r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash be88d3e043e3b95b52e41812e50fb634
0318ba1ce487817ea7cba61dd9413bed29213800
b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15586
Expires: Tue, 13 Sep 2022 16:59:49 GMT
Date: Tue, 13 Sep 2022 12:40:03 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.36200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 13 Sep 2022 12:08:44 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qZ6cRZd3u4ZeqO2rkzlDiP3qb-sDj6jFjbYepS48yWUQ1TJ_dV9p3g==
Age: 1879
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.49200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.49:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 13 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: j7PPyNh6YT_CZy-G77uAoiwnR59w7L3KQEvVXKv75k9FiTVIay5BtQ==
age: 29089
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 12:40:03 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.36200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 13 Sep 2022 12:03:22 GMT
Cache-Control: max-age=3600
Expires: Tue, 13 Sep 2022 12:50:23 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ICRib_T-FsXm_QGdJlgBJEn2cfOt9y-lNu2xw-xye-fAXqRFuwdC0w==
Age: 2202
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e96dbe1b54932c8f447bbbfc9d31cfb0
b15d4a54fbdf95b0af8bd34b6f8ef03055eef0cd
427326963ac1ef6ddeeaf52ab07807c694b82effa6111671ada8270b1faecdae
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6196
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 12:40:04 GMT
Last-Modified: Tue, 13 Sep 2022 10:56:48 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
192.185.129.60200 OK 46 kB URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (38668), with CRLF line terminators
Hash cbc4aae1cc728b9399fca33afcb6b83b
bd408aad3e6b2c88e11deec2705d3464d69ed739
4b1176c2f07975af424bd57c016e4fc0d2cf230b0c40d05d7b036dccb11c2909
Analyzer Verdict Alert openphish Alaska USA Federal Credit Union
fortinet Phishing
GET /UltraBranch/efs/servlet/efs/security.php HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 12:40:03 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/jquery/jquery.maskedinput-1.4.1.min.js
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/jquery/jquery.maskedinput-1.4.1.min.js
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Phishing
GET /UltraBranch/efs/servlet/efs/ScriptLib/jquery/jquery.maskedinput-1.4.1.min.js HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:04 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=75
Content-Type: text/html
ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ControlStyles_v4.css
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ControlStyles_v4.css
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ControlStyles_v4.css HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:04 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=75
Content-Type: text/html
ayubrugs.com/enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44
192.185.129.60302 Found 383 B URL HTTP/1.1 ayubrugs.com/enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 53a5f37ece7182289e7e79220c40a35f
478054ccb0ba23b5c33686c84bb72ea90d35f4a5
43393f14a02e188c09898bdb862af06f282a9a96e7ade0712cfaa3a6f633cbab
GET /enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44 HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 302 Found
Date: Tue, 13 Sep 2022 12:40:04 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44
Content-Length: 383
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ayubrugs.com/enroll/ScriptLib/md5.js
192.185.129.60302 Found 228 B URL HTTP/1.1 ayubrugs.com/enroll/ScriptLib/md5.js
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3495f91d65f521742af05ebb011cc4c4
a564825de0f56e00f03c2791521e7e9b2678e5ca
1b0d71fb0502fe1082c6b0c107d040a31fc5b42285dc28705319ca5417253f28
Analyzer Verdict Alert fortinet Phishing
GET /enroll/ScriptLib/md5.js HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 302 Found
Date: Tue, 13 Sep 2022 12:40:04 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptLib/md5.js
Content-Length: 228
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_UtilityStyles_v4.css
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_UtilityStyles_v4.css
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_UtilityStyles_v4.css HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:04 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=75
Content-Type: text/html
ayubrugs.com/enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621
192.185.129.60302 Found 326 B URL HTTP/1.1 ayubrugs.com/enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash dbe7978f2b905c10f56e0f172ac4f341
f8fec15ccb96f120b5befb19b5e7cc2235857968
27ca42dae6e551fbe1e08f10de538818828e9061880fb55ffa2aef08d0ca79af
GET /enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621 HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 302 Found
Date: Tue, 13 Sep 2022 12:40:04 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621
Content-Length: 326
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ExternalTemplateStyles_v4.css
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ExternalTemplateStyles_v4.css
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ExternalTemplateStyles_v4.css HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:04 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=75
Content-Type: text/html
push.services.mozilla.com/
35.80.131.74101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.80.131.74:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: E5xvjtbtvJvt7mK5LRIADw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Q7RRB7klI5LyW0Jlw7qZuRlpFAg=
ayubrugs.com/enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a
192.185.129.60302 Found 412 B URL HTTP/1.1 ayubrugs.com/enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3b40690b7aa1d8083b473396d6ecd944
942d544da42e27c0ec077255db363671e4c16ce2
9ba12560331fdd32807622d60ba777eed9db73659f32a86a2a52cddd027a607f
GET /enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 302 Found
Date: Tue, 13 Sep 2022 12:40:04 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a
Content-Length: 412
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ayubrugs.com/enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a
192.185.129.60302 Found 433 B URL HTTP/1.1 ayubrugs.com/enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f63ac8544046df0e7bed686d3182cd23
8daf73edbd741af3e9a6d8523cda3cc6321e53e1
7075dbc8896625467da164d851819ceadf5532923cbe94bf6dbbda30d81a5191
GET /enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 302 Found
Date: Tue, 13 Sep 2022 12:40:04 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a
Content-Length: 433
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/DotNetScripts_v4.js
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/DotNetScripts_v4.js
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Phishing
GET /UltraBranch/efs/servlet/efs/ScriptLib/DotNetScripts_v4.js HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:04 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html
ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/AriaLib.js
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/AriaLib.js
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Phishing
GET /UltraBranch/efs/servlet/efs/ScriptLib/AriaLib.js HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:04 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html
ayubrugs.com/UltraBranch/efs/servlet/efs/Scripts/jquery-1.10.2.js
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/Scripts/jquery-1.10.2.js
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Phishing
GET /UltraBranch/efs/servlet/efs/Scripts/jquery-1.10.2.js HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:04 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 55f569a5d6042e52cf15ea2386867903
e5be3ec55720dad8604cb4c7db9ec6be74effa79
9674750b153dd9a44febb3e6363e2f7db96cb319f005a964c5f43a0644c34ad9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 12:40:05 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 11:49:47 GMT
Expires: Tue, 20 Sep 2022 11:49:46 GMT
Etag: "e5be3ec55720dad8604cb4c7db9ec6be74effa79"
Cache-Control: max-age=601180,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74a0f308aa6f1c0a-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 55f569a5d6042e52cf15ea2386867903
e5be3ec55720dad8604cb4c7db9ec6be74effa79
9674750b153dd9a44febb3e6363e2f7db96cb319f005a964c5f43a0644c34ad9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 12:40:05 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 11:49:47 GMT
Expires: Tue, 20 Sep 2022 11:49:46 GMT
Etag: "e5be3ec55720dad8604cb4c7db9ec6be74effa79"
Cache-Control: max-age=601180,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74a0f308accefac8-OSL
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b054d33324d8933d45b96259af5a18ff
128d8f89d39692d19c443cb10cd2d22b1e0abe1f
82b42ef081b75660f72f52ca85c7281b64916e4c42bbcce6f198107a003a5aa0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 12:40:05 GMT
Server: ECS (amb/6B84)
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b054d33324d8933d45b96259af5a18ff
128d8f89d39692d19c443cb10cd2d22b1e0abe1f
82b42ef081b75660f72f52ca85c7281b64916e4c42bbcce6f198107a003a5aa0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 12:40:05 GMT
Server: ECS (amb/6B84)
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b054d33324d8933d45b96259af5a18ff
128d8f89d39692d19c443cb10cd2d22b1e0abe1f
82b42ef081b75660f72f52ca85c7281b64916e4c42bbcce6f198107a003a5aa0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 12:40:05 GMT
Server: ECS (amb/6B83)
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b054d33324d8933d45b96259af5a18ff
128d8f89d39692d19c443cb10cd2d22b1e0abe1f
82b42ef081b75660f72f52ca85c7281b64916e4c42bbcce6f198107a003a5aa0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 12:40:05 GMT
Server: ECS (amb/6BBA)
Content-Length: 471
ayubrugs.com/enroll/ScriptLib/md5.js
192.185.129.60404 Not Found 566 B URL HTTP/2 ayubrugs.com/enroll/ScriptLib/md5.js
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f09186338d6d993ea8640d9db2ce2c39
797b88a80abd7596eeb04d3258d78dab39f7f462
f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
Analyzer Verdict Alert fortinet Phishing
GET /enroll/ScriptLib/md5.js HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
content-type: text/html; charset=UTF-8
date: Tue, 13 Sep 2022 12:40:05 GMT
server: Apache
X-Firefox-Spdy: h2
ayubrugs.com/enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621
192.185.129.60404 Not Found 566 B URL HTTP/2 ayubrugs.com/enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f09186338d6d993ea8640d9db2ce2c39
797b88a80abd7596eeb04d3258d78dab39f7f462
f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
GET /enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621 HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
content-type: text/html; charset=UTF-8
date: Tue, 13 Sep 2022 12:40:05 GMT
server: Apache
X-Firefox-Spdy: h2
ayubrugs.com/enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a
192.185.129.60404 Not Found 566 B URL HTTP/2 ayubrugs.com/enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f09186338d6d993ea8640d9db2ce2c39
797b88a80abd7596eeb04d3258d78dab39f7f462
f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
GET /enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
content-type: text/html; charset=UTF-8
date: Tue, 13 Sep 2022 12:40:05 GMT
server: Apache
X-Firefox-Spdy: h2
ayubrugs.com/enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a
192.185.129.60404 Not Found 566 B URL HTTP/2 ayubrugs.com/enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f09186338d6d993ea8640d9db2ce2c39
797b88a80abd7596eeb04d3258d78dab39f7f462
f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
GET /enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
content-type: text/html; charset=UTF-8
date: Tue, 13 Sep 2022 12:40:05 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 55f569a5d6042e52cf15ea2386867903
e5be3ec55720dad8604cb4c7db9ec6be74effa79
9674750b153dd9a44febb3e6363e2f7db96cb319f005a964c5f43a0644c34ad9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 12:40:05 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 11:49:47 GMT
Expires: Tue, 20 Sep 2022 11:49:46 GMT
Etag: "e5be3ec55720dad8604cb4c7db9ec6be74effa79"
Cache-Control: max-age=601180,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74a0f308babab505-OSL
www.alaskausa.org/css/akusa-express.css
107.162.171.161200 OK 4.6 kB URL HTTP/1.1 www.alaskausa.org/css/akusa-express.css
IP 107.162.171.161:0
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 825350f09acb37cf5ec0cac6016f5c8d
253d99cb60408d7f60734dcaf60abe848b4281c9
4afa21fd07b5e1574b4637b41e29ae2e93176e941d172c1476ca7fa947f7834e
GET /css/akusa-express.css HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 08 Sep 2022 17:43:01 GMT
Accept-Ranges: bytes
ETag: "bce8ca70aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Tue, 13 Sep 2022 12:40:03 GMT
Via: 1.1 dca1-bit12005
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
www.alaskausa.org/js/jsSuite-1.8.js
107.162.171.161302 Object moved 296 B URL HTTP/1.1 www.alaskausa.org/js/jsSuite-1.8.js
IP 107.162.171.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 33dc966734cea833f261863e35b1f2f3
b1c3e2ea6431645131178005d1eb1677c40cf4e5
21ec73760050529f53f914ef8194651a4c2de4411e4bc36be410947bd3a26dbc
GET /js/jsSuite-1.8.js HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Object moved
Cache-Control: private
Content-Type: text/html
Location: /pageUnavailable.asp?status=missing
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Tue, 13 Sep 2022 12:40:03 GMT
Via: 1.1 dca1-bit12005
Set-Cookie: ASPSESSIONIDCUDCQTQS=LMOMOJCAOKKMCLPCGGNPGIGC; secure; path=/
TS01682a2f=01ae8fb0270541f5eecbf9dc15cef856289ca59ec5f17fce5e8fb7d74b3d19f6c02b04f08b25ceb48e1461bad51e6c2e8e33abb04fc76031beaccdd33b106664515c6d07ae; Path=/; Secure; HTTPOnly
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
www.alaskausa.org/angelfish.js
107.162.171.161200 OK 8.7 kB URL HTTP/1.1 www.alaskausa.org/angelfish.js
IP 107.162.171.161:0
File type ASCII text, with very long lines (826)
Hash 23acb6d2cd2e079bfe986f0761b957d5
bb1cf7660324be47645c3e239b6fa51faa7421ea
ad8da576b2060355b1ed4f753cb2a19ee37bba690f9fff2442a2654e55f235eb
GET /angelfish.js HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 08 Sep 2022 17:42:59 GMT
Accept-Ranges: bytes
ETag: "baace6faac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Tue, 13 Sep 2022 12:40:02 GMT
Content-Length: 8704
Via: 1.1 dca1-bit12005
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: Keep-Alive
ayubrugs.com/enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44
192.185.129.60404 Not Found 566 B URL HTTP/2 ayubrugs.com/enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f09186338d6d993ea8640d9db2ce2c39
797b88a80abd7596eeb04d3258d78dab39f7f462
f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
GET /enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44 HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
content-type: text/html; charset=UTF-8
date: Tue, 13 Sep 2022 12:40:05 GMT
server: Apache
X-Firefox-Spdy: h2
www.alaskausa.org/pageUnavailable.asp?status=missing
107.162.171.161200 13 kB URL HTTP/1.1 www.alaskausa.org/pageUnavailable.asp?status=missing
IP 107.162.171.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (675), with CRLF, LF line terminators
Hash fa03dc6fc9a7801a4c345895f0845f35
10fa356945ed181a895064225d92d56b5ba5b96c
f709f5d2aee8ce270d6a05da37e3255e4de8e385b1fcf2771a015bdcc4fddf4d
GET /pageUnavailable.asp?status=missing HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Cache-Control: private
Content-Type: text/html
Set-Cookie: ss=c; expires=Thu, 13-Oct-2022 12:40:04 GMT; path=/
lst=2053857663; expires=Tue, 13-Sep-2022 12:55:04 GMT; domain=.alaskausa.org; path=/; secure
ASPSESSIONIDSGBTATSC=OJAHPEDABCEMFNKIAOGNCKOM; secure; path=/; HttpOnly
TS01682a2f=01ae8fb027317ddba98ed0027c41ea6efb90f9c20b3019d082c3249ea47eb7bbb3c533d21da8e37d33859159f870628519db2f28a6ec682158de37f973320fea65eba1a5eccd12310c71a7e0c1e98f9477930322f7; Path=/; Secure; HTTPOnly
TS013395ac=01ae8fb02732fc866a3c935f22197c819db3c286fb3019d082c3249ea47eb7bbb3c533d21d11fc7e8504d06cec1d85de6e3f5674e0a05930727cdf89a9c1ffd864c3171758; path=/; domain=.alaskausa.org; HTTPonly; Secure
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Tue, 13 Sep 2022 12:40:03 GMT
Via: 1.1 dca1-bit12005
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
www.alaskausa.org/js/jquery-1.11.3.min.js
107.162.171.161200 OK 46 kB URL HTTP/1.1 www.alaskausa.org/js/jquery-1.11.3.min.js
IP 107.162.171.161:0
File type ASCII text, with very long lines (32038)
Hash cf54b56dbd2adb27eb44fe6defb747e6
78e81335c5c317f9d56877d2f011a74a50910dd8
9256346dc8067ab6665a68fe1590b676d13f8ecd353fa2676ec372a2f3338a94
GET /js/jquery-1.11.3.min.js HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 08 Sep 2022 17:44:01 GMT
Accept-Ranges: bytes
ETag: "4dd3aa94aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Tue, 13 Sep 2022 12:40:03 GMT
Via: 1.1 dca1-bit12005
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17477
Expires: Tue, 13 Sep 2022 17:31:23 GMT
Date: Tue, 13 Sep 2022 12:40:06 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17477
Expires: Tue, 13 Sep 2022 17:31:23 GMT
Date: Tue, 13 Sep 2022 12:40:06 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17477
Expires: Tue, 13 Sep 2022 17:31:23 GMT
Date: Tue, 13 Sep 2022 12:40:06 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17477
Expires: Tue, 13 Sep 2022 17:31:23 GMT
Date: Tue, 13 Sep 2022 12:40:06 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77296a12-991a-4ab6-9ce0-05b3a82d6664.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77296a12-991a-4ab6-9ce0-05b3a82d6664.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c1314c7778ea0d32e8c69dae0c38b6d
c4772b9b182f9f905fead84f3761fe296073ca65
5fc8dc23f9b4d150b834aa69b358edd9f9f5f449607df07d579df66098d8aac6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77296a12-991a-4ab6-9ce0-05b3a82d6664.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10366
x-amzn-requestid: c66a0e06-d45c-4d16-ba0c-bf6a2368cfc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YVQPkH2RoAMFX2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ec730-5174741f2d86d3ea018e452f;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 05:44:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 0ieBLVDdyIQuPO5pdM8wzjY2XwaMhLJhJWAUtsLfgiWTKVBTOws1tQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:58:04 GMT
etag: "c4772b9b182f9f905fead84f3761fe296073ca65"
content-type: image/jpeg
age: 52922
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a2dff5-4864-4430-8c54-6b68d2bbd35a.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a2dff5-4864-4430-8c54-6b68d2bbd35a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 838f709437b2dfbede4ee15307afe217
2ab2ee20e720b78be6deb55f967ac0d8b7dad048
a3b47ce595b475f2aab6f7378888d15ba3e98453d6c8a3d88946efc5d65eedba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a2dff5-4864-4430-8c54-6b68d2bbd35a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10849
x-amzn-requestid: 722d8d75-0911-4b59-af65-2b408bc09d80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YXbx6E9-oAMFT8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631fa672-74ea9343619d4a1865e34818;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 21:36:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4rpwcrZLDlgcwBtH7wpoHMOb8hhFbKbZSQpjWqUqbt_Sl4ud3dm9Vg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:42:18 GMT
age: 53868
etag: "2ab2ee20e720b78be6deb55f967ac0d8b7dad048"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd8556c96-436b-4bd5-a201-21cf57a952e7.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd8556c96-436b-4bd5-a201-21cf57a952e7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8245683fe462ff0393ab02b56ea18789
2d11d7d4547ded348f9e32cd946877e16ad587ae
992f87a9da550b8dbd14cdcd7c5f11903a2bef58db7ced55f456d29d339bf94b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd8556c96-436b-4bd5-a201-21cf57a952e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10824
x-amzn-requestid: 6c1f4a34-e245-4b3b-a5ba-fcf0cdd68830
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUxaqELPIAMFmjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e95dd-0ef865e80de591f27515d35f;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 02:13:49 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UngASNEgeiacesJ_cxd4nvDatNrjsx3081wzpW7A3xPPgB1drnAEBA==
via: 1.1 e9ba0a9a729ff2960a04323bf1833df8.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 03:38:19 GMT
age: 32507
etag: "2d11d7d4547ded348f9e32cd946877e16ad587ae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ad228ec-3b17-4614-a289-8bfbb3c69b46.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ad228ec-3b17-4614-a289-8bfbb3c69b46.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a9409173701eda139bbd4973992e9d3a
f1949f2e307eadc6069d2b0b8c624f674a228f34
958dff56b8ba2a6aae1ca37b62610b3d1cca8eae708ee37ca7a51186e3dc9737
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ad228ec-3b17-4614-a289-8bfbb3c69b46.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6894
x-amzn-requestid: c9abf0bf-45a9-4f56-8f34-ff3da8544a28
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUIyGEfzoAMFzDw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e54da-40b81c960d413d682389a407;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:36:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wzvx5h9IiakUjvtFfshDcy4bZMmNCTmEZmlKeQ4pQHcUJV6Vt4g2mA==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:50:29 GMT
age: 53377
etag: "f1949f2e307eadc6069d2b0b8c624f674a228f34"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4acf448-2a96-49a3-8257-7743a38525f5.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4acf448-2a96-49a3-8257-7743a38525f5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae7d16fad4da4300a1953a916fb59688
488c58f73c81bb4d45e496c458fe3197a0884c26
4d4946932d53caad6e97bcc66527bd9cad658c0cf6f4215d01943b8a9e832959
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4acf448-2a96-49a3-8257-7743a38525f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7720
x-amzn-requestid: 7670a969-cb9c-4583-8455-10f7512ee9c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YT9YJG__oAMF4YA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e429a-674ef5a4727826ab0d60529e;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 20:18:34 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OOCryyfLht-3ebVn-5aWtQI_JnVkWxMGggv07cUoomDlgb5ogru7vg==
via: 1.1 d16c3f15bd14953a9d4109eaaa991de2.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 22:01:55 GMT
age: 52691
etag: "488c58f73c81bb4d45e496c458fe3197a0884c26"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9ab2ec10c79b91d15edb1d1e3dc763c
744fee4a0baa22ba3aa352d60620a916972b47dd
f7bb66f5bb572d73f936fc74823f51ede1f2c4e309a939b39d9529ff8f757fbe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9945
x-amzn-requestid: a347749f-a63a-4533-a274-7151b9f235ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YXcX8HAKoAMF5EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631fa765-56cff18515b2a5b3397231df;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 21:40:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lZ3FmD1gM8YBgZNt97kuYSol1kj0GQqRjyLT_7715VtH9GR1WpMDxA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:42:20 GMT
age: 53866
etag: "744fee4a0baa22ba3aa352d60620a916972b47dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/ControlImages/close.png
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/ControlImages/close.png
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/ControlImages/close.png HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:06 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/html
www.alaskausa.org/images/nav/EHL_2016_gray.png
107.162.171.161200 OK 3.3 kB URL HTTP/1.1 www.alaskausa.org/images/nav/EHL_2016_gray.png
IP 107.162.171.161:0
File type PNG image data, 55 x 59, 8-bit colormap, non-interlaced\012- data
Hash 859cf2ed8319f4931c1e2371bee8b46d
ff866fe6e3071999e6c057dae5aed927aefd047f
1c7cd686a01f2dcffc1f55119624e9166300721172b4e7ad284ff734bc8db0a1
GET /images/nav/EHL_2016_gray.png HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 08 Sep 2022 17:44:04 GMT
Accept-Ranges: bytes
ETag: "53c55096aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Tue, 13 Sep 2022 12:40:04 GMT
Content-Length: 3317
Via: 1.1 dca1-bit12005
www.alaskausa.org/images/nav/akusafcu_logo.png
107.162.171.161200 OK 16 kB URL HTTP/1.1 www.alaskausa.org/images/nav/akusafcu_logo.png
IP 107.162.171.161:0
File type PNG image data, 220 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash dc43cc5c96d54639189781edf322cac9
26c53d9c975f997481520a336ac5f6a22f115c74
6ceabe544edbb8513733f30b14c1d17a2fa51e461f972c31d17e5450d4718603
GET /images/nav/akusafcu_logo.png HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 08 Sep 2022 17:45:24 GMT
Accept-Ranges: bytes
ETag: "941b1ac6aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Tue, 13 Sep 2022 12:40:04 GMT
Content-Length: 16228
Via: 1.1 dca1-bit12005
ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/jquery/jquery.maskedinput-1.4.1.min.js
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/jquery/jquery.maskedinput-1.4.1.min.js
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Phishing
GET /UltraBranch/efs/servlet/efs/ScriptLib/jquery/jquery.maskedinput-1.4.1.min.js HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:06 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html
www.alaskausa.org/js/jsSuite-1.8.js
107.162.171.161302 Object moved 296 B URL HTTP/1.1 www.alaskausa.org/js/jsSuite-1.8.js
IP 107.162.171.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 33dc966734cea833f261863e35b1f2f3
b1c3e2ea6431645131178005d1eb1677c40cf4e5
21ec73760050529f53f914ef8194651a4c2de4411e4bc36be410947bd3a26dbc
GET /js/jsSuite-1.8.js HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Object moved
Cache-Control: private
Content-Type: text/html
Location: /pageUnavailable.asp?status=missing
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Tue, 13 Sep 2022 12:40:03 GMT
Via: 1.1 dca1-bit12005
Set-Cookie: ASPSESSIONIDSGSBBDQA=CJFCNGAANIMBKNIMDPFKGHGB; secure; path=/
TS01682a2f=01ae8fb027a4fd061bdc283ab877a9c54f035934560375c40e7cbd6ac7c6d92e7933f9abd5889c53e5914c4ba01937dc339485ddaad187c433283f39ead8181dbad25276ab; Path=/; Secure; HTTPOnly
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
www.alaskausa.org/images/images.asp?ref=NCUA_2016_gray.png
107.162.171.161200 OK 4.3 kB URL HTTP/1.1 www.alaskausa.org/images/images.asp?ref=NCUA_2016_gray.png
IP 107.162.171.161:0
File type PNG image data, 146 x 65, 8-bit colormap, non-interlaced\012- data
Hash 38b7240d957be9f71b5271246fb01f67
9007e7baf8e357ac11c8541c871e48960c8d9f30
d6641292ca4109173a6ca88b1353f0a6edeaad1c5f90e4c69c6999943109a878
GET /images/images.asp?ref=NCUA_2016_gray.png HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/x-png
Expires: Tue, 13 Sep 2022 12:40:03 GMT
Content-Disposition: filename="ncua_2016_gray.png"
Set-Cookie: lst=1367040383; expires=Tue, 13-Sep-2022 12:55:02 GMT; domain=.alaskausa.org; path=/; secure
ASPSESSIONIDCGBSDQCT=AFOBCKODCOCGANOKDBMHMDFC; secure; path=/; HttpOnly
TS01682a2f=01ae8fb02790512e166c172b43ee194ccb54559dcd28c51bbdaea25de3c5587a73762afdc6d0cdc825c33c67f7ec0cec6b3bbf0fc4394f2766a8bf300c8abd13328ed0aa9c; Path=/; Secure; HTTPOnly
TS013395ac=01ae8fb027008e32dd8480d89bc17e57e1f166f7c128c51bbdaea25de3c5587a73762afdc625079afe07b2ce76f44d19a1f040ca89af38804b10ce1a0b0c358462d913a546; path=/; domain=.alaskausa.org; HTTPonly; Secure
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Tue, 13 Sep 2022 12:40:03 GMT
Connection: close
Via: 1.1 dca1-bit12005
Transfer-Encoding: chunked
www.alaskausa.org/pageUnavailable.asp?status=missing
107.162.171.161200 13 kB URL HTTP/1.1 www.alaskausa.org/pageUnavailable.asp?status=missing
IP 107.162.171.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (675), with CRLF, LF line terminators
Hash fa03dc6fc9a7801a4c345895f0845f35
10fa356945ed181a895064225d92d56b5ba5b96c
f709f5d2aee8ce270d6a05da37e3255e4de8e385b1fcf2771a015bdcc4fddf4d
GET /pageUnavailable.asp?status=missing HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Cache-Control: private
Content-Type: text/html
Set-Cookie: ss=c; expires=Thu, 13-Oct-2022 12:40:04 GMT; path=/
lst=1967645055; expires=Tue, 13-Sep-2022 12:55:04 GMT; domain=.alaskausa.org; path=/; secure
ASPSESSIONIDSGSBBDQA=EJFCNGAAOFIKEIMJEIBHCMKI; secure; path=/; HttpOnly
TS01682a2f=01ae8fb0274ff10247316d05a2c8685830d601533af85a5f8259e239e1da4fc702c179c63394e81d88fadc38e9fc61a6cbf4b752d73eaf17d815e3c22e1d22b059068e573ed14e3ee86d5a34880892655ede732683; Path=/; Secure; HTTPOnly
TS013395ac=01ae8fb027e71cbbe24fcb340fdfb51ff1f7d9b160f85a5f8259e239e1da4fc702c179c633569b4be5dac904225d075f717cc6dc61532e87df06241744d3c0a6cefd5ee2c5; path=/; domain=.alaskausa.org; HTTPonly; Secure
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Tue, 13 Sep 2022 12:40:04 GMT
Via: 1.1 dca1-bit12005
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_UtilityStyles_v4.css
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_UtilityStyles_v4.css
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_UtilityStyles_v4.css HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:06 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html
ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ControlStyles_v4.css
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ControlStyles_v4.css
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ControlStyles_v4.css HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:06 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/html
ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ExternalTemplateStyles_v4.css
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ExternalTemplateStyles_v4.css
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/_ExternalTemplateStyles_v4.css HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:06 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/html
ayubrugs.com/enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621
192.185.129.60302 Found 326 B URL HTTP/1.1 ayubrugs.com/enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash dbe7978f2b905c10f56e0f172ac4f341
f8fec15ccb96f120b5befb19b5e7cc2235857968
27ca42dae6e551fbe1e08f10de538818828e9061880fb55ffa2aef08d0ca79af
GET /enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621 HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 302 Found
Date: Tue, 13 Sep 2022 12:40:07 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621
Content-Length: 326
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ayubrugs.com/enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621
192.185.129.60404 Not Found 566 B URL HTTP/2 ayubrugs.com/enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f09186338d6d993ea8640d9db2ce2c39
797b88a80abd7596eeb04d3258d78dab39f7f462
f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
GET /enroll/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZFXjl5sPyt9kOGWz236FVgWAlp2jOnHz37PrZqhXVhK9g2YwSg2&t=636939665749177621 HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
content-type: text/html; charset=UTF-8
date: Tue, 13 Sep 2022 12:40:07 GMT
server: Apache
X-Firefox-Spdy: h2
ayubrugs.com/enroll/ScriptLib/md5.js
192.185.129.60302 Found 228 B URL HTTP/1.1 ayubrugs.com/enroll/ScriptLib/md5.js
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3495f91d65f521742af05ebb011cc4c4
a564825de0f56e00f03c2791521e7e9b2678e5ca
1b0d71fb0502fe1082c6b0c107d040a31fc5b42285dc28705319ca5417253f28
Analyzer Verdict Alert fortinet Phishing
GET /enroll/ScriptLib/md5.js HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 302 Found
Date: Tue, 13 Sep 2022 12:40:07 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptLib/md5.js
Content-Length: 228
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ayubrugs.com/enroll/ScriptLib/md5.js
192.185.129.60404 Not Found 566 B URL HTTP/2 ayubrugs.com/enroll/ScriptLib/md5.js
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f09186338d6d993ea8640d9db2ce2c39
797b88a80abd7596eeb04d3258d78dab39f7f462
f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
Analyzer Verdict Alert fortinet Phishing
GET /enroll/ScriptLib/md5.js HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
content-type: text/html; charset=UTF-8
date: Tue, 13 Sep 2022 12:40:07 GMT
server: Apache
X-Firefox-Spdy: h2
ayubrugs.com/enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44
192.185.129.60302 Found 383 B URL HTTP/1.1 ayubrugs.com/enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 53a5f37ece7182289e7e79220c40a35f
478054ccb0ba23b5c33686c84bb72ea90d35f4a5
43393f14a02e188c09898bdb862af06f282a9a96e7ade0712cfaa3a6f633cbab
GET /enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44 HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 302 Found
Date: Tue, 13 Sep 2022 12:40:07 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44
Content-Length: 383
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ayubrugs.com/enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44
192.185.129.60404 Not Found 566 B URL HTTP/2 ayubrugs.com/enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f09186338d6d993ea8640d9db2ce2c39
797b88a80abd7596eeb04d3258d78dab39f7f462
f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
GET /enroll/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1EekDsxKEwSZJpikhL_6bvVcyxhDFC5xzBMYL4n2T3xzyjsI9y5GDnWtqEMRDzYwpwEqiv8d0zyvxyVarszwga4VVGDKdqK_TSDL0_zGf2hYrzZ7Qw2&t=4e518d44 HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
content-type: text/html; charset=UTF-8
date: Tue, 13 Sep 2022 12:40:07 GMT
server: Apache
X-Firefox-Spdy: h2
ayubrugs.com/enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a
192.185.129.60302 Found 412 B URL HTTP/1.1 ayubrugs.com/enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3b40690b7aa1d8083b473396d6ecd944
942d544da42e27c0ec077255db363671e4c16ce2
9ba12560331fdd32807622d60ba777eed9db73659f32a86a2a52cddd027a607f
GET /enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 302 Found
Date: Tue, 13 Sep 2022 12:40:08 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a
Content-Length: 412
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ayubrugs.com/enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a
192.185.129.60404 Not Found 566 B URL HTTP/2 ayubrugs.com/enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f09186338d6d993ea8640d9db2ce2c39
797b88a80abd7596eeb04d3258d78dab39f7f462
f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
GET /enroll/ScriptResource.axd?d=D9drwtSJ4hBA6O8UhT6CQl5kP-DNk5tqsFSKE4QAx7FiqQUkfG0xcYhM38F4ULHzEsr3ccm3WWC8c21Rx1XAbPd7dZSDwlwAN3FBxOF0-Op5UR1aFNYrVvCtHrsmIFUrjLaB6c2og1ihVr9uj93NAWWK3N01&t=ffffffffa580202a HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
content-type: text/html; charset=UTF-8
date: Tue, 13 Sep 2022 12:40:08 GMT
server: Apache
X-Firefox-Spdy: h2
ayubrugs.com/enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a
192.185.129.60302 Found 433 B URL HTTP/1.1 ayubrugs.com/enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f63ac8544046df0e7bed686d3182cd23
8daf73edbd741af3e9a6d8523cda3cc6321e53e1
7075dbc8896625467da164d851819ceadf5532923cbe94bf6dbbda30d81a5191
GET /enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 302 Found
Date: Tue, 13 Sep 2022 12:40:08 GMT
Server: Apache
Location: https://ayubrugs.com/enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a
Content-Length: 433
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ayubrugs.com/enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a
192.185.129.60404 Not Found 566 B URL HTTP/2 ayubrugs.com/enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f09186338d6d993ea8640d9db2ce2c39
797b88a80abd7596eeb04d3258d78dab39f7f462
f7a508cbee27d151e3c1ec09a53be135b42f8211e34f3e7e132e8c7f0e3410c0
GET /enroll/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tcXbu1D4Hj6yCmHmr9cM66AViK3ia2ZDHVT7KW47KHMyBMtKHFfS1WB4puAzjXwId5XQy_jrygJTcv1Xors3xQgEJuGStAVwV63p2PylRvqJXzAeOswFDaHhtAK0W-ax5ffg3ZOYXYmQ06Ttk8PaI-ZJmv_M0&t=ffffffffa580202a HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Accept-Encoding
content-encoding: gzip
content-length: 566
content-type: text/html; charset=UTF-8
date: Tue, 13 Sep 2022 12:40:08 GMT
server: Apache
X-Firefox-Spdy: h2
ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/DotNetScripts_v4.js
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/DotNetScripts_v4.js
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Phishing
GET /UltraBranch/efs/servlet/efs/ScriptLib/DotNetScripts_v4.js HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:08 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=65
Connection: Keep-Alive
Content-Type: text/html
ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/AriaLib.js
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/ScriptLib/AriaLib.js
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Phishing
GET /UltraBranch/efs/servlet/efs/ScriptLib/AriaLib.js HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:09 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=64
Connection: Keep-Alive
Content-Type: text/html
ayubrugs.com/UltraBranch/efs/servlet/efs/Scripts/jquery-1.10.2.js
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/Scripts/jquery-1.10.2.js
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
Analyzer Verdict Alert fortinet Phishing
GET /UltraBranch/efs/servlet/efs/Scripts/jquery-1.10.2.js HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:09 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=63
Connection: Keep-Alive
Content-Type: text/html
ayubrugs.com/agf.gif?t=pv&pv=%2FUltraBranch%2Fefs%2Fservlet%2Fefs%2Fsecurity.php&tt=Security+Question&vt=new&sc=direct&md=(none)&dp=24&sh=1024&sw=1280&bn=Firefox&bv=96&pn=Linux&pr=x86_64&bl=en-us&js=1.5&hn=ayubrugs.com&vi=27795797&vs=277957971663072797&_=973764&v=040
192.185.129.60302 Found 535 B URL HTTP/1.1 ayubrugs.com/agf.gif?t=pv&pv=%2FUltraBranch%2Fefs%2Fservlet%2Fefs%2Fsecurity.php&tt=Security+Question&vt=new&sc=direct&md=(none)&dp=24&sh=1024&sw=1280&bn=Firefox&bv=96&pn=Linux&pr=x86_64&bl=en-us&js=1.5&hn=ayubrugs.com&vi=27795797&vs=277957971663072797&_=973764&v=040
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (401)
Hash 961b38b61bb529f52e737bc5d7ee7c9b
9c72cc62dafeea2ee317c2dbe66209518227bff7
233fb2f631d09e721558ccd5be8880deb101ccd796567b2741f8ce31e27cc67b
GET /agf.gif?t=pv&pv=%2FUltraBranch%2Fefs%2Fservlet%2Fefs%2Fsecurity.php&tt=Security+Question&vt=new&sc=direct&md=(none)&dp=24&sh=1024&sw=1280&bn=Firefox&bv=96&pn=Linux&pr=x86_64&bl=en-us&js=1.5&hn=ayubrugs.com&vi=27795797&vs=277957971663072797&_=973764&v=040 HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
Cookie: agft=8695a7de5fa8a9a2bf6d7bd9689ae107.27795797; agfs=8695a7de5fa8a9a2bf6d7bd9689ae107.27795797&1663072797&1663072797&direct&(none)&&&&&
HTTP/1.1 302 Found
Date: Tue, 13 Sep 2022 12:40:09 GMT
Server: Apache
Location: https://ayubrugs.com/agf.gif?t=pv&pv=%2FUltraBranch%2Fefs%2Fservlet%2Fefs%2Fsecurity.php&tt=Security+Question&vt=new&sc=direct&md=(none)&dp=24&sh=1024&sw=1280&bn=Firefox&bv=96&pn=Linux&pr=x86_64&bl=en-us&js=1.5&hn=ayubrugs.com&vi=27795797&vs=277957971663072797&_=973764&v=040
Content-Length: 535
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/ControlImages/close.png
192.185.129.60404 Not Found 358 B URL HTTP/1.1 ayubrugs.com/UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/ControlImages/close.png
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e6380e0c65d744670ca2bdfdebf952e7
72010e09611689dba83d615d7d4e14525584f574
a5a070dc995c94a5ecc33cec32455618639d9ea695e8a58df9bb22eee7e9ab09
GET /UltraBranch/efs/servlet/efs/App_Themes/DefaultTheme/ControlImages/close.png HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ayubrugs.com/UltraBranch/efs/servlet/efs/security.php
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 12:40:09 GMT
Server: Apache
Last-Modified: Tue, 09 Aug 2022 14:43:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 358
Keep-Alive: timeout=5, max=62
Connection: Keep-Alive
Content-Type: text/html
www.alaskausa.org/css/nav/header_bg.png
107.162.171.161200 OK 8.1 kB URL HTTP/1.1 www.alaskausa.org/css/nav/header_bg.png
IP 107.162.171.161:0
File type PNG image data, 156 x 165, 8-bit/color RGB, non-interlaced\012- data
Hash f420d4563192f414fabc27808342a8b2
80d69a4a339f6ddfe991d41d798d9a58fa0a21ea
5cd6b433131a0f7972117a1de73410cd07059f385b4dceb1e99b1c9dd6351fb6
GET /css/nav/header_bg.png HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.alaskausa.org/css/akusa-express.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 08 Sep 2022 17:43:02 GMT
Accept-Ranges: bytes
ETag: "6a6a5271aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Tue, 13 Sep 2022 12:40:06 GMT
Content-Length: 8058
Via: 1.1 dca1-bit12005
www.alaskausa.org/css/nav/pgMainEdge.png
107.162.171.161200 OK 960 B URL HTTP/1.1 www.alaskausa.org/css/nav/pgMainEdge.png
IP 107.162.171.161:0
File type PNG image data, 1 x 3, 8-bit colormap, non-interlaced\012- data
Hash a5ea8f10a3e08ef3bc3acbe1add70acd
3da6cb1b65f0e536b05bb368c1358be49a445341
1fb28d9c14ec42912599df0f34b14c6e6f996084ca13e06bb11dcb4c9459ed34
GET /css/nav/pgMainEdge.png HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 08 Sep 2022 17:43:06 GMT
Accept-Ranges: bytes
ETag: "7d5ece73aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Tue, 13 Sep 2022 12:40:07 GMT
Content-Length: 960
Via: 1.1 dca1-bit12005
Vary: Accept-Encoding
ayubrugs.com/agf.gif?t=pv&pv=%2FUltraBranch%2Fefs%2Fservlet%2Fefs%2Fsecurity.php&tt=Security+Question&vt=new&sc=direct&md=(none)&dp=24&sh=1024&sw=1280&bn=Firefox&bv=96&pn=Linux&pr=x86_64&bl=en-us&js=1.5&hn=ayubrugs.com&vi=27795797&vs=277957971663072797&_=973764&v=040
192.185.129.60200 OK 3.4 kB URL HTTP/2 ayubrugs.com/agf.gif?t=pv&pv=%2FUltraBranch%2Fefs%2Fservlet%2Fefs%2Fsecurity.php&tt=Security+Question&vt=new&sc=direct&md=(none)&dp=24&sh=1024&sw=1280&bn=Firefox&bv=96&pn=Linux&pr=x86_64&bl=en-us&js=1.5&hn=ayubrugs.com&vi=27795797&vs=277957971663072797&_=973764&v=040
IP 192.185.129.60:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 26acc7e8c4e1ea9d5dfbcd0059b9b843
796a18b014337e43ea29aedb0637122d6610bc37
75e899557b5b32aade899085ee13b4ad6c2e850d3fc757d214cb9af6b8249ecf
GET /agf.gif?t=pv&pv=%2FUltraBranch%2Fefs%2Fservlet%2Fefs%2Fsecurity.php&tt=Security+Question&vt=new&sc=direct&md=(none)&dp=24&sh=1024&sw=1280&bn=Firefox&bv=96&pn=Linux&pr=x86_64&bl=en-us&js=1.5&hn=ayubrugs.com&vi=27795797&vs=277957971663072797&_=973764&v=040 HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ayubrugs.com
Referer: http://ayubrugs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=39264d4a99577f98001e04ac1cd72696; path=/
vary: Accept-Encoding
content-encoding: gzip
content-length: 3416
content-type: text/html; charset=UTF-8
date: Tue, 13 Sep 2022 12:40:09 GMT
server: Apache
X-Firefox-Spdy: h2
www.alaskausa.org/images/icon-76@2x.png
107.162.171.161200 OK 22 kB URL HTTP/1.1 www.alaskausa.org/images/icon-76@2x.png
IP 107.162.171.161:0
File type PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced\012- data
Hash aa361a75d2fd36154747173a3a6cd422
8c14f2c0a0f3b2e1a265313239d6b9f7383808f9
31079b4bcec10fbd6e7530a766c97d05b5bc5e143af55a7599633fe3fd1c955e
GET /images/icon-76@2x.png HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 08 Sep 2022 17:43:56 GMT
Accept-Ranges: bytes
ETag: "c0a5d391aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Tue, 13 Sep 2022 12:40:07 GMT
Content-Length: 21833
Via: 1.1 dca1-bit12005
www.alaskausa.org/favicon.ico
107.162.171.161200 OK 1.2 kB URL HTTP/1.1 www.alaskausa.org/favicon.ico
IP 107.162.171.161:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash a640140069c78a92f718c9fb63614d72
1418d5de4993b63c2b11a64df62a03ae8ebb8f95
5b8545b9cf60e23bd9c7eacef43e9b85e2843b1d90328b5b6fca9ef851347808
GET /favicon.ico HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/x-icon
Last-Modified: Thu, 08 Sep 2022 17:45:19 GMT
Accept-Ranges: bytes
ETag: "b3ed42c3aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Tue, 13 Sep 2022 12:40:07 GMT
Content-Length: 1150
Via: 1.1 dca1-bit12005