Report - mfg-financial.com/ftp/xchange/login.php

Report Overview

Submitted URL
mfg-financial.com/ftp/xchange/login.php
IP
54.85.200.131
ASN
#14618 AMAZON-AES
Submitted
2022-09-22 02:03:18
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.115
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
cdn.jsdelivr.net	439	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	387 B	3.7 kB	151.101.85.229
stats.g.doubleclick.net	96	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	605 B	716 B	142.251.1.154
www.google.com	7	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	508 B	694 B	142.250.74.164
mfg-financial.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	358 B	394 B	54.164.9.107
www.mfg-financial.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.5 kB	2.2 kB	104.16.66.197
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	658 B	1.2 kB	93.184.220.29
static.fmgsuite.com	138136	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	7.5 kB	3.5 MB	54.230.111.28
ocsp.globalsign.com	2075	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	356 B	1.9 kB	104.18.20.226
col.site24x7rum.com	25566	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	458 B	605 B	54.191.17.200
www.googletagmanager.com	75	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	379 B	43 kB	142.250.74.72
static.site24x7rum.com	20553	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	417 B	23 kB	54.230.111.14
www.google-analytics.com	40	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.2 kB	21 kB	142.250.74.174
www.google.no	25607	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	507 B	694 B	142.250.74.3
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	387 B	746 B	142.250.74.10
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	56 kB	34.120.237.76
s3.amazonaws.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	457 B	18 kB	52.216.251.38
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.6 kB	4.4 kB	23.36.76.226
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	54.186.209.73
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	4.0 kB	8.4 kB	142.250.74.3
ocsp.sca1b.amazontrust.com	1015	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	7.6 kB	143.204.42.88
fmg-websites-custom.s3.amazonaws.com	220647	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.6 kB	19 kB	52.216.28.156
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	956 B	48 kB	142.250.74.163

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-22	medium	mfg-financial.com/ftp/xchange/login.php	Phishing
2022-09-22	medium	www.mfg-financial.com/ftp/xchange/login.php	Phishing
2022-09-22	medium	www.mfg-financial.com/ftp/xchange/login.php	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	cdn.jsdelivr.net/scrollreveal.js/3.1.4/scrollreveal.min.js	8.5 kB	2023-03-07	2024-04-20
Pretty URL cdn.jsdelivr.net/scrollreveal.js/3.1.4/scrollreveal.min.js IP 151.101.85.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 15:05:47 Last Seen2024-04-20 21:01:08 Times Seen554 Hash b8d4ede888d284c51cbf85d686e02da3 aea504a314fcfdc65f3013e13219b8c92776ffdb 9140213f193f683ccee63ed57bb1e303d1e156af982fb15d4c1b03dc1eefdc60 Loading...

	www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php	560 B	2023-03-07	2024-01-07
Pretty URL www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php IP 104.16.67.197 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:11:39 Last Seen2024-01-07 15:32:52 Times Seen50 Hash 9f02925345b2df8aedda262d482ba038 0201fc4571106fc91c406c66addd0abc03c47471 668e205287a3daf54afabd52457533f956485528fd72320967a76f62f6259998 Loading...

	fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/scrollreveal.js	1.2 kB	2023-03-07	2024-02-14
Pretty URL fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/scrollreveal.js IP 52.216.28.156 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:56:24 Last Seen2024-02-14 05:34:39 Times Seen3 Hash 677ddd3d6626e41b98e201324c0c0348 0bc2a8a3f603f08581dedde2afa52866e2868fd0 448226a1b46607f9a5103e03a68f5982085e9cfd638c04eaffd17587fbf6bf23 Loading...

	www.googletagmanager.com/gtag/js?id=UA-24680519-10	109 kB	2023-03-07	2023-03-07
Pretty URL www.googletagmanager.com/gtag/js?id=UA-24680519-10 IP 142.250.74.72 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:56:24 Last Seen2023-03-07 22:56:24 Times Seen1 Hash 9aec8befbda6a1080c59c15c91e06ce4 59dcb03095837d5a6cedd984b4b714cb8ae59c66 d85047e4186dea993163925557e873184258af8de9eee82697679be0ab606b86 Loading...

	www.google-analytics.com/analytics.js	50 kB	2023-03-07	2024-01-06
Pretty URL www.google-analytics.com/analytics.js IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 18:05:31 Last Seen2024-01-06 17:39:53 Times Seen66 Hash 99ba52a15d2da967b023016d1af58cbd 5c2246049c43834d17113877b4731bd4f9803d55 9e25469f734732205f33dd80ff8ca12080406c18d2fa99a1f368103e51f7999f Loading...

	static.fmgsuite.com/site/templates/007/dist/scripts.js?v=2.86.45.29790.353	295 kB	2023-03-07	2023-03-07
Pretty URL static.fmgsuite.com/site/templates/007/dist/scripts.js?v=2.86.45.29790.353 IP 54.230.111.28 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:56:24 Last Seen2023-03-07 23:30:38 Times Seen1 Hash 1e64aeff7efbad65f6f8e256dce05ed1 b1522c596bbe205ab7bb5c86988253173dff5421 22ede70300cf8f9fc92a0527dae43fc8a4466e73e11d80d2ad064857d14da9e0 Loading...

	www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php	262 B	2023-03-07	2023-03-13
Pretty URL www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php IP 104.16.67.197 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:56:24 Last Seen2023-03-13 19:07:53 Times Seen1 Hash 09725db442935b7536c48b469988b084 8c8b0b18d111ac13a8dd888bc98ad31740802236 e5a53ee7872be744da0fe2df310b6d43c2084be9bde3a0c46e8cd2ec135e0fc4 Loading...

	www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php	157 B	2023-03-07	2023-06-21
Pretty URL www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php IP 104.16.67.197 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:56:24 Last Seen2023-06-21 18:17:00 Times Seen2 Hash 4064dc49dd7bb333fd4ad86cb9c4c2ea 296073646dab73e645c0ec32e019c6667bc22e54 ab0a25c9291218115a70f4bacead5dece019ed2c8ce4bd777e870859f8754cc9 Loading...

	fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/364377-lewis.js	3.3 kB	2023-03-07	2023-03-13
Pretty URL fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/364377-lewis.js IP 52.216.28.156 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:56:24 Last Seen2023-03-13 19:07:53 Times Seen1 Hash f448749a26df1824c98578c627fa447a 104080f7a90c11902fbfa2de91161434952f9451 352125a8d3d51eca537dcd272c9246dc74bae48a765dca75a407f41eca1b36ea Loading...

	www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php	102 B	2023-03-07	2024-02-14
Pretty URL www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php IP 104.16.67.197 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:56:24 Last Seen2024-02-14 05:34:39 Times Seen2 Hash e0473a6c5c4b25aa104b9cd6adb5c27a e074624d27b7cecb49f07ea30f5a4373a433e3f6 c9ea065fd8879d90a033c43779a2b7864c2265419cff93f9b004bb67ae699bda Loading...

	static.site24x7rum.com/beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586	87 kB	2023-03-07	2023-03-10
Pretty URL static.site24x7rum.com/beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586 IP 54.230.111.14 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:11:39 Last Seen2023-03-10 16:14:00 Times Seen1 Hash cc4f207d437b32223960a5784ecb89f8 91f67ad61ef3eec1777f9b2eb87f7f28ef40a448 d7a6d0bfd12919dd9bdf8f2ff9af50d400b33920fc2937a1c3e0bb068189ef2d Loading...

HTTP Transactions (77)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

143.204.55.115

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 22 Sep 2022 01:13:53 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5J1hoE80RfgumFRsBQgGgy1ZuW-_UT9OZyksroVA5hlL1dcugxW1Hw==
Age: 2953

mfg-financial.com/ftp/xchange/login.php

54.164.9.107

301 Moved Permanently

170 B

URL HTTP/1.1
mfg-financial.com/ftp/xchange/login.php
IP
54.164.9.107:0
ASN
#14618 AMAZON-AES

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
170 B (170 bytes)
Hash
5bf3a62c4baec1d7339bb0a03f5b9211
24008e686ae1f0102891d02c994cd38a403f10bf
646f4cebed77580971f73047ec463a1010e25d0101be2354f1ca6ed119b5ff7f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /ftp/xchange/login.php HTTP/1.1
Host: mfg-financial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Server: nginx/1.19.10
Date: Thu, 22 Sep 2022 02:03:06 GMT
Content-Type: text/html
Content-Length: 170
Connection: keep-alive
Location: http://www.mfg-financial.com/ftp/xchange/login.php

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3224
Expires: Thu, 22 Sep 2022 02:56:50 GMT
Date: Thu, 22 Sep 2022 02:03:06 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
afb65a07bf7214addf83d17a53acba32
a8e973204431320aa7b362a4e73944520c4b51b9
46e1a9e6c98245afb7fa84bc6d9ba6844105024e2d3f56e28748e6c321475d02

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46E1A9E6C98245AFB7FA84BC6D9BA6844105024E2D3F56E28748E6C321475D02"
Last-Modified: Wed, 21 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4562
Expires: Thu, 22 Sep 2022 03:19:08 GMT
Date: Thu, 22 Sep 2022 02:03:06 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: Xg998v2Uq35y8g3dSJiLq6Ap6L9MsAmq+6g2o2Gd6t/biF8OIB8vS8D0RlHOUkOaeipa1e6Ijak=
x-amz-request-id: 1QHYQKJWP7FS2MJD
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 22 Sep 2022 01:43:33 GMT
age: 1173
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 02:03:06 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

www.mfg-financial.com/ftp/xchange/login.php

104.16.66.197

301 Moved Permanently

168 B

URL HTTP/1.1
www.mfg-financial.com/ftp/xchange/login.php
IP
104.16.66.197:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
168 B (168 bytes)
Hash
7fcef5af46c476aefdcff7248195cdfc
ff5a3b84620fb8270ae6781fdc406f08f1b88c1f
946bde26daab13c238c8b580bd7f21a2fee4bf265cfff5de3f90bb220b0937e8

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /ftp/xchange/login.php HTTP/1.1
Host: www.mfg-financial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Thu, 22 Sep 2022 02:03:07 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private
Location: https://www.mfg-financial.com/ftp/xchange/login.php
X-StackifyID: V2|cdcf0c50-87e1-4338-902e-d664d8c4bbfc|C78253|CD45571
CF-Cache-Status: DYNAMIC
Set-Cookie: .Stackify.Rum=cdcf0c50-87e1-4338-902e-d664d8c4bbfc; path=/; HttpOnly
__cf_bm=3rtRRgjMwsYy4pjFquqs6GVX8.JaWu2b8K12NHJpIE8-1663812187-0-Adx8an421MfkXPhlZMnMN5AH66NmHjPifT/SucJYIkAM6ODTMz43CAvcxF3O+Bw/Sw9RXsfL7JRZeBtFm92IHemW5AanLUPFWh1nh1sHW/lU; path=/; expires=Thu, 22-Sep-22 02:33:07 GMT; domain=.www.mfg-financial.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 74e776578850b4eb-OSL

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
cbab14a0b6ef507cb80de5aa14ebca2b
c2629c977196a7706774f162471a9d0d8e26a373
c030a0fd1bfb266e30dc1781d8c0195b93a6b9b72b18e724a24e17cd8c7509db

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 02:03:07 GMT
Server: ECS (amb/6BA9)
Content-Length: 280

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.115

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 22 Sep 2022 01:03:22 GMT
Cache-Control: max-age=3600
Expires: Thu, 22 Sep 2022 01:59:02 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: JUltXoNi_YtdoumBExNNa1Wb4SiCMYIF14_KTVTta_z0S2jYnHmzIA==
Age: 3585

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
ff6d50919e56aed75c47feb45ee2f2ec
98f558a4b2d4f3c271abc93d0b74ece4ad7a59ef
b1b6f0e78b5a1e2092cba6d71d0d5a918066c0486176cef0a19f51e2d5a9962e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6319
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 02:03:07 GMT
Last-Modified: Thu, 22 Sep 2022 00:17:48 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

54.186.209.73

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.186.209.73:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 45XYy5L0fVlEKNXjg1Ya1A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: k2Z4Lzy9miynY6uWEiYhAWnLzZo=

cdn.jsdelivr.net/scrollreveal.js/3.1.4/scrollreveal.min.js

151.101.85.229

200 OK

2.9 kB

URL HTTP/2
cdn.jsdelivr.net/scrollreveal.js/3.1.4/scrollreveal.min.js
IP
151.101.85.229:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (8487), with no line terminators
Size
2.9 kB (2933 bytes)
Hash
7f7205a48c4dd9f9d3a7afd745cee35a
e5b0d510fff64e1a33233d2ea024154a4dea0297
886406d8f1abe3c73a919f0ae135424c212c59df766cecbf4857db5f7fcb80f9

HTTP Headers

GET /scrollreveal.js/3.1.4/scrollreveal.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"2127-rqUEoxT8/cZfMBPhMhm4ySd2/9s"
content-encoding: gzip
accept-ranges: bytes
date: Thu, 22 Sep 2022 02:03:08 GMT
age: 797372
x-served-by: cache-fra19174-FRA, cache-bma1675-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2933
X-Firefox-Spdy: h2

static.fmgsuite.com/site/templates/global/img/assets/largethumb/015-largethumb-a.jpg?v=1

54.230.111.28

200 OK

154 kB

URL HTTP/2
static.fmgsuite.com/site/templates/global/img/assets/largethumb/015-largethumb-a.jpg?v=1
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x460, components 3\012- data
Size
154 kB (153934 bytes)
Hash
6f47f3a8ce384da88afa641cc61c7880
da527966e3b4deadc5e76b54c6132786f136be20
351ffd57253fe2fad7f34dbe8cb0007bc6cbc97b771740cf1ca1822041cb907d

HTTP Headers

GET /site/templates/global/img/assets/largethumb/015-largethumb-a.jpg?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 153934
x-amz-replication-status: COMPLETED
last-modified: Tue, 29 Mar 2022 22:54:21 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: d2cpCzumuoinZ.g8GgbMyhgZDH6pAX7B
accept-ranges: bytes
server: AmazonS3
date: Thu, 22 Sep 2022 02:03:08 GMT
etag: "6f47f3a8ce384da88afa641cc61c7880"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: H8V9GdoU9xCT5qT7imYohUDVmWuFJvQXxkRexors_zRtZxtnNun2qA==
age: 2147
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
35343b6981ed4c9eb2cd90bc8c2146cd
4e49432e50195a2bc528fb1745a2899306c79db8
cf55f53534e3e8b62513618cda90832a7b9bcd0d15b1a8f6bb51db6eb60daefd

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 02:03:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
5f68499f2ba3b2c5aa7e979ee9b4d3a8
67a456fe80bd69aa2fbd0331ba343d1789509d0f
394e18527ce3ad7de2274de2e5e6a7f3fb390e7d6c4f7342ab485b7794e169e7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 02:03:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

static.fmgsuite.com/media/sourceImages/d0a75788-244f-4a14-8346-b0f82c5de81b.png?v=1

54.230.111.28

200 OK

666 kB

URL HTTP/2
static.fmgsuite.com/media/sourceImages/d0a75788-244f-4a14-8346-b0f82c5de81b.png?v=1
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
PNG image data, 1383 x 1325, 8-bit/color RGBA, non-interlaced\012- data
Size
666 kB (666339 bytes)
Hash
8a5e83af60ea470d320acbe9c30e4176
6544a9d9c3f5a7b587f3e41c8e4a3ed887d0b3fd
1ae04324f6e37d8475a4e67f32d9e874e5f187326df33dbb4c32c6bd760e30ab

HTTP Headers

GET /media/sourceImages/d0a75788-244f-4a14-8346-b0f82c5de81b.png?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 666339
x-amz-replication-status: COMPLETED
last-modified: Mon, 17 Sep 2018 20:56:10 GMT
x-amz-version-id: Is37tVWycvjNiy_lRUSS.azsl5efiMfG
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 11:02:40 GMT
etag: "8a5e83af60ea470d320acbe9c30e4176"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YneFZ6DOjM2f8WAZFYX1dgYhifGStt8h0PdgA1Xgq8Wp1EUZxr3iEw==
age: 54029
X-Firefox-Spdy: h2

static.fmgsuite.com/media/sourceImages/d3fd26e1-2ef1-4a13-a663-f9b955a6ec4c.png?v=1

54.230.111.28

200 OK

278 kB

URL HTTP/2
static.fmgsuite.com/media/sourceImages/d3fd26e1-2ef1-4a13-a663-f9b955a6ec4c.png?v=1
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
PNG image data, 1579 x 1133, 8-bit/color RGBA, non-interlaced\012- data
Size
278 kB (277742 bytes)
Hash
6935235d36fe4dcc2bac1a3b97281e4b
d36aa8952471ad8e55cccf170eb5bda8dba9cea3
364267d5fb647318ba3816ed66d16aa1468654bb1adeb41224a8703631cf6be5

HTTP Headers

GET /media/sourceImages/d3fd26e1-2ef1-4a13-a663-f9b955a6ec4c.png?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 277742
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Sep 2018 00:00:30 GMT
x-amz-version-id: sEI.B5MOU4GekIVDP1KGfwXW_x4YHB2R
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 07:44:13 GMT
etag: "6935235d36fe4dcc2bac1a3b97281e4b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JoPIxRGJghS7JPeQYn8OIcj-YL-W6lJTiGAtcy9uhZRWvp8MiUo0oQ==
age: 65936
X-Firefox-Spdy: h2

static.fmgsuite.com/media/sourceImages/b87ccca4-20b6-40e2-8f23-5619bf1a0dac.png?v=1

54.230.111.28

200 OK

154 kB

URL HTTP/2
static.fmgsuite.com/media/sourceImages/b87ccca4-20b6-40e2-8f23-5619bf1a0dac.png?v=1
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
PNG image data, 900 x 565, 8-bit/color RGBA, non-interlaced\012- data
Size
154 kB (153789 bytes)
Hash
9501320cc17c42e1c32f1c6e4f66c234
622a06a6f629837d35e01c81f283280085d1c3cc
a0e1c61ed13296e782b3b2ced418becbb99a6bfde7e4afcb5b4ee56219506c4d

HTTP Headers

GET /media/sourceImages/b87ccca4-20b6-40e2-8f23-5619bf1a0dac.png?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 153789
date: Wed, 21 Sep 2022 17:05:28 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 13 Sep 2018 23:37:31 GMT
etag: "9501320cc17c42e1c32f1c6e4f66c234"
x-amz-version-id: TLyZq7_nhgyyaRkzWVJP_17Nnx67gsyr
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -LYSfvm-jug5nXYrYOe3gSjp70BOsG6C87ctE7ZH2sBhUoT4X5kcvA==
age: 32261
X-Firefox-Spdy: h2

static.fmgsuite.com/site/templates/global/img/assets/largethumb/486-largethumb-a.jpg?v=1

54.230.111.28

200 OK

31 kB

URL HTTP/2
static.fmgsuite.com/site/templates/global/img/assets/largethumb/486-largethumb-a.jpg?v=1
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x460, components 3\012- data
Size
31 kB (31134 bytes)
Hash
55b6860a6617d74f2cacc6d8c31005a9
0b0c5e87d35956d292f01dfcb07ad5064d13b325
6bdac6c7b7fd13451a1d33f975e76650ab4a0122bb666bf684f8cdb79d42f60b

HTTP Headers

GET /site/templates/global/img/assets/largethumb/486-largethumb-a.jpg?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 31134
x-amz-replication-status: COMPLETED
last-modified: Tue, 29 Mar 2022 22:55:18 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: RNpb3kmdbx0wXIxgHzDtoQGAhQ_rayT2
accept-ranges: bytes
server: AmazonS3
date: Thu, 22 Sep 2022 02:03:08 GMT
etag: "55b6860a6617d74f2cacc6d8c31005a9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: t8JqL5gluUbdlNA3EtkghuIHfgNm_0pZnpn8QJWUdUyi6M7z64uHjQ==
age: 54028
X-Firefox-Spdy: h2

ocsp.sca1b.amazontrust.com/

143.204.42.88

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.88:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
b76bc5c8a969bfc2713f8856acc20578
f01222f964beabd1a945bb16ac2b73f80de4362b
bef309a806d85d0458658d6cc418d97b6ffa41df5d26142fb51849a862131327

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 02:03:08 GMT
Last-Modified: Thu, 22 Sep 2022 00:54:46 GMT
Server: ECS (dcb/7ECA)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6rS2SSjc3qE30NqLt0u7U7rbf2Yalkf22nFPNUQjh21nmGajNbIyTA==
Age: 4102

ocsp.sca1b.amazontrust.com/

143.204.42.88

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.88:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
b76bc5c8a969bfc2713f8856acc20578
f01222f964beabd1a945bb16ac2b73f80de4362b
bef309a806d85d0458658d6cc418d97b6ffa41df5d26142fb51849a862131327

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 02:03:08 GMT
Last-Modified: Thu, 22 Sep 2022 00:54:46 GMT
Server: ECS (dcb/7ECA)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: G7gZKzdLnimz6Oc3FfK8w5WJx_n6VWD9LNP-EyJBetzuydZu8k0V9A==
Age: 4102

ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1

104.18.20.226

200 OK

1.5 kB

URL HTTP/1.1
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.5 kB (1462 bytes)
Hash
c1b22025fcd55c7aaf1d5998f4785317
4385cd8fa8124bbe9b52cde7c2171698553f220d
63a0fa82c33ecc25a3b9b10482960f15ab1898dbc40e71f813aa1f91b395b582

HTTP Headers

POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 02:03:08 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "ADF9C0410758250BB3A3A693243FD4392A5ACB8B"
Expires: Thu, 22 Sep 2022 13:00:00 GMT
Last-Modified: Thu, 22 Sep 2022 01:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 995
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74e776606fef0b65-OSL

www.googletagmanager.com/gtag/js?id=UA-24680519-10

142.250.74.72

200 OK

42 kB

URL HTTP/2
www.googletagmanager.com/gtag/js?id=UA-24680519-10
IP
142.250.74.72:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1720)
Size
42 kB (42212 bytes)
Hash
169163dd3891a670aef66c3d332aff7a
5a2b92d16063aad3ebb039a688ad8f9c3bec58e1
1ea0d410ecefd55f0c72020378ee4199adfab57eec30d9d312ae72d653b93678

HTTP Headers

GET /gtag/js?id=UA-24680519-10 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 22 Sep 2022 02:03:08 GMT
expires: Thu, 22 Sep 2022 02:03:08 GMT
cache-control: private, max-age=900
last-modified: Thu, 22 Sep 2022 00:26:25 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42212
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
5f68499f2ba3b2c5aa7e979ee9b4d3a8
67a456fe80bd69aa2fbd0331ba343d1789509d0f
394e18527ce3ad7de2274de2e5e6a7f3fb390e7d6c4f7342ab485b7794e169e7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 02:03:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
35343b6981ed4c9eb2cd90bc8c2146cd
4e49432e50195a2bc528fb1745a2899306c79db8
cf55f53534e3e8b62513618cda90832a7b9bcd0d15b1a8f6bb51db6eb60daefd

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 02:03:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

static.fmgsuite.com/media/sourceImages/9afb8c86-9aa4-4046-9fda-ee754ad40546.png?v=1

54.230.111.28

200 OK

419 kB

URL HTTP/2
static.fmgsuite.com/media/sourceImages/9afb8c86-9aa4-4046-9fda-ee754ad40546.png?v=1
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
PNG image data, 1335 x 1023, 8-bit/color RGBA, non-interlaced\012- data
Size
419 kB (418932 bytes)
Hash
b73f3b86926091289a5378309a27125e
f2d6c699d486d48575ec51055d8b8c5b72f986af
8f61d7c5bc0614ab720ea6406862245b0a0064c69a2e91ed8712392ec3797d3a

HTTP Headers

GET /media/sourceImages/9afb8c86-9aa4-4046-9fda-ee754ad40546.png?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 418932
date: Wed, 21 Sep 2022 17:05:28 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 13 Sep 2018 23:53:26 GMT
etag: "b73f3b86926091289a5378309a27125e"
x-amz-version-id: b5LJ33IzO_n8U4d4dJ74xcyteSUI7rLY
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cnXna356_HaC7EHmgpt70kziG487zkT5cdE9xArllehuKsNYOO1Haw==
age: 32261
X-Firefox-Spdy: h2

ocsp.sca1b.amazontrust.com/

143.204.42.88

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.88:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
36a161a0191a31f18003cec75f62214a
2b9aa827014011e4faacdf0042c115e8f4b59824
a611d661f560832ffe3b7ce690a6169c58f57a595cd1f5bbf8b820eb1f2d9f6b

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 02:03:08 GMT
Last-Modified: Thu, 22 Sep 2022 00:31:03 GMT
Server: ECS (nyb/1D11)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: RYuXfbqowHO0kWxrc4CFVLgSodEUi_FgfpJuadxet--crMOdqQwMbw==
Age: 5525

ocsp.sca1b.amazontrust.com/

143.204.42.88

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.88:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
36a161a0191a31f18003cec75f62214a
2b9aa827014011e4faacdf0042c115e8f4b59824
a611d661f560832ffe3b7ce690a6169c58f57a595cd1f5bbf8b820eb1f2d9f6b

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 02:03:08 GMT
Last-Modified: Thu, 22 Sep 2022 00:26:45 GMT
Server: ECS (bsa/EB1C)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: IgHxnrlIvvb3oy8SjtGA2E-Sa7lv0F1L8sZcCBTYxxxwWNfCO7YhGA==
Age: 5783

ocsp.sca1b.amazontrust.com/

143.204.42.88

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.88:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
36a161a0191a31f18003cec75f62214a
2b9aa827014011e4faacdf0042c115e8f4b59824
a611d661f560832ffe3b7ce690a6169c58f57a595cd1f5bbf8b820eb1f2d9f6b

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 02:03:08 GMT
Last-Modified: Thu, 22 Sep 2022 00:23:30 GMT
Server: ECS (bsa/EB13)
X-Cache: Miss from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fVzBIGfVCvYVChvbQ0OFfGEgq-JI_DQ0NpuzySkyYRIwBI4gpyGHYQ==
Age: 5978

ocsp.sca1b.amazontrust.com/

143.204.42.88

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.88:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
36a161a0191a31f18003cec75f62214a
2b9aa827014011e4faacdf0042c115e8f4b59824
a611d661f560832ffe3b7ce690a6169c58f57a595cd1f5bbf8b820eb1f2d9f6b

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 02:03:08 GMT
Last-Modified: Thu, 22 Sep 2022 01:37:27 GMT
Server: ECS (bsa/EB1D)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rYY1Fse9vgTm0_OFwtjoJVShElFOt-Npau410A25L2GDNPVjSURTsQ==
Age: 1541

static.fmgsuite.com/media/images/30479605-3e1d-4270-99b3-a38bd6cd4232.png

54.230.111.28

200 OK

43 kB

URL HTTP/2
static.fmgsuite.com/media/images/30479605-3e1d-4270-99b3-a38bd6cd4232.png
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
PNG image data, 300 x 135, 8-bit/color RGBA, non-interlaced\012- data
Size
43 kB (42728 bytes)
Hash
f4c4803b8746c1e2c7def9f51ed87ddb
1ed5c591232b82b7d16213cd7a2724f58a783d1e
bcb613bfe0f63bc17156dde681711e7811c14d3d044cbbce7f73ef7a5adfa78a

HTTP Headers

GET /media/images/30479605-3e1d-4270-99b3-a38bd6cd4232.png HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 42728
x-amz-replication-status: COMPLETED
last-modified: Thu, 23 May 2019 21:01:20 GMT
x-amz-version-id: Dx0ueDEqLw.nObmSM_ddMhzE3KLNePTD
accept-ranges: bytes
server: AmazonS3
date: Thu, 22 Sep 2022 02:03:09 GMT
etag: "f4c4803b8746c1e2c7def9f51ed87ddb"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pXBK09TUvxpxFeNtyHl_8LTFtgX264oCbw7d7E2c5IF5ZnW9j-DmUg==
X-Firefox-Spdy: h2

static.fmgsuite.com/site/templates/global/img/assets/largethumb/195-largethumb-a.jpg?v=1

54.230.111.28

200 OK

56 kB

URL HTTP/2
static.fmgsuite.com/site/templates/global/img/assets/largethumb/195-largethumb-a.jpg?v=1
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x460, components 3\012- data
Size
56 kB (56423 bytes)
Hash
b8686755e002e3b44e8e59f21fd34738
6f20cfcf2d9badfea75949c88e7ffa71346ce4be
78f2c0da5b951499b3759c10c254905cfc965bfb440a5dae9001faf32c820941

HTTP Headers

GET /site/templates/global/img/assets/largethumb/195-largethumb-a.jpg?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 56423
x-amz-replication-status: COMPLETED
last-modified: Tue, 29 Mar 2022 22:54:45 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 3tjU932VpMkQbcO04raEuRtJ.9Vw6LDz
accept-ranges: bytes
server: AmazonS3
date: Thu, 22 Sep 2022 02:03:09 GMT
etag: "b8686755e002e3b44e8e59f21fd34738"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: alhYsZV_NDrcs2Yw_JS5wkrWMcKDboJaW6rJBmNPvLd0ZQ_CAk7R1Q==
X-Firefox-Spdy: h2

fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/364377-lewis.js

52.216.28.156

200 OK

3.3 kB

URL HTTP/1.1
fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/364377-lewis.js
IP
52.216.28.156:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
3.3 kB (3252 bytes)
Hash
f448749a26df1824c98578c627fa447a
104080f7a90c11902fbfa2de91161434952f9451
352125a8d3d51eca537dcd272c9246dc74bae48a765dca75a407f41eca1b36ea

HTTP Headers

GET /364377-lewis/js/364377-lewis.js HTTP/1.1
Host: fmg-websites-custom.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-amz-id-2: ES889zvcAMufJPV+TnkOkcU4eMZahfdYPit6KpkJdx8YTgDtBQsvc2Y58VsBl+lM4C4RDg7FgRI=
x-amz-request-id: HMRGC6FW12VTJGPQ
Date: Thu, 22 Sep 2022 02:03:09 GMT
Last-Modified: Thu, 17 Jan 2019 00:16:40 GMT
ETag: "f448749a26df1824c98578c627fa447a"
x-amz-version-id: 4jh_5HqPhQVhxqibCqYvVx18IMyPrpbi
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 3252

fmg-websites-custom.s3.amazonaws.com/exclusive-setup/template-fix/theme-24b-manhattan-fix.css

52.216.28.156

200 OK

57 B

URL HTTP/1.1
fmg-websites-custom.s3.amazonaws.com/exclusive-setup/template-fix/theme-24b-manhattan-fix.css
IP
52.216.28.156:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
57 B (57 bytes)
Hash
19d99265437b7d88803512b852416b70
4dfb715f6f427be1dcf91e043cca18b082fd1e5d
0c0165308fb3ed8a4a50bc883430422bbc3ca5994732fe190e79e84ed0c82b64

HTTP Headers

GET /exclusive-setup/template-fix/theme-24b-manhattan-fix.css HTTP/1.1
Host: fmg-websites-custom.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-amz-id-2: miUz1vxs6j/iEKhcORrraxCYcYKFfKkgwfqnypVQC+TvHr57vB51PjN5ybkm0xn4lSeDP+O5Pqw=
x-amz-request-id: HMRRAD7S3XRRCDK8
Date: Thu, 22 Sep 2022 02:03:09 GMT
Last-Modified: Wed, 13 Feb 2019 18:31:47 GMT
ETag: "19d99265437b7d88803512b852416b70"
x-amz-version-id: 5VD7sVAti71IVnvYdPKsXDvwUW4n0IWM
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 57

fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/scrollreveal.js

52.216.28.156

200 OK

1.2 kB

URL HTTP/1.1
fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/scrollreveal.js
IP
52.216.28.156:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
1.2 kB (1180 bytes)
Hash
677ddd3d6626e41b98e201324c0c0348
0bc2a8a3f603f08581dedde2afa52866e2868fd0
448226a1b46607f9a5103e03a68f5982085e9cfd638c04eaffd17587fbf6bf23

HTTP Headers

GET /364377-lewis/js/scrollreveal.js HTTP/1.1
Host: fmg-websites-custom.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-amz-id-2: zZNpY1PPS0X6v9Krj5+1R9PSiBhTQTHB0cAbHCsUL9r+sYzAWQI8t5oQXBAf+2LArVRCSjVGICA=
x-amz-request-id: HMRW8WMYBWGZ3WJQ
Date: Thu, 22 Sep 2022 02:03:09 GMT
Last-Modified: Thu, 17 Jan 2019 00:16:40 GMT
ETag: "677ddd3d6626e41b98e201324c0c0348"
x-amz-version-id: 99ikK76voR0YNhd6SMvqWSrHbupjBHi_
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 1180

fmg-websites-custom.s3.amazonaws.com/364377-lewis/css/364377-lewis.css

52.216.28.156

200 OK

13 kB

URL HTTP/1.1
fmg-websites-custom.s3.amazonaws.com/364377-lewis/css/364377-lewis.css
IP
52.216.28.156:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (12932)
Size
13 kB (12978 bytes)
Hash
638c5ba8ba5f04f72d17e1cb48fd628c
5ceca77706e1567187f31c11214c7458eb6e426f
f552fcee3f77c82bb1a0accc50a1ce699cea6451ba26ab09db8bf60c5711d8fe

HTTP Headers

GET /364377-lewis/css/364377-lewis.css HTTP/1.1
Host: fmg-websites-custom.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-amz-id-2: mGAp4mOZrra3Y/XoADbcggJ1rdNgo1I1xwNsPYe4EmhTWobvlLiizJiX+Oc0Pzsz9rLinQEa50c=
x-amz-request-id: HMRNNT679GBC2HYR
Date: Thu, 22 Sep 2022 02:03:09 GMT
Last-Modified: Fri, 22 Feb 2019 23:13:55 GMT
ETag: "638c5ba8ba5f04f72d17e1cb48fd628c"
x-amz-version-id: 5kGUp82_Se3w4Wt9lA7ms.T0bwsMyCbt
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 12978

static.site24x7rum.com/beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586

54.230.111.14

200 OK

22 kB

URL HTTP/1.1
static.site24x7rum.com/beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586
IP
54.230.111.14:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (32144)
Size
22 kB (22343 bytes)
Hash
5869e4aefabe888c591606de2e2f5d78
1533266b9ee27da5a254f6344c8805912e04041f
101990976c44f678463721c36b31539c9382c5a9ef9323fe3765dc99f1f527c9

HTTP Headers

GET /beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586 HTTP/1.1
Host: static.site24x7rum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/javascript;charset=ISO-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 22 Sep 2022 00:27:29 GMT
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Server: ZGS
Vary: accept-encoding
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: fPfxOTUvncGAQn0Kvd_B_FHP6erk0c0S3Z19BBYoNcOyTI0Vjm2CEg==
Age: 5739

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
5149084af9bb01e5471e0be93a009ab0
1aaae44973461346130015cba0c36e9d1b5b77f2
db8a390c5bb50072d57429a45c470496139deb98e04b175f45600e5e4b2ac884

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 02:03:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2

142.250.74.163

200 OK

24 kB

URL HTTP/2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Size
24 kB (23580 bytes)
Hash
e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537

HTTP Headers

GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 17:10:21 GMT
expires: Wed, 20 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 118367
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2

142.250.74.163

200 OK

23 kB

URL HTTP/2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Size
23 kB (23040 bytes)
Hash
de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49

HTTP Headers

GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 17:10:21 GMT
expires: Wed, 20 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 118367
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
5149084af9bb01e5471e0be93a009ab0
1aaae44973461346130015cba0c36e9d1b5b77f2
db8a390c5bb50072d57429a45c470496139deb98e04b175f45600e5e4b2ac884

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 02:03:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14320
Expires: Thu, 22 Sep 2022 06:01:48 GMT
Date: Thu, 22 Sep 2022 02:03:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14320
Expires: Thu, 22 Sep 2022 06:01:48 GMT
Date: Thu, 22 Sep 2022 02:03:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14320
Expires: Thu, 22 Sep 2022 06:01:48 GMT
Date: Thu, 22 Sep 2022 02:03:08 GMT
Connection: keep-alive

static.fmgsuite.com/site/templates/007/dist/7ac.css?v=2.86.45.29790.353

54.230.111.28

200 OK

48 kB

URL HTTP/2
static.fmgsuite.com/site/templates/007/dist/7ac.css?v=2.86.45.29790.353
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
data
Size
48 kB (47898 bytes)
Hash
3062aa228b1faf5476b3a204070c17ea
4bcdd3279c034b8104859e798c45c5479c2eed6f
731a57f9a593644e5df069815aaa49cbd41067eb1e91a8364ffad9f09617dbaf

HTTP Headers

GET /site/templates/007/dist/7ac.css?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:35 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: RpWjlobs.zIpIO2gfqeIAL_5bRG9p.NF
server: AmazonS3
content-encoding: gzip
date: Wed, 21 Sep 2022 16:40:02 GMT
etag: W/"8f56fac5ef8a406613260f0848df164d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1KDe06vjy6cMJmy_FaxZKbr1T5DK_EsIuUfb_PhFaq0hHJ2okidKnw==
age: 33787
X-Firefox-Spdy: h2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb268d425-806d-4e8d-98c9-df2f896671ce.jpeg

34.120.237.76

200 OK

6.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb268d425-806d-4e8d-98c9-df2f896671ce.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.8 kB (6789 bytes)
Hash
75d3255c85ff0dd5971b92c1df0d855a
01c5bd6a99e818c5d8aa961977c62231cb6f6f94
276915e715a3b193815fb0ea4df9ec98ca3b12775e9b8eb91926389ed8d9cfad

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb268d425-806d-4e8d-98c9-df2f896671ce.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6789
x-amzn-requestid: 7cda9a9f-ad39-420f-bd5a-e2bd358ac6e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F5-FO-oAMFXAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8372-5e5c9cc35d3eb14505ee3e32;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DJLgfFsv2ux3d0EUS4oh0EtBYbjgBXDoCqJyh6bk48Jc9GeKIpm-zQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:40:25 GMT
age: 15763
etag: "01c5bd6a99e818c5d8aa961977c62231cb6f6f94"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd80c0b0-1f50-41ad-b183-4804f10ef060.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.9 kB (9877 bytes)
Hash
b8bb6194dcfc32bf02932f4bbb1dcec0
8fa5650de8e274f8fc2fb96e13a4976e0fedb6c9
45d8af4c39b0bcacd2909b6deec2fc080a6a64936b53ebd7f6309381358bcaa9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd80c0b0-1f50-41ad-b183-4804f10ef060.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9877
x-amzn-requestid: 865f77de-c569-4938-9ae9-b79b11ae0804
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F0vF4oIAMF19w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8351-5111662b354f54bf3c2b77c9;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: QK9VmdBUjWZRhzyGjcsCBVYrSuxOgpjd-3piCc7DwB021dG53UK6RQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:34:22 GMT
age: 16126
etag: "8fa5650de8e274f8fc2fb96e13a4976e0fedb6c9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0788498f-41db-4d62-b749-e01caddb7f8d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10754 bytes)
Hash
af5773255351157d72c28a670a355c60
c803e5866edbe6c9baec14e93677f610bdf09bff
3229b4aa1c698647ad96d114174782549ad240f1b2c4ba8c268165a16afc84f0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0788498f-41db-4d62-b749-e01caddb7f8d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10754
x-amzn-requestid: 2d03531d-6055-477f-9cb6-9ea9fa27eeb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F0vHJ4IAMF42Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8351-692620e80d5b2efe1d0e3a82;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -3bQG5Av1EDxj7_3i8MktwjlPSEU8WDdxt5M6TsrWaodLWgSf3vdEA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:34:22 GMT
age: 16126
etag: "c803e5866edbe6c9baec14e93677f610bdf09bff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8861 bytes)
Hash
a504981ee10d8341b64f19001464ae8a
56f228d7358ba9deef000f53214dc7c1dc358109
0ea3b6ed12f3adf9d56e7d9b61f284d28107d99f28ee4e66b4c078a9a1a0cbee

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8861
x-amzn-requestid: 873e88ab-7afc-4b14-b428-d90ec2079741
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YO2wuE0AoAMF7Gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631c3804-0d25ab397a16c78907914e23;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 07:08:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UStTyIXPucbY9WmDl3W5bTyeT-2SJ5CTUjv8TLeexqZtKd1p2sJrNA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 03:10:59 GMT
age: 82329
etag: "56f228d7358ba9deef000f53214dc7c1dc358109"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d546012-e1d1-4ccd-a38f-d808cdfe4af0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.2 kB (5161 bytes)
Hash
06589b53db5d3d6307e15e354325e252
af20ced3f00015ad8ae837d7cf3f39b9f5f0f752
513daca9889934875f2c453aaed4ce1af32628550a4b2f2b8e69533cb09eda56

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d546012-e1d1-4ccd-a38f-d808cdfe4af0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5161
x-amzn-requestid: 9ba63285-4cef-4604-bd12-95a99463e087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F0wHYXIAMFgvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8351-1380adf019b16d5a50475cdb;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 2L14PporWFOOt2LmcUHgHTaXf8cycYkZ9toEwlKlyeS8jQlP8oX7qw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:34:22 GMT
age: 16126
etag: "af20ced3f00015ad8ae837d7cf3f39b9f5f0f752"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.sca1b.amazontrust.com/

143.204.42.88

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.88:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
dcf0dfe8a30398896f2fe30b10310227
2dd59c0027d9d75ecbeb923741faa273d67ca9d3
8b26ea61b0f4d1815d3e777a9914c4b5968fd6d359f6b9e20d96f76b2fcf08e3

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 02:03:08 GMT
Last-Modified: Thu, 22 Sep 2022 00:14:18 GMT
Server: ECS (bsa/EB1C)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: K7-ecVes4GHJ9QgY8XI9KLnw-yGD6GkbDkrKNPY1PfG0p-BTs1LVGg==
Age: 6530

static.fmgsuite.com/media/images/d5549bfa-c8d0-4c6c-b679-e1ed71b20c6d.png

54.230.111.28

200 OK

168 B

URL HTTP/2
static.fmgsuite.com/media/images/d5549bfa-c8d0-4c6c-b679-e1ed71b20c6d.png
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
PNG image data, 292 x 34, 8-bit/color RGBA, non-interlaced\012- data
Size
168 B (168 bytes)
Hash
cdd1015adf277e7dd28c51a94bd43f6e
304309145f7888a56893015417479140f2f2ea8d
d6dd5fc86404df93ebf4fd148b2b2249377009622668808cc0ff5811233bfc6c

HTTP Headers

GET /media/images/d5549bfa-c8d0-4c6c-b679-e1ed71b20c6d.png HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 168
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Sep 2018 16:12:37 GMT
x-amz-version-id: OZdrjeDpF64qfLGqflCBeyR7G0HBMl28
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 23:20:15 GMT
etag: "cdd1015adf277e7dd28c51a94bd43f6e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TlZmod_KlyThOlttfl2mljQpwDwLDvrDB09SscRKmmzJA-NRqluDuA==
age: 9774
X-Firefox-Spdy: h2

static.fmgsuite.com/media/images/5da9d55f-4874-4c04-b98b-442f93101464.png

54.230.111.28

200 OK

168 B

URL HTTP/2
static.fmgsuite.com/media/images/5da9d55f-4874-4c04-b98b-442f93101464.png
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
PNG image data, 292 x 34, 8-bit/color RGBA, non-interlaced\012- data
Size
168 B (168 bytes)
Hash
10209bfe8cabf4c2e596031854cf8365
2371b6d25b98030dfa4bb2c47c0266d74d05877d
728d270b5c9b6c4bc87a34da5686c12c3d1201f94b4d0997a3823553bc305f6d

HTTP Headers

GET /media/images/5da9d55f-4874-4c04-b98b-442f93101464.png HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 168
x-amz-replication-status: COMPLETED
last-modified: Mon, 10 Sep 2018 17:50:01 GMT
x-amz-version-id: PmXH8lkRIsqv0xwMDW7KQMz5n9V9Jckd
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 23:20:15 GMT
etag: "10209bfe8cabf4c2e596031854cf8365"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4I0XutEKnL-G7I5XQ2CsgqLr4I6b3Ycvj8kSExTjXg_XhSbpipvemQ==
age: 9775
X-Firefox-Spdy: h2

static.fmgsuite.com/media/images/80a0a59d-37e9-4cac-9999-3b7f80029c37.png

54.230.111.28

200 OK

168 B

URL HTTP/2
static.fmgsuite.com/media/images/80a0a59d-37e9-4cac-9999-3b7f80029c37.png
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
PNG image data, 292 x 34, 8-bit/color RGBA, non-interlaced\012- data
Size
168 B (168 bytes)
Hash
cdd1015adf277e7dd28c51a94bd43f6e
304309145f7888a56893015417479140f2f2ea8d
d6dd5fc86404df93ebf4fd148b2b2249377009622668808cc0ff5811233bfc6c

HTTP Headers

GET /media/images/80a0a59d-37e9-4cac-9999-3b7f80029c37.png HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 168
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Sep 2018 16:12:29 GMT
x-amz-version-id: Up8CjEy78drhM2Cg4IuVmC9HzsRMf.Fz
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 23:19:58 GMT
etag: "cdd1015adf277e7dd28c51a94bd43f6e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uPz82LlbANOUARXASGsqo9d-Hl5GUqjlp0Q5HearGzKOwNfd6sgCZw==
age: 9792
X-Firefox-Spdy: h2

s3.amazonaws.com/static.contentres.com/media/images/ff7f9876-3fba-4104-b6c4-195bf1641866.png

52.216.251.38

200 OK

17 kB

URL HTTP/1.1
s3.amazonaws.com/static.contentres.com/media/images/ff7f9876-3fba-4104-b6c4-195bf1641866.png
IP
52.216.251.38:0
ASN
#16509 AMAZON-02

File type
PNG image data, 1198 x 328, 8-bit/color RGBA, non-interlaced\012- data
Size
17 kB (17159 bytes)
Hash
f42aee9b482dcb7962a091de97caedeb
1731bb19c7e74a1f1c442264a52263b9d1453438
6e43d5829103f07e97318e24f33221f5682037f31ca4800cb5811293a3ebb510

HTTP Headers

GET /static.contentres.com/media/images/ff7f9876-3fba-4104-b6c4-195bf1641866.png HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fmg-websites-custom.s3.amazonaws.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-amz-id-2: HLeJO/w69sB6wpVFmVLsmQjiysHyEIdAGuhK4Wpqz8gadQk+N2esUEghKfAK3vtzJxgjY01+xBs=
x-amz-request-id: ZBBA803ZT01AHVGG
Date: Thu, 22 Sep 2022 02:03:10 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Wed, 12 Sep 2018 18:16:35 GMT
ETag: "f42aee9b482dcb7962a091de97caedeb"
x-amz-version-id: XzWSlVQ8qWa.PAOKIkSSDPaH.razXRCx
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 17159

static.fmgsuite.com/site/templates/007/fonts/fontawesome-webfont.woff2?v=4.7.0

54.230.111.28

200 OK

77 kB

URL HTTP/2
static.fmgsuite.com/site/templates/007/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

HTTP Headers

GET /site/templates/007/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://static.fmgsuite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 77160
date: Thu, 22 Sep 2022 02:03:09 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:37 GMT
etag: "af7ae505a9eed503f8b8e6982036873e"
x-amz-server-side-encryption: AES256
x-amz-version-id: vBVO7Rw4zjWHto9PdyTccpBKqQ1GEzTs
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: v4p1zvBZ66IxeG5gBE7ygWkC8pGarQzQINkF6cxHTsmTzIgFC30NpQ==
X-Firefox-Spdy: h2

static.fmgsuite.com/media/images/f9736cc9-65fa-4dd3-9b06-38fa70329828.jpg

54.230.111.28

200 OK

272 kB

URL HTTP/2
static.fmgsuite.com/media/images/f9736cc9-65fa-4dd3-9b06-38fa70329828.jpg
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2118x775, components 3\012- data
Size
272 kB (272070 bytes)
Hash
08764fbaf581510596ae79301f8e4f9c
ef9c776eb056b5fd9959a107fa8e3158123522c5
714b89e2b79a42b2c9cfba894dd7f891c434bce63d44dadedd9c2c3fbeeef81c

HTTP Headers

GET /media/images/f9736cc9-65fa-4dd3-9b06-38fa70329828.jpg HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 272070
date: Thu, 22 Sep 2022 02:03:09 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 13 Feb 2019 17:19:20 GMT
etag: "08764fbaf581510596ae79301f8e4f9c"
x-amz-version-id: wk6GSmVOSUvgEMrCPW4OsbG_qgYn8I3_
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bAa2OE2lOgXtzuwZtygk_cbVUnu-VYm2hf7T5MxddRZ_y9r-sRXa2Q==
X-Firefox-Spdy: h2

www.google-analytics.com/analytics.js

142.250.74.174

200 OK

20 kB

URL HTTP/2
www.google-analytics.com/analytics.js
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1325)
Size
20 kB (19826 bytes)
Hash
cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d

HTTP Headers

GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Thu, 22 Sep 2022 00:41:10 GMT
expires: Thu, 22 Sep 2022 02:41:10 GMT
cache-control: public, max-age=7200
age: 4919
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.google-analytics.com/j/collect?v=1&_v=j97&a=2108252272&t=pageview&_s=1&dl=https%3A%2F%2Fwww.mfg-financial.com%2F%3FredirectUrl%3D%2Fftp%2Fxchange%2Flogin.php&ul=en-us&de=UTF-8&dt=Home&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAAC~&jid=1293830890&gjid=2019649645&cid=1979297862.1663812189&tid=UA-24680519-10&_gid=1473431087.1663812189&_r=1&gtm=2ou9l0&z=1758197461

142.250.74.174

200 OK

2 B

URL HTTP/2
www.google-analytics.com/j/collect?v=1&_v=j97&a=2108252272&t=pageview&_s=1&dl=https%3A%2F%2Fwww.mfg-financial.com%2F%3FredirectUrl%3D%2Fftp%2Fxchange%2Flogin.php&ul=en-us&de=UTF-8&dt=Home&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAAC~&jid=1293830890&gjid=2019649645&cid=1979297862.1663812189&tid=UA-24680519-10&_gid=1473431087.1663812189&_r=1&gtm=2ou9l0&z=1758197461
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
ASCII text, with no line terminators
Size
2 B (2 bytes)
Hash
cc7a1e792bca8ccb1946b7a07f6dbc03
11a2757082428311f587b7664fa9840376137f80
de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af

HTTP Headers

POST /j/collect?v=1&_v=j97&a=2108252272&t=pageview&_s=1&dl=https%3A%2F%2Fwww.mfg-financial.com%2F%3FredirectUrl%3D%2Fftp%2Fxchange%2Flogin.php&ul=en-us&de=UTF-8&dt=Home&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAAC~&jid=1293830890&gjid=2019649645&cid=1979297862.1663812189&tid=UA-24680519-10&_gid=1473431087.1663812189&_r=1&gtm=2ou9l0&z=1758197461 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: https://www.mfg-financial.com
date: Thu, 22 Sep 2022 02:03:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
77f9b5e468180a8976a641e40dceedbf
9873db160721dc9f41d3ff2d711db700d6f5d4d7
cae6929c00ed37fc097432c9ac1d6800244479d3877b17662c67bafeeff23aba

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 02:03:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

static.fmgsuite.com/media/images/c47dc1be-4915-4b76-853f-fd35e457cc99.jpg

54.230.111.28

200 OK

1.3 MB

URL HTTP/2
static.fmgsuite.com/media/images/c47dc1be-4915-4b76-853f-fd35e457cc99.jpg
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2321x1440, components 3\012- data
Size
1.3 MB (1258678 bytes)
Hash
41a6e3876efddf12f46c659cb630af88
dd8770908c0580e472927a4439b9909c9c0e3f4c
58e1ac745c19b44f6a4673e9960051058386c3ee261b5a91334b5092f9771f4f

HTTP Headers

GET /media/images/c47dc1be-4915-4b76-853f-fd35e457cc99.jpg HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 1258678
date: Thu, 22 Sep 2022 02:03:09 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 31 Jan 2019 16:35:44 GMT
etag: "41a6e3876efddf12f46c659cb630af88"
x-amz-version-id: wVepZlnDlan_sPhf0Vqdpe_.MT_tfzh1
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: m8IsJaqBkUmbdCnsaqL58gmRHdRHmGwqLWtTymC-FTGyFbKKLOTs7w==
X-Firefox-Spdy: h2

stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-24680519-10&cid=1979297862.1663812189&jid=1293830890&gjid=2019649645&_gid=1473431087.1663812189&_u=YEBAAUAAAAAAAC~&z=1171660063

142.251.1.154

200 OK

4 B

URL HTTP/2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-24680519-10&cid=1979297862.1663812189&jid=1293830890&gjid=2019649645&_gid=1473431087.1663812189&_u=YEBAAUAAAAAAAC~&z=1171660063
IP
142.251.1.154:0
ASN
#15169 GOOGLE

File type
ASCII text, with no line terminators
Size
4 B (4 bytes)
Hash
48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a

HTTP Headers

POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-24680519-10&cid=1979297862.1663812189&jid=1293830890&gjid=2019649645&_gid=1473431087.1663812189&_u=YEBAAUAAAAAAAC~&z=1171660063 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: https://www.mfg-financial.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 22 Sep 2022 02:03:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
77f9b5e468180a8976a641e40dceedbf
9873db160721dc9f41d3ff2d711db700d6f5d4d7
cae6929c00ed37fc097432c9ac1d6800244479d3877b17662c67bafeeff23aba

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 02:03:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
f675396b1827a50c78e358358f256144
451b788273e06a08f762735c23c13028e32a3f3c
6bd9e2ec423bf8f0f681a92f4ad0b28cdb53f5df6ca4b571c9697b678c20c126

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 02:03:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
41630fb2c7ef9e435a8762b0943e0980
04b6c8bfe97bc5408e1450b5921331c6ae6de682
e9e83895eef14a5a26e91c9574fc9f60eb2f47959406eabe87b4618412519476

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 02:03:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=1979297862.1663812189&jid=1293830890&_u=YEBAAUAAAAAAAC~&z=318998545

142.250.74.164

200 OK

42 B

URL HTTP/2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=1979297862.1663812189&jid=1293830890&_u=YEBAAUAAAAAAAC~&z=318998545
IP
142.250.74.164:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=1979297862.1663812189&jid=1293830890&_u=YEBAAUAAAAAAAC~&z=318998545 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 22 Sep 2022 02:03:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=1979297862.1663812189&jid=1293830890&_u=YEBAAUAAAAAAAC~&z=318998545

142.250.74.3

200 OK

42 B

URL HTTP/2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=1979297862.1663812189&jid=1293830890&_u=YEBAAUAAAAAAAC~&z=318998545
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=1979297862.1663812189&jid=1293830890&_u=YEBAAUAAAAAAAC~&z=318998545 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 22 Sep 2022 02:03:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
f675396b1827a50c78e358358f256144
451b788273e06a08f762735c23c13028e32a3f3c
6bd9e2ec423bf8f0f681a92f4ad0b28cdb53f5df6ca4b571c9697b678c20c126

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 02:03:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
1b33d59cf038a3fe7273f78fda2cce3a
0b367731ef6df8e1f6c1b8774198daa9959d7cf5
b02b1756112479f92786994de8e884986b0a7eb3d5885300bfd8a64f597f7cc4

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 02:03:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

static.fmgsuite.com/media/images/92d7e6bf-10a6-424b-876e-6d626e69d74f.ico

54.230.111.28

200 OK

4.2 kB

URL HTTP/2
static.fmgsuite.com/media/images/92d7e6bf-10a6-424b-876e-6d626e69d74f.ico
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Size
4.2 kB (4158 bytes)
Hash
e338cca5f3614abe4255fd0c64b41d6c
71f416a1b0fbd19ef80f7bc74c0dfaf998b6cf09
278329fac12f4c5b91fa85d964dc0404298fd6d0becec4743a3b92f967c64cd0

HTTP Headers

GET /media/images/92d7e6bf-10a6-424b-876e-6d626e69d74f.ico HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 4158
x-amz-replication-status: COMPLETED
last-modified: Fri, 02 Nov 2018 19:12:26 GMT
x-amz-version-id: K06K08oKzcGpBu8.7r9eLuG1bP.GXMuc
accept-ranges: bytes
server: AmazonS3
date: Thu, 22 Sep 2022 02:03:10 GMT
etag: "e338cca5f3614abe4255fd0c64b41d6c"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hp4V1fbHcoZnwOTSGnu81YJMP05jEmUBxlw2eyafGG9Q3vSsknmGqA==
X-Firefox-Spdy: h2

ocsp.sca1b.amazontrust.com/

143.204.42.88

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.88:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
b964d01a7251840511134e8ecfb03da2
23c8578811861ab87589857eecd376a07565e5e0
2262dc8a1f2b3c3dacfc738b356158e6dba33b90087daef0ec384e62aaebdb5a

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 22 Sep 2022 02:03:10 GMT
Last-Modified: Thu, 22 Sep 2022 01:04:54 GMT
Server: ECS (bsa/EB1A)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8AgGZjnkCTZCiU26un7CgxQKzOVANCjaOfvRjIf3HEWJ_dPaA9BGFg==
Age: 3496

col.site24x7rum.com/rum/data

54.191.17.200

200 OK

0 B

URL HTTP/2
col.site24x7rum.com/rum/data
IP
54.191.17.200:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /rum/data HTTP/1.1
Host: col.site24x7rum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2043
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 22 Sep 2022 02:03:10 GMT
content-type: application/json;charset=ISO-8859-1
content-length: 0
access-control-allow-methods: POST,OPTIONS
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-headers: request-id, request-context, Origin, Accept-Language
set-cookie: s247cname=ea1be459-83ce-4d69-8b4a-178609f5a7e8;path=/;SameSite=None;Secure;priority=high
_zcsr_tmp=ea1be459-83ce-4d69-8b4a-178609f5a7e8;path=/;SameSite=Strict;Secure;priority=high
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
vary: Origin
server: ZGS
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf89a4b3-f586-4870-ab26-efb054f637fd.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8678 bytes)
Hash
91c56f0b9810bfdd84e10a626b89e389
15d83e44d568938b6c9c87201e898cedb3edec0a
942de9764e1c408f7512759774aab0479db201e6fae15ccc39e653adae4cb86f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf89a4b3-f586-4870-ab26-efb054f637fd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 8678
x-amzn-requestid: c671a9ab-c5d0-4743-b13e-cc9a47e3d2fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F0vEThIAMFSwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8351-17ed13811d3833ea00a34423;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: hp-WIGb9M8tEmNGOVjx6UQKx9E4-1oJmka0a6seG7inahqYByPmRAg==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:34:22 GMT
age: 16133
etag: "15d83e44d568938b6c9c87201e898cedb3edec0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.mfg-financial.com/ftp/xchange/login.php

104.16.67.197

302 Found

0 B

URL HTTP/2
www.mfg-financial.com/ftp/xchange/login.php
IP
104.16.67.197:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /ftp/xchange/login.php HTTP/1.1
Host: www.mfg-financial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 302 Found
date: Thu, 22 Sep 2022 02:03:07 GMT
content-type: text/html; charset=utf-8
location: https://www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php
cache-control: private
x-stackifyid: V2|5ae1f27d-ea57-492d-8bac-5067572fa6d5|C78253|CD45571
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
set-cookie: .Stackify.Rum=5ae1f27d-ea57-492d-8bac-5067572fa6d5; path=/; secure; HttpOnly; SameSite=Lax
__cf_bm=w6m8Y4RHN_s02GipRnZWIb4J8yjO7BGvmmvRey1V3gQ-1663812187-0-AUaL2cKbWogVgtN5h44uR0316SCFowCekvG9a5Y8H12vbXHoLn2wEGHmD4LsEifb+FMiCg7R7tjrcGL8+bNTwmlfk+Luji2/j8ScwtIyKobC; path=/; expires=Thu, 22-Sep-22 02:33:07 GMT; domain=.www.mfg-financial.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 74e776599fc50b49-OSL
X-Firefox-Spdy: h2

www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php

104.16.67.197

200 OK

0 B

URL HTTP/2
www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php
IP
104.16.67.197:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /?redirectUrl=/ftp/xchange/login.php HTTP/1.1
Host: www.mfg-financial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: .Stackify.Rum=5ae1f27d-ea57-492d-8bac-5067572fa6d5; __cf_bm=w6m8Y4RHN_s02GipRnZWIb4J8yjO7BGvmmvRey1V3gQ-1663812187-0-AUaL2cKbWogVgtN5h44uR0316SCFowCekvG9a5Y8H12vbXHoLn2wEGHmD4LsEifb+FMiCg7R7tjrcGL8+bNTwmlfk+Luji2/j8ScwtIyKobC
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

HTTP/2 200 OK
date: Thu, 22 Sep 2022 02:03:07 GMT
content-type: text/html; charset=utf-8
cache-control: private
vary: Accept-Encoding
x-stackifyid: V2|65820c99-ebd5-468f-adf0-a194a2e5d86a|C78253|CD45551
strict-transport-security: max-age=31536000
set-cookie: .Stackify.Rum=65820c99-ebd5-468f-adf0-a194a2e5d86a; path=/; secure; HttpOnly; SameSite=Lax
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74e7765c98b60b49-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

static.fmgsuite.com/site/templates/007/dist/scripts.js?v=2.86.45.29790.353

54.230.111.28

200 OK

0 B

URL HTTP/2
static.fmgsuite.com/site/templates/007/dist/scripts.js?v=2.86.45.29790.353
IP
54.230.111.28:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /site/templates/007/dist/scripts.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/x-javascript
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: oJFrxe64h0nObFgJWKFFdw.UUCSRtUTs
server: AmazonS3
content-encoding: gzip
date: Wed, 21 Sep 2022 16:39:30 GMT
etag: W/"1e64aeff7efbad65f6f8e256dce05ed1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _g7t1WSjvPfJ_l31DEaHphHSfhzcMUTcbzCVGDdHYkRXHpwKVX2EDA==
age: 33819
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Lato:400,700

142.250.74.10

200 OK

0 B

URL HTTP/2
fonts.googleapis.com/css?family=Lato:400,700
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /css?family=Lato:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 22 Sep 2022 02:03:08 GMT
date: Thu, 22 Sep 2022 02:03:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations