Pretty URL content.citadele.lv/nnsxpcuohckvd816.js?sn88w215nfg4sq99=aom4xb8t&z0wmsegk1e8jat9m=63f0229c-c7a6-41da-8fe1-574e7e611e1c IP 91.235.133.182 ASN #30286 THM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:52:03 Last Seen2023-03-13 15:52:03 Times Seen1 Hash 1aaa52f0673167ad42fb09b170d52a76 87f17fcb41e430437511c3b4006eeaf3f6a627d5 2e52add0424a745eee575c4dfaebbb3ffff6e4dc89f987532d02f7f8f28cb49f Loading...

	murphyultralight.com/kh/Citadelebanka/kod.php	15 B	2023-03-13	2024-04-18
Pretty URL murphyultralight.com/kh/Citadelebanka/kod.php IP 69.49.247.78 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:52:03 Last Seen2024-04-18 13:55:05 Times Seen5 Hash 3e42298cb525974a3cc0c8e32d48a0b2 3906f2e5e878e9f0eb6c9aecdfa3e7ba55c1e730 7a33015bc3dee4afa33c7f785fb93190ab06c65db4f74df137ed7c8dceb3ea25 Loading...

	content.citadele.lv/0bUEzxBse9FQy9Uf?a222248910a5bbf0=sez7NzafKImCFBGhB5-GQAOGD0GxqAex2J8nxhlZ2SwHynj9a2owWsCWUUL3uHgoH5dSNHjFAE0OxVM1n39xNgzY1rO-w27vcKbZA0JydEJ87981ZI2KAxy-ydh1icFkwTiWWa4e8P4Pe_jDKnS4cNiNlQUJWYKeAXzHfwdbkDNkTW4TAcjLD1LuVCxtNTIAl6hIDKCR7oN7QwbgpSeX	92 kB	2023-03-13	2023-03-13
Pretty URL content.citadele.lv/0bUEzxBse9FQy9Uf?a222248910a5bbf0=sez7NzafKImCFBGhB5-GQAOGD0GxqAex2J8nxhlZ2SwHynj9a2owWsCWUUL3uHgoH5dSNHjFAE0OxVM1n39xNgzY1rO-w27vcKbZA0JydEJ87981ZI2KAxy-ydh1icFkwTiWWa4e8P4Pe_jDKnS4cNiNlQUJWYKeAXzHfwdbkDNkTW4TAcjLD1LuVCxtNTIAl6hIDKCR7oN7QwbgpSeX IP 91.235.133.182 ASN #30286 THM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:52:03 Last Seen2023-03-13 15:52:03 Times Seen1 Hash 5c5554664e2a86f4f11739c80f3ccd81 32611ff72951601f8f1f151a5ebd926c17bc6473 9b4de2e773d5ac07033c3a4ace95a9d7b82b7a56b5a85103e0f1445dafd9e3de Loading...

	content.citadele.lv/YcR0fwZIGISd1nnj?fdd272cab843cd82=-52yQaSdorxp9JcEEiH0aYZ55iC-gnovirKgAKg5p4Loo1vjIwAztEgIDhZg6TYAC-cAXHsM9fIbOLATa1BFwiIuhTreA83sGve36Mtunw5UVVOlEML_nosLKvzqET9ZE84zigMz7GJ47IYPlEXcADmkEU-Yj-zckBJpejmf5Ccx7EUgAxlcciP_RDZos25Eng1VYNMoT70Z6hoOA4Ax	92 kB	2023-03-13	2023-03-13
Pretty URL content.citadele.lv/YcR0fwZIGISd1nnj?fdd272cab843cd82=-52yQaSdorxp9JcEEiH0aYZ55iC-gnovirKgAKg5p4Loo1vjIwAztEgIDhZg6TYAC-cAXHsM9fIbOLATa1BFwiIuhTreA83sGve36Mtunw5UVVOlEML_nosLKvzqET9ZE84zigMz7GJ47IYPlEXcADmkEU-Yj-zckBJpejmf5Ccx7EUgAxlcciP_RDZos25Eng1VYNMoT70Z6hoOA4Ax IP 91.235.133.182 ASN #30286 THM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:52:03 Last Seen2023-03-13 15:52:03 Times Seen1 Hash aa82611e89c75a741c264c236fa00f40 fd7c59964801d629fa5474ad501526c1db72c3e5 48d24acaf0e63def354c315171b574c9aea750d7b397c4c3feb94c04a671a61c Loading...

	content.citadele.lv/2g9Geq4BYLj-FvaU?9da0073d23be5d5d=e1tPx1qxqUP9wDGqTOskqqhz-MNjng5BOtwMjKgewbrHlm_wc1z0MLAysPc-tuHlCqisuDfhg6Di1P3ydiseK-ZfNqM3nwOVrTFD91J3lsMvWjtGPax9vzc62uPSdz9HjYYBxbZOpb3eAPTopIAE2r7cQnxopKOxKoznKUD4FdvzlEzZ10FJIL2fF_cYlIt_aZK1yfqjxO6QchSbaxw	93 kB	2023-03-13	2023-03-13
Pretty URL content.citadele.lv/2g9Geq4BYLj-FvaU?9da0073d23be5d5d=e1tPx1qxqUP9wDGqTOskqqhz-MNjng5BOtwMjKgewbrHlm_wc1z0MLAysPc-tuHlCqisuDfhg6Di1P3ydiseK-ZfNqM3nwOVrTFD91J3lsMvWjtGPax9vzc62uPSdz9HjYYBxbZOpb3eAPTopIAE2r7cQnxopKOxKoznKUD4FdvzlEzZ10FJIL2fF_cYlIt_aZK1yfqjxO6QchSbaxw IP 91.235.133.182 ASN #30286 THM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:52:03 Last Seen2023-03-13 15:52:03 Times Seen1 Hash caef6ed2f4d6216c3618c4f079823a39 da4bcad46d2230f3076ea5b3a0981346ab856334 e762b609edc5846ca2c881585540291d56ee5e2bd770e3b1e5e1e7495cb70270 Loading...

	murphyultralight.com/kh/Citadelebanka/kod.php	86 B	2023-03-13	2023-03-13
Pretty URL murphyultralight.com/kh/Citadelebanka/kod.php IP 69.49.247.78 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:52:03 Last Seen2023-03-13 15:52:03 Times Seen1 Hash eb690b5cc54d5fd83cd716d80915150d 343b5d5e1485ec9f10c37b1c62953d75abb2c848 cf5b2d2f6a053a61679ae607f2ac6fcd590f32c334ff84b04ac6e2effab846ce Loading...

	online.citadele.lv/ibbf/js/dependencies-verrel-107_6_0.js	95 kB	2023-03-13	2023-03-13
Pretty URL online.citadele.lv/ibbf/js/dependencies-verrel-107_6_0.js IP 193.178.178.229 ASN #16279 AS Citadele banka Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:08:06 Last Seen2023-03-13 18:21:40 Times Seen1 Hash fa710597a6ccfca2db8991feb42ca469 a9ca71ffa71a8c9e9ee64904aa3d2eeff45b0752 20584716a0c9a6c689ea764a65139fa93af1f4ec563f52dcfe8942f95c2f5c52 Loading...

	murphyultralight.com/kh/Citadelebanka/kod.php	93 B	2023-03-13	2023-03-13
Pretty URL murphyultralight.com/kh/Citadelebanka/kod.php IP 69.49.247.78 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 15:52:03 Last Seen2023-03-13 15:52:03 Times Seen1 Hash 5afe47cdf0289f48ed2135cfeb4e3b42 6a33ffaddfb4993b48116de743400cc6d8c0692e 6b3e27a6efc6938a38b39999672f41864d08b84798c2bd36c690b4fd41645a89 Loading...

	murphyultralight.com/kh/Citadelebanka/kod.php	32 B	2023-03-07	2024-04-18
Pretty URL murphyultralight.com/kh/Citadelebanka/kod.php IP 69.49.247.78 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:19:58 Last Seen2024-04-18 23:28:50 Times Seen1597 Hash 16eff409565ed1d22c17d73ce417bd15 ae526f9ce16489f0ca53977b7722f56806555342 d7d8adcd29f47bcccb73dcfc9c2135200465d57df689f842a49311a5b000d7a3 Loading...

	unknown	0 B	2023-03-07	2024-04-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-19 17:51:23 Times Seen36964981 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 55daaa2a73fd1b971676f324be974497	50 B	2023-03-07	2024-04-16
Pretty Observations First Seen2023-03-07 01:19:58 Last Seen2024-04-16 22:03:46 Times Seen1362 Hash 55daaa2a73fd1b971676f324be974497 f2e39789d9b5daa42d0e044577957b799e620b32 107abd1d4c412c9df04a22eea7a81d0ace815adf4ca7b8c2e3d6ea6c459423b5 Loading...

	#2 Eval - ce3ddefdfa993eff10cce12bad0f161d	74 B	2023-03-07	2024-04-16
Pretty Observations First Seen2023-03-07 01:19:58 Last Seen2024-04-16 22:03:46 Times Seen1363 Hash ce3ddefdfa993eff10cce12bad0f161d f1455008ca9dcb80747f474d900994ec2cba7254 5825930e400f3c0b303a930b890dd589e3fefeb58b7a2819919a0bfbd43a958f Loading...

	#3 Eval - 90eb5565a909cfb23910404b9543ac4f	61 B	2023-03-07	2024-04-16
Pretty Observations First Seen2023-03-07 01:19:58 Last Seen2024-04-16 22:03:46 Times Seen1359 Hash 90eb5565a909cfb23910404b9543ac4f 43956ffd9c2b0dbec81e659e6692a0cfb279d743 4c7434541d1c4e35e47fa7017129597be4de29d8520f8d28324360e68ee147bb Loading...

HTTP Transactions (78)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10521
Expires: Fri, 03 Feb 2023 16:57:08 GMT
Date: Fri, 03 Feb 2023 14:01:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d4e95d0d8982bcd07804baf6fc88231c
5027abda0875bd2529dd4d6691784c74da71a9ee
373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12110
Expires: Fri, 03 Feb 2023 17:23:37 GMT
Date: Fri, 03 Feb 2023 14:01:47 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 03 Feb 2023 13:36:11 GMT
content-type: application/json
age: 1536
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7d2222d41721947297aaeb5a6e3d0714
04cc1ee417c8bf6338657fd4c2e4e1c1ddfd3065
de0e45969a2ad95e52f7e2fbd0d021d9075dd7b14666c929346efe111f648f7c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE0E45969A2AD95E52F7E2FBD0D021D9075DD7B14666C929346EFE111F648F7C"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12410
Expires: Fri, 03 Feb 2023 17:28:37 GMT
Date: Fri, 03 Feb 2023 14:01:47 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: o+JDVvT14QuV0t6rU5r8d/4O4Q4TCsncyFUt1TrMAnTzbxSP/onVZ5CBL5p2IM9VxTG2vdFg4DX6M7mmfIkUvg==
x-amz-request-id: V8H3MY8GSGP80XTY
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 03 Feb 2023 13:23:33 GMT
age: 2294
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 14:01:48 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

murphyultralight.com/kh/Citadelebanka/kod.php

69.49.247.78

200 OK

11 kB

URL HTTP/1.1
murphyultralight.com/kh/Citadelebanka/kod.php
IP
69.49.247.78:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1373), with CRLF line terminators
Size
11 kB (10621 bytes)
Hash
f0859ae5bdf03ae50f37d1eae8b5613c
c09b06efa90121ed680172d4361c23d8c02d5759
292b350e77ffce87fc71a7b56ed789b1dece6934556bbd0895550a02ba39b1f6

Detections

Analyzer	Verdict	Alert
openphish	Citadele Banka
fortinet	Phishing

HTTP Headers

GET /kh/Citadelebanka/kod.php HTTP/1.1
Host: murphyultralight.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:47 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
8646907026a4faaaa185f99dc731493d
da1ee9b86575dd7b9494e5bd9377416ae1e34c30
bc6252e1320b508a2ec25204ef8dd577c1f8f148104341a6329fe5a33e1cc6c1

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3906
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:01:48 GMT
Last-Modified: Fri, 03 Feb 2023 12:56:43 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
8646907026a4faaaa185f99dc731493d
da1ee9b86575dd7b9494e5bd9377416ae1e34c30
bc6252e1320b508a2ec25204ef8dd577c1f8f148104341a6329fe5a33e1cc6c1

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6560
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:01:48 GMT
Last-Modified: Fri, 03 Feb 2023 12:12:28 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
8646907026a4faaaa185f99dc731493d
da1ee9b86575dd7b9494e5bd9377416ae1e34c30
bc6252e1320b508a2ec25204ef8dd577c1f8f148104341a6329fe5a33e1cc6c1

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6560
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:01:48 GMT
Last-Modified: Fri, 03 Feb 2023 12:12:28 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
8646907026a4faaaa185f99dc731493d
da1ee9b86575dd7b9494e5bd9377416ae1e34c30
bc6252e1320b508a2ec25204ef8dd577c1f8f148104341a6329fe5a33e1cc6c1

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2896
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:01:48 GMT
Last-Modified: Fri, 03 Feb 2023 13:13:32 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
8646907026a4faaaa185f99dc731493d
da1ee9b86575dd7b9494e5bd9377416ae1e34c30
bc6252e1320b508a2ec25204ef8dd577c1f8f148104341a6329fe5a33e1cc6c1

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2801
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:01:48 GMT
Etag: "63dc5a0a-1d7"
Last-Modified: Fri, 03 Feb 2023 13:15:07 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

online.citadele.lv/ibbf/js/inline-verrel-107_6_0.js

193.178.178.229

200 200

1.3 kB

URL HTTP/1.1
online.citadele.lv/ibbf/js/inline-verrel-107_6_0.js
IP
193.178.178.229:0
ASN
#16279 AS Citadele banka

File type
ASCII text, with very long lines (1323), with no line terminators
Size
1.3 kB (1323 bytes)
Hash
84a611e0a750055687cc6b2a8014a047
6eb5135d6439343a8438eef276815f4d1f40aba9
70d67e16582c01bcab3586df8d92cb28c35663a6ea9ebf6d89cf001be72507ad

HTTP Headers

GET /ibbf/js/inline-verrel-107_6_0.js HTTP/1.1
Host: online.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 200
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=5744D0F267A6518212CB7D5281614417.ibbf-venta1-node4; Path=/ibbf/; Secure; HttpOnly
Accept-Ranges: bytes
ETag: W/"1323-1672734812000"
Last-Modified: Tue, 03 Jan 2023 08:33:32 GMT
Content-Type: application/javascript
Content-Length: 1323
X-Content-Type-Options: nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive

online.citadele.lv/ibbf/js/views/forgotPassword-verrel-107_6_0.js

193.178.178.229

200 200

2.4 kB

URL HTTP/1.1
online.citadele.lv/ibbf/js/views/forgotPassword-verrel-107_6_0.js
IP
193.178.178.229:0
ASN
#16279 AS Citadele banka

File type
ASCII text, with very long lines (2431), with no line terminators
Size
2.4 kB (2431 bytes)
Hash
5ae2dab110a5bb532da1f5b8b8b3573f
40437617190cf20e6e505cbdc5fdfe2c7c395bba
b5fd36f52bf4d87bc62aec1731ce2f56239f26a6f03117d75ce644a79afe0dce

HTTP Headers

GET /ibbf/js/views/forgotPassword-verrel-107_6_0.js HTTP/1.1
Host: online.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 200
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=DC127F29DE6E0639C9B6A0842A0D5861.ibbf-venta1-node4; Path=/ibbf/; Secure; HttpOnly
Accept-Ranges: bytes
ETag: W/"2431-1672734812000"
Last-Modified: Tue, 03 Jan 2023 08:33:32 GMT
Content-Type: application/javascript
Content-Length: 2431
X-Content-Type-Options: nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive

online.citadele.lv/ibbf/js/tags/wwQtPMzdY-verrel-107_6_0.js

193.178.178.229

200 200

3.5 kB

URL HTTP/1.1
online.citadele.lv/ibbf/js/tags/wwQtPMzdY-verrel-107_6_0.js
IP
193.178.178.229:0
ASN
#16279 AS Citadele banka

File type
ASCII text, with very long lines (3541), with no line terminators
Size
3.5 kB (3541 bytes)
Hash
b2ac7afe2b067fd0c3a2214a8b8f53d4
b0c5ba03fd72dc185c0f238da992a2eda53a610b
f23b3762ecef168c22ef9f014903b9cbaf63b7221dc68b8f64f6e4493a516746

HTTP Headers

GET /ibbf/js/tags/wwQtPMzdY-verrel-107_6_0.js HTTP/1.1
Host: online.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 200
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=3F67E0B98107579ABB4B490320EC654D.ibbf-venta1-node4; Path=/ibbf/; Secure; HttpOnly
Accept-Ranges: bytes
ETag: W/"3541-1672734812000"
Last-Modified: Tue, 03 Jan 2023 08:33:32 GMT
Content-Type: application/javascript
Content-Length: 3541
X-Content-Type-Options: nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
bbeb609cbf32a8842bf96a124588e65e
40c0f548bcb714731f62df5a27cad21adef0463d
502c60a18a13b84598933731d182aafd4b83576bfc56451b36f9238c621a571d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:01:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

translate.googleapis.com/translate_static/css/translateelement.css

172.217.21.170

200 OK

3.6 kB

URL HTTP/2
translate.googleapis.com/translate_static/css/translateelement.css
IP
172.217.21.170:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (22967)
Size
3.6 kB (3632 bytes)
Hash
f7bf2121608909b56672e6398ac2335c
864ef3bac46b08ab6609fad23f00d5f09815647d
b9d3a8600d9b6edf9c71b793c42782282ecfb01e2026e0128608b949e91e152c

HTTP Headers

GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3632
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Feb 2023 13:54:43 GMT
expires: Fri, 03 Feb 2023 14:54:43 GMT
cache-control: public, max-age=3600
age: 425
last-modified: Mon, 09 Jan 2023 20:58:00 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

online.citadele.lv/ibbf/js/dependencies-verrel-107_6_0.js

193.178.178.229

200 200

95 kB

URL HTTP/1.1
online.citadele.lv/ibbf/js/dependencies-verrel-107_6_0.js
IP
193.178.178.229:0
ASN
#16279 AS Citadele banka

File type
Unicode text, UTF-8 text, with very long lines (56156)
Size
95 kB (94777 bytes)
Hash
fa710597a6ccfca2db8991feb42ca469
a9ca71ffa71a8c9e9ee64904aa3d2eeff45b0752
20584716a0c9a6c689ea764a65139fa93af1f4ec563f52dcfe8942f95c2f5c52

HTTP Headers

GET /ibbf/js/dependencies-verrel-107_6_0.js HTTP/1.1
Host: online.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 200
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=F7F06BB0DD9335DC706DBE1D5902A3D5.ibbf-venta1-node2; Path=/ibbf/; Secure; HttpOnly
Accept-Ranges: bytes
ETag: W/"94777-1672734812000"
Last-Modified: Tue, 03 Jan 2023 08:33:32 GMT
Content-Type: application/javascript
Content-Length: 94777
X-Content-Type-Options: nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive

online.citadele.lv/ibbf/js/ibbf-verrel-107_6_0.js

193.178.178.229

200 200

113 kB

URL HTTP/1.1
online.citadele.lv/ibbf/js/ibbf-verrel-107_6_0.js
IP
193.178.178.229:0
ASN
#16279 AS Citadele banka

File type
Unicode text, UTF-8 text, with very long lines (35585)
Size
113 kB (113180 bytes)
Hash
e80bc4391a0bc6edf2768840484fefd0
501f3d61c88d08773d8191ad907f0ef082b9a5c0
595e6aeafee37de0817760fab715360d1f80aa35ffee9f0f577c2b5d10c7bcf7

HTTP Headers

GET /ibbf/js/ibbf-verrel-107_6_0.js HTTP/1.1
Host: online.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 200
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=70077BE3A7D5A0E5012ED8D80B6851FB.ibbf-venta1-node4; Path=/ibbf/; Secure; HttpOnly
Accept-Ranges: bytes
ETag: W/"113180-1672734812000"
Last-Modified: Tue, 03 Jan 2023 08:33:32 GMT
Content-Type: application/javascript
Content-Length: 113180
X-Content-Type-Options: nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
bbeb609cbf32a8842bf96a124588e65e
40c0f548bcb714731f62df5a27cad21adef0463d
502c60a18a13b84598933731d182aafd4b83576bfc56451b36f9238c621a571d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:01:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

online.citadele.lv/ibbf/css/ibbf-verrel-107_6_0.css

193.178.178.229

200 200

158 kB

URL HTTP/1.1
online.citadele.lv/ibbf/css/ibbf-verrel-107_6_0.css
IP
193.178.178.229:0
ASN
#16279 AS Citadele banka

File type
ASCII text, with very long lines (24292)
Size
158 kB (158235 bytes)
Hash
d7ce92da6c10b2a6971c823f8492d175
fc163da272252200267246003c81e65df1e32b7a
b7415b08ee8a22b325226f5e7ed0fa4c8d75b40c431ce4f65242e9fd63dfcbd4

HTTP Headers

GET /ibbf/css/ibbf-verrel-107_6_0.css HTTP/1.1
Host: online.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 200
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=215F8F8A9F80FF87BEECDF9F1CF87BD1.ibbf-venta1-node4; Path=/ibbf/; Secure; HttpOnly
Accept-Ranges: bytes
ETag: W/"158235-1672734812000"
Last-Modified: Tue, 03 Jan 2023 08:33:32 GMT
Content-Type: text/css
Content-Length: 158235
X-Content-Type-Options: nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 03 Feb 2023 13:07:19 GMT
age: 3269
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.sectigo.com/

172.64.155.188

200 OK

472 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
172.64.155.188:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
654af5b7aae430e24b6bffc8a26a713c
9ed39e3a8b69df13244e24646f7bfa62dec1ed44
cdece0ef1f680c6ec6bd25e5616ba48384eef5a3632c4fce877a30cc232eb6b8

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:48 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 03 Feb 2023 09:26:20 GMT
Expires: Fri, 10 Feb 2023 09:26:19 GMT
Etag: "9ed39e3a8b69df13244e24646f7bfa62dec1ed44"
Cache-Control: max-age=587670,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793bb35d1b560b31-OSL

content.citadele.lv/nnsxpcuohckvd816.js?sn88w215nfg4sq99=aom4xb8t&z0wmsegk1e8jat9m=63f0229c-c7a6-41da-8fe1-574e7e611e1c

91.235.133.182

200 OK

13 kB

URL HTTP/1.1
content.citadele.lv/nnsxpcuohckvd816.js?sn88w215nfg4sq99=aom4xb8t&z0wmsegk1e8jat9m=63f0229c-c7a6-41da-8fe1-574e7e611e1c
IP
91.235.133.182:0
ASN
#30286 THM

File type
ASCII text, with very long lines (15506)
Size
13 kB (12723 bytes)
Hash
61a437663edbd563372fe73197cadaf5
4e87d760aee89cb99917be6180cf5972d00136fd
ede542523f3dc2bcc026c7a44a681849fb7db4e3de0a2066f6819f170ed579d7

HTTP Headers

GET /nnsxpcuohckvd816.js?sn88w215nfg4sq99=aom4xb8t&z0wmsegk1e8jat9m=63f0229c-c7a6-41da-8fe1-574e7e611e1c HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure; SameSite=None;
P3P: CP=IVAa PSAa
Content-Type: text/javascript;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=100
Transfer-Encoding: chunked

online.citadele.lv/ibbf/images/citadele/logo/logo-verrel-107_6_0.svg

193.178.178.229

200 200

5.3 kB

URL HTTP/1.1
online.citadele.lv/ibbf/images/citadele/logo/logo-verrel-107_6_0.svg
IP
193.178.178.229:0
ASN
#16279 AS Citadele banka

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (945)
Size
5.3 kB (5338 bytes)
Hash
20a6f62c9adb3d44bc988cc5c3192e56
0ea29b5fedf0da66adaa46d82e38f319e14b643e
d5794ec5af63437a244a70be18d8f9c8cfe16b0bef99494f33a26d90c8b0532d

HTTP Headers

GET /ibbf/images/citadele/logo/logo-verrel-107_6_0.svg HTTP/1.1
Host: online.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 200
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=F5BFCD152F92449A87BD38CACF93B7A0.ibbf-venta1-node2; Path=/ibbf/; Secure; HttpOnly
Accept-Ranges: bytes
ETag: W/"5338-1672734812000"
Last-Modified: Tue, 03 Jan 2023 08:33:32 GMT
Content-Type: image/svg+xml
Content-Length: 5338
X-Content-Type-Options: nosniff
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive

online.citadele.lv/ibbf/images/citadele/form-wizard-icons.png

193.178.178.229

200 200

274 B

URL HTTP/1.1
online.citadele.lv/ibbf/images/citadele/form-wizard-icons.png
IP
193.178.178.229:0
ASN
#16279 AS Citadele banka

File type
PNG image data, 105 x 35, 4-bit colormap, non-interlaced\012- data
Size
274 B (274 bytes)
Hash
91295294b7b334bc2269450a6a77b4ac
209972d034ee869eac56c18063fd1ecfefb76d6c
e21d1806506645c1deeb661bcdc121ead95ab62b2db1f57cae3e10397315ec05

HTTP Headers

GET /ibbf/images/citadele/form-wizard-icons.png HTTP/1.1
Host: online.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://online.citadele.lv/ibbf/css/ibbf-verrel-107_6_0.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 200
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=526E88CC5C7573B7C186FB8063663E00.ibbf-venta2-node9; Path=/ibbf/; Secure; HttpOnly
Accept-Ranges: bytes
ETag: W/"274-1672734812000"
Last-Modified: Tue, 03 Jan 2023 08:33:32 GMT
Content-Type: image/png
Content-Length: 274
X-Content-Type-Options: nosniff
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive

content.citadele.lv/9v7yes47asrb4wtj.js?m3eonqti9f4lmo17=aom4xb8t&1scbqqn1yefouone=63f0229c-c7a6-41da-8fe1-574e7e611e1c

91.235.133.182

200 OK

13 kB

URL HTTP/1.1
content.citadele.lv/9v7yes47asrb4wtj.js?m3eonqti9f4lmo17=aom4xb8t&1scbqqn1yefouone=63f0229c-c7a6-41da-8fe1-574e7e611e1c
IP
91.235.133.182:0
ASN
#30286 THM

File type
ASCII text, with very long lines (15506)
Size
13 kB (12733 bytes)
Hash
a7e76bc13ec497970760d2038efa4197
f9b8a436de731d6703050a7acce47881dcfc2e6c
62289ddb05724f7b896326820cd74d059385480d7f71edc179dd126962a58b44

HTTP Headers

GET /9v7yes47asrb4wtj.js?m3eonqti9f4lmo17=aom4xb8t&1scbqqn1yefouone=63f0229c-c7a6-41da-8fe1-574e7e611e1c HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/javascript;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=99
Transfer-Encoding: chunked

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11207
Expires: Fri, 03 Feb 2023 17:08:35 GMT
Date: Fri, 03 Feb 2023 14:01:48 GMT
Connection: keep-alive

online.citadele.lv/ibbf/icons/Material-Design-Iconic-Font.woff2

193.178.178.229

200 200

38 kB

URL HTTP/1.1
online.citadele.lv/ibbf/icons/Material-Design-Iconic-Font.woff2
IP
193.178.178.229:0
ASN
#16279 AS Citadele banka

File type
Web Open Font Format (Version 2), TrueType, length 38384, version 1.0\012- data
Size
38 kB (38384 bytes)
Hash
a4d31128b633bc0b1cc1f18a34fb3851
6ee4c79372c3fd679706306ede47e4b03cf53d60
e8eea96e29a7c0a72612ab85ca3229979666467a28349642c2176e7189a1a39c

HTTP Headers

GET /ibbf/icons/Material-Design-Iconic-Font.woff2 HTTP/1.1
Host: online.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://murphyultralight.com
Connection: keep-alive
Referer: https://online.citadele.lv/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 200
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=D66EEC1BA2BDB4291BEACCA52579793A.ibbf-venta1-node2; Path=/ibbf/; Secure; HttpOnly
Accept-Ranges: bytes
ETag: W/"38384-1672734812000"
Last-Modified: Tue, 03 Jan 2023 08:33:32 GMT
Content-Length: 38384
X-Content-Type-Options: nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive

online.citadele.lv/ibbf/fonts/OpenSans-Regular.otf

193.178.178.229

200 200

83 kB

URL HTTP/1.1
online.citadele.lv/ibbf/fonts/OpenSans-Regular.otf
IP
193.178.178.229:0
ASN
#16279 AS Citadele banka

File type
OpenType font data\012- data
Size
83 kB (83048 bytes)
Hash
038bbc76a68837f38eee8cd4de548b7a
fd63c80d7382e8a5865be23dc745e320f132719c
da4abc31cc0f97ec3c702091fb424c19a64dec7f51a29ae64a94ffb5f51cea75

HTTP Headers

GET /ibbf/fonts/OpenSans-Regular.otf HTTP/1.1
Host: online.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://murphyultralight.com
Connection: keep-alive
Referer: https://online.citadele.lv/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 200
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=6FC433D91D9D4B46569C69195284B2ED.ibbf-venta1-node4; Path=/ibbf/; Secure; HttpOnly
Accept-Ranges: bytes
ETag: W/"38592-1672734812000"
Last-Modified: Tue, 03 Jan 2023 08:33:32 GMT
Content-Type: application/x-font-otf
Content-Length: 38592
X-Content-Type-Options: nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive

online.citadele.lv/ibbf/images/citadele/favicon.ico

193.178.178.229

200 200

376 B

URL HTTP/1.1
online.citadele.lv/ibbf/images/citadele/favicon.ico
IP
193.178.178.229:0
ASN
#16279 AS Citadele banka

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size
376 B (376 bytes)
Hash
aadf29575e6981a24e847429bc4151d3
fb71b69a917c2690bfdd2330c725d346762d294b
7335bf08729041ef0dc164cdfd7a8d2c80d23837c83d4ea7b6977f825fa56235

HTTP Headers

GET /ibbf/images/citadele/favicon.ico HTTP/1.1
Host: online.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 200
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=896AAB9EEE686AA445632C02BA11A4AD.ibbf-venta1-node8; Path=/ibbf/; Secure; HttpOnly
Accept-Ranges: bytes
ETag: W/"376-1672734812000"
Last-Modified: Tue, 03 Jan 2023 08:33:32 GMT
Content-Type: image/x-icon
Content-Length: 376
X-Content-Type-Options: nosniff
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive

online.citadele.lv/ibbf/images/citadele/apple-touch-icon-144x144.png

193.178.178.229

200 200

2.0 kB

URL HTTP/1.1
online.citadele.lv/ibbf/images/citadele/apple-touch-icon-144x144.png
IP
193.178.178.229:0
ASN
#16279 AS Citadele banka

File type
PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced\012- data
Size
2.0 kB (2034 bytes)
Hash
1a22409e5631a20108614f089f7809bd
07631c3f8f916e1795119ca88abb22c3a7999e8e
b79bbedcf68527b99e8725c28538262bd8f6e0f422baf711be09b25b47f71847

HTTP Headers

GET /ibbf/images/citadele/apple-touch-icon-144x144.png HTTP/1.1
Host: online.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 200
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=3AAFBF4EA0D75EF743A16BEDB45AA2EB.ibbf-venta1-node4; Path=/ibbf/; Secure; HttpOnly
Accept-Ranges: bytes
ETag: W/"2034-1672734812000"
Last-Modified: Tue, 03 Jan 2023 08:33:32 GMT
Content-Type: image/png
Content-Length: 2034
X-Content-Type-Options: nosniff
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:01:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:01:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

online.citadele.lv/ibbf/fonts/OpenSans-Bold.otf

193.178.178.229

200 200

9.0 kB

URL HTTP/1.1
online.citadele.lv/ibbf/fonts/OpenSans-Bold.otf
IP
193.178.178.229:0
ASN
#16279 AS Citadele banka

File type
OpenType font data\012- data
Size
9.0 kB (9030 bytes)
Hash
5545ce3adf89b6d1b5923717b50d6ab2
401a74bac52e5bad3ff1f24e4a668971426e35ad
ee12cf1586230a80dcdf1b353864c434e70c55e0233dfbd4b05ad87227992db5

HTTP Headers

GET /ibbf/fonts/OpenSans-Bold.otf HTTP/1.1
Host: online.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://murphyultralight.com
Connection: keep-alive
Referer: https://online.citadele.lv/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 200
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=4BF3E38D149748FC6AC839A7CFD3FB9F.ibbf-venta2-node9; Path=/ibbf/; Secure; HttpOnly
Accept-Ranges: bytes
ETag: W/"40396-1672734812000"
Last-Modified: Tue, 03 Jan 2023 08:33:32 GMT
Content-Type: application/x-font-otf
Content-Length: 40396
X-Content-Type-Options: nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive

www.gstatic.com/images/branding/product/2x/translate_24dp.png

142.250.74.35

200 OK

1.8 kB

URL HTTP/2
www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Size
1.8 kB (1842 bytes)
Hash
c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82

HTTP Headers

GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://translate.googleapis.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 18:57:59 GMT
expires: Fri, 02 Feb 2024 18:57:59 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
age: 68629
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 14:01:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

content.citadele.lv/ULpnHRaXEOueT2Nd?67e7fad00fad6114=eQ65lLlLXdY1plK4j18Y6Q8zYIleiizK8m1bPhFED_rJa5Xih4ZCkR5Cm2KZkaohvztcR827lGHOmFpSuOY8anJJTKzJAzw8uGumtrgf2rDLRCBnIbu4ny7S5pF9d91oXWtm4rx2G8_Tows-evxHuPT2GvZNXWm_VznCdN0

91.235.133.182

200 OK

81 B

URL HTTP/1.1
content.citadele.lv/ULpnHRaXEOueT2Nd?67e7fad00fad6114=eQ65lLlLXdY1plK4j18Y6Q8zYIleiizK8m1bPhFED_rJa5Xih4ZCkR5Cm2KZkaohvztcR827lGHOmFpSuOY8anJJTKzJAzw8uGumtrgf2rDLRCBnIbu4ny7S5pF9d91oXWtm4rx2G8_Tows-evxHuPT2GvZNXWm_VznCdN0
IP
91.235.133.182:0
ASN
#30286 THM

File type
PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Size
81 B (81 bytes)
Hash
1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743

HTTP Headers

GET /ULpnHRaXEOueT2Nd?67e7fad00fad6114=eQ65lLlLXdY1plK4j18Y6Q8zYIleiizK8m1bPhFED_rJa5Xih4ZCkR5Cm2KZkaohvztcR827lGHOmFpSuOY8anJJTKzJAzw8uGumtrgf2rDLRCBnIbu4ny7S5pF9d91oXWtm4rx2G8_Tows-evxHuPT2GvZNXWm_VznCdN0 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 81
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: image/png

content.citadele.lv/dZCu0r8Ml4uobWJL?ab5fc5767231d692=LQMV5rXkXhkcmuv0Bu-V37I2Sn2ehSfps6z4xAUaFBBL5kyTcrOYDPwpHIUcmo5ao2RnF5z1afN4g88T50QSbiW83D2N3Lb6V-WZKv382vfT8bze99b5CYlhXJ8fVQ9CKT4E1am8C48C1vMc86cay8Qq6CDyWE3tiVC_DNU

91.235.133.182

200 OK

81 B

URL HTTP/1.1
content.citadele.lv/dZCu0r8Ml4uobWJL?ab5fc5767231d692=LQMV5rXkXhkcmuv0Bu-V37I2Sn2ehSfps6z4xAUaFBBL5kyTcrOYDPwpHIUcmo5ao2RnF5z1afN4g88T50QSbiW83D2N3Lb6V-WZKv382vfT8bze99b5CYlhXJ8fVQ9CKT4E1am8C48C1vMc86cay8Qq6CDyWE3tiVC_DNU
IP
91.235.133.182:0
ASN
#30286 THM

File type
PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Size
81 B (81 bytes)
Hash
1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743

HTTP Headers

GET /dZCu0r8Ml4uobWJL?ab5fc5767231d692=LQMV5rXkXhkcmuv0Bu-V37I2Sn2ehSfps6z4xAUaFBBL5kyTcrOYDPwpHIUcmo5ao2RnF5z1afN4g88T50QSbiW83D2N3Lb6V-WZKv382vfT8bze99b5CYlhXJ8fVQ9CKT4E1am8C48C1vMc86cay8Qq6CDyWE3tiVC_DNU HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 81
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/png

content.citadele.lv/4y3XTGFU0K_4CPbT?8d1e2a4ab9ccd0a7=CS6mT40NmXXRA3oeR63XuycZEqd6dyLsKM3eFdFKr-om21VLseWyb0x9XS8zNrDVL_xfR0zsi8heGYcpq7m6LpDE6fZlhzztMnMaNY5R6XkPPnwc7zfDQnWqnklk70Dtdmv5yhYUEe7MJzovZjtzzNlxjElpDFzKwWo-nIU

91.235.133.182

200 OK

81 B

URL HTTP/1.1
content.citadele.lv/4y3XTGFU0K_4CPbT?8d1e2a4ab9ccd0a7=CS6mT40NmXXRA3oeR63XuycZEqd6dyLsKM3eFdFKr-om21VLseWyb0x9XS8zNrDVL_xfR0zsi8heGYcpq7m6LpDE6fZlhzztMnMaNY5R6XkPPnwc7zfDQnWqnklk70Dtdmv5yhYUEe7MJzovZjtzzNlxjElpDFzKwWo-nIU
IP
91.235.133.182:0
ASN
#30286 THM

File type
PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Size
81 B (81 bytes)
Hash
1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743

HTTP Headers

GET /4y3XTGFU0K_4CPbT?8d1e2a4ab9ccd0a7=CS6mT40NmXXRA3oeR63XuycZEqd6dyLsKM3eFdFKr-om21VLseWyb0x9XS8zNrDVL_xfR0zsi8heGYcpq7m6LpDE6fZlhzztMnMaNY5R6XkPPnwc7zfDQnWqnklk70Dtdmv5yhYUEe7MJzovZjtzzNlxjElpDFzKwWo-nIU HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 81
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/png

content.citadele.lv/6YaHUVOK5usGNG2-?af83b029007a70c4=U3m6X-G-ofwQ_hkIYSurulkY_TvExScVgv9F2CMSrHUq4j9znjFlhKLBXS-DKdwM9_CQ9_jBFljWBtOP0f4HAaizztx7bScLacUAHIfDDjvc7YgKAHf6242hUF549otxVjjRUw7o7RylQmbRt2kcLentCgyX2J9sjDLqBCU

91.235.133.182

200 OK

81 B

URL HTTP/1.1
content.citadele.lv/6YaHUVOK5usGNG2-?af83b029007a70c4=U3m6X-G-ofwQ_hkIYSurulkY_TvExScVgv9F2CMSrHUq4j9znjFlhKLBXS-DKdwM9_CQ9_jBFljWBtOP0f4HAaizztx7bScLacUAHIfDDjvc7YgKAHf6242hUF549otxVjjRUw7o7RylQmbRt2kcLentCgyX2J9sjDLqBCU
IP
91.235.133.182:0
ASN
#30286 THM

File type
PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Size
81 B (81 bytes)
Hash
1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743

HTTP Headers

GET /6YaHUVOK5usGNG2-?af83b029007a70c4=U3m6X-G-ofwQ_hkIYSurulkY_TvExScVgv9F2CMSrHUq4j9znjFlhKLBXS-DKdwM9_CQ9_jBFljWBtOP0f4HAaizztx7bScLacUAHIfDDjvc7YgKAHf6242hUF549otxVjjRUw7o7RylQmbRt2kcLentCgyX2J9sjDLqBCU HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 81
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/png

content.citadele.lv/9KImhUX8j3r4hx5L?fc7f73dd2320bde4=VhyjrWJcrbhYKcwFy8OMVnLtraLurm2jl525F5iiYsbzLZECKn7uazbiu8iF-Ar9KDPTRh6O6yRX5lGjssQB3TmnbaVQWtKkhMM8fvkmOkuxg6pOjzKwLChaIzfjDyr717HxRwYlTcr1ZnQlpb50fn9zyBrtiXNz97evENF885l00CSOnK0Kxc9HIi4lS4obNvb-EZLrt5Sc1WrB&jb=3730242668716777354e6b6e7770266a736f35446b6e757026687362773d44697265666d7a246873603f4e6b7a67646f7a2d323031303d

91.235.133.182

200 OK

56 kB

URL HTTP/1.1
content.citadele.lv/9KImhUX8j3r4hx5L?fc7f73dd2320bde4=VhyjrWJcrbhYKcwFy8OMVnLtraLurm2jl525F5iiYsbzLZECKn7uazbiu8iF-Ar9KDPTRh6O6yRX5lGjssQB3TmnbaVQWtKkhMM8fvkmOkuxg6pOjzKwLChaIzfjDyr717HxRwYlTcr1ZnQlpb50fn9zyBrtiXNz97evENF885l00CSOnK0Kxc9HIi4lS4obNvb-EZLrt5Sc1WrB&jb=3730242668716777354e6b6e7770266a736f35446b6e757026687362773d44697265666d7a246873603f4e6b7a67646f7a2d323031303d
IP
91.235.133.182:0
ASN
#30286 THM

File type
ASCII text, with very long lines (8738)
Size
56 kB (56086 bytes)
Hash
295d736fa5276cd02e6585e2b35f0338
0a02f7328db5210ffe9664db286145c77d527eed
450289cbacff30031cca983aa6eabf9f358ba91acd0345247634f703da0781a2

HTTP Headers

GET /9KImhUX8j3r4hx5L?fc7f73dd2320bde4=VhyjrWJcrbhYKcwFy8OMVnLtraLurm2jl525F5iiYsbzLZECKn7uazbiu8iF-Ar9KDPTRh6O6yRX5lGjssQB3TmnbaVQWtKkhMM8fvkmOkuxg6pOjzKwLChaIzfjDyr717HxRwYlTcr1ZnQlpb50fn9zyBrtiXNz97evENF885l00CSOnK0Kxc9HIi4lS4obNvb-EZLrt5Sc1WrB&jb=3730242668716777354e6b6e7770266a736f35446b6e757026687362773d44697265666d7a246873603f4e6b7a67646f7a2d323031303d HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
tmx-nonce: 5927d1a1c998a260
Content-Type: text/javascript;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=97
Transfer-Encoding: chunked

content.citadele.lv/Wve-s7cOmQFNpnmQ?e0a73e48b9366abd=j8bjMR_-BYjmZXruxBwPf_btxnU4Gl2ENGG_QXSjpYfk3cHmq_QGX8H18_iSxrOBmLFX2a4hHOohJKFlAbu07WM5TP50w61TlsHaDJWbvLAUXKhT6DEXQ5FhQ7_KNzQkTQnKni1oo-hVZUkMrWMYAr-_YxzlBrsblpc6M2jS7VZXxAK-5NXn_ggO07b1kocQoEVjSa5BjqS3VFhI&jb=3730242668716777354e6b6e7770266a736f35446b6e757026687362773d44697265666d7a246873603f4e6b7a67646f7a2d323031303d

91.235.133.182

200 OK

56 kB

URL HTTP/1.1
content.citadele.lv/Wve-s7cOmQFNpnmQ?e0a73e48b9366abd=j8bjMR_-BYjmZXruxBwPf_btxnU4Gl2ENGG_QXSjpYfk3cHmq_QGX8H18_iSxrOBmLFX2a4hHOohJKFlAbu07WM5TP50w61TlsHaDJWbvLAUXKhT6DEXQ5FhQ7_KNzQkTQnKni1oo-hVZUkMrWMYAr-_YxzlBrsblpc6M2jS7VZXxAK-5NXn_ggO07b1kocQoEVjSa5BjqS3VFhI&jb=3730242668716777354e6b6e7770266a736f35446b6e757026687362773d44697265666d7a246873603f4e6b7a67646f7a2d323031303d
IP
91.235.133.182:0
ASN
#30286 THM

File type
ASCII text, with very long lines (17788)
Size
56 kB (56073 bytes)
Hash
f6f167ed677ba0404a2fb9337e3d3f21
b7b8e9134f5baa2d3432e0e86d9bee22d8734232
cdf27c263cf69c7b49bf27d5a551fd3a913b5d4c732750127b256dc021ddc948

HTTP Headers

GET /Wve-s7cOmQFNpnmQ?e0a73e48b9366abd=j8bjMR_-BYjmZXruxBwPf_btxnU4Gl2ENGG_QXSjpYfk3cHmq_QGX8H18_iSxrOBmLFX2a4hHOohJKFlAbu07WM5TP50w61TlsHaDJWbvLAUXKhT6DEXQ5FhQ7_KNzQkTQnKni1oo-hVZUkMrWMYAr-_YxzlBrsblpc6M2jS7VZXxAK-5NXn_ggO07b1kocQoEVjSa5BjqS3VFhI&jb=3730242668716777354e6b6e7770266a736f35446b6e757026687362773d44697265666d7a246873603f4e6b7a67646f7a2d323031303d HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
tmx-nonce: 728776004e55613c
Content-Type: text/javascript;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=100
Transfer-Encoding: chunked

91.235.133.182

204 No Content

0 B

URL HTTP/1.1
content.citadele.lv/uJfyFJxv8FYAvkwv?fba5e046585492c6=vzYaRNDX7Dk7rj-kAqXj55egWZMuOrxitlQWgp8vTL4NESsy9t90KC3IZWC_kv_MmlIXAtWt_yOttX8N1cjFI0FWXJ7zV2wrze10pMTbYd8ilAsZ0gGiyKXcyJd97iVBsMp0SD_dn9VkWbks47xlnlre-OY&jb=3134246c7163353b3c643234333c32666134693c6361336a633b373737373136633138643a6066
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /uJfyFJxv8FYAvkwv?fba5e046585492c6=vzYaRNDX7Dk7rj-kAqXj55egWZMuOrxitlQWgp8vTL4NESsy9t90KC3IZWC_kv_MmlIXAtWt_yOttX8N1cjFI0FWXJ7zV2wrze10pMTbYd8ilAsZ0gGiyKXcyJd97iVBsMp0SD_dn9VkWbks47xlnlre-OY&jb=3134246c7163353b3c643234333c32666134693c6361336a633b373737373136633138643a6066 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 204 No Content
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/javascript

content.citadele.lv/UzBWWmeTV0CWxzpI?1773e29a3a00158c=tcoRhVzEn2kktlk7EK4V_NDDPUTy5_8dQka3SU-ody_UrQXjs4MZfYcCl5zQn1p_BvtKtcJ7l31U-d4ZawYELmSn03i5hXa5-BNvZrghM1Y8Gaz1hkFP2TXU-uoOKhB9DrDEB2UaFA9WbDVRJHQqL9PwfvKRiMx-dZTslwvRLfJlkSDW27yYNDgd3vwDDnbDe0QBtKK8PxpeclssnT4

91.235.133.182

200 OK

13 kB

URL HTTP/1.1
content.citadele.lv/UzBWWmeTV0CWxzpI?1773e29a3a00158c=tcoRhVzEn2kktlk7EK4V_NDDPUTy5_8dQka3SU-ody_UrQXjs4MZfYcCl5zQn1p_BvtKtcJ7l31U-d4ZawYELmSn03i5hXa5-BNvZrghM1Y8Gaz1hkFP2TXU-uoOKhB9DrDEB2UaFA9WbDVRJHQqL9PwfvKRiMx-dZTslwvRLfJlkSDW27yYNDgd3vwDDnbDe0QBtKK8PxpeclssnT4
IP
91.235.133.182:0
ASN
#30286 THM

File type
HTML document text\012- HTML document, ASCII text, with very long lines (15506)
Size
13 kB (13359 bytes)
Hash
216d2b035b3e4e127eb28acf1a8e7512
3cb06a52dddcef342e282076ed5cd1164cc5dff6
a65c19ecd38afa792931d40a116dd16b886c108572fc41502a4f99e3b72c42bc

HTTP Headers

GET /UzBWWmeTV0CWxzpI?1773e29a3a00158c=tcoRhVzEn2kktlk7EK4V_NDDPUTy5_8dQka3SU-ody_UrQXjs4MZfYcCl5zQn1p_BvtKtcJ7l31U-d4ZawYELmSn03i5hXa5-BNvZrghM1Y8Gaz1hkFP2TXU-uoOKhB9DrDEB2UaFA9WbDVRJHQqL9PwfvKRiMx-dZTslwvRLfJlkSDW27yYNDgd3vwDDnbDe0QBtKK8PxpeclssnT4 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=96
Transfer-Encoding: chunked

91.235.133.182

204 No Content

0 B

URL HTTP/1.1
content.citadele.lv/uJfyFJxv8FYAvkwv?fba5e046585492c6=vzYaRNDX7Dk7rj-kAqXj55egWZMuOrxitlQWgp8vTL4NESsy9t90KC3IZWC_kv_MmlIXAtWt_yOttX8N1cjFI0FWXJ7zV2wrze10pMTbYd8ilAsZ0gGiyKXcyJd97iVBsMp0SD_dn9VkWbks47xlnlre-OY&jd=373724266864663f3f2468666a35386431623c3f6338653e30346535336264376537326363336437603a30316d67246a647c6e3d303a3f3a3837
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /uJfyFJxv8FYAvkwv?fba5e046585492c6=vzYaRNDX7Dk7rj-kAqXj55egWZMuOrxitlQWgp8vTL4NESsy9t90KC3IZWC_kv_MmlIXAtWt_yOttX8N1cjFI0FWXJ7zV2wrze10pMTbYd8ilAsZ0gGiyKXcyJd97iVBsMp0SD_dn9VkWbks47xlnlre-OY&jd=373724266864663f3f2468666a35386431623c3f6338653e30346535336264376537326363336437603a30316d67246a647c6e3d303a3f3a3837 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 204 No Content
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=95
Connection: Keep-Alive
Content-Type: text/javascript

content.citadele.lv/fp/clear.png

91.235.133.182

200 OK

81 B

URL HTTP/1.1
content.citadele.lv/fp/clear.png
IP
91.235.133.182:0
ASN
#30286 THM

File type
PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Size
81 B (81 bytes)
Hash
1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743

HTTP Headers

GET /fp/clear.png HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*, aom4xb8t/5927d1a1c998a26063f0229c-c7a6-41da-8fe1-574e7e611e1c
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://murphyultralight.com
Connection: keep-alive
Referer: https://murphyultralight.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Fri, 03 Feb 2023 14:01:49 GMT
Expires: Wed, 02 Feb 2028 14:01:49 GMT
Etag: 49f654e9ac154b3ea3bea66362c5eba1
Cache-Control: private, must-revalidate, max-age=0
Access-Control-Allow-Origin: https://murphyultralight.com
Content-Length: 81
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/png

content.citadele.lv/YcR0fwZIGISd1nnj?fdd272cab843cd82=-52yQaSdorxp9JcEEiH0aYZ55iC-gnovirKgAKg5p4Loo1vjIwAztEgIDhZg6TYAC-cAXHsM9fIbOLATa1BFwiIuhTreA83sGve36Mtunw5UVVOlEML_nosLKvzqET9ZE84zigMz7GJ47IYPlEXcADmkEU-Yj-zckBJpejmf5Ccx7EUgAxlcciP_RDZos25Eng1VYNMoT70Z6hoOA4Ax

91.235.133.182

200 OK

14 kB

URL HTTP/1.1
content.citadele.lv/YcR0fwZIGISd1nnj?fdd272cab843cd82=-52yQaSdorxp9JcEEiH0aYZ55iC-gnovirKgAKg5p4Loo1vjIwAztEgIDhZg6TYAC-cAXHsM9fIbOLATa1BFwiIuhTreA83sGve36Mtunw5UVVOlEML_nosLKvzqET9ZE84zigMz7GJ47IYPlEXcADmkEU-Yj-zckBJpejmf5Ccx7EUgAxlcciP_RDZos25Eng1VYNMoT70Z6hoOA4Ax
IP
91.235.133.182:0
ASN
#30286 THM

File type
HTML document text\012- HTML document, ASCII text, with very long lines (15506)
Size
14 kB (13810 bytes)
Hash
6819f8523bcedc79cb26d88017770897
40f04db93f5d45d171f2120a40898b3bfbbd3871
3957c1bedc41fcfcaa574b3f5c2724ee029a04b2e1fb96c76879f80fbdb5ceb0

HTTP Headers

GET /YcR0fwZIGISd1nnj?fdd272cab843cd82=-52yQaSdorxp9JcEEiH0aYZ55iC-gnovirKgAKg5p4Loo1vjIwAztEgIDhZg6TYAC-cAXHsM9fIbOLATa1BFwiIuhTreA83sGve36Mtunw5UVVOlEML_nosLKvzqET9ZE84zigMz7GJ47IYPlEXcADmkEU-Yj-zckBJpejmf5Ccx7EUgAxlcciP_RDZos25Eng1VYNMoT70Z6hoOA4Ax HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=98
Transfer-Encoding: chunked

content.citadele.lv/uJfyFJxv8FYAvkwv?fba5e046585492c6=vzYaRNDX7Dk7rj-kAqXj55egWZMuOrxitlQWgp8vTL4NESsy9t90KC3IZWC_kv_MmlIXAtWt_yOttX8N1cjFI0FWXJ7zV2wrze10pMTbYd8ilAsZ0gGiyKXcyJd97iVBsMp0SD_dn9VkWbks47xlnlre-OY&ja=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&jb=333331266e73354f67786b6c6e6925324635263827323020576b6e646d77712532304e5627303231322c38273b402732325f696e36342d3b4025323878343425314227323072762731433330372c382b2d303247676b6b6f25324e3a3231303831323125303044697265666d7a27304633323d2c38

91.235.133.182

204 204

0 B

URL HTTP/1.1
content.citadele.lv/uJfyFJxv8FYAvkwv?fba5e046585492c6=vzYaRNDX7Dk7rj-kAqXj55egWZMuOrxitlQWgp8vTL4NESsy9t90KC3IZWC_kv_MmlIXAtWt_yOttX8N1cjFI0FWXJ7zV2wrze10pMTbYd8ilAsZ0gGiyKXcyJd97iVBsMp0SD_dn9VkWbks47xlnlre-OY&ja=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&jb=333331266e73354f67786b6c6e6925324635263827323020576b6e646d77712532304e5627303231322c38273b402732325f696e36342d3b4025323878343425314227323072762731433330372c382b2d303247676b6b6f25324e3a3231303831323125303044697265666d7a27304633323d2c38
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /uJfyFJxv8FYAvkwv?fba5e046585492c6=vzYaRNDX7Dk7rj-kAqXj55egWZMuOrxitlQWgp8vTL4NESsy9t90KC3IZWC_kv_MmlIXAtWt_yOttX8N1cjFI0FWXJ7zV2wrze10pMTbYd8ilAsZ0gGiyKXcyJd97iVBsMp0SD_dn9VkWbks47xlnlre-OY&ja=34303326246135322e783f30246e3d31323838703330323c2663663d33323a3078313032302471787b3f387a382466707035312c313230382e31303a342e31323a302e313030322e33303a302e3b3b3b2433303832243130323424382e30267b63663d3236266e683d6874767271273343273a442d30446d777a70687975647c70616c61676a742e616f6f2532466b6a273044436b7669666d6e676263666b6125324e636d642e7868722664703d2468683d383b373760363b663c3731603333603935313735696b6736616a363a62346336246a736f3d4e6b6c777824687b6035446b72676e6f782532383932352662736d753d4e696c7578266a7160773f466b706d64677a246e6a6b3d313626666576703d3826767a643f555643266d61766a703f323a3b3e60303a6130356d626134646e693a626130613439313b643463636132323361373667333030693263396631346161343c386633343c3660356636393226703d706e77656b6e5d6464637b6a2735476e616c736529786e7567616e5d77696c646d77735f6d67666b635f726e697b6d702735476e616c736529786e7567616e5d61646d62675f6163726d6063762537476e636471672172647567696e577977696363746b6d6527354766616c736723726e75656b665d7b6a6d63697f617665253d4d64616c7b6523706c77676b6e5f7265636e726e617b677a273d4764616e7b6521706c7d6f6b6e5f7e6c615f706e617b657225354764636e736723786e7d656b6e5d6c6576616c7e7a2735456e616e736523706e7567696e5d7174655f746b6d756d702735476e616c736529786e7567616e5d6a61746127354566616e71672463616635333b34303430&jb=333331266e73354f67786b6c6e6925324635263827323020576b6e646d77712532304e5627303231322c38273b402732325f696e36342d3b4025323878343425314227323072762731433330372c382b2d303247676b6b6f25324e3a3231303831323125303044697265666d7a27304633323d2c38 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 204 204
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Content-Type: text/javascript;charset=UTF-8
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive

content.citadele.lv/fp/clear.png

91.235.133.182

304 Not Modified

0 B

URL HTTP/1.1
content.citadele.lv/fp/clear.png
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /fp/clear.png HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*, aom4xb8t/728776004e55613c63f0229c-c7a6-41da-8fe1-574e7e611e1c
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://murphyultralight.com
Connection: keep-alive
Referer: https://murphyultralight.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Fri, 03 Feb 2023 14:01:49 GMT
If-None-Match: 49f654e9ac154b3ea3bea66362c5eba1

HTTP/1.1 304 Not Modified
Date: Fri, 03 Feb 2023 14:01:49 GMT
Access-Control-Allow-Origin: *
Server: Apache
Connection: Keep-Alive
Keep-Alive: timeout=2, max=99

content.citadele.lv/2g9Geq4BYLj-FvaU?9da0073d23be5d5d=e1tPx1qxqUP9wDGqTOskqqhz-MNjng5BOtwMjKgewbrHlm_wc1z0MLAysPc-tuHlCqisuDfhg6Di1P3ydiseK-ZfNqM3nwOVrTFD91J3lsMvWjtGPax9vzc62uPSdz9HjYYBxbZOpb3eAPTopIAE2r7cQnxopKOxKoznKUD4FdvzlEzZ10FJIL2fF_cYlIt_aZK1yfqjxO6QchSbaxw

91.235.133.182

200 OK

14 kB

URL HTTP/1.1
content.citadele.lv/2g9Geq4BYLj-FvaU?9da0073d23be5d5d=e1tPx1qxqUP9wDGqTOskqqhz-MNjng5BOtwMjKgewbrHlm_wc1z0MLAysPc-tuHlCqisuDfhg6Di1P3ydiseK-ZfNqM3nwOVrTFD91J3lsMvWjtGPax9vzc62uPSdz9HjYYBxbZOpb3eAPTopIAE2r7cQnxopKOxKoznKUD4FdvzlEzZ10FJIL2fF_cYlIt_aZK1yfqjxO6QchSbaxw
IP
91.235.133.182:0
ASN
#30286 THM

File type
HTML document text\012- HTML document, ASCII text, with very long lines (15506)
Size
14 kB (13908 bytes)
Hash
28f3db968dd163b08afe5a9837d0ca60
1baa64f3dbcab39bd96cf0bc22e3b7087d623db6
6d291b9aa78205fdfcbcdb28a80af37fb49ddf3b83943123b9a2070443f2e1d8

HTTP Headers

GET /2g9Geq4BYLj-FvaU?9da0073d23be5d5d=e1tPx1qxqUP9wDGqTOskqqhz-MNjng5BOtwMjKgewbrHlm_wc1z0MLAysPc-tuHlCqisuDfhg6Di1P3ydiseK-ZfNqM3nwOVrTFD91J3lsMvWjtGPax9vzc62uPSdz9HjYYBxbZOpb3eAPTopIAE2r7cQnxopKOxKoznKUD4FdvzlEzZ10FJIL2fF_cYlIt_aZK1yfqjxO6QchSbaxw HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=94
Transfer-Encoding: chunked

91.235.133.182

204 No Content

0 B

URL HTTP/1.1
content.citadele.lv/u0VOSA17x-9Nxcdn?970d83fe521a37a4=q_b99NbI8dGV4cSIOTO3eot2Emi78ngif8-l2bZrjytq_zI9wFfbAAmQLGHmU9Id_jnX9lvEtbwPR1acTnFTo4SHfVjUUOPAIMhg61opi08EeeaSXLx-TxfbLZAvW0m0eiVo6GNXl4cOebstzhZuOQyTGv0&jb=3134246c7163353b3c643234333c32666134693c6361336a633b373737373136633138643a6066
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /u0VOSA17x-9Nxcdn?970d83fe521a37a4=q_b99NbI8dGV4cSIOTO3eot2Emi78ngif8-l2bZrjytq_zI9wFfbAAmQLGHmU9Id_jnX9lvEtbwPR1acTnFTo4SHfVjUUOPAIMhg61opi08EeeaSXLx-TxfbLZAvW0m0eiVo6GNXl4cOebstzhZuOQyTGv0&jb=3134246c7163353b3c643234333c32666134693c6361336a633b373737373136633138643a6066 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 204 No Content
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: text/javascript

91.235.133.182

204 No Content

0 B

URL HTTP/1.1
content.citadele.lv/u0VOSA17x-9Nxcdn?970d83fe521a37a4=q_b99NbI8dGV4cSIOTO3eot2Emi78ngif8-l2bZrjytq_zI9wFfbAAmQLGHmU9Id_jnX9lvEtbwPR1acTnFTo4SHfVjUUOPAIMhg61opi08EeeaSXLx-TxfbLZAvW0m0eiVo6GNXl4cOebstzhZuOQyTGv0&jd=373724266864663f3f2468666a35386431623c3f6338653e30346535336264376537326363336437603a30316d67246a647c6e3d303a393a3837
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /u0VOSA17x-9Nxcdn?970d83fe521a37a4=q_b99NbI8dGV4cSIOTO3eot2Emi78ngif8-l2bZrjytq_zI9wFfbAAmQLGHmU9Id_jnX9lvEtbwPR1acTnFTo4SHfVjUUOPAIMhg61opi08EeeaSXLx-TxfbLZAvW0m0eiVo6GNXl4cOebstzhZuOQyTGv0&jd=373724266864663f3f2468666a35386431623c3f6338653e30346535336264376537326363336437603a30316d67246a647c6e3d303a393a3837 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 204 No Content
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/javascript

content.citadele.lv/u0VOSA17x-9Nxcdn?970d83fe521a37a4=q_b99NbI8dGV4cSIOTO3eot2Emi78ngif8-l2bZrjytq_zI9wFfbAAmQLGHmU9Id_jnX9lvEtbwPR1acTnFTo4SHfVjUUOPAIMhg61opi08EeeaSXLx-TxfbLZAvW0m0eiVo6GNXl4cOebstzhZuOQyTGv0&ja=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&jb=333331266e73354f67786b6c6e6925324635263827323020576b6e646d77712532304e5627303231322c38273b402732325f696e36342d3b4025323878343425314227323072762731433330372c382b2d303247676b6b6f25324e3a3231303831323125303044697265666d7a27304633323d2c38

91.235.133.182

204 204

0 B

URL HTTP/1.1
content.citadele.lv/u0VOSA17x-9Nxcdn?970d83fe521a37a4=q_b99NbI8dGV4cSIOTO3eot2Emi78ngif8-l2bZrjytq_zI9wFfbAAmQLGHmU9Id_jnX9lvEtbwPR1acTnFTo4SHfVjUUOPAIMhg61opi08EeeaSXLx-TxfbLZAvW0m0eiVo6GNXl4cOebstzhZuOQyTGv0&ja=34303326246135322e783f30246e3d31323838703330323c2663663d33323a3078313032302471787b3f387a382466707035312c313230382e31303a342e31323a302e313030322e33303a302e3b3b3b2433303832243130323424382e30267b63663d3236266e683d6874767271273343273a442d30446d777a70687975647c70616c61676a742e616f6f2532466b6a273044436b7669666d6e676263666b6125324e636d642e7868722664703d2468683d383b373760363b663c3731603333603935313735696b6736616a363a62346336246a736f3d4e6b6c777824687b6035446b72676e6f782532383932352662736d753d4e696c7578266a7160773f466b706d64677a246e6a6b3d313626666576703d3826767a643f555643266d61766a703f323a3b3e60303a6130356d626134646e693a626130613439313b643463636132323361373667333030693263396631346161343c386633343c3660356636393226703d706e77656b6e5d6464637b6a2735476e616c736529786e7567616e5d77696c646d77735f6d67666b635f726e697b6d702735476e616c736529786e7567616e5d61646d62675f6163726d6063762537476e636471672172647567696e577977696363746b6d6527354766616c736723726e75656b665d7b6a6d63697f617665253d4d64616c7b6523706c77676b6e5f7265636e726e617b677a273d4764616e7b6521706c7d6f6b6e5f7e6c615f706e617b657225354764636e736723786e7d656b6e5d6c6576616c7e7a2735456e616e736523706e7567696e5d7174655f746b6d756d702735476e616c736529786e7567616e5d6a61746127354566616e71672463616635333b36313636&jb=333331266e73354f67786b6c6e6925324635263827323020576b6e646d77712532304e5627303231322c38273b402732325f696e36342d3b4025323878343425314227323072762731433330372c382b2d303247676b6b6f25324e3a3231303831323125303044697265666d7a27304633323d2c38
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /u0VOSA17x-9Nxcdn?970d83fe521a37a4=q_b99NbI8dGV4cSIOTO3eot2Emi78ngif8-l2bZrjytq_zI9wFfbAAmQLGHmU9Id_jnX9lvEtbwPR1acTnFTo4SHfVjUUOPAIMhg61opi08EeeaSXLx-TxfbLZAvW0m0eiVo6GNXl4cOebstzhZuOQyTGv0&ja=34303326246135322e783f30246e3d31323838703330323c2663663d33323a3078313032302471787b3f387a382466707035312c313230382e31303a342e31323a302e313030322e33303a302e3b3b3b2433303832243130323424382e30267b63663d3236266e683d6874767271273343273a442d30446d777a70687975647c70616c61676a742e616f6f2532466b6a273044436b7669666d6e676263666b6125324e636d642e7868722664703d2468683d383b373760363b663c3731603333603935313735696b6736616a363a62346336246a736f3d4e6b6c777824687b6035446b72676e6f782532383932352662736d753d4e696c7578266a7160773f466b706d64677a246e6a6b3d313626666576703d3826767a643f555643266d61766a703f323a3b3e60303a6130356d626134646e693a626130613439313b643463636132323361373667333030693263396631346161343c386633343c3660356636393226703d706e77656b6e5d6464637b6a2735476e616c736529786e7567616e5d77696c646d77735f6d67666b635f726e697b6d702735476e616c736529786e7567616e5d61646d62675f6163726d6063762537476e636471672172647567696e577977696363746b6d6527354766616c736723726e75656b665d7b6a6d63697f617665253d4d64616c7b6523706c77676b6e5f7265636e726e617b677a273d4764616e7b6521706c7d6f6b6e5f7e6c615f706e617b657225354764636e736723786e7d656b6e5d6c6576616c7e7a2735456e616e736523706e7567696e5d7174655f746b6d756d702735476e616c736529786e7567616e5d6a61746127354566616e71672463616635333b36313636&jb=333331266e73354f67786b6c6e6925324635263827323020576b6e646d77712532304e5627303231322c38273b402732325f696e36342d3b4025323878343425314227323072762731433330372c382b2d303247676b6b6f25324e3a3231303831323125303044697265666d7a27304633323d2c38 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 204 204
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Content-Type: text/javascript;charset=UTF-8
Keep-Alive: timeout=2, max=93
Connection: Keep-Alive

content.citadele.lv/0bUEzxBse9FQy9Uf?a222248910a5bbf0=sez7NzafKImCFBGhB5-GQAOGD0GxqAex2J8nxhlZ2SwHynj9a2owWsCWUUL3uHgoH5dSNHjFAE0OxVM1n39xNgzY1rO-w27vcKbZA0JydEJ87981ZI2KAxy-ydh1icFkwTiWWa4e8P4Pe_jDKnS4cNiNlQUJWYKeAXzHfwdbkDNkTW4TAcjLD1LuVCxtNTIAl6hIDKCR7oN7QwbgpSeX

91.235.133.182

200 OK

14 kB

URL HTTP/1.1
content.citadele.lv/0bUEzxBse9FQy9Uf?a222248910a5bbf0=sez7NzafKImCFBGhB5-GQAOGD0GxqAex2J8nxhlZ2SwHynj9a2owWsCWUUL3uHgoH5dSNHjFAE0OxVM1n39xNgzY1rO-w27vcKbZA0JydEJ87981ZI2KAxy-ydh1icFkwTiWWa4e8P4Pe_jDKnS4cNiNlQUJWYKeAXzHfwdbkDNkTW4TAcjLD1LuVCxtNTIAl6hIDKCR7oN7QwbgpSeX
IP
91.235.133.182:0
ASN
#30286 THM

File type
HTML document text\012- HTML document, ASCII text, with very long lines (15506)
Size
14 kB (13837 bytes)
Hash
c3072f87c7e71afbcf9b56b973921fa3
965f1faa0e68fab1076c34aa81e28516e115a8cd
0e74500cecdcf02680693f836379f84c1ea58c34e6a8a14d2f0c13d111889153

HTTP Headers

GET /0bUEzxBse9FQy9Uf?a222248910a5bbf0=sez7NzafKImCFBGhB5-GQAOGD0GxqAex2J8nxhlZ2SwHynj9a2owWsCWUUL3uHgoH5dSNHjFAE0OxVM1n39xNgzY1rO-w27vcKbZA0JydEJ87981ZI2KAxy-ydh1icFkwTiWWa4e8P4Pe_jDKnS4cNiNlQUJWYKeAXzHfwdbkDNkTW4TAcjLD1LuVCxtNTIAl6hIDKCR7oN7QwbgpSeX HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=99
Transfer-Encoding: chunked

ocsp.securetrust.com/

95.101.10.123

200 OK

638 B

URL HTTP/1.1
ocsp.securetrust.com/
IP
95.101.10.123:0
ASN
#20940 Akamai International B.V.

File type
data
Size
638 B (638 bytes)
Hash
22bcbb6c26e84004bf0778a5a1bd600e
00303fe03831d62e4a5bdce7a819f267a2993812
0fb77635157784c2214e09d9a5cf113dd7797d1a42104e32c90cf42228938a80

HTTP Headers

POST / HTTP/1.1
Host: ocsp.securetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 638
Date: Fri, 03 Feb 2023 14:01:49 GMT
Connection: keep-alive

aom4xb8tdrlhdtb6f2aalrwsceqj3f5asvbrwej25927d1a1c998a260am1.e.aa.online-metrix.net/Tlmk9aqsBkUhGjTX?3e83da21d67fa7ee=aagujIW7hMOk6h0LRl55CBAmQkdaNz5CLvWGR8bnszpWkTlY6YjgWL9THER0zcObOtL6Hu3sTPeccE-FwVl_WHEB-PK_Ev6b_pSz-aVhSLUoiPuYfyr4meZ_c53MPGPPkpu74zlvy8dU6rDK0lhSlw1Q-Kd0KFsETSUg

91.235.134.131

200 OK

81 B

URL HTTP/1.1
aom4xb8tdrlhdtb6f2aalrwsceqj3f5asvbrwej25927d1a1c998a260am1.e.aa.online-metrix.net/Tlmk9aqsBkUhGjTX?3e83da21d67fa7ee=aagujIW7hMOk6h0LRl55CBAmQkdaNz5CLvWGR8bnszpWkTlY6YjgWL9THER0zcObOtL6Hu3sTPeccE-FwVl_WHEB-PK_Ev6b_pSz-aVhSLUoiPuYfyr4meZ_c53MPGPPkpu74zlvy8dU6rDK0lhSlw1Q-Kd0KFsETSUg
IP
91.235.134.131:0
ASN
#30286 THM

File type
PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Size
81 B (81 bytes)
Hash
1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743

HTTP Headers

GET /Tlmk9aqsBkUhGjTX?3e83da21d67fa7ee=aagujIW7hMOk6h0LRl55CBAmQkdaNz5CLvWGR8bnszpWkTlY6YjgWL9THER0zcObOtL6Hu3sTPeccE-FwVl_WHEB-PK_Ev6b_pSz-aVhSLUoiPuYfyr4meZ_c53MPGPPkpu74zlvy8dU6rDK0lhSlw1Q-Kd0KFsETSUg HTTP/1.1
Host: aom4xb8tdrlhdtb6f2aalrwsceqj3f5asvbrwej25927d1a1c998a260am1.e.aa.online-metrix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Connection: close
Content-Length: 81
Content-Type: image/png

aom4xb8tdrlhdtb6f2aalrwsceqj3f5asvbrwej2728776004e55613cam1.e.aa.online-metrix.net/_j56do7krzv5Oo6D?14cd7a3b3c6a9d03=j-tfrDvNbrGj1u4c2IPBoJM3T5VW30cTp1ofp5MiDulAnZV5hXwdMUoAqI07-zne941fiz75FCYzNJhnu4ytJeQZ7r220vk-95TkH6I7iBxOr-5LHrPAeJe8nY2L_PYstKxe--qwyoFFPcFyUbXiyS_ycXjbKyQC14hV

91.235.134.131

200 OK

81 B

URL HTTP/1.1
aom4xb8tdrlhdtb6f2aalrwsceqj3f5asvbrwej2728776004e55613cam1.e.aa.online-metrix.net/_j56do7krzv5Oo6D?14cd7a3b3c6a9d03=j-tfrDvNbrGj1u4c2IPBoJM3T5VW30cTp1ofp5MiDulAnZV5hXwdMUoAqI07-zne941fiz75FCYzNJhnu4ytJeQZ7r220vk-95TkH6I7iBxOr-5LHrPAeJe8nY2L_PYstKxe--qwyoFFPcFyUbXiyS_ycXjbKyQC14hV
IP
91.235.134.131:0
ASN
#30286 THM

File type
PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Size
81 B (81 bytes)
Hash
1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743

HTTP Headers

GET /_j56do7krzv5Oo6D?14cd7a3b3c6a9d03=j-tfrDvNbrGj1u4c2IPBoJM3T5VW30cTp1ofp5MiDulAnZV5hXwdMUoAqI07-zne941fiz75FCYzNJhnu4ytJeQZ7r220vk-95TkH6I7iBxOr-5LHrPAeJe8nY2L_PYstKxe--qwyoFFPcFyUbXiyS_ycXjbKyQC14hV HTTP/1.1
Host: aom4xb8tdrlhdtb6f2aalrwsceqj3f5asvbrwej2728776004e55613cam1.e.aa.online-metrix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Connection: close
Content-Length: 81
Content-Type: image/png

content.citadele.lv/9JasiNSK2XHgM2vw?ceeaef963213cf10=7Qxcv0z2LPUFn3c3I8yymEfKEPVA7Ucb8132SU2J8y39c733P3VUB24S5WujcFAn9E1f0ti0QbRh7AyOeXR9xxqHV6zS5ZjvWxme0ug5EtSyGfahn_5x6D4bmw3oTi_J0tghcLVSMmux8hbI_WRE5LYExeg&jf=3134246c7160356639333432366b396338306b3c3436326a623339383462373962613160346661

91.235.133.182

204 No Content

0 B

URL HTTP/1.1
content.citadele.lv/9JasiNSK2XHgM2vw?ceeaef963213cf10=7Qxcv0z2LPUFn3c3I8yymEfKEPVA7Ucb8132SU2J8y39c733P3VUB24S5WujcFAn9E1f0ti0QbRh7AyOeXR9xxqHV6zS5ZjvWxme0ug5EtSyGfahn_5x6D4bmw3oTi_J0tghcLVSMmux8hbI_WRE5LYExeg&jf=3134246c7160356639333432366b396338306b3c3436326a623339383462373962613160346661
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /9JasiNSK2XHgM2vw?ceeaef963213cf10=7Qxcv0z2LPUFn3c3I8yymEfKEPVA7Ucb8132SU2J8y39c733P3VUB24S5WujcFAn9E1f0ti0QbRh7AyOeXR9xxqHV6zS5ZjvWxme0ug5EtSyGfahn_5x6D4bmw3oTi_J0tghcLVSMmux8hbI_WRE5LYExeg&jf=3134246c7160356639333432366b396338306b3c3436326a623339383462373962613160346661 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://content.citadele.lv/UzBWWmeTV0CWxzpI?1773e29a3a00158c=tcoRhVzEn2kktlk7EK4V_NDDPUTy5_8dQka3SU-ody_UrQXjs4MZfYcCl5zQn1p_BvtKtcJ7l31U-d4ZawYELmSn03i5hXa5-BNvZrghM1Y8Gaz1hkFP2TXU-uoOKhB9DrDEB2UaFA9WbDVRJHQqL9PwfvKRiMx-dZTslwvRLfJlkSDW27yYNDgd3vwDDnbDe0QBtKK8PxpeclssnT4
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 204 No Content
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=92
Connection: Keep-Alive
Content-Type: text/javascript

content.citadele.lv/CkM7gvaZQB_coPEV?df642e36b928b226=taB5DAr8s5nTEAgVTXoWiqFj7AgwOrbobgabDnenFVPLOaAhTmdjIHzJ_y6bXNdAahOVKOMh4poNeAL8E5z1Reo2KyHi1dfc5x6RSKy6D4SQm1O1HU3GYpnavAqEozTCJdagFJx6XBOPh-CyEk2ibqZF4Rg&jf=3134246c7160356639333432366b396338306b3c3436326a623339383462373962613160346661

91.235.133.182

204 No Content

0 B

URL HTTP/1.1
content.citadele.lv/CkM7gvaZQB_coPEV?df642e36b928b226=taB5DAr8s5nTEAgVTXoWiqFj7AgwOrbobgabDnenFVPLOaAhTmdjIHzJ_y6bXNdAahOVKOMh4poNeAL8E5z1Reo2KyHi1dfc5x6RSKy6D4SQm1O1HU3GYpnavAqEozTCJdagFJx6XBOPh-CyEk2ibqZF4Rg&jf=3134246c7160356639333432366b396338306b3c3436326a623339383462373962613160346661
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /CkM7gvaZQB_coPEV?df642e36b928b226=taB5DAr8s5nTEAgVTXoWiqFj7AgwOrbobgabDnenFVPLOaAhTmdjIHzJ_y6bXNdAahOVKOMh4poNeAL8E5z1Reo2KyHi1dfc5x6RSKy6D4SQm1O1HU3GYpnavAqEozTCJdagFJx6XBOPh-CyEk2ibqZF4Rg&jf=3134246c7160356639333432366b396338306b3c3436326a623339383462373962613160346661 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://content.citadele.lv/2g9Geq4BYLj-FvaU?9da0073d23be5d5d=e1tPx1qxqUP9wDGqTOskqqhz-MNjng5BOtwMjKgewbrHlm_wc1z0MLAysPc-tuHlCqisuDfhg6Di1P3ydiseK-ZfNqM3nwOVrTFD91J3lsMvWjtGPax9vzc62uPSdz9HjYYBxbZOpb3eAPTopIAE2r7cQnxopKOxKoznKUD4FdvzlEzZ10FJIL2fF_cYlIt_aZK1yfqjxO6QchSbaxw
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 204 No Content
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=91
Connection: Keep-Alive
Content-Type: text/javascript

content.citadele.lv/aFLmZ4w5e_dG0ktv?cec2ceea79bf9c0c=hKpgwh62ex8eyK_wcuIictwWtgO8tvb8UBO1szicGcoAj0ORdgxeOAze-rPIjPGLDqwRzGtGOsZppdUJX0XRODApqgMM47i6Cgz1O-gWfMDDbOyRChpyTcFvTk5jncwVwgLYHh3W-oe0eA8ynj7cxMWOwi9h2C5ywKmWhsRmbRzdx6uAxv0CrzWbwreASbieLSfJiE_o0ff4RfFXa6A&jf=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

91.235.133.182

204 204

0 B

URL HTTP/1.1
content.citadele.lv/aFLmZ4w5e_dG0ktv?cec2ceea79bf9c0c=hKpgwh62ex8eyK_wcuIictwWtgO8tvb8UBO1szicGcoAj0ORdgxeOAze-rPIjPGLDqwRzGtGOsZppdUJX0XRODApqgMM47i6Cgz1O-gWfMDDbOyRChpyTcFvTk5jncwVwgLYHh3W-oe0eA8ynj7cxMWOwi9h2C5ywKmWhsRmbRzdx6uAxv0CrzWbwreASbieLSfJiE_o0ff4RfFXa6A&jf=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
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /aFLmZ4w5e_dG0ktv?cec2ceea79bf9c0c=hKpgwh62ex8eyK_wcuIictwWtgO8tvb8UBO1szicGcoAj0ORdgxeOAze-rPIjPGLDqwRzGtGOsZppdUJX0XRODApqgMM47i6Cgz1O-gWfMDDbOyRChpyTcFvTk5jncwVwgLYHh3W-oe0eA8ynj7cxMWOwi9h2C5ywKmWhsRmbRzdx6uAxv0CrzWbwreASbieLSfJiE_o0ff4RfFXa6A&jf=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 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 204 204
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: image/png;charset=UTF-8
Keep-Alive: timeout=2, max=90

content.citadele.lv/0Duh8KBBwQDG9l0V?6cdbbcce84b54633=N74T4zAGBu954hWVbRyuAUhnZxiY2fixmCJloZ_igrgyoSBcLp5yY3ua8nKL14CXGjLq9ackoGxDD1voJZkIjvKfQyRiaV9ozMRe_xSmFHMHh6wmJf7cVcSA0osA6dtYbIXfxSaZwWCD8f0DLeskh1sC3Gwhtm1oj4GtzoBdvjzGkOcSAi1P1UF4C2iC3dcwNgoC2D6MHc8KA_w1rPY&jf=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

91.235.133.182

204 204

0 B

URL HTTP/1.1
content.citadele.lv/0Duh8KBBwQDG9l0V?6cdbbcce84b54633=N74T4zAGBu954hWVbRyuAUhnZxiY2fixmCJloZ_igrgyoSBcLp5yY3ua8nKL14CXGjLq9ackoGxDD1voJZkIjvKfQyRiaV9ozMRe_xSmFHMHh6wmJf7cVcSA0osA6dtYbIXfxSaZwWCD8f0DLeskh1sC3Gwhtm1oj4GtzoBdvjzGkOcSAi1P1UF4C2iC3dcwNgoC2D6MHc8KA_w1rPY&jf=36333426716b6c5d7a6c663d766c725f3876383854336c40377530376c585b41267369665d666374673f39343f373633303134302673616c5d747978653f7765603a676364736124716b665f6967713f3b323739313831333036383f3061383e343a63653164323230313034323a30613a343c3a6b673164323b30313037383b363230383036376332343332653134616436663832356b303e3b3162666b34396565396c6766366d63613139333964316136393433326635613a6a343f633561663830303232393131303430363a346630623037363564633b33673833646e326a6463336638326333646b3d376435386230316660393530643366376767613935366933316424736b6c5f736967353b323435383230313032646330356239336166366335636c34303532646131356661616e393031346b3532373837396439616338336631323966333d633d646730306c653265303d6e6130323a303631326736313537313667373b6330636730336d6361386031666636623c383a36666d6636306664323062383962366367343261676b646c353662376d323862267b6164723d38
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /0Duh8KBBwQDG9l0V?6cdbbcce84b54633=N74T4zAGBu954hWVbRyuAUhnZxiY2fixmCJloZ_igrgyoSBcLp5yY3ua8nKL14CXGjLq9ackoGxDD1voJZkIjvKfQyRiaV9ozMRe_xSmFHMHh6wmJf7cVcSA0osA6dtYbIXfxSaZwWCD8f0DLeskh1sC3Gwhtm1oj4GtzoBdvjzGkOcSAi1P1UF4C2iC3dcwNgoC2D6MHc8KA_w1rPY&jf=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 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 204 204
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: image/png;charset=UTF-8
Keep-Alive: timeout=2, max=96

91.235.133.182

204 No Content

0 B

URL HTTP/1.1
content.citadele.lv/uJfyFJxv8FYAvkwv?fba5e046585492c6=vzYaRNDX7Dk7rj-kAqXj55egWZMuOrxitlQWgp8vTL4NESsy9t90KC3IZWC_kv_MmlIXAtWt_yOttX8N1cjFI0FWXJ7zV2wrze10pMTbYd8ilAsZ0gGiyKXcyJd97iVBsMp0SD_dn9VkWbks47xlnlre-OY&jac=1&je=333033262472653f666d2461776c683d64663d3c6035343838323535616437656236303b6161676461633d343f303465613d313036633e30373632306367396432393539363633333632303333666c302e677a333f6c663638656e3f603037303863663460373b66623866606760676531643d63696161643131363430
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /uJfyFJxv8FYAvkwv?fba5e046585492c6=vzYaRNDX7Dk7rj-kAqXj55egWZMuOrxitlQWgp8vTL4NESsy9t90KC3IZWC_kv_MmlIXAtWt_yOttX8N1cjFI0FWXJ7zV2wrze10pMTbYd8ilAsZ0gGiyKXcyJd97iVBsMp0SD_dn9VkWbks47xlnlre-OY&jac=1&je=333033262472653f666d2461776c683d64663d3c6035343838323535616437656236303b6161676461633d343f303465613d313036633e30373632306367396432393539363633333632303333666c302e677a333f6c663638656e3f603037303863663460373b66623866606760676531643d63696161643131363430 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 204 No Content
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: text/javascript

91.235.133.182

204 No Content

0 B

URL HTTP/1.1
content.citadele.lv/u0VOSA17x-9Nxcdn?970d83fe521a37a4=q_b99NbI8dGV4cSIOTO3eot2Emi78ngif8-l2bZrjytq_zI9wFfbAAmQLGHmU9Id_jnX9lvEtbwPR1acTnFTo4SHfVjUUOPAIMhg61opi08EeeaSXLx-TxfbLZAvW0m0eiVo6GNXl4cOebstzhZuOQyTGv0&jac=1&je=333033262472653f666d2461776c683d64663d3c6035343838323535616437656236303b6161676461633d343f303465613d313036633e30373632306367396432393539363633333632303333666c302e677a333f6c663638656e3f603037303863663460373b66623866606760676531643d63696161643131363430
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /u0VOSA17x-9Nxcdn?970d83fe521a37a4=q_b99NbI8dGV4cSIOTO3eot2Emi78ngif8-l2bZrjytq_zI9wFfbAAmQLGHmU9Id_jnX9lvEtbwPR1acTnFTo4SHfVjUUOPAIMhg61opi08EeeaSXLx-TxfbLZAvW0m0eiVo6GNXl4cOebstzhZuOQyTGv0&jac=1&je=333033262472653f666d2461776c683d64663d3c6035343838323535616437656236303b6161676461633d343f303465613d313036633e30373632306367396432393539363633333632303333666c302e677a333f6c663638656e3f603037303863663460373b66623866606760676531643d63696161643131363430 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 204 No Content
Date: Fri, 03 Feb 2023 14:01:49 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=89
Connection: Keep-Alive
Content-Type: text/javascript

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11770
Expires: Fri, 03 Feb 2023 17:18:00 GMT
Date: Fri, 03 Feb 2023 14:01:50 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11770
Expires: Fri, 03 Feb 2023 17:18:00 GMT
Date: Fri, 03 Feb 2023 14:01:50 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11770
Expires: Fri, 03 Feb 2023 17:18:00 GMT
Date: Fri, 03 Feb 2023 14:01:50 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg

34.120.237.76

200 OK

8.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.2 kB (8211 bytes)
Hash
114e345e134986d7451148fcea31b29d
541e878afee68c8802bb52b0cbbe5a5a0a185392
5030244d4babd1023166f39c935029d789a91ba90aa3a44c6f4c88ddc947b678

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8211
x-amzn-requestid: 2df5779a-a808-46ec-9246-1a9b9bddd9e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmKLVHwroAMF72Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bd7b-3cfe97e07d17958836425784;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:04:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZZXEXszbtmGh7kLfhabCGd41rZRnSmQvdcySUQRTDtJRBqZVUK3LaQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 07:19:27 GMT
age: 24143
etag: "541e878afee68c8802bb52b0cbbe5a5a0a185392"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.6 kB (5641 bytes)
Hash
d4041f3b5316bc84c9e6d88ddbc85b89
4978a4a20836b6f5d863d331bcedad782b7b4ac6
549b62d2c4ec965b8bec62010c0ce338dfea7992ee83eb7af61ff1a30d21f8b5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5641
x-amzn-requestid: b53b54b1-3b00-47cf-a25c-e93910c2ebfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuvzpHsXoAMFsuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2ce3-0c4fc8154763febb44460ac2;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: x4-BZdG4JGRKCSdKynnuweZfo9l0XZtDB-MiANy7C2Yz1URYMHP4sQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:28:50 GMT
age: 55980
etag: "4978a4a20836b6f5d863d331bcedad782b7b4ac6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10166 bytes)
Hash
2a6aaf87a867f93dc9268a8b27973b97
f52ccbe6cbced1994acb13a00b05436553b6813e
3fbd7441712035f4d53c17eec93bc278e6c072043f3b5a721cac349fc0dabe77

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10166
x-amzn-requestid: 54fe0d12-360f-4d97-bcf3-b24747d956aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fY_4zHEcoAMF1iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d379d1-4ba89e44005f616a0ed3ed24;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 07:14:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: G0R-0w9HtLB5OXb-w-RyR9QCnrddkS29FqF_GeAQa1CRWkqaUJwQoA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:27:53 GMT
age: 56037
etag: "f52ccbe6cbced1994acb13a00b05436553b6813e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (14071 bytes)
Hash
9ab97f766ee1ed6ebbb2b3889a9157b4
f87f165404dec4d65531e6e25146cb77601f3616
f3d0f76f956371b1733a526f10a8253fc3396a459d7af59380d8e8db7dee8ec2

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 14071
x-amzn-requestid: 40cb363f-2c4d-4361-9fe1-10e4c8b2fe29
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fiTo4Ek2oAMFs6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d73305-6cb63d3c49f9f84e639467f6;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 03:01:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aTs6L8dJENFRdtBn7ggAbY5yaYRAzSY2B0bmElV4YNPrJg-KRDAyNA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:46:56 GMT
age: 58494
etag: "f87f165404dec4d65531e6e25146cb77601f3616"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10796 bytes)
Hash
3490571dd2de0a747987b9a0e18cccc8
18e9f8f160d3515f1cb31fc7538ac762a6cab344
1c071d7f3b288b29254500f94f19c0db0633c6aa90812f2e92c4f64992f5221a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10796
x-amzn-requestid: 5c9b1a83-c99a-44b9-9a90-5edd7ef1e225
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi0XKG93oAMFtsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76760-01bf754d6c725c3275c02a1b;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 06:44:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vUJO-Pt9Hi1ndrCQQT1nNCGT7oDOYBpA8-EawHanESoZAsZv32dQdg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 00:25:04 GMT
age: 49006
etag: "18e9f8f160d3515f1cb31fc7538ac762a6cab344"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11565 bytes)
Hash
e366b32074025aaf60bbae8bdb08d330
a52c2883bad98fa20333aa639a5dd3a5bf544c8e
9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w0Zm5V0TQxsQ7917U3fdhS_n7qKE143PuhI2JmNCDM_Pf0yPLyW6yA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 04:53:21 GMT
age: 32909
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

91.235.133.182

204 No Content

0 B

URL HTTP/1.1
content.citadele.lv/uJfyFJxv8FYAvkwv?fba5e046585492c6=vzYaRNDX7Dk7rj-kAqXj55egWZMuOrxitlQWgp8vTL4NESsy9t90KC3IZWC_kv_MmlIXAtWt_yOttX8N1cjFI0FWXJ7zV2wrze10pMTbYd8ilAsZ0gGiyKXcyJd97iVBsMp0SD_dn9VkWbks47xlnlre-OY&jac=1&je=30372426756b653f7f676072766b5f696e746d7a6c616c576d666e73
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /uJfyFJxv8FYAvkwv?fba5e046585492c6=vzYaRNDX7Dk7rj-kAqXj55egWZMuOrxitlQWgp8vTL4NESsy9t90KC3IZWC_kv_MmlIXAtWt_yOttX8N1cjFI0FWXJ7zV2wrze10pMTbYd8ilAsZ0gGiyKXcyJd97iVBsMp0SD_dn9VkWbks47xlnlre-OY&jac=1&je=30372426756b653f7f676072766b5f696e746d7a6c616c576d666e73 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 204 No Content
Date: Fri, 03 Feb 2023 14:01:53 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/javascript

91.235.133.182

204 No Content

0 B

URL HTTP/1.1
content.citadele.lv/u0VOSA17x-9Nxcdn?970d83fe521a37a4=q_b99NbI8dGV4cSIOTO3eot2Emi78ngif8-l2bZrjytq_zI9wFfbAAmQLGHmU9Id_jnX9lvEtbwPR1acTnFTo4SHfVjUUOPAIMhg61opi08EeeaSXLx-TxfbLZAvW0m0eiVo6GNXl4cOebstzhZuOQyTGv0&jac=1&je=30372426756b653f7f676072766b5f696e746d7a6c616c576d666e73
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /u0VOSA17x-9Nxcdn?970d83fe521a37a4=q_b99NbI8dGV4cSIOTO3eot2Emi78ngif8-l2bZrjytq_zI9wFfbAAmQLGHmU9Id_jnX9lvEtbwPR1acTnFTo4SHfVjUUOPAIMhg61opi08EeeaSXLx-TxfbLZAvW0m0eiVo6GNXl4cOebstzhZuOQyTGv0&jac=1&je=30372426756b653f7f676072766b5f696e746d7a6c616c576d666e73 HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://murphyultralight.com/
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 204 No Content
Date: Fri, 03 Feb 2023 14:01:53 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/javascript

content.citadele.lv/paJzDFrDyUhBBmqa?79d611717135a42a=DfA-Y50hsvUZupVdCPIEr8Spp2wR6e-c-Wm5CMf79awBVil50z5b361AUnxomeTU_W8dPGHdoMZClFilIAZ1mff3IWU8cdppeRJc8eVrkqLjXzeh_CVNLKrxXKNmyoA3IKsGEhll9YiVmGuKFMP1gIsxrqc

91.235.133.182

204 No Content

0 B

URL HTTP/1.1
content.citadele.lv/paJzDFrDyUhBBmqa?79d611717135a42a=DfA-Y50hsvUZupVdCPIEr8Spp2wR6e-c-Wm5CMf79awBVil50z5b361AUnxomeTU_W8dPGHdoMZClFilIAZ1mff3IWU8cdppeRJc8eVrkqLjXzeh_CVNLKrxXKNmyoA3IKsGEhll9YiVmGuKFMP1gIsxrqc
IP
91.235.133.182:0
ASN
#30286 THM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /paJzDFrDyUhBBmqa?79d611717135a42a=DfA-Y50hsvUZupVdCPIEr8Spp2wR6e-c-Wm5CMf79awBVil50z5b361AUnxomeTU_W8dPGHdoMZClFilIAZ1mff3IWU8cdppeRJc8eVrkqLjXzeh_CVNLKrxXKNmyoA3IKsGEhll9YiVmGuKFMP1gIsxrqc HTTP/1.1
Host: content.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 7
Origin: https://content.citadele.lv
Connection: keep-alive
Referer: https://content.citadele.lv/0bUEzxBse9FQy9Uf?a222248910a5bbf0=sez7NzafKImCFBGhB5-GQAOGD0GxqAex2J8nxhlZ2SwHynj9a2owWsCWUUL3uHgoH5dSNHjFAE0OxVM1n39xNgzY1rO-w27vcKbZA0JydEJ87981ZI2KAxy-ydh1icFkwTiWWa4e8P4Pe_jDKnS4cNiNlQUJWYKeAXzHfwdbkDNkTW4TAcjLD1LuVCxtNTIAl6hIDKCR7oN7QwbgpSeX
Cookie: thx_guid=4f631cb15917ac2685bdbebb4e1f2601
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 204 No Content
Date: Fri, 03 Feb 2023 14:01:56 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Connection: close
Access-Control-Allow-Origin: https://content.citadele.lv
Content-Type: text/javascript

online.citadele.lv/ibbf/fonts/OpenSans-Semibold.otf

193.178.178.229

200 200

0 B

URL HTTP/1.1
online.citadele.lv/ibbf/fonts/OpenSans-Semibold.otf
IP
193.178.178.229:0
ASN
#16279 AS Citadele banka

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /ibbf/fonts/OpenSans-Semibold.otf HTTP/1.1
Host: online.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://murphyultralight.com
Connection: keep-alive
Referer: https://online.citadele.lv/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 200
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=96B4F8621B1CC0B3E600A933A454B190.ibbf-venta1-node8; Path=/ibbf/; Secure; HttpOnly
Accept-Ranges: bytes
ETag: W/"39932-1672734812000"
Last-Modified: Tue, 03 Jan 2023 08:33:32 GMT
Content-Type: application/x-font-otf
Content-Length: 39932
X-Content-Type-Options: nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive

online.citadele.lv/ibbf/icons/Material-Design-Iconic-Font.ttf

193.178.178.229

200 200

0 B

URL HTTP/1.1
online.citadele.lv/ibbf/icons/Material-Design-Iconic-Font.ttf
IP
193.178.178.229:0
ASN
#16279 AS Citadele banka

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /ibbf/icons/Material-Design-Iconic-Font.ttf HTTP/1.1
Host: online.citadele.lv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://murphyultralight.com
Connection: keep-alive
Referer: https://online.citadele.lv/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 200
Date: Fri, 03 Feb 2023 14:01:48 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=CDDCB5AA3BAD1CDD896B4E7B681C4E5E.ibbf-venta2-node9; Path=/ibbf/; Secure; HttpOnly
Accept-Ranges: bytes
ETag: W/"99212-1672734812000"
Last-Modified: Tue, 03 Jan 2023 08:33:32 GMT
Content-Type: application/x-font-ttf
Content-Length: 99212
X-Content-Type-Options: nosniff
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (21)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML