Report - www.navyfedera-un.xyz/

Report Overview

Visited public
2023-12-05 08:54:30
Tags
navy_federal_credit_union financial phishing
URL
www.navyfedera-un.xyz/
Finishing URL
www.navyfedera-un.xyz/
IP / ASN
162.251.85.174
#394695 PUBLIC-DOMAIN-REGISTRY
Title
Navy Federal Credit Union - Our Members are the Mission®
Phishing - Navy Federal Credit Union

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ajax.googleapis.com	12905	2005-01-25	2013-08-16 11:51:31	2023-12-05 08:15:49	448 B	31 kB	216.58.207.202
www.navyfedera-un.xyz	unknown	unknown	No data	No data	3.4 kB	109 kB	162.251.85.174
digitalapps.navyfederal.org	unknown	1997-03-24	2020-08-13 16:50:55	2023-05-30 13:25:43	6.4 kB	649 kB	104.110.17.198

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js	ScriptElement	88 kB	2023-08-31	2025-05-11
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js IP 216.58.207.202 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 16:03 Last Seen2025-05-11 09:25 Times Seen35915 Hash 2c872dbe60f4ba70fb85356113d8b35e ee48592d1fff952fcf06ce0b666ed4785493afdc fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a Loading...

	www.navyfedera-un.xyz/	ScriptElement	1.6 kB	2023-12-05	2024-08-20
Pretty URL www.navyfedera-un.xyz/ IP 162.251.85.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-05 09:54 Last Seen2024-08-20 16:43 Times Seen2 Hash 0e87103f6f28b8cf4200544c1d7b9300 8c2282596b0caa09155db5c303bf78a5d9f1215e b7ec9d093efe589cf78b4d7e15c05c63c781bfc11fd861ff9d11d3f99c071893 Loading...

	digitalapps.navyfederal.org/signin/static/js/main.6402a293.js	ScriptElement	620 kB	2023-12-05	2024-08-20
Pretty URL digitalapps.navyfederal.org/signin/static/js/main.6402a293.js IP 104.110.17.198 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 09:54 Last Seen2024-08-20 16:43 Times Seen2 Hash 392586b6d1bb330db82f6b65e07ba38e 2014bf5d077bff726058052cde378aaeb27f9f5a 255fd00abc5efbe042426ce8a41bc0f91cd398f86395abd779d5b0cfd7a165db Loading...

HTTP Transactions (19)

URL IP Response Size

ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js

216.58.207.202

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
IP
216.58.207.202:443
ASN
#15169 GOOGLE

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (65447)
Size
30 kB (30462 bytes)
Hash
2c872dbe60f4ba70fb85356113d8b35e
ee48592d1fff952fcf06ce0b666ed4785493afdc
fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a

HTTP Headers

GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.navyfedera-un.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30462
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:51:15 GMT
expires: Thu, 28 Nov 2024 21:51:15 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 471778
last-modified: Tue, 12 Sep 2023 02:38:22 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.navyfedera-un.xyz/6Zsev-8x3K/HFywPlKs/oS/D7aaSwwGQ8mO/VjtXHEtQXw/EWRH/fGk2FFIB

162.251.85.174

404 Not Found

358 B

URL GET HTTP/2
www.navyfedera-un.xyz/6Zsev-8x3K/HFywPlKs/oS/D7aaSwwGQ8mO/VjtXHEtQXw/EWRH/fGk2FFIB
IP
162.251.85.174:443
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerLet's Encrypt
Subjectnavyfedera-un.xyz
FingerprintD2:CB:B8:44:81:FA:B7:05:7A:5C:A2:E4:8E:66:8B:A7:55:EA:5B:E0
ValidityFri, 01 Dec 2023 19:48:02 GMT - Thu, 29 Feb 2024 19:48:01 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
358 B (358 bytes)
Hash
51618ac2b7cf5c4937213e965c00f20a
7e704e57162ed18743bef9f95e2dea558954751b
0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5

HTTP Headers

GET /6Zsev-8x3K/HFywPlKs/oS/D7aaSwwGQ8mO/VjtXHEtQXw/EWRH/fGk2FFIB HTTP/1.1
Host: www.navyfedera-un.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.navyfedera-un.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
last-modified: Tue, 15 Mar 2022 21:41:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 358
content-type: text/html
date: Tue, 05 Dec 2023 08:54:13 GMT
server: Apache
X-Firefox-Spdy: h2

www.navyfedera-un.xyz/signin/static/media/img-BecomeAMember.64255d0d02ef64234628.jpg

162.251.85.174

404 Not Found

358 B

URL GET HTTP/2
www.navyfedera-un.xyz/signin/static/media/img-BecomeAMember.64255d0d02ef64234628.jpg
IP
162.251.85.174:443
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerLet's Encrypt
Subjectnavyfedera-un.xyz
FingerprintD2:CB:B8:44:81:FA:B7:05:7A:5C:A2:E4:8E:66:8B:A7:55:EA:5B:E0
ValidityFri, 01 Dec 2023 19:48:02 GMT - Thu, 29 Feb 2024 19:48:01 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
358 B (358 bytes)
Hash
51618ac2b7cf5c4937213e965c00f20a
7e704e57162ed18743bef9f95e2dea558954751b
0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5

HTTP Headers

GET /signin/static/media/img-BecomeAMember.64255d0d02ef64234628.jpg HTTP/1.1
Host: www.navyfedera-un.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.navyfedera-un.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
last-modified: Tue, 15 Mar 2022 21:41:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 358
content-type: text/html
date: Tue, 05 Dec 2023 08:54:13 GMT
server: Apache
X-Firefox-Spdy: h2

digitalapps.navyfederal.org/signin/static/css/main.ddf084c6.css

104.110.17.198

200 OK

33 kB

URL GET HTTP/2
digitalapps.navyfederal.org/signin/static/css/main.ddf084c6.css
IP
104.110.17.198:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerDigiCert Inc
Subjectdigitalapps.navyfederal.org
Fingerprint5B:4A:97:05:2D:66:87:1C:3A:7C:8E:65:15:CA:E7:6C:A6:37:BF:45
ValidityThu, 24 Aug 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (57835)
Size
33 kB (33207 bytes)
Hash
bdd9b3338fc50305ab2f81904b96f425
badc4a4a97f0f7822552fd8b595f8ec073e7c57f
1b0cf2035e77c38e0a20acf80bc1ae55a86602931be98a92355be7c7fb7614a6

HTTP Headers

GET /signin/static/css/main.ddf084c6.css HTTP/1.1
Host: digitalapps.navyfederal.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.navyfedera-un.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 17 Oct 2023 23:11:06 GMT
accept-ranges: bytes
x-content-type-options: nosniff
x-frame-options: DENY
x-vcap-request-id: a0503b24-0703-4f1f-5128-82fa4e4e5fea
x-xss-protection: 1; mode=block
content-encoding: gzip
content-length: 33207
cache-control: private, must-revalidate, max-age=345600
expires: Sat, 09 Dec 2023 08:54:14 GMT
date: Tue, 05 Dec 2023 08:54:14 GMT
set-cookie: akaalb_Digital_ALB=~op=~rv=42~m=~os=~id=96ccfc1e29bfd29c7411f91dd2db9e5f; path=/; Secure; SameSite=None
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
X-Firefox-Spdy: h2

digitalapps.navyfederal.org/signin/static/js/main.6402a293.js

104.110.17.198

200 OK

190 kB

URL GET HTTP/2
digitalapps.navyfederal.org/signin/static/js/main.6402a293.js
IP
104.110.17.198:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerDigiCert Inc
Subjectdigitalapps.navyfederal.org
Fingerprint5B:4A:97:05:2D:66:87:1C:3A:7C:8E:65:15:CA:E7:6C:A6:37:BF:45
ValidityThu, 24 Aug 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65465)
Size
190 kB (190386 bytes)
Hash
392586b6d1bb330db82f6b65e07ba38e
2014bf5d077bff726058052cde378aaeb27f9f5a
255fd00abc5efbe042426ce8a41bc0f91cd398f86395abd779d5b0cfd7a165db

HTTP Headers

GET /signin/static/js/main.6402a293.js HTTP/1.1
Host: digitalapps.navyfederal.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.navyfedera-un.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 13 Oct 2023 13:28:14 GMT
accept-ranges: bytes
x-content-type-options: nosniff
x-frame-options: DENY
x-vcap-request-id: f3847ca1-cea9-47ac-702c-f95035a26cb3
x-xss-protection: 1; mode=block
content-encoding: gzip
content-length: 190386
cache-control: must-revalidate, max-age=345600
expires: Sat, 09 Dec 2023 08:54:14 GMT
date: Tue, 05 Dec 2023 08:54:14 GMT
set-cookie: akaalb_Digital_ALB=~op=~rv=42~m=~os=~id=96ccfc1e29bfd29c7411f91dd2db9e5f; path=/; Secure; SameSite=None
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
X-Firefox-Spdy: h2

digitalapps.navyfederal.org/signin/static/media/sourcesanspro-regular-webfont.2eb3df099f7206cd9fd8.woff

104.110.17.198

200 OK

30 kB

URL GET HTTP/2
digitalapps.navyfederal.org/signin/static/media/sourcesanspro-regular-webfont.2eb3df099f7206cd9fd8.woff
IP
104.110.17.198:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerDigiCert Inc
Subjectdigitalapps.navyfederal.org
Fingerprint5B:4A:97:05:2D:66:87:1C:3A:7C:8E:65:15:CA:E7:6C:A6:37:BF:45
ValidityThu, 24 Aug 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 29840, version 1.0\012- data
Size
30 kB (29840 bytes)
Hash
82ef0fcf088704236bd138bf6d1ecf09
ff6c5c71cd0da967746ca2622647a35fd8c83584
a013af9f2e74ca2ba4cce61114b44fa5bd304d849e85fd41d269c835dc6f0db1

HTTP Headers

GET /signin/static/media/sourcesanspro-regular-webfont.2eb3df099f7206cd9fd8.woff HTTP/1.1
Host: digitalapps.navyfederal.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.navyfedera-un.xyz
DNT: 1
Connection: keep-alive
Referer: https://digitalapps.navyfederal.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/font-woff
last-modified: Fri, 13 Oct 2023 13:28:14 GMT
accept-ranges: bytes
x-content-type-options: nosniff
x-frame-options: DENY
x-vcap-request-id: e3825b58-46f4-477b-53bd-953bbfec4a13
x-xss-protection: 1; mode=block
content-length: 29840
x-edgeconnect-midmile-rtt: 0, 15
x-edgeconnect-origin-mex-latency: 175, 191
cache-control: private, must-revalidate, max-age=31536000
expires: Wed, 04 Dec 2024 08:54:14 GMT
date: Tue, 05 Dec 2023 08:54:14 GMT
set-cookie: akaalb_Digital_ALB=~op=~rv=4~m=~os=~id=7bff0035ba2b8a64b088f025334be1c7; path=/; Secure; SameSite=None
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
X-Firefox-Spdy: h2

digitalapps.navyfederal.org/signin/static/media/sourcesanspro-semibold-webfont.114864cb26b396c5359c.woff

104.110.17.198

200 OK

30 kB

URL GET HTTP/2
digitalapps.navyfederal.org/signin/static/media/sourcesanspro-semibold-webfont.114864cb26b396c5359c.woff
IP
104.110.17.198:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerDigiCert Inc
Subjectdigitalapps.navyfederal.org
Fingerprint5B:4A:97:05:2D:66:87:1C:3A:7C:8E:65:15:CA:E7:6C:A6:37:BF:45
ValidityThu, 24 Aug 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 29916, version 1.0\012- data
Size
30 kB (29916 bytes)
Hash
e1c594572e459cd0a9820f72e8505990
5162d9c651168543f2b7a3d94ee67ea0a46143dc
e80d024dca764170eec0c890e20dadbc9013ecd2b98ac3cb30587965bc0c62b5

HTTP Headers

GET /signin/static/media/sourcesanspro-semibold-webfont.114864cb26b396c5359c.woff HTTP/1.1
Host: digitalapps.navyfederal.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.navyfedera-un.xyz
DNT: 1
Connection: keep-alive
Referer: https://digitalapps.navyfederal.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/font-woff
last-modified: Fri, 13 Oct 2023 13:28:14 GMT
accept-ranges: bytes
x-content-type-options: nosniff
x-frame-options: DENY
x-vcap-request-id: 8f289021-0953-44ec-75c8-7d073da87684
x-xss-protection: 1; mode=block
content-length: 29916
cache-control: private, must-revalidate, max-age=31536000
expires: Wed, 04 Dec 2024 08:54:14 GMT
date: Tue, 05 Dec 2023 08:54:14 GMT
set-cookie: akaalb_Digital_ALB=~op=~rv=18~m=~os=~id=57bddf858eaeba5ec5b456edeef20f95; path=/; Secure; SameSite=None
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
X-Firefox-Spdy: h2

digitalapps.navyfederal.org/signin/static/media/nfcu-icons.afccd6e734f094bc811f.woff

104.110.17.198

200 OK

82 kB

URL GET HTTP/2
digitalapps.navyfederal.org/signin/static/media/nfcu-icons.afccd6e734f094bc811f.woff
IP
104.110.17.198:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerDigiCert Inc
Subjectdigitalapps.navyfederal.org
Fingerprint5B:4A:97:05:2D:66:87:1C:3A:7C:8E:65:15:CA:E7:6C:A6:37:BF:45
ValidityThu, 24 Aug 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 82048, version 1.0\012- data
Size
82 kB (82048 bytes)
Hash
26c884b9e5c56db40d45d3e5e2e32f88
c9ae88582f087df6ad2e0e01aea6a13212061dd7
1fa934880a173f877c7e90f95fca2ade66544e05daa88707d0866b6f903a9c05

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Navy Federal Credit Union

HTTP Headers

GET /signin/static/media/nfcu-icons.afccd6e734f094bc811f.woff HTTP/1.1
Host: digitalapps.navyfederal.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.navyfedera-un.xyz
DNT: 1
Connection: keep-alive
Referer: https://digitalapps.navyfederal.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/font-woff
last-modified: Tue, 17 Oct 2023 23:11:07 GMT
accept-ranges: bytes
x-content-type-options: nosniff
x-frame-options: DENY
x-vcap-request-id: 40a366aa-1832-4871-4e6e-30dbc94add57
x-xss-protection: 1; mode=block
content-length: 82048
cache-control: private, must-revalidate, max-age=31536000
expires: Wed, 04 Dec 2024 08:54:14 GMT
date: Tue, 05 Dec 2023 08:54:14 GMT
set-cookie: akaalb_Digital_ALB=~op=~rv=90~m=~os=~id=e59dce07f2cad98cbb3e5dc9dc178db7; path=/; Secure; SameSite=None
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
X-Firefox-Spdy: h2

digitalapps.navyfederal.org/signin/static/media/bubbles.93a80f090159d89ca7e5.svg

104.110.17.198

200 OK

9.6 kB

URL GET HTTP/2
digitalapps.navyfederal.org/signin/static/media/bubbles.93a80f090159d89ca7e5.svg
IP
104.110.17.198:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerDigiCert Inc
Subjectdigitalapps.navyfederal.org
Fingerprint5B:4A:97:05:2D:66:87:1C:3A:7C:8E:65:15:CA:E7:6C:A6:37:BF:45
ValidityThu, 24 Aug 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (790), with CRLF line terminators
Size
9.6 kB (9591 bytes)
Hash
f7c6288ba41be84b2c0288d8456a11cf
42501df780ca5af5cfa0e33d8fdbd84259a7027a
abd0ba3bfcdb6d0b220ce116d51b7317e7e872106601e1d4451fab6f23698d42

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Navy Federal Credit Union

HTTP Headers

GET /signin/static/media/bubbles.93a80f090159d89ca7e5.svg HTTP/1.1
Host: digitalapps.navyfederal.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://digitalapps.navyfederal.org/signin/static/css/main.ddf084c6.css
Cookie: akaalb_Digital_ALB=~op=~rv=42~m=~os=~id=96ccfc1e29bfd29c7411f91dd2db9e5f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=31536000, must-revalidate, private
content-type: image/svg+xml
last-modified: Fri, 13 Oct 2023 13:28:14 GMT
accept-ranges: bytes
x-content-type-options: nosniff
x-frame-options: DENY
x-vcap-request-id: 99df8029-d278-4b67-4f88-b97a547cd819
x-xss-protection: 1; mode=block
content-length: 9591
x-edgeconnect-midmile-rtt: 31
x-edgeconnect-origin-mex-latency: 127
date: Tue, 05 Dec 2023 08:54:14 GMT
set-cookie: JSESSIONID=FB7882FEF2807ACD6CA64718D278E7F3; Path=/signin; Secure; HttpOnly
__VCAP_ID__=6fa2f620-f279-4036-493e-9151; Path=/signin; HttpOnly; Secure
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
X-Firefox-Spdy: h2

www.navyfedera-un.xyz/6Zsev-8x3K/HFywPlKs/oS/D7aaSwwGQ8mO/VjtXHEtQXw/EWRH/fGk2FFIB

162.251.85.174

404 Not Found

358 B

URL GET HTTP/2
www.navyfedera-un.xyz/6Zsev-8x3K/HFywPlKs/oS/D7aaSwwGQ8mO/VjtXHEtQXw/EWRH/fGk2FFIB
IP
162.251.85.174:443
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerLet's Encrypt
Subjectnavyfedera-un.xyz
FingerprintD2:CB:B8:44:81:FA:B7:05:7A:5C:A2:E4:8E:66:8B:A7:55:EA:5B:E0
ValidityFri, 01 Dec 2023 19:48:02 GMT - Thu, 29 Feb 2024 19:48:01 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
358 B (358 bytes)
Hash
51618ac2b7cf5c4937213e965c00f20a
7e704e57162ed18743bef9f95e2dea558954751b
0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5

HTTP Headers

GET /6Zsev-8x3K/HFywPlKs/oS/D7aaSwwGQ8mO/VjtXHEtQXw/EWRH/fGk2FFIB HTTP/1.1
Host: www.navyfedera-un.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.navyfedera-un.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
last-modified: Tue, 15 Mar 2022 21:41:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 358
content-type: text/html
date: Tue, 05 Dec 2023 08:54:14 GMT
server: Apache
X-Firefox-Spdy: h2

www.navyfedera-un.xyz/signin/static/media/img-BecomeAMember.64255d0d02ef64234628.jpg

162.251.85.174

404 Not Found

358 B

URL GET HTTP/2
www.navyfedera-un.xyz/signin/static/media/img-BecomeAMember.64255d0d02ef64234628.jpg
IP
162.251.85.174:443
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerLet's Encrypt
Subjectnavyfedera-un.xyz
FingerprintD2:CB:B8:44:81:FA:B7:05:7A:5C:A2:E4:8E:66:8B:A7:55:EA:5B:E0
ValidityFri, 01 Dec 2023 19:48:02 GMT - Thu, 29 Feb 2024 19:48:01 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
358 B (358 bytes)
Hash
51618ac2b7cf5c4937213e965c00f20a
7e704e57162ed18743bef9f95e2dea558954751b
0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5

HTTP Headers

GET /signin/static/media/img-BecomeAMember.64255d0d02ef64234628.jpg HTTP/1.1
Host: www.navyfedera-un.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.navyfedera-un.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
last-modified: Tue, 15 Mar 2022 21:41:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 358
content-type: text/html
date: Tue, 05 Dec 2023 08:54:14 GMT
server: Apache
X-Firefox-Spdy: h2

digitalapps.navyfederal.org/signin/static/media/sourcesanspro-regular-webfont.b8c22926bc6bdfdb0728.woff2

104.110.17.198

200 OK

24 kB

URL GET HTTP/2
digitalapps.navyfederal.org/signin/static/media/sourcesanspro-regular-webfont.b8c22926bc6bdfdb0728.woff2
IP
104.110.17.198:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerDigiCert Inc
Subjectdigitalapps.navyfederal.org
Fingerprint5B:4A:97:05:2D:66:87:1C:3A:7C:8E:65:15:CA:E7:6C:A6:37:BF:45
ValidityThu, 24 Aug 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 23796, version 1.3276\012- data
Size
24 kB (23796 bytes)
Hash
571a23a5051e8aacbad7640279908eb6
369d9511459962fa99c232885fc5afee4e76c651
efd06579a520f2911bb0476a7ab77327a49e54f5d02808ddc5e4a7653ed57717

HTTP Headers

GET /signin/static/media/sourcesanspro-regular-webfont.b8c22926bc6bdfdb0728.woff2 HTTP/1.1
Host: digitalapps.navyfederal.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.navyfedera-un.xyz
DNT: 1
Connection: keep-alive
Referer: https://digitalapps.navyfederal.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/font-woff2
last-modified: Fri, 13 Oct 2023 13:28:14 GMT
accept-ranges: bytes
x-content-type-options: nosniff
x-frame-options: DENY
x-vcap-request-id: 4c9cd1bb-aa7c-4324-464c-764840dfb200
x-xss-protection: 1; mode=block
content-length: 23796
x-edgeconnect-midmile-rtt: 1, 15
x-edgeconnect-origin-mex-latency: 115, 115
cache-control: private, must-revalidate, max-age=31536000
expires: Wed, 04 Dec 2024 08:54:14 GMT
date: Tue, 05 Dec 2023 08:54:14 GMT
set-cookie: akaalb_Digital_ALB=~op=~rv=51~m=~os=~id=b6ece7f23c45be296dfd75bb83c3f5e5; path=/; Secure; SameSite=None
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
X-Firefox-Spdy: h2

digitalapps.navyfederal.org/signin/static/media/sourcesanspro-semibold-webfont.1b94fdacb0041a870925.woff2

104.110.17.198

200 OK

24 kB

URL GET HTTP/2
digitalapps.navyfederal.org/signin/static/media/sourcesanspro-semibold-webfont.1b94fdacb0041a870925.woff2
IP
104.110.17.198:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerDigiCert Inc
Subjectdigitalapps.navyfederal.org
Fingerprint5B:4A:97:05:2D:66:87:1C:3A:7C:8E:65:15:CA:E7:6C:A6:37:BF:45
ValidityThu, 24 Aug 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 23796, version 1.3276\012- data
Size
24 kB (23796 bytes)
Hash
3d23d2cf9810f1e5beafa0f88200c298
d93857bca012baad50b0b3f20d6a93fd9d8893a6
4e746503720ab68475f6e6f07f0d68c4d47fb3cee9a1e1b22a90b091a3f1f1df

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Navy Federal Credit Union

HTTP Headers

GET /signin/static/media/sourcesanspro-semibold-webfont.1b94fdacb0041a870925.woff2 HTTP/1.1
Host: digitalapps.navyfederal.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.navyfedera-un.xyz
DNT: 1
Connection: keep-alive
Referer: https://digitalapps.navyfederal.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/font-woff2
last-modified: Fri, 13 Oct 2023 13:28:14 GMT
accept-ranges: bytes
x-content-type-options: nosniff
x-frame-options: DENY
x-vcap-request-id: 30d2f724-28f4-41d0-5362-f15ea95712d7
x-xss-protection: 1; mode=block
content-length: 23796
x-edgeconnect-midmile-rtt: 6
x-edgeconnect-origin-mex-latency: 228
cache-control: private, must-revalidate, max-age=31536000
expires: Wed, 04 Dec 2024 08:54:14 GMT
date: Tue, 05 Dec 2023 08:54:14 GMT
set-cookie: akaalb_Digital_ALB=~op=~rv=9~m=~os=~id=64d382801b3da1ff82effded2f636732; path=/; Secure; SameSite=None
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
X-Firefox-Spdy: h2

digitalapps.navyfederal.org/signin/static/media/nfcu-icons.5b9902722b3ceea06e7c.ttf

104.110.17.198

200 OK

82 kB

URL GET HTTP/2
digitalapps.navyfederal.org/signin/static/media/nfcu-icons.5b9902722b3ceea06e7c.ttf
IP
104.110.17.198:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerDigiCert Inc
Subjectdigitalapps.navyfederal.org
Fingerprint5B:4A:97:05:2D:66:87:1C:3A:7C:8E:65:15:CA:E7:6C:A6:37:BF:45
ValidityThu, 24 Aug 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT

File type
TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, nfcu-icons \012- data
Size
82 kB (81972 bytes)
Hash
794ea951872fc285fdfed47183af90b4
3ba93bfc3b900c95132be6df78a3397a9753df71
28cc589ed8a25130802719844e3f971e28ad2f25772666c2f50764ca83ea2c78

HTTP Headers

GET /signin/static/media/nfcu-icons.5b9902722b3ceea06e7c.ttf HTTP/1.1
Host: digitalapps.navyfederal.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.navyfedera-un.xyz
DNT: 1
Connection: keep-alive
Referer: https://digitalapps.navyfederal.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=31536000, must-revalidate, private
content-type: application/x-font-ttf
last-modified: Tue, 17 Oct 2023 23:11:07 GMT
accept-ranges: bytes
x-content-type-options: nosniff
x-frame-options: DENY
x-vcap-request-id: faff1123-cb7a-433f-6eb5-c7db58abfcee
x-xss-protection: 1; mode=block
content-length: 81972
x-edgeconnect-midmile-rtt: 31
x-edgeconnect-origin-mex-latency: 136
date: Tue, 05 Dec 2023 08:54:14 GMT
set-cookie: JSESSIONID=480DFFF374474530E130DDAC17A2C391; Path=/signin; Secure; HttpOnly
__VCAP_ID__=729ea770-df75-46f5-5df9-2ea4; Path=/signin; HttpOnly; Secure
akaalb_Digital_ALB=~op=~rv=21~m=~os=~id=a53ab519fa321fe084f58bed1573faa6; path=/; Secure; SameSite=None
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
X-Firefox-Spdy: h2

digitalapps.navyfederal.org/signin/static/media/sourcesanspro-regular-webfont.cd9e9c367857a9a71cb8.ttf

104.110.17.198

200 OK

69 kB

URL GET HTTP/2
digitalapps.navyfederal.org/signin/static/media/sourcesanspro-regular-webfont.cd9e9c367857a9a71cb8.ttf
IP
104.110.17.198:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerDigiCert Inc
Subjectdigitalapps.navyfederal.org
Fingerprint5B:4A:97:05:2D:66:87:1C:3A:7C:8E:65:15:CA:E7:6C:A6:37:BF:45
ValidityThu, 24 Aug 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT

File type
TrueType Font data, 20 tables, 1st "BASE", 18 names, Microsoft, language 0x409, Straight lSource Sans ProRegular1.050;ADBE;SourceSansPro-Regular;ADOBESource Sans Pro RegularVer\012- data
Size
69 kB (68648 bytes)
Hash
21e72193459d7eed12ba6a94ee72d039
700d7256c33a826e7ecde61746ef5ac61e079aa3
4ac523096e28f93d10c6c00269b8aa3979b417a160a8e9b32a4cd341dbc2a3c3

HTTP Headers

GET /signin/static/media/sourcesanspro-regular-webfont.cd9e9c367857a9a71cb8.ttf HTTP/1.1
Host: digitalapps.navyfederal.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.navyfedera-un.xyz
DNT: 1
Connection: keep-alive
Referer: https://digitalapps.navyfederal.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=31536000, must-revalidate, private
content-type: application/x-font-ttf
last-modified: Tue, 17 Oct 2023 23:11:07 GMT
accept-ranges: bytes
x-content-type-options: nosniff
x-frame-options: DENY
x-vcap-request-id: 5cc95371-345f-4bfb-773c-f238c5c8516f
x-xss-protection: 1; mode=block
content-length: 68648
x-edgeconnect-midmile-rtt: 31
x-edgeconnect-origin-mex-latency: 109
date: Tue, 05 Dec 2023 08:54:15 GMT
set-cookie: JSESSIONID=A05A8F06CE0CB95C4E9A423071BB1113; Path=/signin; Secure; HttpOnly
__VCAP_ID__=0ab67d37-03df-478a-743e-a199; Path=/signin; HttpOnly; Secure
akaalb_Digital_ALB=~op=~rv=88~m=~os=~id=daf0b96495deb8771fed3c65046a1c52; path=/; Secure; SameSite=None
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
X-Firefox-Spdy: h2

digitalapps.navyfederal.org/signin/static/media/sourcesanspro-semibold-webfont.1f658198373b2b32e4e9.ttf

104.110.17.198

200 OK

68 kB

URL GET HTTP/2
digitalapps.navyfederal.org/signin/static/media/sourcesanspro-semibold-webfont.1f658198373b2b32e4e9.ttf
IP
104.110.17.198:443
ASN
#16625 AKAMAI-AS

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerDigiCert Inc
Subjectdigitalapps.navyfederal.org
Fingerprint5B:4A:97:05:2D:66:87:1C:3A:7C:8E:65:15:CA:E7:6C:A6:37:BF:45
ValidityThu, 24 Aug 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT

File type
TrueType Font data, 20 tables, 1st "BASE", 20 names, Microsoft, language 0x409, Straight lSource Sans Pro SemiboldRegular1.050;ADBE;SourceSansPro-Semibold;ADOBESource Sans Pro \012- data
Size
68 kB (67796 bytes)
Hash
abd08d5bb5f4698145d3878e32ab0872
8b7c317f634087050c428c064c531907bd19fd97
cf577ff0611cfcd29768845543f242b427d3c90b218eb5884f4394c596042d33

HTTP Headers

GET /signin/static/media/sourcesanspro-semibold-webfont.1f658198373b2b32e4e9.ttf HTTP/1.1
Host: digitalapps.navyfederal.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.navyfedera-un.xyz
DNT: 1
Connection: keep-alive
Referer: https://digitalapps.navyfederal.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=31536000, must-revalidate, private
content-type: application/x-font-ttf
last-modified: Tue, 17 Oct 2023 23:11:07 GMT
accept-ranges: bytes
x-content-type-options: nosniff
x-frame-options: DENY
x-vcap-request-id: 5071b9b3-e970-4f96-4d65-ad972dd8590f
x-xss-protection: 1; mode=block
content-length: 67796
x-edgeconnect-midmile-rtt: 31
x-edgeconnect-origin-mex-latency: 113
date: Tue, 05 Dec 2023 08:54:15 GMT
set-cookie: JSESSIONID=BFDD2E12712E9CE48AD6919AA7DC2D3E; Path=/signin; Secure; HttpOnly
__VCAP_ID__=3d1d0a50-7d8b-4f3b-42cb-1406; Path=/signin; HttpOnly; Secure
akaalb_Digital_ALB=~op=~rv=82~m=~os=~id=5572d1eb2414c662021434ada0c0e567; path=/; Secure; SameSite=None
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
X-Firefox-Spdy: h2

www.navyfedera-un.xyz/signin/favicon-16x16.png

162.251.85.174

404 Not Found

358 B

URL GET HTTP/2
www.navyfedera-un.xyz/signin/favicon-16x16.png
IP
162.251.85.174:443
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerLet's Encrypt
Subjectnavyfedera-un.xyz
FingerprintD2:CB:B8:44:81:FA:B7:05:7A:5C:A2:E4:8E:66:8B:A7:55:EA:5B:E0
ValidityFri, 01 Dec 2023 19:48:02 GMT - Thu, 29 Feb 2024 19:48:01 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
358 B (358 bytes)
Hash
51618ac2b7cf5c4937213e965c00f20a
7e704e57162ed18743bef9f95e2dea558954751b
0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5

HTTP Headers

GET /signin/favicon-16x16.png HTTP/1.1
Host: www.navyfedera-un.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.navyfedera-un.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
last-modified: Tue, 15 Mar 2022 21:41:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 358
content-type: text/html
date: Tue, 05 Dec 2023 08:54:15 GMT
server: Apache
X-Firefox-Spdy: h2

www.navyfedera-un.xyz/signin/apple-touch-icon.png

162.251.85.174

404 Not Found

358 B

URL GET HTTP/2
www.navyfedera-un.xyz/signin/apple-touch-icon.png
IP
162.251.85.174:443
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

Requested by
https://www.navyfedera-un.xyz/
Certificate
IssuerLet's Encrypt
Subjectnavyfedera-un.xyz
FingerprintD2:CB:B8:44:81:FA:B7:05:7A:5C:A2:E4:8E:66:8B:A7:55:EA:5B:E0
ValidityFri, 01 Dec 2023 19:48:02 GMT - Thu, 29 Feb 2024 19:48:01 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
358 B (358 bytes)
Hash
51618ac2b7cf5c4937213e965c00f20a
7e704e57162ed18743bef9f95e2dea558954751b
0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5

HTTP Headers

GET /signin/apple-touch-icon.png HTTP/1.1
Host: www.navyfedera-un.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.navyfedera-un.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
last-modified: Tue, 15 Mar 2022 21:41:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 358
content-type: text/html
date: Tue, 05 Dec 2023 08:54:15 GMT
server: Apache
X-Firefox-Spdy: h2

www.navyfedera-un.xyz/

162.251.85.174

200 OK

106 kB

URL User Request GET HTTP/2
www.navyfedera-un.xyz/
IP
162.251.85.174:443
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

Certificate
IssuerLet's Encrypt
Subjectnavyfedera-un.xyz
FingerprintD2:CB:B8:44:81:FA:B7:05:7A:5C:A2:E4:8E:66:8B:A7:55:EA:5B:E0
ValidityFri, 01 Dec 2023 19:48:02 GMT - Thu, 29 Feb 2024 19:48:01 GMT

File type

Size
106 kB (105461 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: www.navyfedera-un.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Tue, 05 Dec 2023 08:54:13 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (19)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers