Overview

URL idahoiccu.myvnc.com/ic/
IP157.230.208.111
ASNDIGITALOCEAN-ASN
Location United States
Report completed2022-09-28 05:23:22 UTC
StatusLoading report..
urlquery Alerts DynDNS domain detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-28 2 idahoiccu.myvnc.com/ic/ Phishing
2022-09-28 2 idahoiccu.myvnc.com/ic/areas/script/style/machine/vms.js Phishing
2022-09-28 2 idahoiccu.myvnc.com/ic/areas/script/style/machine/aec7706684 Phishing
2022-09-28 2 idahoiccu.myvnc.com/ic/areas/script/style/machine/nr-1215.min.js Phishing
2022-09-28 2 idahoiccu.myvnc.com/ic/js/actions.js Phishing
2022-09-28 2 idahoiccu.myvnc.com/ic/areas/script/style/machine/1ca8ebd0.js Phishing
2022-09-28 2 idahoiccu.myvnc.com/ic/areas/script/style/machine/google-play-badge.svg Phishing
2022-09-28 2 idahoiccu.myvnc.com/ic/areas/script/style/machine/app-store-badge.svg Phishing
2022-09-28 2 idahoiccu.myvnc.com/ic/areas/script/style/machine/Alkami.woff2 Phishing
2022-09-28 2 idahoiccu.myvnc.com/ic/js/actions.js Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (21)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS wup-1ca8ebd0.us.v2.we-stats.com (3) 225817 2022-03-15 17:31:46 UTC 2022-09-26 14:51:12 UTC 52.141.217.134
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-27 13:22:33 UTC 34.120.237.76
mnemonic passive DNS 1.b406929acabac9b095f124c81bdfcf57f.com (2) 75277 2020-11-23 09:04:27 UTC 2022-09-27 19:08:22 UTC 54.230.111.127
mnemonic passive DNS ajax.aspnetcdn.com (1) 693 2012-05-24 13:35:31 UTC 2022-09-27 05:09:24 UTC 152.199.19.160
mnemonic passive DNS ocsp.sectigo.com (2) 487 2018-12-17 11:31:55 UTC 2022-09-28 00:01:04 UTC 104.18.32.68
mnemonic passive DNS bam-cell.nr-data.net (1) 365 2020-10-12 23:06:03 UTC 2022-09-27 04:53:27 UTC 162.247.241.2
mnemonic passive DNS r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2022-09-28 04:06:48 UTC 23.36.77.32
mnemonic passive DNS idahoiccu.myvnc.com (36) 0 2022-09-28 00:39:54 UTC 2022-09-28 00:43:33 UTC 157.230.208.111 Unknown ranking
mnemonic passive DNS ocsp.digicert.com (7) 86 2012-05-21 07:02:23 UTC 2022-09-28 04:19:13 UTC 93.184.220.29
mnemonic passive DNS 1.c81358859121583b7adf2ace89cb39f44.com (2) 75217 2020-11-23 09:04:27 UTC 2022-09-27 23:58:04 UTC 54.230.111.34
mnemonic passive DNS stackpath.bootstrapcdn.com (1) 2467 2018-04-05 04:41:29 UTC 2022-09-28 00:30:52 UTC 104.18.10.207
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-28 17:26:30 UTC 2022-09-27 23:53:35 UTC 143.204.55.35
mnemonic passive DNS cdnjs.cloudflare.com (2) 235 2020-10-20 10:17:36 UTC 2022-09-27 05:23:18 UTC 104.17.25.14
mnemonic passive DNS 1.a79ab95c1589a13f8a4cab612bc71f9f7.com (2) 75111 2020-11-23 09:04:27 UTC 2022-09-27 23:58:04 UTC 54.230.111.22
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-27 05:14:54 UTC 52.42.148.177
mnemonic passive DNS ocsp.godaddy.com (1) 698 2012-05-20 19:28:57 UTC 2022-09-27 04:52:31 UTC 192.124.249.41
mnemonic passive DNS js-agent.newrelic.com (1) 378 2017-01-30 05:00:15 UTC 2022-09-27 04:53:27 UTC 151.101.86.137
mnemonic passive DNS log-1ca8ebd0.us.v2.we-stats.com (1) 234327 2022-03-15 17:31:50 UTC 2022-09-26 14:51:15 UTC 52.238.253.184
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-27 05:14:54 UTC 34.160.144.191
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-27 04:52:33 UTC 34.117.237.239
mnemonic passive DNS code.jquery.com (2) 634 2012-05-21 17:28:02 UTC 2022-09-27 04:52:54 UTC 69.16.175.42


Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 157.230.208.111

Date UQ / IDS / BL URL IP
2022-09-28 05:23:22 +0000
37 - 0 - 10 idahoiccu.myvnc.com/ic/ 157.230.208.111

Last 5 reports on ASN: DIGITALOCEAN-ASN

Date UQ / IDS / BL URL IP
2022-12-02 13:08:39 +0000
0 - 0 - 11 coins-report.com/bankbbva/?cep=nCg7v23SpL1dcw (...) 178.128.238.150
2022-12-02 13:02:30 +0000
0 - 0 - 2 billionairewomen.net/ 188.166.234.144
2022-12-02 12:36:10 +0000
6 - 0 - 4 affiliationmarketcoinbase.icebergbuilder.com/ (...) 134.209.252.139
2022-12-02 12:33:51 +0000
0 - 0 - 2 user-secure-ldverify02.com/cgi-sys/defaultweb (...) 174.138.45.232
2022-12-02 12:33:01 +0000
0 - 0 - 11 myshopgroup.com/ 159.65.5.167

Last 1 reports on domain: idahoiccu.myvnc.com

Date UQ / IDS / BL URL IP
2022-09-28 05:23:22 +0000
37 - 0 - 10 idahoiccu.myvnc.com/ic/ 157.230.208.111

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-11-06 21:21:44 +0000
0 - 0 - 6 secured-onlineiccu.com.ng/idaho-central-credi (...) 161.97.109.178
2022-11-06 20:55:09 +0000
0 - 0 - 5 www.idahocu.web-2124.site/idaho-central-credi (...) 161.97.109.178
2022-11-06 20:54:51 +0000
0 - 0 - 5 idahocu.web-2124.site/idaho-central-credit-un (...) 161.97.109.178
2022-11-06 20:53:47 +0000
0 - 0 - 5 www.idaho-idcheck.icu.com.ng/idaho-central-cr (...) 161.97.109.178
2022-11-06 18:32:48 +0000
0 - 0 - 6 secured-onlineiccu.com.ng/idaho-central-credi (...) 161.97.109.178


JavaScript

Executed Scripts (17)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (82)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 28 Sep 2022 05:15:39 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 595-N8wUf7UC5YkYOZmWVFikgSOE4GCy__aTU-26Jipl-YCjaa1diA==
Age: 452


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    1b3053fa528e28810f8a2cc9284cc921
Sha1:   cca9eb471d941881a6b9a1793aecb6c281908f6a
Sha256: a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14704
Expires: Wed, 28 Sep 2022 09:28:15 GMT
Date: Wed, 28 Sep 2022 05:23:11 GMT
Connection: keep-alive

                                        
                                            GET /ic/ HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Wed, 28 Sep 2022 05:23:11 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 19:34:42 GMT
Accept-Ranges: bytes
Content-Length: 58913
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (26629), with CRLF line terminators
Size:   58913
Md5:    2ad849f6f725b8d1e83b6e5d604563ad
Sha1:   49af3c07de2b3e089ded6ee4e4f590197d936281
Sha256: a56915e0c347bd36d5633051492430b5fe603d8f0a2a6419e26b626ca6840890

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F35BB3A8C877DD8D3C5920F3C917722F12B157AFF398E2EC30FAB51FA6CAA2EF"
Last-Modified: Mon, 26 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4782
Expires: Wed, 28 Sep 2022 06:42:53 GMT
Date: Wed, 28 Sep 2022 05:23:11 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: C7lPD5F02XViZ1wUOWKTOPKNPCRP1HKwpUqaKC3AuX+HozjJkRE3qLV+GinpqvZGWof1n2KvPU32WTTYYv/cWA==
x-amz-request-id: GWD0TXK3NXN849GN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 28 Sep 2022 04:47:15 GMT
age: 2156
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 28 Sep 2022 05:23:11 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /ic/areas/script/style/machine/vms.js HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 28 Sep 2022 05:23:11 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:36 GMT
Accept-Ranges: bytes
Content-Length: 52293
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (52293), with no line terminators
Size:   52293
Md5:    b401a6756e724182f017ee006f8e00f7
Sha1:   0c2b11a8b820eb19b39fd5c86fce974c9740b956
Sha256: ee2ee9385a336aac34b1b6060d64d1096faabe3142579fd76e125439e2eb8f2c

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ic/areas/script/style/machine/aec7706684 HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
                                        
Date: Wed, 28 Sep 2022 05:23:11 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 49
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   49
Md5:    ada33e5b8877e743ff658bf4bfa1867c
Sha1:   5a78662243dac43c0ee48bcb7e05a536b84c2e38
Sha256: dac715f087720dd7ff7067f5d2ec1988851fa93140ae8a9cbfaa15659dd7fd82

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ic/areas/script/style/machine/nr-1215.min.js HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 28 Sep 2022 05:23:11 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:36 GMT
Accept-Ranges: bytes
Content-Length: 36751
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32010)
Size:   36751
Md5:    615035bb6557b191e767e19087efabaf
Sha1:   c77d04d9fc7d42cf64b4f7a1e9efb8fd0d1ada5e
Sha256: 18395fd1ef75de4f03f701f5a5020563aed55e1539b3200605053f2c924211bb

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ic/areas/script/style/machine/yui-reset.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:11 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 793
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (746)
Size:   793
Md5:    ff296a5a2b2062ce5cbcb0b8cfcca0e4
Sha1:   5477838f625b923e8a18dc2c28a127275132afcf
Sha256: 590fcd2ea2a3de691c86ecf564fff1fcb0982271cf723ae4d6e2453c9e6f5434

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/css.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:11 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:36 GMT
Accept-Ranges: bytes
Content-Length: 297
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   297
Md5:    cd765e648a4756c3d2ca7fd363889908
Sha1:   fd4a560834ce0d73ef0f3b1b6ab1f6f27d7dc180
Sha256: ca7cdea357e0ec0eb39b4df17fe31380629f876cf97844aa4a3013b4e8bfcd61

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4305
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 05:23:11 GMT
Last-Modified: Wed, 28 Sep 2022 04:11:26 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /ajax/libs/jquery.mask/1.14.10/jquery.mask.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 28 Sep 2022 05:23:11 GMT
content-length: 4517
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-4e98"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 3057777
expires: Mon, 18 Sep 2023 05:23:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GaKyr7i2bbvS1zb3tgZu%2FFj3rZ1GVeUjOd2yX7CMksGaapXUvKJF49YKb13Y9nReUIPtKRT%2FbTGjCFrL5jJHaXmu42qLNp%2FNBWcgB5XerUy7kdCIMHIQ1yQCXpF5uIjQL7fpGcRW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 751a0bafadd81c06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   4517
Md5:    e40e054c5726f042bad463e3774a2777
Sha1:   5c9413b72837a440b327444104830c35ae3b052c
Sha256: fcc8a86d2e89e8fbe9815d50c23bf205191ab8a6c0bec67358cd975d94283ff8
                                        
                                            GET /jquery-3.2.1.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         69.16.175.42
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 28 Sep 2022 05:23:11 GMT
content-encoding: gzip
content-length: 30125
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15283"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1664342591.dop018.sk1.t,1664342591.cds239.sk1.hn,1664342591.cds222.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32058)
Size:   30125
Md5:    148f8d3ffd9cc02048c5f4d1cc83c407
Sha1:   9f2b89cfd151be6a29b4d43ad64d164fb8471046
Sha256: 4dc681da48ba2b417e613e8e027ff5322963c3a3697a8ba97973cfefb48def5e
                                        
                                            GET /ajax/jQuery/jquery-3.3.1.min.js HTTP/1.1 
Host: ajax.aspnetcdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         152.199.19.160
HTTP/2 200 OK
content-type: application/javascript
                                        
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 17344086
cache-control: public,max-age=31536000
date: Wed, 28 Sep 2022 05:23:11 GMT
etag: "80288516b793d31:0"
last-modified: Mon, 22 Jan 2018 19:27:49 GMT
server: ECAcc (ska/F7A8)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 30394
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30394
Md5:    a263be51483c81a54aa8c85104a93e55
Sha1:   555a54a73531c553bd2aede6abc25c128b63312e
Sha256: b2f13ad730928958c09d89e6e32bb6a227c0260d032a39ca464d998a59e57a66
                                        
                                            GET /jquery-3.3.1.slim.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://idahoiccu.myvnc.com
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         69.16.175.42
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 28 Sep 2022 05:23:11 GMT
content-encoding: gzip
content-length: 24038
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-1111d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1664342591.dop212.sk1.t,1664342591.cds017.sk1.hn,1664342591.cds230.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65247)
Size:   24038
Md5:    0f2e7d37e730fdbb1d8a1e8638529ecb
Sha1:   c21d16978a858baa75be15cb7e799ff000929429
Sha256: cc938c08b93e67c94c68995709f52133c62cac78991f42058503b9c3d9e4b0b0
                                        
                                            GET /ic/areas/script/style/machine/grid.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:11 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 5185
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (5143)
Size:   5185
Md5:    2c1caab01f9eba70c931de585b7936a8
Sha1:   8215a993e0717b9e7d3e91aae636ec45a71d980d
Sha256: 78b79736545ee390cd074de666a8a4abc8a2296371c5b0e174fd012c086f5db0

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/sidebar.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:11 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 2661
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (2616)
Size:   2661
Md5:    0fb7d6883731cb937b4a21acd12b9d75
Sha1:   33a9340978c94b1310c162892b0fd0000a89b748
Sha256: fcf788fc779cf3a243ded5706805cf150144797f84a8c25fdc4d99584728bfb7

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/iris.shim.desktop.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:11 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 673
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (618)
Size:   673
Md5:    59bf2a4ff43b075967d30bf79df13983
Sha1:   19f297362e717cd28ba498e8d3fa32b126fe7e3f
Sha256: 59f12ecd0c381fee3367ffac176a581a966727684a5ce94390b4390b2fc06ca4

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4306
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 05:23:12 GMT
Last-Modified: Wed, 28 Sep 2022 04:11:26 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4235
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 05:23:12 GMT
Last-Modified: Wed, 28 Sep 2022 04:12:38 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 28 Sep 2022 04:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Wed, 28 Sep 2022 05:14:07 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: D28jnK7V1Tm0bZoXoyxWcvRA_tWRpQp6ZIcW6H0KM69ceTsLQscHgg==
Age: 3219


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4306
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 05:23:12 GMT
Last-Modified: Wed, 28 Sep 2022 04:11:26 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://idahoiccu.myvnc.com
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 28 Sep 2022 05:23:12 GMT
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 7385839
expires: Mon, 18 Sep 2023 05:23:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UNbBill9tcTMeOyBmzumxrS7ie1%2BEGf9Nxl4LAE4dzS%2F%2BR3VgPB2%2FqM7gSUmusYoLwUaoXpJy0KNZqTX5UTyMwdm5znXAwidb2j5%2B3BtPenbE16ET0k2FR5G6G4kqThuxdP7%2F2UA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 751a0bb06802b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20322)
Size:   6458
Md5:    df9fe6d48e380554eb0ec9687bed3246
Sha1:   207263d754220200c1916edfbda262f62223ecf5
Sha256: 91d57502b7260e6752c2b5f1636d77707929fa9f09da28589691e61816a448f9
                                        
                                            GET /ic/areas/script/style/machine/iris-foundation.min-1.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 51310
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (50964)
Size:   51310
Md5:    b8c864cda1f61ea4ffc57ba52f038a41
Sha1:   5c8784412d182c24f931531629a9bcf1455e9e76
Sha256: f6fca06e2aac270b488f73bcf0a10d249e2722a015135e60dbb49360c5335a72

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/ext-all.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:11 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 102927
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65414)
Size:   102927
Md5:    02fee68b4adab7f46f4d07ae83dc1f24
Sha1:   5717c1993daa6ef53112280ece2922e923daf71c
Sha256: 62bf69c5e3a6e28604d5388ee424752e98ced77c10d571ed1d0f620cb7da4763

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/iris-components.shim.desktop.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:36 GMT
Accept-Ranges: bytes
Content-Length: 1386
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1159)
Size:   1386
Md5:    3aa8aa487c7deea0f6b8ba1d34be5ab5
Sha1:   c90c912bd90ba26991055d534bf75d7f4009f80c
Sha256: 5f1ac800b30e618e81d92daf6cf789241d30e9c339bbde04423864767985209c

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4235
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 05:23:12 GMT
Last-Modified: Wed, 28 Sep 2022 04:12:38 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1053
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 05:23:12 GMT
Last-Modified: Wed, 28 Sep 2022 05:05:39 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ic/areas/script/style/machine/font-icons.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:11 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:36 GMT
Accept-Ranges: bytes
Content-Length: 113638
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   113638
Md5:    42e28550ee244dcaf1fda65d826f9eaa
Sha1:   5364367ae417fc73e4dd0fca3851b2b9b427ff53
Sha256: 8cea6396b7555e23a9d65cbb385e453468afb4d26de6b96563d99de09f0f8e49

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/isotope.1.5.3.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 5057
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (2884)
Size:   5057
Md5:    b5560502a47ac17af7a14f280d1fb48d
Sha1:   88b8b2e860c4caa88e0d0b60dc8bc0345b8fec25
Sha256: bcf82308a4a42f5785de42dda6584b42785e242cc336bd5d8e937b6e2d0d816e

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/Authentication-Isotope.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 2292
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (2232)
Size:   2292
Md5:    1670787bdf1b3381408c8aa1111bbd34
Sha1:   60256b6162407fb2ca392932add7ffdd2be2fb0b
Sha256: e74e5f034f5271bd9b40cd48fefc2ad11e52d6b07f68b68092b15d71952fe955

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/theme.desktop.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 45823
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (45771)
Size:   45823
Md5:    6c3c1d30a872611b5eaf9654d7741243
Sha1:   4c94cc40b1208dea31dfbcba9bc8ba1a8327cf35
Sha256: a84d6e27763c156403ececaeee9e1f53ea08f2c6860338cf13d18a4826a68c5d

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/iris-components.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 175214
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65310)
Size:   175214
Md5:    a6d84aac4b167eead101b31df440aa02
Sha1:   ebd3b47dcf938b26012e03c2c07399cadb6b4328
Sha256: ca93a92face85a97a9637a0a5276085830bf4e348a66d89a2537bba257d1255c

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/iris-foundation.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:36 GMT
Accept-Ranges: bytes
Content-Length: 51310
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (50964)
Size:   51310
Md5:    b8c864cda1f61ea4ffc57ba52f038a41
Sha1:   5c8784412d182c24f931531629a9bcf1455e9e76
Sha256: f6fca06e2aac270b488f73bcf0a10d249e2722a015135e60dbb49360c5335a72

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/iris.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:11 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 96872
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   96872
Md5:    c5e50b525f0263e1ac2cd02cba36ae8b
Sha1:   2e5cb26421eba86ccbe9b9df0e471c539e15f9a0
Sha256: ff28c9da91ba98b52e06f7560ffc037989d7b00260ecb44210a3f39f4aa90905

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/fi.desktop.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 57098
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (57049)
Size:   57098
Md5:    4ab9eab5f2d08c465af9a2062f98b61f
Sha1:   eb16e505592833ff6f369b064c0043c96140100f
Sha256: 2971fd15e4a65ecb5a6e24c13bcc31f5889f6d4161e1500f317b3617d374824c

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/isotope/orbital/idaho/central/style.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 16 Nov 2021 14:01:14 GMT
Accept-Ranges: bytes
Content-Length: 414
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   414
Md5:    f9653fbeecf34b04791fee59eb3e253b
Sha1:   fcbbad7c6616682a22a9d0de09d715c61cb17722
Sha256: 7924e7e8b95825e4cefbfc31444ea9247e1b0d04cb066b56f06addf9cc7c5eaf

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/js/actions.js HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ic/areas/script/style/machine/jquery-ui.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 28103
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (26298)
Size:   28103
Md5:    66190a4704d83fef2c9115d62bf7d6a9
Sha1:   12f8f5c9d5ba33bb8fcc007c5bc4654a6bab050a
Sha256: 373d9743eada376837b663266c5ca79eb2f750db86feaf7e4f35b2e11719b116

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/jquery.daterangepicker.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 2637
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (2577)
Size:   2637
Md5:    2832b92b9aaa9994685c5c73f85550e7
Sha1:   97fa89b53df09e895f086412781cc98a1ce57935
Sha256: ab9c55dea4e2d8b7e988cb51b7f82d7dda04336a90e7b9400ac417198590077b

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 36hvHIRE4PdI6gb3GXYG+w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         52.42.148.177
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tBvRYkKqXGe5EodH4JRPirhP0IA=

                                        
                                            GET /ic/areas/script/style/machine/base.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 196396
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (30835)
Size:   196396
Md5:    b0110ab0102ba3d149f70e7c27468df3
Sha1:   dada47a6320bf1615db37b820f1cd9b87ec63eb0
Sha256: c1f40a33af1a612971826278da1e4b27e77b7842629520f64c984115c14793a2

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/1ca8ebd0.js HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 628019
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (60538), with CRLF, LF line terminators
Size:   628019
Md5:    508aa7e5b5b3d2ded5a876cae0e58213
Sha1:   9a6e09fd3e898de27bcbd752d3efc5162c476420
Sha256: d47c1346c52c0852d822943bfca34fc528d65158de4aec5992b6c5f04b56aeff

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ic/areas/script/style/machine/google-play-badge.svg HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:40 GMT
Accept-Ranges: bytes
Content-Length: 9332
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size:   9332
Md5:    5e01637f08de80e8c27c414687738968
Sha1:   2d4fe2500bb550dc45c048e78aa62356fb4cbc2c
Sha256: 2dcf765854f1fe869b1674016feb1638870c1066f156f8d7dfd47b53d0dc093f

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ic/areas/script/style/machine/app-store-badge.svg HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 10850
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1356), with CRLF line terminators
Size:   10850
Md5:    1b65926236d951b2af57201b275f595b
Sha1:   1ce3e7bf2853a59f0fc9ad064e1fd48260da0f38
Sha256: 86c9954e1457d27db013c1f10a96ffaba845e5af7765c4ef9df4ac1549e47d67

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ic/isotope/orbital/idaho/central/loading.gif HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Sat, 11 Aug 2018 13:03:52 GMT
Accept-Ranges: bytes
Content-Length: 38636
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 200 x 200\012- data
Size:   38636
Md5:    d10ef01e81faa2c2d812bdf670b4e072
Sha1:   77d09a57b2091fd7665dff763a5eab23e0ff907e
Sha256: 5e3d5246b17e19e65385092db07554d8e1c5c4a226a6d7f97824b8e1e8571e34

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/print.min.css HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 7683
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (7640)
Size:   7683
Md5:    5ea47141067df02ea5d7a2e63392385a
Sha1:   3f3368bf12572b5277b68b0284dfb7a013ba68d1
Sha256: a277dd9a22a97f512f9024dbe82acb5468a168ec43bad3146b2cda9d93afd2fe

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/Logo.png HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 28 Sep 2022 05:23:12 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 6276
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 241 x 94, 8-bit/color RGBA, non-interlaced\012- data
Size:   6276
Md5:    310bf1685719fd8069dc66b522e2a693
Sha1:   5ab5b07dfbfba25a721fb2d8db30251b411dffdd
Sha256: dc60a0c398660ef4d7941be280289932cbfe8d90d9437de4ad19761d7ae99c2e

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/Alkami.woff2 HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/areas/script/style/machine/font-icons.css

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Date: Wed, 28 Sep 2022 05:23:13 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 41332
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 41332, version 1.0\012- data
Size:   41332
Md5:    1d6ac65b22cd20ac675178f288eb5bd7
Sha1:   24d394b28692f029b4c85c9f01f129991318332b
Sha256: c7bdfce22d332b51991b327d6c85e131e779fe2712cd378aaa1f66d99809c073

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ic/js/actions.js HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 28 Sep 2022 05:23:13 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ic/areas/script/style/machine/favicon-16x16.png HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 28 Sep 2022 05:23:13 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:36 GMT
Accept-Ranges: bytes
Content-Length: 342
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size:   342
Md5:    553313d2cf760cf8c4bec228a2a34ac0
Sha1:   48609c9c8ec7b062dce1ec1b562e38265dc37a42
Sha256: 251892031689419e0abf81a0a9f215501b8db25a697db488386784447467f815

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /ic/areas/script/style/machine/android-chrome-192x192.png HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 28 Sep 2022 05:23:13 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:36 GMT
Accept-Ranges: bytes
Content-Length: 1284
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Size:   1284
Md5:    6b67b118fbfba6dfcba13c3399c2785a
Sha1:   5ed584897621e00c19ff2b8b2163e55ddc773ef4
Sha256: ae2a3cdade7a636fe8798c6115bb5aad21d8ea267c07d36f970e4db445089bd8

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         192.124.249.41
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Wed, 28 Sep 2022 05:23:13 GMT
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 28 Sep 2022 04:19:03 GMT
Expires: Thu, 29 Sep 2022 04:19:03 GMT
ETag: "3f3a4e3ffbce4cb1bc045cce2bc4c4a0990600d5"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1778
Md5:    60ce5f0f04f3cb32c814407e17a79cf4
Sha1:   3f3a4e3ffbce4cb1bc045cce2bc4c4a0990600d5
Sha256: a5af095bca3ef642f85cb35b02caa0bc574a2cb94e4e4263888e522e96bbec52
                                        
                                            GET /ic/areas/script/style/machine/iccu_bg.jpg HTTP/1.1 
Host: idahoiccu.myvnc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/ic/areas/script/style/machine/theme.desktop.min.css

                                         
                                         157.230.208.111
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 28 Sep 2022 05:23:13 GMT
Server: Apache
Last-Modified: Tue, 01 Feb 2022 18:05:38 GMT
Accept-Ranges: bytes
Content-Length: 1109718
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3\012- data
Size:   1109718
Md5:    b99b756449d5aa667c9bc3644d44d0ab
Sha1:   b111391935cdd4264415647b46ad09d1f1871ec9
Sha256: f15e4cb14bc24f8cf63dcd7f1d94808f6f9303126d86df43c4d3c8bca5c52b55

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            POST /client/v3.1/web/wup?cid=attina HTTP/1.1 
Host: wup-1ca8ebd0.us.v2.we-stats.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 172
Origin: http://idahoiccu.myvnc.com
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         52.141.217.134
HTTP/2 200 OK
content-type: application/json
                                        
content-length: 898
date: Wed, 28 Sep 2022 05:23:12 GMT
server: uvicorn
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache, no-store
pragma: no-cache
tail-id: ded75790-67ac-4c38-816e-2d4dd9e4492e
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (898), with no line terminators
Size:   898
Md5:    c57c548b18d9ea2360ea62dacd4c0579
Sha1:   4971824f77b12498d7a228d94f8c3d9588854cbe
Sha256: 388d40a777ebac50afd83bad2cef65ab9ca6d61bc50f061c22ad83262075f79e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13007
Expires: Wed, 28 Sep 2022 09:00:00 GMT
Date: Wed, 28 Sep 2022 05:23:13 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13007
Expires: Wed, 28 Sep 2022 09:00:00 GMT
Date: Wed, 28 Sep 2022 05:23:13 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13007
Expires: Wed, 28 Sep 2022 09:00:00 GMT
Date: Wed, 28 Sep 2022 05:23:13 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13007
Expires: Wed, 28 Sep 2022 09:00:00 GMT
Date: Wed, 28 Sep 2022 05:23:13 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13007
Expires: Wed, 28 Sep 2022 09:00:00 GMT
Date: Wed, 28 Sep 2022 05:23:13 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7455
x-amzn-requestid: e99c9f33-b72a-4070-80cf-06fb4a87d1df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZG4S6EcAoAMFX1A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6332a0df-04122b4a345dbc3f3918af98;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 07:06:07 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: yW-bGn5vYTa6Z28ELKYgYpy98wQEbYJIl5yxd1qLxz1YjVYKxMH2Wg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 07:31:02 GMT
age: 78731
etag: "b383135e2ebc23fe80eb0d594b198cb8c89327a5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7455
Md5:    ea3890e460356d6ecc3ba4e405ac2e9e
Sha1:   b383135e2ebc23fe80eb0d594b198cb8c89327a5
Sha256: 8fcff053ce6e5750136bf876bad5b2916935f13ea039912d977928b086f0a48b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb17f4e8-cf01-41dc-8d4d-247daf3e0160.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 14018
x-amzn-requestid: fb0f02e7-1ce0-4861-9446-13d60df06f24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3xSEhCIAMFWkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336cd4-79f482493d204a1208fad00f;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZAov4fpWAjIBhHfeYEwu39wJTG58HnW7ebekpIoNSgA7PLIs5b7sSg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 22:09:19 GMT
age: 26034
etag: "78b1a603c4f7f2d6fbad15d7a4cd1397554339e9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   14018
Md5:    d039db0b842a4cbbaefdaab98bc6722b
Sha1:   78b1a603c4f7f2d6fbad15d7a4cd1397554339e9
Sha256: 65a3c7b0515cfd2a723f3bc3147cb98f3dd75ce1ecfce915c7c8e9ba5ae0bf2d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11314
x-amzn-requestid: 9f410158-cd1a-45a9-9e86-4005b25577e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e4Hw7oAMFpAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-70683c681f22a3b6103fcb4a;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l9IinQYCcQV_iymSArIEnOWgbmLlmVqz94402zcsmga5Bp3Sty7QRg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:40:49 GMT
age: 27744
etag: "8ad289a77705358ab660b6123e9d90de991b6c13"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11314
Md5:    ee83d08d024d127fad5918e1ffacb78b
Sha1:   8ad289a77705358ab660b6123e9d90de991b6c13
Sha256: aaab3590ef3777ce8b7a9a34f18866fa20ecaa554cbcdcdb3f1fa3c34c88ceb4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa8d9d6-9650-4c92-a2db-529657be591b.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10031
x-amzn-requestid: 0ac9a228-b6ce-4695-b269-f6a5ba959576
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e4HTsoAMF8dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-1d1cacef2608d5820b2bc1b1;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: HKSCXbOStqMfD92WWwpkNF1l9euR9RkHTo2boSKqhPAunGl2u_YGlg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:46:48 GMT
age: 27385
etag: "e26e7e4f7c67d680f0c2d0fa84dcb77ffbef6a49"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10031
Md5:    07f06c54e3b1431203308e4134e7efcb
Sha1:   e26e7e4f7c67d680f0c2d0fa84dcb77ffbef6a49
Sha256: 2814f21c6a21623c189163672867272eb24f754d3d22a8285349e5dd9f6b49f7
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc892aae9-4381-46ed-9dd8-bd581d7389ee.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8621
x-amzn-requestid: 5a828651-41c2-4aa0-931d-6522098a8438
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZASUWEYvIAMFUJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ffdb5-5ace75523a98a9237fabca8f;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 07:05:25 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _r1yeWUGcjSAzmlPcqiZrNgOGrGb29Dxgrz3AOm9oU0-wgHy7axiKw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 07:40:36 GMT
age: 78157
etag: "883e61d46ef6c09013724aa7b8f560272ee08574"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8621
Md5:    59163c799f3d48e74abdd285ee615119
Sha1:   883e61d46ef6c09013724aa7b8f560272ee08574
Sha256: e1bafc575ff4274b210bee481a8e73c065de5bc14ddf46c269ef91eda0df8d84
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a264fec-4624-4025-b0d1-044fc33e338f.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9780
x-amzn-requestid: 9938422e-12cd-4aab-9e58-c26b8fee53b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3UOH3DoAMFZRw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c1a-37105d923f19437025abec71;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:33:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Halsx09hxT_sMRc2jy-fJA0tE85F6Bgz9P9Trx02Z9aMfIZVLkLW4g==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 22:11:14 GMT
age: 25919
etag: "1a1139cff14aff6755b9e43ff4ef8c9ece1102c1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9780
Md5:    43d7c0db2af42ad4d0095324b2691f6c
Sha1:   1a1139cff14aff6755b9e43ff4ef8c9ece1102c1
Sha256: 42073c84e0c215109b54ab55a53cce9e6cce44f4619f5988fa4e2776ff70b362
                                        
                                            GET /nr-1215.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.86.137
HTTP/2 200 OK
content-type: application/javascript
                                        
x-amz-id-2: FDsMEePuN+0wmarxjmYDTeBIVH3oM3fS/y86WvvakEQYhOVWOGDsPBKU9j6D7nSF2ydxf3mARlE=
x-amz-request-id: MTV8YD4MK5JFDNCN
last-modified: Mon, 24 Jan 2022 22:13:53 GMT
etag: "615035bb6557b191e767e19087efabaf"
x-amz-version-id: mrZZlI3m.d3cabi4HqLBBkr4pQ2c77UF
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 28 Sep 2022 05:23:13 GMT
via: 1.1 varnish
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 17
x-timer: S1664342594.787824,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 13666
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32010)
Size:   13666
Md5:    a76aa8e77462ba6b2a5e20e40cd5ae7f
Sha1:   34e99447d8cf9955684d03fe7758917fae3cf9ad
Sha256: 4dadae41651f4613ed8ff9723875dabe592ea0426ce17934d04fa5cd08b32b84
                                        
                                            GET /scripts/prod/crossdomain.html HTTP/1.1 
Host: 1.b406929acabac9b095f124c81bdfcf57f.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.127
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 221
date: Tue, 27 Sep 2022 07:50:10 GMT
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
etag: "21e34cf6a03f570df49e212018a567d0"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: A38oVUJd-5GFdCq3TgSxru0kR6IdrByXyGa3of3Xi2p-RIgAYUFV1A==
age: 77584
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   221
Md5:    21e34cf6a03f570df49e212018a567d0
Sha1:   f0be4058936850ae0163f5137600d14b6632bbb3
Sha256: 0a23512ea579554af1f2614d6dea6120d38660028fc7624c71a978478fae0eb6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 28 Sep 2022 05:23:13 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 25 Sep 2022 00:17:20 GMT
Expires: Sun, 02 Oct 2022 00:17:19 GMT
Etag: "a29b4b75545fb24e3e8df8fb02a109b18fd98b15"
Cache-Control: max-age=326645,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751a0bbb6fc60b4d-OSL

                                        
                                            GET /scripts/prod/crossdomain.html HTTP/1.1 
Host: 1.a79ab95c1589a13f8a4cab612bc71f9f7.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.22
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 221
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 14:26:38 GMT
etag: "21e34cf6a03f570df49e212018a567d0"
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lfrX56-NaPKV_CmB0jI5m3o2mV-0FbZnTC558AokSvimisDIvx0mwQ==
age: 53796
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   221
Md5:    21e34cf6a03f570df49e212018a567d0
Sha1:   f0be4058936850ae0163f5137600d14b6632bbb3
Sha256: 0a23512ea579554af1f2614d6dea6120d38660028fc7624c71a978478fae0eb6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6191
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 05:23:13 GMT
Last-Modified: Wed, 28 Sep 2022 03:40:02 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 28 Sep 2022 05:23:14 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 06:00:07 GMT
Expires: Tue, 04 Oct 2022 06:00:06 GMT
Etag: "a2a58632696a88e7f59197cef69b904cf1048934"
Cache-Control: max-age=520012,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751a0bbb6a8fb529-OSL

                                        
                                            GET /scripts/prod/crossdomain.html HTTP/1.1 
Host: 1.c81358859121583b7adf2ace89cb39f44.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.34
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 221
date: Tue, 27 Sep 2022 10:02:40 GMT
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
etag: "21e34cf6a03f570df49e212018a567d0"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rmBOEKdk8auzHvpIFkABCAy0rp5g0Tk0R-iHorD2pXb38Wqu5OCXHw==
age: 69635
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   221
Md5:    21e34cf6a03f570df49e212018a567d0
Sha1:   f0be4058936850ae0163f5137600d14b6632bbb3
Sha256: 0a23512ea579554af1f2614d6dea6120d38660028fc7624c71a978478fae0eb6
                                        
                                            GET /1/aec7706684?a=146219323&v=1215.1253ab8&to=MlVRZUoCW0ZZBUdcXAsffmd7THRATA5WW0cMU1JFUQxbdlcIR0dcCVxWQxcqW1FdHg%3D%3D&rst=2151&ck=1&ref=http://idahoiccu.myvnc.com/ic/&ap=47&be=94&fe=1941&dc=1425&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1664342589404,%22n%22:0,%22u%22:24,%22ue%22:24,%22f%22:1,%22dn%22:1,%22dne%22:1,%22c%22:1,%22ce%22:1,%22rq%22:1,%22rp%22:13,%22rpe%22:23,%22dl%22:24,%22di%22:1424,%22ds%22:1424,%22de%22:1425,%22dc%22:1939,%22l%22:1939,%22le%22:1942%7D,%22navigation%22:%7B%22ty%22:1%7D%7D&fcp=1202&jsonp=NREUM.setToken HTTP/1.1 
Host: bam-cell.nr-data.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         162.247.241.2
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Wed, 28 Sep 2022 05:23:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 751a0bbc4c940b39-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=573b9e398731b319; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qgc4H7KN0Tx3KCJHK4JoMA%2F%2FN4tBeVwLJLmhu55ibv1xAU7GhOuipiboRlZXWDm10BxbF3fzuujOEiAKyt%2F2B193zeeBb66ZTpsmFVmCSkf7xckvImk1vDSoYL6Reeyt0buIzn%2Fm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   72
Md5:    107d93e382e2c9b00fbf9fb0edc65d86
Sha1:   77e750e3ebf9706f4f6dd253785602d70be17c6c
Sha256: a1ee50b689ea433a0acdccbf4ee4629e9ea3f9c4bcdd21effb334359a2f9e937
                                        
                                            GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1 
Host: 1.b406929acabac9b095f124c81bdfcf57f.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.127
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 3227
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 01:15:51 GMT
etag: "9ee48a4da9c402e8a23ad085fb71f28f"
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -SNrsRKlvhE0mVAciJTfEuDuGNUPUWbISukiRA1RnMpxRjLzs6YHdQ==
age: 14844
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3227), with no line terminators
Size:   3227
Md5:    9ee48a4da9c402e8a23ad085fb71f28f
Sha1:   f0c59306d6313f9bee02b53ca8903991bd24bfd7
Sha256: 9cdad69a4b967c882c3d8e9cb054e7334b7f8870e96427a5d20ae2d17eff2622
                                        
                                            GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1 
Host: 1.a79ab95c1589a13f8a4cab612bc71f9f7.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.22
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 3227
date: Tue, 27 Sep 2022 07:23:30 GMT
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
etag: "9ee48a4da9c402e8a23ad085fb71f28f"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DYBpTw79Td1SsdaBh7LAYKUW9tNkB16fnvvCuD3fWKMbxZrFBr-ZMQ==
age: 79185
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3227), with no line terminators
Size:   3227
Md5:    9ee48a4da9c402e8a23ad085fb71f28f
Sha1:   f0c59306d6313f9bee02b53ca8903991bd24bfd7
Sha256: 9cdad69a4b967c882c3d8e9cb054e7334b7f8870e96427a5d20ae2d17eff2622
                                        
                                            GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1 
Host: 1.c81358859121583b7adf2ace89cb39f44.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.34
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 3227
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 02:16:47 GMT
etag: "9ee48a4da9c402e8a23ad085fb71f28f"
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: N-mH62VFXafIgUU0LZ1MmZ3NgHZf8DpGLDpnCaJ6OguFF-bFlaYQDw==
age: 11188
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3227), with no line terminators
Size:   3227
Md5:    9ee48a4da9c402e8a23ad085fb71f28f
Sha1:   f0c59306d6313f9bee02b53ca8903991bd24bfd7
Sha256: 9cdad69a4b967c882c3d8e9cb054e7334b7f8870e96427a5d20ae2d17eff2622
                                        
                                            POST /client/v3.1/web/wup?cid=attina HTTP/1.1 
Host: wup-1ca8ebd0.us.v2.we-stats.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2270
Origin: http://idahoiccu.myvnc.com
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         52.141.217.134
HTTP/2 200 OK
content-type: application/json
                                        
content-length: 557
date: Wed, 28 Sep 2022 05:23:14 GMT
server: uvicorn
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache, no-store
pragma: no-cache
tail-id: a81c9210-f220-4c52-8e99-e4e2f334f274
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (557), with no line terminators
Size:   557
Md5:    8d4dfc1c4e3c26b3b97f87f3a6746124
Sha1:   2e21058b2d4f77c300f4ab1c0ca052919b3700f5
Sha256: 9d1bb6132f58f683b8daa790434d9636548e4ba725460a8236bc4c4218199fa7
                                        
                                            POST /client/v3.1/web/wup?cid=attina HTTP/1.1 
Host: wup-1ca8ebd0.us.v2.we-stats.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1942
Origin: http://idahoiccu.myvnc.com
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         52.141.217.134
HTTP/2 200 OK
content-type: application/json
                                        
content-length: 557
date: Wed, 28 Sep 2022 05:23:15 GMT
server: uvicorn
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache, no-store
pragma: no-cache
tail-id: c2aae2e6-3494-49da-9402-ca2a9a195ce8
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (557), with no line terminators
Size:   557
Md5:    0c7c973e1c3359c569f7aa868d86a1e0
Sha1:   54f98a00c94ad68315f53cc84651aab2b6954e16
Sha256: c105e32979d8f7257fe2fa503876682f1ece6b2430a2731faba1a7e943446d8c
                                        
                                            POST /api/v1/sendLogs?cid=attina&cdsnum=1664342593655-sjn0000349-6caee113-149f-4698-b239-a78646330a7b&csid=null&ds=js&sdkVer=2.21.1.702.b35a966 HTTP/1.1 
Host: log-1ca8ebd0.us.v2.we-stats.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1356
Origin: http://idahoiccu.myvnc.com
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         52.238.253.184
HTTP/2 204 No Content
                                        
server: nginx
date: Wed, 28 Sep 2022 05:23:16 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

                                        
                                            GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1 
Host: stackpath.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://idahoiccu.myvnc.com
Connection: keep-alive
Referer: http://idahoiccu.myvnc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.18.10.207
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 28 Sep 2022 05:23:12 GMT
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 08/20/2022 03:07:07
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 601
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: f3382e47c26697e3a028b298f6be7bf1
cdn-cache: HIT
cf-cache-status: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 751a0bb06e3b1bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---