Report - mfg-financial.com/ftp/xchange/login.php

Report Overview

Submitted URL
mfg-financial.com/ftp/xchange/login.php
IP
54.85.200.131
ASN
#14618 AMAZON-AES
Submitted
2022-10-23 02:56:38
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
ocsp.sca1b.amazontrust.com	1015	2017-03-03T16:20:51Z	2019-03-27T05:05:54Z	2.0 kB	6.0 kB	143.204.42.88
static.site24x7rum.com	20553	2015-01-06T10:20:31Z	2023-03-09T07:01:54Z	417 B	23 kB	54.230.111.14
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-09T10:04:36Z	3.7 kB	68 kB	34.120.237.76
s3.amazonaws.com	unknown	2020-05-13T22:53:44Z	2023-03-09T14:16:00Z	457 B	18 kB	52.216.136.230
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-09T05:09:05Z	2.0 kB	5.3 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-09T05:09:49Z	401 B	5.8 kB	34.160.144.191
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-09T11:52:10Z	658 B	1.4 kB	93.184.220.29
ocsp.globalsign.com	2075	2012-07-20T19:46:16Z	2023-03-09T05:09:04Z	356 B	2.0 kB	151.101.86.133
fonts.googleapis.com	8877	2013-06-10T22:14:26Z	2023-03-09T12:17:45Z	387 B	746 B	142.250.74.10
stats.g.doubleclick.net	96	2013-06-10T22:21:11Z	2023-03-09T07:43:12Z	606 B	716 B	173.194.222.156
col.site24x7rum.com	25566	2014-11-12T08:09:38Z	2023-03-09T07:01:55Z	458 B	605 B	54.186.112.130
static.fmgsuite.com	138136	2012-10-24T19:10:31Z	2023-03-08T22:59:56Z	7.1 kB	3.0 MB	54.230.111.21
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-09T05:09:50Z	4.0 kB	8.4 kB	142.250.74.3
fmg-websites-custom.s3.amazonaws.com	220647	2014-10-24T09:16:10Z	2023-03-07T20:03:06Z	1.6 kB	19 kB	52.216.76.52
fonts.gstatic.com	unknown	2014-09-09T02:40:21Z	2023-03-09T10:01:47Z	956 B	48 kB	216.58.207.195
www.google.com	7	2015-05-10T13:11:19Z	2023-03-09T13:38:50Z	511 B	694 B	142.250.74.164
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-09T05:09:48Z	321 B	229 B	34.117.237.239
www.mfg-financial.com	unknown	2017-04-21T19:57:41Z	2022-12-27T02:14:31Z	1.5 kB	421 kB	104.16.65.197
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-09T05:09:13Z	594 B	127 B	35.160.97.225
cdn.jsdelivr.net	439	2012-09-30T02:15:09Z	2023-03-09T06:49:10Z	387 B	3.7 kB	151.101.85.229
www.google.no	25607	2016-04-05T21:50:59Z	2023-03-09T09:24:51Z	510 B	694 B	142.250.74.3
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-09T05:09:18Z	758 B	2.8 kB	143.204.55.27
mfg-financial.com	unknown	2017-04-23T09:41:49Z	2023-02-01T14:02:11Z	358 B	394 B	54.164.9.107
www.googletagmanager.com	75	2013-05-22T04:07:37Z	2023-03-09T13:40:16Z	379 B	44 kB	142.250.74.168
www.google-analytics.com	40	2012-10-03T03:04:21Z	2023-03-09T13:53:17Z	366 B	21 kB	142.250.74.174

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-10-23	medium	mfg-financial.com/ftp/xchange/login.php	Phishing
2022-10-23	medium	www.mfg-financial.com/ftp/xchange/login.php	Phishing
2022-10-23	medium	www.mfg-financial.com/ftp/xchange/login.php	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	cdn.jsdelivr.net/scrollreveal.js/3.1.4/scrollreveal.min.js	8.5 kB	2023-03-07	2024-04-14
Pretty URL cdn.jsdelivr.net/scrollreveal.js/3.1.4/scrollreveal.min.js IP 151.101.85.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 15:05:47 Last Seen2024-04-14 12:45:39 Times Seen547 Hash b8d4ede888d284c51cbf85d686e02da3 aea504a314fcfdc65f3013e13219b8c92776ffdb 9140213f193f683ccee63ed57bb1e303d1e156af982fb15d4c1b03dc1eefdc60 Loading...

	www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php	262 B	2023-03-07	2023-03-13
Pretty URL www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php IP 104.16.67.197 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:56:24 Last Seen2023-03-13 19:07:53 Times Seen1 Hash 09725db442935b7536c48b469988b084 8c8b0b18d111ac13a8dd888bc98ad31740802236 e5a53ee7872be744da0fe2df310b6d43c2084be9bde3a0c46e8cd2ec135e0fc4 Loading...

	fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/scrollreveal.js	1.2 kB	2023-03-07	2024-02-14
Pretty URL fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/scrollreveal.js IP 52.216.76.52 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:56:24 Last Seen2024-02-14 05:34:39 Times Seen3 Hash 677ddd3d6626e41b98e201324c0c0348 0bc2a8a3f603f08581dedde2afa52866e2868fd0 448226a1b46607f9a5103e03a68f5982085e9cfd638c04eaffd17587fbf6bf23 Loading...

	www.googletagmanager.com/gtag/js?id=UA-24680519-10	111 kB	2023-03-10	2023-03-10
Pretty URL www.googletagmanager.com/gtag/js?id=UA-24680519-10 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 13:35:39 Last Seen2023-03-10 13:35:39 Times Seen1 Hash 7bfddc91dfca487f37c9feb7416a5bb4 632dbe43a5d7c48a1c76e1efcb9adf31f9163566 6b3d472d35e88dcdf0cb203a4e3f0b5add8e0ef37a3a398f66168edb8217ae98 Loading...

	static.site24x7rum.com/beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586	87 kB	2023-03-07	2023-03-10
Pretty URL static.site24x7rum.com/beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586 IP 54.230.111.14 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:11:39 Last Seen2023-03-10 16:14:00 Times Seen1 Hash cc4f207d437b32223960a5784ecb89f8 91f67ad61ef3eec1777f9b2eb87f7f28ef40a448 d7a6d0bfd12919dd9bdf8f2ff9af50d400b33920fc2937a1c3e0bb068189ef2d Loading...

	static.fmgsuite.com/site/templates/007/dist/scripts.js?v=2.86.45.40590.358	296 kB	2023-03-08	2023-03-11
Pretty URL static.fmgsuite.com/site/templates/007/dist/scripts.js?v=2.86.45.40590.358 IP 54.230.111.21 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:26:11 Last Seen2023-03-11 22:00:56 Times Seen1 Hash dfe2704fbb3a2e57e9eb5d2c63804d66 fcbf476d234c2e46e1f98e2bbb95007a29a496ed 3cab7c34744eef45e4cf66f4b74d242b66797bd56fafbfd1f06e8ab54f92c2d9 Loading...

	www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php	560 B	2023-03-07	2024-01-07
Pretty URL www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php IP 104.16.67.197 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:11:39 Last Seen2024-01-07 15:32:52 Times Seen50 Hash 9f02925345b2df8aedda262d482ba038 0201fc4571106fc91c406c66addd0abc03c47471 668e205287a3daf54afabd52457533f956485528fd72320967a76f62f6259998 Loading...

	fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/364377-lewis.js	3.3 kB	2023-03-07	2023-03-13
Pretty URL fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/364377-lewis.js IP 52.216.76.52 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:56:24 Last Seen2023-03-13 19:07:53 Times Seen1 Hash f448749a26df1824c98578c627fa447a 104080f7a90c11902fbfa2de91161434952f9451 352125a8d3d51eca537dcd272c9246dc74bae48a765dca75a407f41eca1b36ea Loading...

	www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php	102 B	2023-03-07	2024-02-14
Pretty URL www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php IP 104.16.67.197 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:56:24 Last Seen2024-02-14 05:34:39 Times Seen2 Hash e0473a6c5c4b25aa104b9cd6adb5c27a e074624d27b7cecb49f07ea30f5a4373a433e3f6 c9ea065fd8879d90a033c43779a2b7864c2265419cff93f9b004bb67ae699bda Loading...

	www.google-analytics.com/analytics.js	50 kB	2023-03-08	2024-04-15
Pretty URL www.google-analytics.com/analytics.js IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 05:22:31 Last Seen2024-04-15 19:32:36 Times Seen1507 Hash fda30e8a22c9bcd954fd8d0fadd0e77c ae47cd34cbde081a48d7f92fc80aaf06a1381193 b42e4a056cb5b80c5a315040826866445ec9332f0749e184509ab2d9d3b86719 Loading...

	www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php	157 B	2023-03-07	2023-06-21
Pretty URL www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php IP 104.16.67.197 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:56:24 Last Seen2023-06-21 18:17:00 Times Seen2 Hash 4064dc49dd7bb333fd4ad86cb9c4c2ea 296073646dab73e645c0ec32e019c6667bc22e54 ab0a25c9291218115a70f4bacead5dece019ed2c8ce4bd777e870859f8754cc9 Loading...

HTTP Transactions (75)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

143.204.55.27

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.27:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Content-Length, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 23 Oct 2022 02:52:47 GMT
Expires: Sun, 23 Oct 2022 03:04:26 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fYDhK0_kOoREKkIxd_fYldq5wQWH4i9ano5VVMVir2Dyy1VoUCL61A==
Age: 219

mfg-financial.com/ftp/xchange/login.php

54.164.9.107

301 Moved Permanently

170 B

URL HTTP/1.1
mfg-financial.com/ftp/xchange/login.php
IP
54.164.9.107:0
ASN
#14618 AMAZON-AES

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
170 B (170 bytes)
Hash
5bf3a62c4baec1d7339bb0a03f5b9211
24008e686ae1f0102891d02c994cd38a403f10bf
646f4cebed77580971f73047ec463a1010e25d0101be2354f1ca6ed119b5ff7f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /ftp/xchange/login.php HTTP/1.1
Host: mfg-financial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Server: nginx/1.19.10
Date: Sun, 23 Oct 2022 02:56:26 GMT
Content-Type: text/html
Content-Length: 170
Connection: keep-alive
Location: http://www.mfg-financial.com/ftp/xchange/login.php

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c19f4a1def760c07cbc4aec1d0d6c050
6ad911a7c02f5e5fdd82fa86cae0453528d53a6d
750bba81910a4bbd78ab484ba03781a36459a0aec147d7c47424e9a9bf152b40

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "750BBA81910A4BBD78AB484BA03781A36459A0AEC147D7C47424E9A9BF152B40"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16584
Expires: Sun, 23 Oct 2022 07:32:51 GMT
Date: Sun, 23 Oct 2022 02:56:27 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ae56efd62a0d9249d98573172eb8b28b
5ff4e9959be677ad76c26ca73f9ef4feb9fa2f28
82d9ee4948fce839f7edb1f8490c4213cded3912464a4169b0bf6a61278694bd

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82D9EE4948FCE839F7EDB1F8490C4213CDED3912464A4169B0BF6A61278694BD"
Last-Modified: Sat, 22 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3821
Expires: Sun, 23 Oct 2022 04:00:08 GMT
Date: Sun, 23 Oct 2022 02:56:27 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: y6tD4iCQIRnqnK74bNPHLC60PtIVrg4kTqc5D1Ky5FRg8firXf65eS4dy9Hj1oJ2ml7SkDVya7c=
x-amz-request-id: 1GPEA7X8VVSBKE9H
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 23 Oct 2022 02:37:48 GMT
age: 1119
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 02:56:27 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

www.mfg-financial.com/ftp/xchange/login.php

104.16.65.197

301 Moved Permanently

168 B

URL HTTP/1.1
www.mfg-financial.com/ftp/xchange/login.php
IP
104.16.65.197:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
168 B (168 bytes)
Hash
7fcef5af46c476aefdcff7248195cdfc
ff5a3b84620fb8270ae6781fdc406f08f1b88c1f
946bde26daab13c238c8b580bd7f21a2fee4bf265cfff5de3f90bb220b0937e8

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /ftp/xchange/login.php HTTP/1.1
Host: www.mfg-financial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Sun, 23 Oct 2022 02:56:27 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private
Location: https://www.mfg-financial.com/ftp/xchange/login.php
X-StackifyID: V2|23164f6f-ee4b-4d5d-9e2b-94ce56526139|C78253|CD52900
CF-Cache-Status: DYNAMIC
Set-Cookie: .Stackify.Rum=23164f6f-ee4b-4d5d-9e2b-94ce56526139; path=/; HttpOnly
__cf_bm=bGRp40C5UCu2.7J8Qn6Wjccxfn17Y4CAGHzRt4pIqAg-1666493787-0-AfnBPBkAeVD5Vyj7Zu/LS+mQbG/udLF7EhE6IrFa7OALhjeI36XOvbNJHx7ogP6ND4dEEtI7T8S+jCOofjqsYUjCsGQCofP29sEvBzAH8VI2; path=/; expires=Sun, 23-Oct-22 03:26:27 GMT; domain=.www.mfg-financial.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 75e73319cc151c12-OSL

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
34004d3496524330c78b6f3dedc6f4d7
3df31a420664c85bbfb3773309311a2ca1833569
263c56d93d46ed1aeae2b143ecfe18e1a8c1547bf731ceeb96f49600f2873339

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=87383
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 02:56:27 GMT
Etag: "63535fb2-117"
Expires: Mon, 24 Oct 2022 03:12:50 GMT
Last-Modified: Sat, 22 Oct 2022 03:12:50 GMT
Server: nginx
Content-Length: 279

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.27

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.27:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 23 Oct 2022 02:43:40 GMT
Expires: Sun, 23 Oct 2022 03:17:08 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qTBb4xnPf4N3SkBKDgkXRMkv0ORRAnWHwGHgC1d8FpqDTHuY62vrSA==
Age: 767

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
fecd12689ba4c6aa556814b7fac0d344
a3005f6333ce5201a73e2857c764a1b0091a91d5
83e0fb564f86df4300e8fc4b5baaf0ed13102c384922d388e02620fb3363a842

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6337
Cache-Control: max-age=111355
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 02:56:27 GMT
Etag: "6353a495-1d7"
Expires: Mon, 24 Oct 2022 09:52:22 GMT
Last-Modified: Sat, 22 Oct 2022 08:06:45 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

35.160.97.225

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.160.97.225:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 94VTj+hSS9OuONr7xW3TyQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8oGyIhzIMOIPxvCMp2FhXFGN/I0=

static.fmgsuite.com/media/sourceImages/d0a75788-244f-4a14-8346-b0f82c5de81b.png?v=1

54.230.111.21

200 OK

666 kB

URL HTTP/2
static.fmgsuite.com/media/sourceImages/d0a75788-244f-4a14-8346-b0f82c5de81b.png?v=1
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type
PNG image data, 1383 x 1325, 8-bit/color RGBA, non-interlaced\012- data
Size
666 kB (666339 bytes)
Hash
8a5e83af60ea470d320acbe9c30e4176
6544a9d9c3f5a7b587f3e41c8e4a3ed887d0b3fd
1ae04324f6e37d8475a4e67f32d9e874e5f187326df33dbb4c32c6bd760e30ab

HTTP Headers

GET /media/sourceImages/d0a75788-244f-4a14-8346-b0f82c5de81b.png?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 666339
date: Sat, 22 Oct 2022 18:24:20 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 17 Sep 2018 20:56:10 GMT
etag: "8a5e83af60ea470d320acbe9c30e4176"
x-amz-version-id: Is37tVWycvjNiy_lRUSS.azsl5efiMfG
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bO3V2k72K5ijaLA0MU8eZUPskBtCWZr4_TexplOtZRFK3pXIY_NB_w==
age: 30729
X-Firefox-Spdy: h2

static.fmgsuite.com/site/templates/global/img/assets/largethumb/015-largethumb-a.jpg?v=1

54.230.111.21

200 OK

154 kB

URL HTTP/2
static.fmgsuite.com/site/templates/global/img/assets/largethumb/015-largethumb-a.jpg?v=1
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x460, components 3\012- data
Size
154 kB (153934 bytes)
Hash
6f47f3a8ce384da88afa641cc61c7880
da527966e3b4deadc5e76b54c6132786f136be20
351ffd57253fe2fad7f34dbe8cb0007bc6cbc97b771740cf1ca1822041cb907d

HTTP Headers

GET /site/templates/global/img/assets/largethumb/015-largethumb-a.jpg?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 153934
x-amz-replication-status: COMPLETED
last-modified: Tue, 29 Mar 2022 22:54:21 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: d2cpCzumuoinZ.g8GgbMyhgZDH6pAX7B
accept-ranges: bytes
server: AmazonS3
date: Sun, 23 Oct 2022 00:20:01 GMT
etag: "6f47f3a8ce384da88afa641cc61c7880"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fHghRgfugv9OzhXa-Y5qbh3RNYZ4Fv2FyI1Pa4p-Rba4Ub6HWlxsig==
age: 9387
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
ea20460028066b7fba2f10b51d883192
a73b8263a4477aceeda349c7beff7050de9df38b
f933a7ff2c6ec9189ba29fdf09da9125ac59d9c03b4a14e14e9f1b5fa5322b1c

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 02:56:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
05ee461624e2ec37f65e859afe6543ba
b99dcb558535d3d35d140e730aeeb41587622b30
576b3bf619d0a152889cc44165a229ad0100ccc319cf4d9044b2f26d4b676658

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 02:56:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

static.fmgsuite.com/media/sourceImages/b87ccca4-20b6-40e2-8f23-5619bf1a0dac.png?v=1

54.230.111.21

200 OK

154 kB

URL HTTP/2
static.fmgsuite.com/media/sourceImages/b87ccca4-20b6-40e2-8f23-5619bf1a0dac.png?v=1
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type
PNG image data, 900 x 565, 8-bit/color RGBA, non-interlaced\012- data
Size
154 kB (153789 bytes)
Hash
9501320cc17c42e1c32f1c6e4f66c234
622a06a6f629837d35e01c81f283280085d1c3cc
a0e1c61ed13296e782b3b2ced418becbb99a6bfde7e4afcb5b4ee56219506c4d

HTTP Headers

GET /media/sourceImages/b87ccca4-20b6-40e2-8f23-5619bf1a0dac.png?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 153789
x-amz-replication-status: COMPLETED
last-modified: Thu, 13 Sep 2018 23:37:31 GMT
x-amz-version-id: TLyZq7_nhgyyaRkzWVJP_17Nnx67gsyr
accept-ranges: bytes
server: AmazonS3
date: Sat, 22 Oct 2022 06:10:51 GMT
etag: "9501320cc17c42e1c32f1c6e4f66c234"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RNVzGdtVPkxJ6BTzusXTeCqkjwrLzIJSqCYmfR587y1hkxcH_fkung==
age: 74738
X-Firefox-Spdy: h2

static.fmgsuite.com/site/templates/global/img/assets/largethumb/195-largethumb-a.jpg?v=1

54.230.111.21

200 OK

56 kB

URL HTTP/2
static.fmgsuite.com/site/templates/global/img/assets/largethumb/195-largethumb-a.jpg?v=1
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x460, components 3\012- data
Size
56 kB (56423 bytes)
Hash
b8686755e002e3b44e8e59f21fd34738
6f20cfcf2d9badfea75949c88e7ffa71346ce4be
78f2c0da5b951499b3759c10c254905cfc965bfb440a5dae9001faf32c820941

HTTP Headers

GET /site/templates/global/img/assets/largethumb/195-largethumb-a.jpg?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 56423
x-amz-replication-status: COMPLETED
last-modified: Tue, 29 Mar 2022 22:54:45 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 3tjU932VpMkQbcO04raEuRtJ.9Vw6LDz
accept-ranges: bytes
server: AmazonS3
date: Sun, 23 Oct 2022 00:20:01 GMT
etag: "b8686755e002e3b44e8e59f21fd34738"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tfhJewmnvtIih7CWZy7f32gdeyrHDOC9Lzm4noy7qgbNIb20ztZkMg==
age: 9387
X-Firefox-Spdy: h2

static.fmgsuite.com/site/templates/global/img/assets/largethumb/486-largethumb-a.jpg?v=1

54.230.111.21

200 OK

31 kB

URL HTTP/2
static.fmgsuite.com/site/templates/global/img/assets/largethumb/486-largethumb-a.jpg?v=1
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x460, components 3\012- data
Size
31 kB (31134 bytes)
Hash
55b6860a6617d74f2cacc6d8c31005a9
0b0c5e87d35956d292f01dfcb07ad5064d13b325
6bdac6c7b7fd13451a1d33f975e76650ab4a0122bb666bf684f8cdb79d42f60b

HTTP Headers

GET /site/templates/global/img/assets/largethumb/486-largethumb-a.jpg?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 31134
date: Sat, 22 Oct 2022 17:32:42 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 29 Mar 2022 22:55:18 GMT
etag: "55b6860a6617d74f2cacc6d8c31005a9"
x-amz-server-side-encryption: AES256
x-amz-version-id: RNpb3kmdbx0wXIxgHzDtoQGAhQ_rayT2
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IHmQZLJ2_VX_QRuZLGG_Yggo4-DSikDRPtP1POrDt8r8aIUmdjZmVA==
age: 33827
X-Firefox-Spdy: h2

static.fmgsuite.com/media/sourceImages/d3fd26e1-2ef1-4a13-a663-f9b955a6ec4c.png?v=1

54.230.111.21

200 OK

278 kB

URL HTTP/2
static.fmgsuite.com/media/sourceImages/d3fd26e1-2ef1-4a13-a663-f9b955a6ec4c.png?v=1
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type
PNG image data, 1579 x 1133, 8-bit/color RGBA, non-interlaced\012- data
Size
278 kB (277742 bytes)
Hash
6935235d36fe4dcc2bac1a3b97281e4b
d36aa8952471ad8e55cccf170eb5bda8dba9cea3
364267d5fb647318ba3816ed66d16aa1468654bb1adeb41224a8703631cf6be5

HTTP Headers

GET /media/sourceImages/d3fd26e1-2ef1-4a13-a663-f9b955a6ec4c.png?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 277742
date: Sat, 22 Oct 2022 18:24:19 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Sep 2018 00:00:30 GMT
etag: "6935235d36fe4dcc2bac1a3b97281e4b"
x-amz-version-id: sEI.B5MOU4GekIVDP1KGfwXW_x4YHB2R
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XUKiAFCw5ahuzqIPg1JM-YTLM8L_TGfdz3nS4DQlkWeU_2Q1jeLnww==
age: 30730
X-Firefox-Spdy: h2

www.mfg-financial.com/ftp/xchange/login.php

104.16.67.197

302 Found

419 kB

URL HTTP/2
www.mfg-financial.com/ftp/xchange/login.php
IP
104.16.67.197:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
419 kB (419114 bytes)
Hash
bc6b657e766a8b419132456497900dc1
6bdd822335aeff2f3273b63502a9a6d8cc471c8a
35ba37a012a6bd7a1712420b9e0c996f103e529fd91d7c8a7926936eb08d5af8

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /ftp/xchange/login.php HTTP/1.1
Host: www.mfg-financial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 302 Found
date: Sun, 23 Oct 2022 02:56:28 GMT
content-type: text/html; charset=utf-8
location: https://www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php
x-stackifyid: V2|7ec9f9c6-0f47-4675-af7e-3e361dd3c20a|C78253|CD45471
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=dFHoVw19do5cTAVMnSYG0xJ1NOAyzmhEjVex78yYbxo-1666493788-0-AZqmr2Hsd3tFrACsWEbLWl5Wfuquy5TROYxgyTp/jo8gEqbXqzBilWgINH+iXUl65UtvWqpfdqUdYPkghl4cqTP77mXMDCS43oV1i8g8rq9f; path=/; expires=Sun, 23-Oct-22 03:26:28 GMT; domain=.www.mfg-financial.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 75e7331bef34b4ee-OSL
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=UA-24680519-10

142.250.74.168

200 OK

44 kB

URL HTTP/2
www.googletagmanager.com/gtag/js?id=UA-24680519-10
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1588)
Size
44 kB (43590 bytes)
Hash
f5012d7fad03703f70758118674c0f8c
6683238ce8b40bf46c544e47b04c50b5e27b6a74
0f8dd630e560310caeedf8af3faf280026bf6b394febc21bb51be6e0a292313f

HTTP Headers

GET /gtag/js?id=UA-24680519-10 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 23 Oct 2022 02:56:28 GMT
expires: Sun, 23 Oct 2022 02:56:28 GMT
cache-control: private, max-age=900
last-modified: Sun, 23 Oct 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43590
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

cdn.jsdelivr.net/scrollreveal.js/3.1.4/scrollreveal.min.js

151.101.85.229

200 OK

2.9 kB

URL HTTP/2
cdn.jsdelivr.net/scrollreveal.js/3.1.4/scrollreveal.min.js
IP
151.101.85.229:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (8487), with no line terminators
Size
2.9 kB (2933 bytes)
Hash
7f7205a48c4dd9f9d3a7afd745cee35a
e5b0d510fff64e1a33233d2ea024154a4dea0297
886406d8f1abe3c73a919f0ae135424c212c59df766cecbf4857db5f7fcb80f9

HTTP Headers

GET /scrollreveal.js/3.1.4/scrollreveal.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"2127-rqUEoxT8/cZfMBPhMhm4ySd2/9s"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 23 Oct 2022 02:56:28 GMT
age: 1638016
x-served-by: cache-fra19168-FRA, cache-bma1668-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2933
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
ea20460028066b7fba2f10b51d883192
a73b8263a4477aceeda349c7beff7050de9df38b
f933a7ff2c6ec9189ba29fdf09da9125ac59d9c03b4a14e14e9f1b5fa5322b1c

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 02:56:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
05ee461624e2ec37f65e859afe6543ba
b99dcb558535d3d35d140e730aeeb41587622b30
576b3bf619d0a152889cc44165a229ad0100ccc319cf4d9044b2f26d4b676658

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 02:56:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1

151.101.86.133

200 OK

1.5 kB

URL HTTP/1.1
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
151.101.86.133:0
ASN
#54113 FASTLY

File type
data
Size
1.5 kB (1462 bytes)
Hash
c78524abb6cbc4a680c1cad02a08a267
20565e0568f7bcc832bd4b5456cd671e60059cca
a31c5c2a8873fc9219b9863c83863ecdc1caae72f83cdb6daf76f1430ad36b7c

HTTP Headers

POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1462
Content-Type: application/ocsp-response
Etag: "B76B8F2F949B4A1F3DFFAAA6200D270857F8A6BF"
Expires: Sun, 23 Oct 2022 13:00:00 UTC
Last-Modified: Sun, 23 Oct 2022 01:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
Accept-Ranges: bytes
Date: Sun, 23 Oct 2022 02:56:28 GMT
Via: 1.1 varnish
Age: 3466
X-Served-By: cache-bma1665-BMA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1666493789.585542,VS0,VE1

ocsp.sca1b.amazontrust.com/

143.204.42.88

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.88:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
c529439b1793eafd52d8b26d34367b14
c107358a9b9c223b415abad396fbe7b12c698812
7a716060c6823474811af8c5224eafa35f0c5b7a97acdc9a381ffe71e6dc2657

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=157576
Date: Sun, 23 Oct 2022 02:56:28 GMT
Etag: "635458b7-1d7"
Expires: Mon, 24 Oct 2022 22:42:44 GMT
Last-Modified: Sat, 22 Oct 2022 20:55:19 GMT
Server: ECS (nyb/1D2D)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: i47wL4szUUmyLFLGog3hZxBPh6CRdqA8RTHeOnzWwj8F5tyM4G8qcQ==
Age: 6445

ocsp.sca1b.amazontrust.com/

143.204.42.88

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.88:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
c529439b1793eafd52d8b26d34367b14
c107358a9b9c223b415abad396fbe7b12c698812
7a716060c6823474811af8c5224eafa35f0c5b7a97acdc9a381ffe71e6dc2657

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=157012
Date: Sun, 23 Oct 2022 02:56:28 GMT
Etag: "635458b7-1d7"
Expires: Mon, 24 Oct 2022 22:33:20 GMT
Last-Modified: Sat, 22 Oct 2022 20:55:19 GMT
Server: ECS (bsa/EB1A)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lhC5WaAOAaENPxJugPMFgVr5waz7ZZN_j_Ew4veD2Yb2lTDwo6NbjQ==
Age: 5881

ocsp.sca1b.amazontrust.com/

143.204.42.88

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.88:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
c529439b1793eafd52d8b26d34367b14
c107358a9b9c223b415abad396fbe7b12c698812
7a716060c6823474811af8c5224eafa35f0c5b7a97acdc9a381ffe71e6dc2657

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=155084
Date: Sun, 23 Oct 2022 02:56:28 GMT
Etag: "635458b7-1d7"
Expires: Mon, 24 Oct 2022 22:01:12 GMT
Last-Modified: Sat, 22 Oct 2022 20:55:19 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: vbJmgVmiNb0tS4HdHmM-QDpNaNa14J5RmaItk6Lbg_TZRFNbWRXxYg==
Age: 3953

ocsp.sca1b.amazontrust.com/

143.204.42.88

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.88:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
c529439b1793eafd52d8b26d34367b14
c107358a9b9c223b415abad396fbe7b12c698812
7a716060c6823474811af8c5224eafa35f0c5b7a97acdc9a381ffe71e6dc2657

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=157028
Date: Sun, 23 Oct 2022 02:56:28 GMT
Etag: "635458b7-1d7"
Expires: Mon, 24 Oct 2022 22:33:36 GMT
Last-Modified: Sat, 22 Oct 2022 20:55:19 GMT
Server: ECS (nyb/1D35)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pX3GyFWiup30htYmK_wPC1fkt6fF0mj_RtxU7JXhQtjmUyEHIVygVQ==
Age: 5897

fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/364377-lewis.js

52.216.76.52

200 OK

3.3 kB

URL HTTP/1.1
fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/364377-lewis.js
IP
52.216.76.52:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
3.3 kB (3252 bytes)
Hash
f448749a26df1824c98578c627fa447a
104080f7a90c11902fbfa2de91161434952f9451
352125a8d3d51eca537dcd272c9246dc74bae48a765dca75a407f41eca1b36ea

HTTP Headers

GET /364377-lewis/js/364377-lewis.js HTTP/1.1
Host: fmg-websites-custom.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-amz-id-2: ap2BRVA5XeLRGe78nQ55KNn8OH9z4MwfXMqsXpiLgii6ppqtugjRUJFWiUaZ+mtS+nsDyNDZZcQ=
x-amz-request-id: 7G61NVR0NKFZMY7Y
Date: Sun, 23 Oct 2022 02:56:29 GMT
Last-Modified: Thu, 17 Jan 2019 00:16:40 GMT
ETag: "f448749a26df1824c98578c627fa447a"
x-amz-version-id: 4jh_5HqPhQVhxqibCqYvVx18IMyPrpbi
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 3252

fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/scrollreveal.js

52.216.76.52

200 OK

1.2 kB

URL HTTP/1.1
fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/scrollreveal.js
IP
52.216.76.52:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
1.2 kB (1180 bytes)
Hash
677ddd3d6626e41b98e201324c0c0348
0bc2a8a3f603f08581dedde2afa52866e2868fd0
448226a1b46607f9a5103e03a68f5982085e9cfd638c04eaffd17587fbf6bf23

HTTP Headers

GET /364377-lewis/js/scrollreveal.js HTTP/1.1
Host: fmg-websites-custom.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-amz-id-2: Tt2F4ujGyotA/jQ5r2Y4nFTrklspTk89c53khLonbtNor3JZZcKu+jz/R5ApqzFj1ecvoQYVXvM=
x-amz-request-id: 7G6BB8GV1Z12DW4F
Date: Sun, 23 Oct 2022 02:56:29 GMT
Last-Modified: Thu, 17 Jan 2019 00:16:40 GMT
ETag: "677ddd3d6626e41b98e201324c0c0348"
x-amz-version-id: 99ikK76voR0YNhd6SMvqWSrHbupjBHi_
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 1180

fmg-websites-custom.s3.amazonaws.com/364377-lewis/css/364377-lewis.css

52.216.76.52

200 OK

13 kB

URL HTTP/1.1
fmg-websites-custom.s3.amazonaws.com/364377-lewis/css/364377-lewis.css
IP
52.216.76.52:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (12932)
Size
13 kB (12978 bytes)
Hash
638c5ba8ba5f04f72d17e1cb48fd628c
5ceca77706e1567187f31c11214c7458eb6e426f
f552fcee3f77c82bb1a0accc50a1ce699cea6451ba26ab09db8bf60c5711d8fe

HTTP Headers

GET /364377-lewis/css/364377-lewis.css HTTP/1.1
Host: fmg-websites-custom.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-amz-id-2: yYExHHwCd6LBHD+avwOzC9GA+UTdW6OQlP6FS2jVbvrXs31Fb/cNGN/uKuT/JQxfh1ye6ibQsR8=
x-amz-request-id: 7G636Q5BBSECD9SA
Date: Sun, 23 Oct 2022 02:56:29 GMT
Last-Modified: Fri, 22 Feb 2019 23:13:55 GMT
ETag: "638c5ba8ba5f04f72d17e1cb48fd628c"
x-amz-version-id: 5kGUp82_Se3w4Wt9lA7ms.T0bwsMyCbt
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 12978

fmg-websites-custom.s3.amazonaws.com/exclusive-setup/template-fix/theme-24b-manhattan-fix.css

52.216.76.52

200 OK

57 B

URL HTTP/1.1
fmg-websites-custom.s3.amazonaws.com/exclusive-setup/template-fix/theme-24b-manhattan-fix.css
IP
52.216.76.52:0
ASN
#16509 AMAZON-02

File type
ASCII text
Size
57 B (57 bytes)
Hash
19d99265437b7d88803512b852416b70
4dfb715f6f427be1dcf91e043cca18b082fd1e5d
0c0165308fb3ed8a4a50bc883430422bbc3ca5994732fe190e79e84ed0c82b64

HTTP Headers

GET /exclusive-setup/template-fix/theme-24b-manhattan-fix.css HTTP/1.1
Host: fmg-websites-custom.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-amz-id-2: in5jN0gOVnGPPGPDIsINEU/Ix6r3cvjrWLBaISgELUkQ9sYp3H7XU0od0v4CSu3ktvwBRCZmk+A=
x-amz-request-id: 7G63F8YK6CY1JER6
Date: Sun, 23 Oct 2022 02:56:29 GMT
Last-Modified: Wed, 13 Feb 2019 18:31:47 GMT
ETag: "19d99265437b7d88803512b852416b70"
x-amz-version-id: 5VD7sVAti71IVnvYdPKsXDvwUW4n0IWM
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 57

static.site24x7rum.com/beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586

54.230.111.14

200 OK

22 kB

URL HTTP/1.1
static.site24x7rum.com/beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586
IP
54.230.111.14:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (32144)
Size
22 kB (22343 bytes)
Hash
5869e4aefabe888c591606de2e2f5d78
1533266b9ee27da5a254f6344c8805912e04041f
101990976c44f678463721c36b31539c9382c5a9ef9323fe3765dc99f1f527c9

HTTP Headers

GET /beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586 HTTP/1.1
Host: static.site24x7rum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/javascript;charset=ISO-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 23 Oct 2022 02:08:17 GMT
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Server: ZGS
Vary: accept-encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QPz2Wzgz3-XPbmS1Jwgw9pnYtWG0pCPvTb5Y5oac4zBHWggd9NakSg==
Age: 2891

static.fmgsuite.com/media/images/30479605-3e1d-4270-99b3-a38bd6cd4232.png

54.230.111.21

200 OK

43 kB

URL HTTP/2
static.fmgsuite.com/media/images/30479605-3e1d-4270-99b3-a38bd6cd4232.png
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type
PNG image data, 300 x 135, 8-bit/color RGBA, non-interlaced\012- data
Size
43 kB (42728 bytes)
Hash
f4c4803b8746c1e2c7def9f51ed87ddb
1ed5c591232b82b7d16213cd7a2724f58a783d1e
bcb613bfe0f63bc17156dde681711e7811c14d3d044cbbce7f73ef7a5adfa78a

HTTP Headers

GET /media/images/30479605-3e1d-4270-99b3-a38bd6cd4232.png HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 42728
date: Sun, 23 Oct 2022 02:56:29 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 23 May 2019 21:01:20 GMT
etag: "f4c4803b8746c1e2c7def9f51ed87ddb"
x-amz-version-id: Dx0ueDEqLw.nObmSM_ddMhzE3KLNePTD
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k2NXyUP2OsHV_MC8llt6Mj609v_7T-e1hNXmTzT7-rL9e-ihwg5_AA==
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
9f84a11cd39c014fffc187f2a8b0d8df
1875e117dec3fc707db902e87df9ec691b2cc763
bf0c0ac413147f09128a7af625499402eea897c3efad12828347efaba9b9d3a1

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 02:56:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2

216.58.207.195

200 OK

24 kB

URL HTTP/2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Size
24 kB (23580 bytes)
Hash
e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537

HTTP Headers

GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 18 Oct 2022 17:10:21 GMT
expires: Wed, 18 Oct 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 380768
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2

216.58.207.195

200 OK

23 kB

URL HTTP/2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Size
23 kB (23040 bytes)
Hash
de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49

HTTP Headers

GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 18 Oct 2022 17:10:21 GMT
expires: Wed, 18 Oct 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 380768
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
9f84a11cd39c014fffc187f2a8b0d8df
1875e117dec3fc707db902e87df9ec691b2cc763
bf0c0ac413147f09128a7af625499402eea897c3efad12828347efaba9b9d3a1

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 02:56:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.sca1b.amazontrust.com/

143.204.42.88

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.88:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
4691924df6f0e1027c1fe7c63a9d8074
ffb30b3747bbfd65161544d003310d5aec1f7f49
84112c672d4cf3d1b43448d878ec0b0db220848364f072e4a411320cd567b0be

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=122083
Date: Sun, 23 Oct 2022 02:56:29 GMT
Etag: "6353d318-1d7"
Expires: Mon, 24 Oct 2022 12:51:12 GMT
Last-Modified: Sat, 22 Oct 2022 11:25:12 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WXHCTk_PsYrAP5IE8D3PLj_rv3yg5upPx-VwtRqWKxtZG-fxJBaDEg==
Age: 5160

static.fmgsuite.com/media/images/d5549bfa-c8d0-4c6c-b679-e1ed71b20c6d.png

54.230.111.21

200 OK

168 B

URL HTTP/2
static.fmgsuite.com/media/images/d5549bfa-c8d0-4c6c-b679-e1ed71b20c6d.png
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type
PNG image data, 292 x 34, 8-bit/color RGBA, non-interlaced\012- data
Size
168 B (168 bytes)
Hash
cdd1015adf277e7dd28c51a94bd43f6e
304309145f7888a56893015417479140f2f2ea8d
d6dd5fc86404df93ebf4fd148b2b2249377009622668808cc0ff5811233bfc6c

HTTP Headers

GET /media/images/d5549bfa-c8d0-4c6c-b679-e1ed71b20c6d.png HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 168
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Sep 2018 16:12:37 GMT
x-amz-version-id: OZdrjeDpF64qfLGqflCBeyR7G0HBMl28
accept-ranges: bytes
server: AmazonS3
date: Sat, 22 Oct 2022 08:26:00 GMT
etag: "cdd1015adf277e7dd28c51a94bd43f6e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8uUlOeE8rRwJk7IoMDDzmI_dIzI02JOmOk3ai7AkXZxpNi5zv1-iaQ==
age: 66630
X-Firefox-Spdy: h2

static.fmgsuite.com/media/images/80a0a59d-37e9-4cac-9999-3b7f80029c37.png

54.230.111.21

200 OK

168 B

URL HTTP/2
static.fmgsuite.com/media/images/80a0a59d-37e9-4cac-9999-3b7f80029c37.png
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type
PNG image data, 292 x 34, 8-bit/color RGBA, non-interlaced\012- data
Size
168 B (168 bytes)
Hash
cdd1015adf277e7dd28c51a94bd43f6e
304309145f7888a56893015417479140f2f2ea8d
d6dd5fc86404df93ebf4fd148b2b2249377009622668808cc0ff5811233bfc6c

HTTP Headers

GET /media/images/80a0a59d-37e9-4cac-9999-3b7f80029c37.png HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 168
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Sep 2018 16:12:29 GMT
x-amz-version-id: Up8CjEy78drhM2Cg4IuVmC9HzsRMf.Fz
accept-ranges: bytes
server: AmazonS3
date: Sat, 22 Oct 2022 04:53:44 GMT
etag: "cdd1015adf277e7dd28c51a94bd43f6e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VlqCMoTkE3rBZHPSXncgHpPGF5oeGQyb4oZ6e5qP6JS3m9zZE66roQ==
age: 79365
X-Firefox-Spdy: h2

static.fmgsuite.com/media/images/5da9d55f-4874-4c04-b98b-442f93101464.png

54.230.111.21

200 OK

168 B

URL HTTP/2
static.fmgsuite.com/media/images/5da9d55f-4874-4c04-b98b-442f93101464.png
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type
PNG image data, 292 x 34, 8-bit/color RGBA, non-interlaced\012- data
Size
168 B (168 bytes)
Hash
10209bfe8cabf4c2e596031854cf8365
2371b6d25b98030dfa4bb2c47c0266d74d05877d
728d270b5c9b6c4bc87a34da5686c12c3d1201f94b4d0997a3823553bc305f6d

HTTP Headers

GET /media/images/5da9d55f-4874-4c04-b98b-442f93101464.png HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 168
x-amz-replication-status: COMPLETED
last-modified: Mon, 10 Sep 2018 17:50:01 GMT
x-amz-version-id: PmXH8lkRIsqv0xwMDW7KQMz5n9V9Jckd
accept-ranges: bytes
server: AmazonS3
date: Sat, 22 Oct 2022 08:25:59 GMT
etag: "10209bfe8cabf4c2e596031854cf8365"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6lnE6WEmQOwJ-L82esV-TwUkBdbbU1Ectghx1DCrZEu3JxJKZhBvRQ==
age: 66631
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f1b833a135e4d839859e4994f349bb6c
399b607015c4d9200df20084c7396591007dc995
28db09a2a0e821b37dc1cfb710bf896c438755bfc992eb775f41128b0e52e5d1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28DB09A2A0E821B37DC1CFB710BF896C438755BFC992EB775F41128B0E52E5D1"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17214
Expires: Sun, 23 Oct 2022 07:43:23 GMT
Date: Sun, 23 Oct 2022 02:56:29 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f1b833a135e4d839859e4994f349bb6c
399b607015c4d9200df20084c7396591007dc995
28db09a2a0e821b37dc1cfb710bf896c438755bfc992eb775f41128b0e52e5d1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28DB09A2A0E821B37DC1CFB710BF896C438755BFC992EB775F41128B0E52E5D1"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17214
Expires: Sun, 23 Oct 2022 07:43:23 GMT
Date: Sun, 23 Oct 2022 02:56:29 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f1b833a135e4d839859e4994f349bb6c
399b607015c4d9200df20084c7396591007dc995
28db09a2a0e821b37dc1cfb710bf896c438755bfc992eb775f41128b0e52e5d1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28DB09A2A0E821B37DC1CFB710BF896C438755BFC992EB775F41128B0E52E5D1"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17214
Expires: Sun, 23 Oct 2022 07:43:23 GMT
Date: Sun, 23 Oct 2022 02:56:29 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f1b833a135e4d839859e4994f349bb6c
399b607015c4d9200df20084c7396591007dc995
28db09a2a0e821b37dc1cfb710bf896c438755bfc992eb775f41128b0e52e5d1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28DB09A2A0E821B37DC1CFB710BF896C438755BFC992EB775F41128B0E52E5D1"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17214
Expires: Sun, 23 Oct 2022 07:43:23 GMT
Date: Sun, 23 Oct 2022 02:56:29 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44c30030-7cae-4ead-96bb-a4ed05bdaecd.jpeg

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44c30030-7cae-4ead-96bb-a4ed05bdaecd.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10473 bytes)
Hash
9b940ff09c838025a9b16330142f36cf
7785b8a7d2c727423af044776c05f8537122eebc
66480d44c32590e1536396a78ddf5ef5a0fb100f64f06be9fd3347f168691fc9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44c30030-7cae-4ead-96bb-a4ed05bdaecd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10473
x-amzn-requestid: 537cc627-aac4-4794-8360-0aaec3294588
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aTXXPF6OIAMF2hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635138fa-21a0dcf1769be60f1149854a;Sampled=0
x-amzn-remapped-date: Thu, 20 Oct 2022 12:03:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lOpSAbzDsZImnLQD9f3fxl8vGu8tN1Ap2O58jyR5f4mDlbwoINSnmg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 22 Oct 2022 21:43:10 GMT
age: 18799
etag: "7785b8a7d2c727423af044776c05f8537122eebc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffec9f432-15c2-48a5-a72c-411765b4b8bc.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10309 bytes)
Hash
d7d9a7abaf87962b855521efa710812f
a3e88fdb581161ee4a77a2e871b5dbf6438740ff
77c606ec418fdcf921011e7791c702a96ccb5ed9157988da3c7d9f2c460c2bbf

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffec9f432-15c2-48a5-a72c-411765b4b8bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10309
x-amzn-requestid: 440e8c86-be5e-47c5-8c91-a6b093b7077c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZkTaoHWCIAMFwsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633e65dd-7a06ea100494b8db4b76c4ec;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 05:21:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: V-0zp4tJK8Px1D5JJkZ9h1HTzgCaTOeUhD4gikhRnorEGeujIHbf3A==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 22 Oct 2022 21:55:38 GMT
age: 18051
etag: "a3e88fdb581161ee4a77a2e871b5dbf6438740ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

3.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e25b9a-b0d2-47fc-824e-f7441e1bdd01.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
3.5 kB (3518 bytes)
Hash
85de0c3844ed8f109992d7c37cc5db1b
454136ba1c69e33ae3ba4fcfe4963bd492991e07
c8d2f6fabb976cc65c2029b102fee589b639c0f18110f1c2502733903da73d0e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e25b9a-b0d2-47fc-824e-f7441e1bdd01.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 3518
x-amzn-requestid: fd8cc725-9685-4a08-9edf-68250bb25729
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aSS_FFknoAMF5fg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6350cb93-7013c6384cf8a37c58b82ca2;Sampled=0
x-amzn-remapped-date: Thu, 20 Oct 2022 04:16:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7rIVMWVlF-44bGQJ3Oy40b17V7inEcZmkUiD0rsHcZzL_-6rAGZMRg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Sat, 22 Oct 2022 21:32:53 GMT
age: 19416
etag: "454136ba1c69e33ae3ba4fcfe4963bd492991e07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c95e4a-b411-4326-8723-bceab59b6d74.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.1 kB (8109 bytes)
Hash
7fa30ef7eff515cfddf2f3b7ee67eb85
b488761c8ce781a44dcaf2e515ef548480dcd1bc
47c0e8ea9ef52c5d45dca54eb251d89983fba9937b7cf7872b065de04786f6ef

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c95e4a-b411-4326-8723-bceab59b6d74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8109
x-amzn-requestid: 39c9edcc-ea64-443e-82b3-230e41edbcb4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aFhHBG_HoAMF7Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634baef9-7d6e66cd2012a3e8607f0d28;Sampled=0
x-amzn-remapped-date: Sun, 16 Oct 2022 07:12:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BqGXfTDNR6-sNzqh1nIScjC2v2TCyOp0wY8AIXaKY3FdT4VH3ckBdw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 00:13:12 GMT
age: 9797
etag: "b488761c8ce781a44dcaf2e515ef548480dcd1bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd337e0f9-4135-4fa1-9843-c609356020a9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10036 bytes)
Hash
bcadefe69587d4ab5bf5ff9e71eb5cab
066fb94a6ae38e57d67001cc319eea17f837d511
45b175a2cecee90b2d0efc16c4139686ffcf34bfac9084fe9e5e1c926dc1330c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd337e0f9-4135-4fa1-9843-c609356020a9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10036
x-amzn-requestid: b1f0e0b9-6fc6-4b7c-a9b0-55845cdfd2d9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: abR9aEvjIAMF22Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63546388-72742b3a1279d76e2e842930;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 21:41:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 90q23XmFTygl90mCmT8p2Qi7BY2K2gjg3apZpTreMxYFpgT-716CDg==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sat, 22 Oct 2022 21:50:45 GMT
age: 18344
etag: "066fb94a6ae38e57d67001cc319eea17f837d511"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbda6a073-f00e-40b8-bbff-eeeffe03083d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.6 kB (9565 bytes)
Hash
ab395803138af2f1c4a95b643a69fcd0
004c737da6827867b87a78f7f8d92699468b050b
7a1806038d98d478ec019ff97356b3255afbbea70a74180fdacd4958fe62b807

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbda6a073-f00e-40b8-bbff-eeeffe03083d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9565
x-amzn-requestid: 84c51ee2-64f1-4236-a8c7-278a6e28b24a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: abRJaGUBIAMFcRg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6354623c-36a42ee364025d0270960976;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 21:35:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: es4nrCSWjnT_5UrXP3LldtEXVEWqis-jHdg31x-iRx4edTwjocwOiA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 22 Oct 2022 21:42:05 GMT
age: 18864
etag: "004c737da6827867b87a78f7f8d92699468b050b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

s3.amazonaws.com/static.contentres.com/media/images/ff7f9876-3fba-4104-b6c4-195bf1641866.png

52.216.136.230

200 OK

17 kB

URL HTTP/1.1
s3.amazonaws.com/static.contentres.com/media/images/ff7f9876-3fba-4104-b6c4-195bf1641866.png
IP
52.216.136.230:0
ASN
#16509 AMAZON-02

File type
PNG image data, 1198 x 328, 8-bit/color RGBA, non-interlaced\012- data
Size
17 kB (17159 bytes)
Hash
f42aee9b482dcb7962a091de97caedeb
1731bb19c7e74a1f1c442264a52263b9d1453438
6e43d5829103f07e97318e24f33221f5682037f31ca4800cb5811293a3ebb510

HTTP Headers

GET /static.contentres.com/media/images/ff7f9876-3fba-4104-b6c4-195bf1641866.png HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fmg-websites-custom.s3.amazonaws.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-amz-id-2: 9NCw+SDXS8T6S079EQwiFvdw7BclSTHyrIwhD+BUiQoj1D4hbkAVlW5IiY3pBZDR1R0v1xEA7iY=
x-amz-request-id: EFG9BPZN3KV8RYD9
Date: Sun, 23 Oct 2022 02:56:30 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Wed, 12 Sep 2018 18:16:35 GMT
ETag: "f42aee9b482dcb7962a091de97caedeb"
x-amz-version-id: XzWSlVQ8qWa.PAOKIkSSDPaH.razXRCx
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 17159

static.fmgsuite.com/site/templates/007/fonts/fontawesome-webfont.woff2?v=4.7.0

54.230.111.21

200 OK

77 kB

URL HTTP/2
static.fmgsuite.com/site/templates/007/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

HTTP Headers

GET /site/templates/007/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://static.fmgsuite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 77160
date: Sun, 23 Oct 2022 02:56:30 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: FAILED
last-modified: Thu, 06 Oct 2022 14:27:44 GMT
etag: "af7ae505a9eed503f8b8e6982036873e"
x-amz-server-side-encryption: AES256
x-amz-version-id: YYsQ9FoAWN4VdObsVJhGiJcBSHTzglRz
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3ORMGvyEcaaazhOxT3MfWr6qQASJ2ytO-D5egb3agBzuIMxSG0lgmw==
X-Firefox-Spdy: h2

static.fmgsuite.com/media/images/f9736cc9-65fa-4dd3-9b06-38fa70329828.jpg

54.230.111.21

200 OK

272 kB

URL HTTP/2
static.fmgsuite.com/media/images/f9736cc9-65fa-4dd3-9b06-38fa70329828.jpg
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2118x775, components 3\012- data
Size
272 kB (272070 bytes)
Hash
08764fbaf581510596ae79301f8e4f9c
ef9c776eb056b5fd9959a107fa8e3158123522c5
714b89e2b79a42b2c9cfba894dd7f891c434bce63d44dadedd9c2c3fbeeef81c

HTTP Headers

GET /media/images/f9736cc9-65fa-4dd3-9b06-38fa70329828.jpg HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 272070
date: Sun, 23 Oct 2022 02:56:30 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 13 Feb 2019 17:19:20 GMT
etag: "08764fbaf581510596ae79301f8e4f9c"
x-amz-version-id: wk6GSmVOSUvgEMrCPW4OsbG_qgYn8I3_
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: so03D3vlHttu88r4asAr5v84zs-wqmNK2bdqBP_8UHQg4aW6wIrKZw==
X-Firefox-Spdy: h2

www.google-analytics.com/analytics.js

142.250.74.174

200 OK

20 kB

URL HTTP/2
www.google-analytics.com/analytics.js
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1325)
Size
20 kB (20039 bytes)
Hash
47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e

HTTP Headers

GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 23 Oct 2022 02:41:09 GMT
expires: Sun, 23 Oct 2022 04:41:09 GMT
cache-control: public, max-age=7200
age: 920
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

static.fmgsuite.com/media/images/c47dc1be-4915-4b76-853f-fd35e457cc99.jpg

54.230.111.21

200 OK

1.3 MB

URL HTTP/2
static.fmgsuite.com/media/images/c47dc1be-4915-4b76-853f-fd35e457cc99.jpg
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2321x1440, components 3\012- data
Size
1.3 MB (1258678 bytes)
Hash
41a6e3876efddf12f46c659cb630af88
dd8770908c0580e472927a4439b9909c9c0e3f4c
58e1ac745c19b44f6a4673e9960051058386c3ee261b5a91334b5092f9771f4f

HTTP Headers

GET /media/images/c47dc1be-4915-4b76-853f-fd35e457cc99.jpg HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 1258678
date: Sun, 23 Oct 2022 02:56:30 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 31 Jan 2019 16:35:44 GMT
etag: "41a6e3876efddf12f46c659cb630af88"
x-amz-version-id: wVepZlnDlan_sPhf0Vqdpe_.MT_tfzh1
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rJl4CebXaJXP6pqSBck_R8td3oz1zwOfb0SkB39MAtDxWArkUXegww==
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
e082919080a1a229ac3eec9b7b857933
a5847abc620bd00e87afda17746b0a590e0c9464
ca7fa279357206e9e419d5b80281cc14bc5666b20ef262560dea86d31132c729

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 02:56:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-24680519-10&cid=1768193400.1666493805&jid=1878571727&gjid=520896742&_gid=297593115.1666493805&_u=YEBAAUAAAAAAACAAI~&z=1182711312

173.194.222.156

200 OK

4 B

URL HTTP/2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-24680519-10&cid=1768193400.1666493805&jid=1878571727&gjid=520896742&_gid=297593115.1666493805&_u=YEBAAUAAAAAAACAAI~&z=1182711312
IP
173.194.222.156:0
ASN
#15169 GOOGLE

File type
ASCII text, with no line terminators
Size
4 B (4 bytes)
Hash
48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a

HTTP Headers

POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-24680519-10&cid=1768193400.1666493805&jid=1878571727&gjid=520896742&_gid=297593115.1666493805&_u=YEBAAUAAAAAAACAAI~&z=1182711312 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: https://www.mfg-financial.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 23 Oct 2022 02:56:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
60fcf0b588f9927fde2759de6b3e3fed
f564b9ea498a878638fa3a374bf6fdfe468559ad
ae3eb07b4b347d54014f24971dafb4dccbc009c397caec6a78403e92e65f3cbc

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 02:56:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
32b18cf6617f4e930872c1470af05703
4c07ce8749baf89e9812de6bb45deb0a3fc5013e
23481ba8ebf19debe4a6119d605ad31c0589a08bbc253a6428938ac9a84d5b22

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 02:56:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
e082919080a1a229ac3eec9b7b857933
a5847abc620bd00e87afda17746b0a590e0c9464
ca7fa279357206e9e419d5b80281cc14bc5666b20ef262560dea86d31132c729

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 02:56:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-24680519-10&cid=1768193400.1666493805&jid=1878571727&_u=YEBAAUAAAAAAACAAI~&z=597712530

142.250.74.3

200 OK

42 B

URL HTTP/2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-24680519-10&cid=1768193400.1666493805&jid=1878571727&_u=YEBAAUAAAAAAACAAI~&z=597712530
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-24680519-10&cid=1768193400.1666493805&jid=1878571727&_u=YEBAAUAAAAAAACAAI~&z=597712530 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 23 Oct 2022 02:56:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-24680519-10&cid=1768193400.1666493805&jid=1878571727&_u=YEBAAUAAAAAAACAAI~&z=597712530

142.250.74.164

200 OK

42 B

URL HTTP/2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-24680519-10&cid=1768193400.1666493805&jid=1878571727&_u=YEBAAUAAAAAAACAAI~&z=597712530
IP
142.250.74.164:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-24680519-10&cid=1768193400.1666493805&jid=1878571727&_u=YEBAAUAAAAAAACAAI~&z=597712530 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 23 Oct 2022 02:56:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
32b18cf6617f4e930872c1470af05703
4c07ce8749baf89e9812de6bb45deb0a3fc5013e
23481ba8ebf19debe4a6119d605ad31c0589a08bbc253a6428938ac9a84d5b22

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 02:56:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
924935dfe678e1cafb56906ef15defec
063dc4e38a869415d29ff059c0e173966c0c96dd
12045f462e3aa1fa3d2c97f1c3c67951dedc6410db5ce75c1907de5beff81bf4

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 23 Oct 2022 02:56:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

static.fmgsuite.com/media/images/92d7e6bf-10a6-424b-876e-6d626e69d74f.ico

54.230.111.21

200 OK

4.2 kB

URL HTTP/2
static.fmgsuite.com/media/images/92d7e6bf-10a6-424b-876e-6d626e69d74f.ico
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Size
4.2 kB (4158 bytes)
Hash
e338cca5f3614abe4255fd0c64b41d6c
71f416a1b0fbd19ef80f7bc74c0dfaf998b6cf09
278329fac12f4c5b91fa85d964dc0404298fd6d0becec4743a3b92f967c64cd0

HTTP Headers

GET /media/images/92d7e6bf-10a6-424b-876e-6d626e69d74f.ico HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 4158
date: Sun, 23 Oct 2022 02:56:31 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 02 Nov 2018 19:12:26 GMT
etag: "e338cca5f3614abe4255fd0c64b41d6c"
x-amz-version-id: K06K08oKzcGpBu8.7r9eLuG1bP.GXMuc
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8GHyTKw6Mvy74KJLM4DxV4eFvvD8rp2LSsZySbHvkdVKASdC0bb-rA==
X-Firefox-Spdy: h2

ocsp.sca1b.amazontrust.com/

143.204.42.88

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.88:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
3e1b0d4caa268cb5868d61804fcec546
7a4efbcda9dd5bffe8f20b42bc14637c82106d0c
57de12356fd3d00cfb50eb430a9deb5ecc1d07154dbaba6fa076f5a079e5ff70

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=94636
Date: Sun, 23 Oct 2022 02:56:30 GMT
Etag: "6353683d-1d7"
Expires: Mon, 24 Oct 2022 05:13:46 GMT
Last-Modified: Sat, 22 Oct 2022 03:49:17 GMT
Server: ECS (bsa/EB13)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: RBGvDLycWd4Gm3jKXjuP_7F9xM0OrKtQM7qM3CAIzHunT2t6d3qKhg==
Age: 5069

col.site24x7rum.com/rum/data

54.186.112.130

200 OK

0 B

URL HTTP/2
col.site24x7rum.com/rum/data
IP
54.186.112.130:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /rum/data HTTP/1.1
Host: col.site24x7rum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2037
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sun, 23 Oct 2022 02:56:30 GMT
content-type: application/json;charset=ISO-8859-1
content-length: 0
access-control-allow-methods: POST,OPTIONS
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-headers: request-id, request-context, Origin, Accept-Language
set-cookie: s247cname=916e5e2f-084b-4adc-9bbf-658d19fcbbe3;path=/;SameSite=None;Secure;priority=high
_zcsr_tmp=916e5e2f-084b-4adc-9bbf-658d19fcbbe3;path=/;SameSite=Strict;Secure;priority=high
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
vary: Origin
server: ZGS
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff16587d8-20bf-4cbe-a307-4babf4b40f43.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.5 kB (8528 bytes)
Hash
57b8c3defee740fd16ededbc0c5e8ff2
8842eab4aaeb646c4618081ec204d0f423ab5934
b19f5357c17653958793712c093dee642c530908c5d5009cb087ff6c70ec5d67

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff16587d8-20bf-4cbe-a307-4babf4b40f43.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 8528
x-amzn-requestid: 469ff83f-2334-4968-9df9-d244a5763011
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZxuZdFZroAMF71w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6343c43c-50e24c0339ffb18f4cadedd2;Sampled=0
x-amzn-remapped-date: Mon, 10 Oct 2022 07:05:32 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: zOALuPQuClkd_kvM6VvoAG7Zf-vVvgDvOguo_r1ewRd73xEo56AcLQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 22 Oct 2022 21:43:00 GMT
age: 18816
etag: "8842eab4aaeb646c4618081ec204d0f423ab5934"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Lato:400,700

142.250.74.10

200 OK

0 B

URL HTTP/2
fonts.googleapis.com/css?family=Lato:400,700
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /css?family=Lato:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 23 Oct 2022 02:56:28 GMT
date: Sun, 23 Oct 2022 02:56:28 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php

104.16.67.197

200 OK

0 B

URL HTTP/2
www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php
IP
104.16.67.197:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /?redirectUrl=/ftp/xchange/login.php HTTP/1.1
Host: www.mfg-financial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __cf_bm=dFHoVw19do5cTAVMnSYG0xJ1NOAyzmhEjVex78yYbxo-1666493788-0-AZqmr2Hsd3tFrACsWEbLWl5Wfuquy5TROYxgyTp/jo8gEqbXqzBilWgINH+iXUl65UtvWqpfdqUdYPkghl4cqTP77mXMDCS43oV1i8g8rq9f
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

HTTP/2 200 OK
date: Sun, 23 Oct 2022 02:56:28 GMT
content-type: text/html; charset=utf-8
cache-control: private
vary: Accept-Encoding
x-stackifyid: V2|493e076b-39be-482a-80a1-f5603f4b43d9|C78253|CD52898
strict-transport-security: max-age=31536000
set-cookie: .Stackify.Rum=493e076b-39be-482a-80a1-f5603f4b43d9; path=/; secure; HttpOnly; SameSite=Lax
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 75e7331f1884b4ee-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

static.fmgsuite.com/site/templates/007/dist/scripts.js?v=2.86.45.40590.358

54.230.111.21

200 OK

0 B

URL HTTP/2
static.fmgsuite.com/site/templates/007/dist/scripts.js?v=2.86.45.40590.358
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /site/templates/007/dist/scripts.js?v=2.86.45.40590.358 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/x-javascript
x-amz-replication-status: FAILED
last-modified: Thu, 06 Oct 2022 14:27:42 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: zne3QLUMAGOGn4TWl1mQ5_vo2OWY82zh
server: AmazonS3
content-encoding: gzip
date: Sat, 22 Oct 2022 22:51:00 GMT
etag: W/"dfe2704fbb3a2e57e9eb5d2c63804d66"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fKylD0QigKcBwjRl_ft0V9o8rNWVZl_MffJDiA1UCySiidNqX1-xAw==
age: 15317
X-Firefox-Spdy: h2

static.fmgsuite.com/site/templates/007/dist/7ac.css?v=2.86.45.40590.358

54.230.111.21

200 OK

0 B

URL HTTP/2
static.fmgsuite.com/site/templates/007/dist/7ac.css?v=2.86.45.40590.358
IP
54.230.111.21:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /site/templates/007/dist/7ac.css?v=2.86.45.40590.358 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css
x-amz-replication-status: FAILED
last-modified: Thu, 06 Oct 2022 14:27:41 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: CwxW5IZsWTKXJUsr7KID8MErrslBh1hg
server: AmazonS3
content-encoding: gzip
date: Sat, 22 Oct 2022 22:51:00 GMT
etag: W/"8f56fac5ef8a406613260f0848df164d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WbyVpMt93CW7J8DyOBB5lsgKTOMzu39uLYZbL_Kxtihe0du5u8gs7w==
age: 15052
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations