Overview

URLwww.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5
IP 208.91.199.118 (United States)
ASN#394695 PUBLIC-DOMAIN-REGISTRY
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-01-25 15:51:11 UTC
StatusLoading report..
IDS alerts0
Blocklist alert23
urlquery alerts No alerts detected
Tags None

Domain Summary (9)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
www.aquaflow.ae (33) 0 2020-11-11 05:06:07 UTC 2023-01-25 03:24:13 UTC 208.91.199.118 Unknown ranking
ibx.key.com (2) 130616 2017-02-09 10:52:42 UTC 2023-01-24 21:24:26 UTC 23.52.18.181
r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2023-01-25 04:09:15 UTC 23.36.77.32
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-01-25 04:09:39 UTC 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-01-25 04:09:50 UTC 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-01-25 04:09:41 UTC 34.117.237.239
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-01-25 04:10:25 UTC 35.163.1.35
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-01-25 04:09:34 UTC 34.120.237.76
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2023-01-25 11:19:42 UTC 93.184.220.29

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/AppMeasurement_Module_Activit (...) Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/1.a4107d5847ce71ae19c1.js.download Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/integrations Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/7.a62d97ca86043da836ba.js.download Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/AppMeasurement.min.js.download Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/RCcaa4e69ad2d64fb28ce705b92f8 (...) Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/bundle.js(1).download Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/otac-72-hours.svg Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/key-logo.svg Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/images/kds.svg Phishing
2023-01-25 2 www.aquaflow.ae/ibxolb/olb/share/assets/images/kds.svg Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/OpenSans-Regular-webfont.7951 (...) Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/OpenSans-Light-webfont.45b47f (...) Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/7802e576-2ffa-4f22-a409-53435 (...) Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/08edde9d-c27b-4731-a27f-d6cd9 (...) Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/OpenSans-Semibold-webfont.697 (...) Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/0552ce48-950c-471f-b843-1afac (...) Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/e9722702-4fb8-436a-9342-c5f4f (...) Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/share/assets/images/kds.svg Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/ll_storage_html5.html Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/OpenSans-Regular-webfont.488d (...) Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/OpenSans-Light-webfont.2e98fc (...) Phishing
2023-01-25 2 www.aquaflow.ae/ibxkey/KeyBank%20Online_files/OpenSans-Semibold-webfont.b32 (...) Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 208.91.199.118
Date UQ / IDS / BL URL IP
2023-02-05 23:39:25 +0000 21 - 0 - 56 aquaflow.ae/usrsyhgd/ibxkey/Login.php?id=280i (...) 208.91.199.118
2023-02-05 17:39:36 +0000 21 - 0 - 24 aquaflow.ae/usrsyhgd/ibxkey/Login.php?id=3aoe (...) 208.91.199.118
2023-02-05 11:39:26 +0000 21 - 0 - 22 aquaflow.ae/usrsyhgd/ibxkey/Login.php?id=9bd8 (...) 208.91.199.118
2023-02-05 09:24:26 +0000 0 - 0 - 23 www.aquaflow.ae/ibxkey/Login.php?id=5k6fd92l7 (...) 208.91.199.118
2023-02-05 08:31:44 +0000 21 - 0 - 23 aquaflow.ae/usrsyhgd/ibxkey/Login.php?id=g567 (...) 208.91.199.118


Last 5 reports on ASN: PUBLIC-DOMAIN-REGISTRY
Date UQ / IDS / BL URL IP
2023-02-05 23:39:25 +0000 21 - 0 - 56 aquaflow.ae/usrsyhgd/ibxkey/Login.php?id=280i (...) 208.91.199.118
2023-02-05 21:53:26 +0000 0 - 0 - 1 autoconfig.map-ld.iforget-iphone.com/ 207.174.212.161
2023-02-05 20:39:31 +0000 1 - 1 - 4 www.malayaleebusiness.com/mtb/login.php?onlin (...) 208.91.199.152
2023-02-05 19:46:45 +0000 0 - 0 - 1 withfour.xyz/ 119.18.54.41
2023-02-05 19:25:56 +0000 0 - 0 - 24 www.redridgeglobal.com/ 204.11.58.39


Last 5 reports on domain: aquaflow.ae
Date UQ / IDS / BL URL IP
2023-02-05 23:39:25 +0000 21 - 0 - 56 aquaflow.ae/usrsyhgd/ibxkey/Login.php?id=280i (...) 208.91.199.118
2023-02-05 17:39:36 +0000 21 - 0 - 24 aquaflow.ae/usrsyhgd/ibxkey/Login.php?id=3aoe (...) 208.91.199.118
2023-02-05 11:39:26 +0000 21 - 0 - 22 aquaflow.ae/usrsyhgd/ibxkey/Login.php?id=9bd8 (...) 208.91.199.118
2023-02-05 09:24:26 +0000 0 - 0 - 23 www.aquaflow.ae/ibxkey/Login.php?id=5k6fd92l7 (...) 208.91.199.118
2023-02-05 08:31:44 +0000 21 - 0 - 23 aquaflow.ae/usrsyhgd/ibxkey/Login.php?id=g567 (...) 208.91.199.118


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-02-05 23:39:25 +0000 21 - 0 - 56 aquaflow.ae/usrsyhgd/ibxkey/Login.php?id=280i (...) 208.91.199.118
2023-02-05 17:39:36 +0000 21 - 0 - 24 aquaflow.ae/usrsyhgd/ibxkey/Login.php?id=3aoe (...) 208.91.199.118
2023-02-05 11:39:26 +0000 21 - 0 - 22 aquaflow.ae/usrsyhgd/ibxkey/Login.php?id=9bd8 (...) 208.91.199.118
2023-02-05 08:31:44 +0000 21 - 0 - 23 aquaflow.ae/usrsyhgd/ibxkey/Login.php?id=g567 (...) 208.91.199.118
2023-02-05 05:40:42 +0000 21 - 0 - 23 aquaflow.ae/usrsyhgd/ibxkey/Login.php?id=g567 (...) 208.91.199.118

JavaScript

Executed Scripts (13)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (54)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0582B6180687DD95C7FD728F1B9DB4495B807151E309B608AD203D69708F9DA6"
Last-Modified: Tue, 24 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9202
Expires: Wed, 25 Jan 2023 18:24:22 GMT
Date: Wed, 25 Jan 2023 15:51:00 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11666
Expires: Wed, 25 Jan 2023 19:05:26 GMT
Date: Wed, 25 Jan 2023 15:51:00 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 25 Jan 2023 15:42:49 GMT
age: 491
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bf0c602d32b3c14606f22a86183b5e3c
Sha1:   6eabd8d83475eba731968abe1a05a8bfd272f160
Sha256: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "02CF421968192286BB174FF0E6C818A843C4ECA61A02CD493E6F95BB58A37015"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7117
Expires: Wed, 25 Jan 2023 17:49:37 GMT
Date: Wed, 25 Jan 2023 15:51:00 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: 2jtTaFOEv7+fpKKp61Qhn8Sj1PETmo+vB2U7ay7X6gzlCagGdInJ1sKeknmEorcZ9xdC3OekoKg=
x-amz-request-id: 2J5P6DF90N8CXHH7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 25 Jan 2023 15:48:37 GMT
age: 143
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 25 Jan 2023 15:51:00 GMT
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5 HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 25 Jan 2023 15:51:00 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7929
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3638)
Size:   7929
Md5:    9fcf4be983b2732e2cde8395624f7532
Sha1:   7b08bd76ac554c3be288b9809cb18a49b98895f2
Sha256: c96e54e4699cbcf41fdf66b28908b0baf82d78af56548643ed5259eaa4bf8e75
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 25 Jan 2023 15:48:59 GMT
age: 122
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /ibxkey/KeyBank%20Online_files/AppMeasurement_Module_ActivityMap.min.js.download HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 25 Jan 2023 15:51:01 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 09 Jun 2022 08:40:56 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1649
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  ASCII text, with very long lines (3157)
Size:   1649
Md5:    db599b3645a80d4aec3003b3148ad2fd
Sha1:   faa463122bdbac7943833a36af985678672af988
Sha256: 82383b027e8bd3a9813b4ece004e9d90bade0c78e5d129843252d9ebead0ba4d

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/1.a4107d5847ce71ae19c1.js.download HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 25 Jan 2023 15:51:01 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 09 Jun 2022 08:40:56 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   29354
Md5:    630276155cb6ef1c5ba43b3d0827908e
Sha1:   49c3eb24ee02bf36166cf3030591cb6f666278b2
Sha256: 25546f2453574cf32df8e4d21fb32205016400d7313a5797904f911116e1e838

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/integrations HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
                                        
Date: Wed, 25 Jan 2023 15:51:01 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 09 Jun 2022 08:40:58 GMT
Accept-Ranges: bytes
Content-Length: 3429
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  ASCII text
Size:   3429
Md5:    eb6630d15c587d61118bd375f0259135
Sha1:   a1aeafd1e362f95bd7708adf2d93d6ecb990b318
Sha256: e4fe60aa7f1bcd674a7a83d1ec47f6ef9c309876bec0b84e16930c710ce3b7d8

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11035
Expires: Wed, 25 Jan 2023 18:54:56 GMT
Date: Wed, 25 Jan 2023 15:51:01 GMT
Connection: keep-alive

                                        
                                            GET /ibxkey/KeyBank%20Online_files/7.a62d97ca86043da836ba.js.download HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 25 Jan 2023 15:51:01 GMT
Server: Apache
Last-Modified: Thu, 09 Jun 2022 08:40:56 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   73920
Md5:    3d243dee2a78ce0305ba403c77f10405
Sha1:   b47178c46ab516fc0925db4e7fdcf1c4e4c8f9ea
Sha256: 1b2d06b4efb1752f2aede8c1bd1fb306dcc72a0fef4389c935b572ca6e450183

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/AppMeasurement.min.js.download HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 25 Jan 2023 15:51:01 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 09 Jun 2022 08:40:56 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 14946
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  ASCII text, with very long lines (32768)
Size:   14946
Md5:    e619db654218c8726f6928d2c4f40a74
Sha1:   8d2b0dfba638d33cf34063f1795d935340cc6db0
Sha256: e9815f331d5c46acc657eae4704b9f0f4539f7f0119d0b89eff54de0b4c5157e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/RCcaa4e69ad2d64fb28ce705b92f818cb2-source.min.js.download HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 25 Jan 2023 15:51:01 GMT
Server: Apache
Last-Modified: Thu, 09 Jun 2022 08:40:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 422
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (590)
Size:   422
Md5:    7c3fa2fa268c8c345553480a2b701942
Sha1:   743869c756235537e36ededfd42dbedfe240198c
Sha256: 53825cdf8623ca17317efa7df6cc93a3e1fdbe227506ae60af254616c84005c5

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/ibx-globals-key.css HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 25 Jan 2023 15:51:01 GMT
Server: Apache
Last-Modified: Thu, 09 Jun 2022 08:40:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 148
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   148
Md5:    ef7118d6c9b03f948b3ef254a6bff500
Sha1:   1b395cb53a85f7599d27e878d22bcb71beda37b2
Sha256: 25155b54264bc8a778d8bb23a20a02635aa78f607ff998b0edc620a1e19e83bc
                                        
                                            GET /ibxkey/KeyBank%20Online_files/styles.css HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 25 Jan 2023 15:51:01 GMT
Server: Apache
Last-Modified: Thu, 09 Jun 2022 08:40:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3419
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   3419
Md5:    9c8e7e0aba9ae057201532a0b39e61e9
Sha1:   0a9bf9414782720c48c54779fb6bcfabd1db738b
Sha256: 881744f59dd18df76a3cd755abf02bc0cdf2d36fcce80048f7f96ce2db84388f
                                        
                                            GET /ibxkey/KeyBank%20Online_files/styles(1).css HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 25 Jan 2023 15:51:01 GMT
Server: Apache
Last-Modified: Thu, 09 Jun 2022 08:41:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8162
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (28423), with no line terminators
Size:   8162
Md5:    9a590c071420824ee5e4fa5255da1da2
Sha1:   deefcb174f5591769fcbd5fec7b4622baca9ffd2
Sha256: f88708fce431cd0b08dcbd3a9ebbb4fb312392338b147dd675b6fb24aa2f6342
                                        
                                            GET /ibxkey/KeyBank%20Online_files/styles.a4962029f638dde4888c.css HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 25 Jan 2023 15:51:01 GMT
Server: Apache
Last-Modified: Thu, 09 Jun 2022 08:41:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines (65057)
Size:   41929
Md5:    7f98ac806a27da021f46da494c15a8ed
Sha1:   7db588b596333e0eb59c44ae4e8789599ac3ee4c
Sha256: c92f4a6124fe15fbd119ff99817f0df1e275c7908e3df3df86c2c5d26d0d7458
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mm9k5+lMXsrWGEHMJ2V+Cw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.163.1.35
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: t5OH3DOEMz2J6DzMEfRjw3RFZ4I=

                                        
                                            GET /ibxkey/KeyBank%20Online_files/styles-key(1).css HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 25 Jan 2023 15:51:01 GMT
Server: Apache
Last-Modified: Thu, 09 Jun 2022 08:41:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1828
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (5309), with no line terminators
Size:   1828
Md5:    a410162c839b65012987ee5f5fdf2a4f
Sha1:   d0c8f55b8939e96efc1bc6b29d4d345b9a744cbd
Sha256: 1f1885ef5d2e997cc6a8d5c0fba52aecfb89e0a11a79c485f1b364a370ddf1f9
                                        
                                            GET /ibxkey/KeyBank%20Online_files/kds-base-key.css HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 25 Jan 2023 15:51:01 GMT
Server: Apache
Last-Modified: Thu, 09 Jun 2022 08:40:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   70476
Md5:    df37295d0ffbc550c196312870b9ae58
Sha1:   e8e01635fb552bdcc5b1cf63d3246df1fa63b977
Sha256: 64f91e85bec553c081acce0fb62813848546ed3c23b3d0c0e342fa2737ce3323
                                        
                                            GET /ibxkey/KeyBank%20Online_files/bundle.js(1).download HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
                                        
Date: Wed, 25 Jan 2023 15:51:01 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 09 Jun 2022 08:40:58 GMT
Accept-Ranges: bytes
Content-Length: 605641
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   605641
Md5:    15c2f48f4b8ef4187c6eaf3b5ace99a9
Sha1:   3ef3ef518ffa5e9142f730ef2052e3e2b7e64146
Sha256: d4c307ca631714afc826c9d36b169ad69b03f5e572ef074f63b404cc9f023f17

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/key_white_logo.png HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Last-Modified: Thu, 09 Jun 2022 08:41:00 GMT
Accept-Ranges: bytes
Content-Length: 11797
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 172 x 32, 8-bit/color RGBA, interlaced\012- data
Size:   11797
Md5:    d62d5b0d8627210d502248fd5ba0795b
Sha1:   b54d1d796f26e980cdb17293ff75647f8072c6b7
Sha256: 07eeecd82d157b4f6d4147ede1b838e77e5e772e74307a3f53cf9c4afdffa15e
                                        
                                            GET /ibxkey/KeyBank%20Online_files/key_black_logo.png HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Last-Modified: Thu, 09 Jun 2022 08:41:00 GMT
Accept-Ranges: bytes
Content-Length: 3375
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 276 x 48, 8-bit/color RGBA, non-interlaced\012- data
Size:   3375
Md5:    ac718e18ce2383f5581edc92b37b5964
Sha1:   064252d1d84c5fb2bc45b2e510e9f4235c65baeb
Sha256: de35a69575718cdee8f4583e969583506939c38f94c0dad37dfe66abe574dbc0
                                        
                                            GET /ibxkey/KeyBank%20Online_files/otac-72-hours.svg HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Last-Modified: Thu, 09 Jun 2022 08:41:00 GMT
Accept-Ranges: bytes
Content-Length: 4281
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (307)
Size:   4281
Md5:    59332708e91127186fad4d5b9f9fdfce
Sha1:   64a60efad9d12f1018efdeb645a598779430c5b9
Sha256: 19154c371170b37e378225e8379871b7efecc3009f3ab3925c31f949964e80f5

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/kloader.gif HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Last-Modified: Thu, 09 Jun 2022 08:41:04 GMT
Accept-Ranges: bytes
Content-Length: 19110
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 400 x 400\012- data
Size:   19110
Md5:    a90e737d05ebfa82bf96168def807c36
Sha1:   ddc76a0c64ebefe5b9a12546c59a37c03d5d1f5b
Sha256: 24ed9db3eb0d97ecf1f0832cbd30bd37744e0d2b520ccdad5af60f7a08a45b90
                                        
                                            GET /ibxkey/KeyBank%20Online_files/key-logo.svg HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Last-Modified: Thu, 09 Jun 2022 08:41:00 GMT
Accept-Ranges: bytes
Content-Length: 6072
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5966)
Size:   6072
Md5:    b4284724f45b84236572906bb9309724
Sha1:   a919c3dec8149ae38b71d233f4b7d9391ac91691
Sha256: 4712701bf2f3b3b93bdfc9aa8c2c3e8dbdf6f3c4cbce9fc9a766c7cb5b281e5b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/images/kds.svg HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 338
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (720), with no line terminators
Size:   338
Md5:    522598328f3ddb57237c663c407e099c
Sha1:   de8b740ccb6b41996129d951adefc3970c67ebf0
Sha256: 717b5712995e7ffa2910abb61dca63ec2653043c13455bf5518e80ada04d55f1

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxolb/olb/share/assets/images/kds.svg HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 338
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (720), with no line terminators
Size:   338
Md5:    522598328f3ddb57237c663c407e099c
Sha1:   de8b740ccb6b41996129d951adefc3970c67ebf0
Sha256: 717b5712995e7ffa2910abb61dca63ec2653043c13455bf5518e80ada04d55f1

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/OpenSans-Regular-webfont.79515ad0788973c53340.woff HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/KeyBank%20Online_files/styles.a4962029f638dde4888c.css

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (720), with no line terminators
Size:   720
Md5:    3b548a758201e4d24ac16fa71ddf5c9d
Sha1:   8702527cda391169996cbca13b22e697d7845ee2
Sha256: 59a68a8807d9991319f3a95b796cb36a23e58d16206e7afeaa02163e0b987db3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/OpenSans-Light-webfont.45b47f3e9c7d74b80f5c.woff HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/KeyBank%20Online_files/styles.a4962029f638dde4888c.css

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (720), with no line terminators
Size:   720
Md5:    3b548a758201e4d24ac16fa71ddf5c9d
Sha1:   8702527cda391169996cbca13b22e697d7845ee2
Sha256: 59a68a8807d9991319f3a95b796cb36a23e58d16206e7afeaa02163e0b987db3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/7802e576-2ffa-4f22-a409-534355fbea79.woff HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/KeyBank%20Online_files/kds-base-key.css

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (720), with no line terminators
Size:   720
Md5:    3b548a758201e4d24ac16fa71ddf5c9d
Sha1:   8702527cda391169996cbca13b22e697d7845ee2
Sha256: 59a68a8807d9991319f3a95b796cb36a23e58d16206e7afeaa02163e0b987db3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/08edde9d-c27b-4731-a27f-d6cd9b01cd06.woff HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/KeyBank%20Online_files/kds-base-key.css

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (720), with no line terminators
Size:   720
Md5:    3b548a758201e4d24ac16fa71ddf5c9d
Sha1:   8702527cda391169996cbca13b22e697d7845ee2
Sha256: 59a68a8807d9991319f3a95b796cb36a23e58d16206e7afeaa02163e0b987db3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/OpenSans-Semibold-webfont.697574b47bcfdd2c45e3.woff HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/KeyBank%20Online_files/styles.a4962029f638dde4888c.css

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (720), with no line terminators
Size:   720
Md5:    3b548a758201e4d24ac16fa71ddf5c9d
Sha1:   8702527cda391169996cbca13b22e697d7845ee2
Sha256: 59a68a8807d9991319f3a95b796cb36a23e58d16206e7afeaa02163e0b987db3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/0552ce48-950c-471f-b843-1afac814d259.woff HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/KeyBank%20Online_files/kds-base-key.css

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (720), with no line terminators
Size:   720
Md5:    3b548a758201e4d24ac16fa71ddf5c9d
Sha1:   8702527cda391169996cbca13b22e697d7845ee2
Sha256: 59a68a8807d9991319f3a95b796cb36a23e58d16206e7afeaa02163e0b987db3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/e9722702-4fb8-436a-9342-c5f4f5c3a75d.woff HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/KeyBank%20Online_files/kds-base-key.css

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (720), with no line terminators
Size:   720
Md5:    3b548a758201e4d24ac16fa71ddf5c9d
Sha1:   8702527cda391169996cbca13b22e697d7845ee2
Sha256: 59a68a8807d9991319f3a95b796cb36a23e58d16206e7afeaa02163e0b987db3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/share/assets/images/kds.svg HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 338
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (720), with no line terminators
Size:   338
Md5:    522598328f3ddb57237c663c407e099c
Sha1:   de8b740ccb6b41996129d951adefc3970c67ebf0
Sha256: 717b5712995e7ffa2910abb61dca63ec2653043c13455bf5518e80ada04d55f1

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/ll_storage_html5.html HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/Login.php?id=jj69nkdil8c?access_token=6colh0jaad5
Upgrade-Insecure-Requests: 1

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Last-Modified: Thu, 09 Jun 2022 08:41:06 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16885
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (43766)
Size:   16885
Md5:    d766058257a34b032bf8e3acc74c79b1
Sha1:   7293775513749f4e51b3ba94690d42c1029dd3b6
Sha256: 69717924a0d2d40a640e72a557740f4c96e9582eb2d1c1fcf455e247986594c6

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/OpenSans-Regular-webfont.488d5cc145299ba07b75.ttf HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/KeyBank%20Online_files/styles.a4962029f638dde4888c.css

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 338
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (720), with no line terminators
Size:   338
Md5:    522598328f3ddb57237c663c407e099c
Sha1:   de8b740ccb6b41996129d951adefc3970c67ebf0
Sha256: 717b5712995e7ffa2910abb61dca63ec2653043c13455bf5518e80ada04d55f1

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/OpenSans-Light-webfont.2e98fc3ce85f31f63010.ttf HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/KeyBank%20Online_files/styles.a4962029f638dde4888c.css

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 338
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (720), with no line terminators
Size:   338
Md5:    522598328f3ddb57237c663c407e099c
Sha1:   de8b740ccb6b41996129d951adefc3970c67ebf0
Sha256: 717b5712995e7ffa2910abb61dca63ec2653043c13455bf5518e80ada04d55f1

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ibxkey/KeyBank%20Online_files/OpenSans-Semibold-webfont.b32acea6fd3c228b5059.ttf HTTP/1.1 
Host: www.aquaflow.ae
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.aquaflow.ae/ibxkey/KeyBank%20Online_files/styles.a4962029f638dde4888c.css

search
                                         208.91.199.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 25 Jan 2023 15:51:02 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 338
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (720), with no line terminators
Size:   338
Md5:    522598328f3ddb57237c663c407e099c
Sha1:   de8b740ccb6b41996129d951adefc3970c67ebf0
Sha256: 717b5712995e7ffa2910abb61dca63ec2653043c13455bf5518e80ada04d55f1

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18446
Expires: Wed, 25 Jan 2023 20:58:28 GMT
Date: Wed, 25 Jan 2023 15:51:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18446
Expires: Wed, 25 Jan 2023 20:58:28 GMT
Date: Wed, 25 Jan 2023 15:51:02 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f7aba17-803f-412c-8ef7-0959b52f87cc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9650
x-amzn-requestid: 3b968ee5-c941-4305-9f06-01e646deef15
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fH88wEUmoAMFerw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cca851-061f65177f36420a4685f372;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 03:06:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xfiiS5M5j8iYKMyopaVqwYV6KKB1VIWT_yQbEKZ9G1wuq2QUEyDBpA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 03:10:29 GMT
age: 45633
etag: "958b50e9e7e5e02882d55612a5d6d2402e225390"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9650
Md5:    13891ffe8a0cc240be63b7945e4b7688
Sha1:   958b50e9e7e5e02882d55612a5d6d2402e225390
Sha256: 1570d69731ba13051454a048ac85bde7c1de8e39dea0fd78e7e5c3f2be122cb6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12758
x-amzn-requestid: c3540562-8c62-4957-9528-7ae952daebaa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9gf1E87oAMFpsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c87acb-49fd3f78275937e24d23fca3;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 23:03:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: c5YOTqrEv9RLv_lKsrC377yost8auxYRPLubBFGjIWtnbueiGMJYGw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 05:14:35 GMT
age: 38187
etag: "0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12758
Md5:    7458f7a9b2070055df6f1d496794e43e
Sha1:   0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9
Sha256: 373097662c419eef9f4a19ce9f3bcead70f6eafbf0acf44806685eece43ce251
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67efee66-d227-4c28-89a3-8fd7f382049b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8308
x-amzn-requestid: 1988d3b3-5e1a-41fd-83f5-092eddb9185f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNys5GDKoAMFdbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cefe52-2349fde60b7db8a34c996717;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:38:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 5_1j_Z6HZ3DSGFPAACJduM5D9eAqMQT42GgI61x8dHAmPQtUexpEYQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 24 Jan 2023 21:59:15 GMT
age: 64307
etag: "42d5b4b4a091778d98c351f0002d8656449d0243"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8308
Md5:    91b2e12a39dc4f63b9d52e8800cce1f2
Sha1:   42d5b4b4a091778d98c351f0002d8656449d0243
Sha256: d4dbc79e3383e83f861ccf8cde3e78ba427a66cd3fa99c17e23ec935867de4ad
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e473b9-0adb-4371-8146-b148ce85cdec.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8252
x-amzn-requestid: a5a39d22-de0e-4b2e-b3e2-aad1d0090881
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fEqtiHo7oAMFdCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cb57f0-0cd78ff23e91baf668276053;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 03:11:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: s8JWGyQ0pTWcaGk0n2PQOpAhjKLuNlbI4wCZAidzoBR5RQreO2rh9g==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 05:15:35 GMT
age: 38127
etag: "c9b86b2b27063e0a58b0f237d451f9cf05b2122d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8252
Md5:    d10114508bd40d76f497fc5b9c064350
Sha1:   c9b86b2b27063e0a58b0f237d451f9cf05b2122d
Sha256: a156bd21bee2fca1d82940fb172a695044321ed432786ae100a7baf3b5e12b3f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9192d2a7-4090-4a55-b72e-388ceb1f506d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10921
x-amzn-requestid: 7b8849e6-b52d-4165-b456-b200ddbb993b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fEqtkGThIAMFb7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cb57f0-1ed4803112d97956419b299e;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 03:11:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: FUbNMfYy8ci6d78p6LCu0Gxs3jw824ZzVp6drAbl8HCDBpghlZFP7g==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 07:57:09 GMT
age: 28433
etag: "b199a381ccac4628f2bfa626b44c71954713ca98"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10921
Md5:    1d76c1b1126a3e1b51dcca652cb6727b
Sha1:   b199a381ccac4628f2bfa626b44c71954713ca98
Sha256: 3a34f2b7f79cb925c73d2c17197418004e4acf63a6eb69e471320069978f8282
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33050e82-3c0a-40d6-a722-e4ff96872edc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6026
x-amzn-requestid: 4b05d7f7-783f-4a79-9eed-bbbeb53bc677
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fRQ-QHmZIAMF6gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d061f4-721f473c5c8dadd163ca7689;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 22:55:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -GQ5kEZvbltzLlBeml1PxYH3ufTrSMApVjDyR_NkR-6-vXfuJHOb0g==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 24 Jan 2023 23:09:45 GMT
age: 60077
etag: "7596b783e0da5fba63c49374933eccffc223d729"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6026
Md5:    bb6c1403a1d3c878c08ccaf17f8b3d0a
Sha1:   7596b783e0da5fba63c49374933eccffc223d729
Sha256: 1524dbef51237950d4a14a0e2e053fad933dd92ee0831e2de5c45513122f1d58
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3195
Cache-Control: max-age=146377
Date: Wed, 25 Jan 2023 15:51:03 GMT
Etag: "63d0dc35-1d7"
Expires: Fri, 27 Jan 2023 08:30:40 GMT
Last-Modified: Wed, 25 Jan 2023 07:37:25 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3195
Cache-Control: max-age=146377
Date: Wed, 25 Jan 2023 15:51:03 GMT
Etag: "63d0dc35-1d7"
Expires: Fri, 27 Jan 2023 08:30:40 GMT
Last-Modified: Wed, 25 Jan 2023 07:37:25 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ibxolb/login/images/apple-touch-icon.png HTTP/1.1 
Host: ibx.key.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.aquaflow.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.52.18.181
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
etag: "638900d0-1322"
last-modified: Thu, 01 Dec 2022 19:30:24 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
x-xss-protection: 1; mode=block
x-envoy-upstream-service-time: 17
content-security-policy: frame-ancestors *.key.com *.keybank.com
strict-transport-security: max-age=16070400; includeSubDomains
server-timing: dtSInfo;desc="0", dtRpid;desc="-1603381324"
content-length: 4898
cache-control: max-age=300
expires: Wed, 25 Jan 2023 15:56:03 GMT
date: Wed, 25 Jan 2023 15:51:03 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size:   4898
Md5:    fee1734f5f10bbd1c030e8cd2e1a8896
Sha1:   18d49e15c6adbf73acf60dc258d3630fb7f5090b
Sha256: f84def209aa5859896a65dc88fabeb52f93d837b5271d8ffe0d557c92b706a07
                                        
                                            GET /ibxolb/login/images/favicon-16x16.png HTTP/1.1 
Host: ibx.key.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.aquaflow.ae/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.52.18.181
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
etag: "638900d0-295"
last-modified: Thu, 01 Dec 2022 19:30:24 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
x-xss-protection: 1; mode=block
x-envoy-upstream-service-time: 0
content-security-policy: frame-ancestors *.key.com *.keybank.com
strict-transport-security: max-age=16070400; includeSubDomains
server-timing: dtSInfo;desc="0", dtRpid;desc="1079167968"
content-length: 661
cache-control: max-age=300
expires: Wed, 25 Jan 2023 15:56:03 GMT
date: Wed, 25 Jan 2023 15:51:03 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size:   661
Md5:    ea4b275c774e8170ed54751d39a6adbf
Sha1:   c4fda6c23491accd170362ab21108d8ae31a647f
Sha256: 735143f90a8c225ffe4c0a853b25f2068510d81f8f6a82db79db00233ccc4b58