r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43ad67f241ee3692a9c9c1da080dae58
6a024f7d71eeee257edc91ba9273416f634aaae5
636635b57f9e6d2ad9b1b949298ee7d3b5b7e251a63516ff68bfb1eceded5688
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "636635B57F9E6D2AD9B1B949298EE7D3B5B7E251A63516FF68BFB1ECEDED5688"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2652
Expires: Mon, 12 Dec 2022 21:09:16 GMT
Date: Mon, 12 Dec 2022 20:25:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 430f1651125c14bfa4924aa1f1a392e9
304141c5fe7ac8b370a67912b2592f9622de9600
315d77a9956f34b1615e38f5f1971dd05146980f8a36b35a8108d47ebba7e8e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "315D77A9956F34B1615E38F5F1971DD05146980F8A36B35A8108D47EBBA7E8E5"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5479
Expires: Mon, 12 Dec 2022 21:56:23 GMT
Date: Mon, 12 Dec 2022 20:25:04 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 12 Dec 2022 19:33:43 GMT
content-type: application/json
age: 3081
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dbd022fec0a71226daaf29b7563a8896
c37d14dc7b3849a4bb815fa325fb5e70fae54039
22da5e6e3f9507688fc8cb02183d52cf38f4adf8b2c6c52eaf5f88182471efeb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22DA5E6E3F9507688FC8CB02183D52CF38F4ADF8B2C6C52EAF5F88182471EFEB"
Last-Modified: Sun, 11 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8321
Expires: Mon, 12 Dec 2022 22:43:45 GMT
Date: Mon, 12 Dec 2022 20:25:04 GMT
Connection: keep-alive
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org
301 Moved Permanently 283 B URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b4c41f0e442b6c210a679663e18e84cc
f75d4d6d2b56394a2f1ca6980c82fd7d415b2b64
11f90d0b36821361603a74ab339ca49a026a55cae80da096fadc5a6a8d7f1484
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
openphish Generic/Spear Phishing
fortinet Phishing
GET /verify/on.myoccu.org%20(1)/on.myoccu.org HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 12 Dec 2022 20:25:04 GMT
Server: Apache
Location: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
Content-Length: 283
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QkgFYlBKS+sQaeI3UREl0QnQSJWbf0s0NMwsGUKTGVwvJqRApvVh7sOEgZ8X0SkSJ79aHqyErCA=
x-amz-request-id: 4PBM8WY0X4KVES35
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 12 Dec 2022 19:49:44 GMT
age: 2120
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 12 Dec 2022 20:25:04 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 12 Dec 2022 19:33:17 GMT
age: 3108
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ee19f96e42a0eca99d00c8d91f977c35
3bf8dbf8b8ce6ea7adadf7bb92cae2f9502fbee9
6d8adcb1494bfe2ca73cd6b77eb57b2d08e07b05eb892fea98a1fde0bfb2ea12
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5553
Cache-Control: max-age=137659
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 20:25:05 GMT
Etag: "6396ef2b-1d7"
Expires: Wed, 14 Dec 2022 10:39:24 GMT
Last-Modified: Mon, 12 Dec 2022 09:06:51 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
206 Partial Content 65 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
IP
File type Unicode text, UTF-8 text, with very long lines (15882), with CRLF line terminators
Hash 6fd5461c08d0fd27b5406943d9274b28
dce12fc1da18ec178b50175cb72c36f95de602fd
dd33883ca1de9ccc4bd1c3975c5360b70a7481ff409ebefed31929bb613bb25d
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
openphish Generic/Spear Phishing
fortinet Phishing
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/ HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Range: bytes=14237-
If-Range: Sat, 17 Sep 2022 18:22:36 GMT
HTTP/1.1 206 Partial Content
Date: Mon, 12 Dec 2022 20:25:05 GMT
Server: Apache
Last-Modified: Sat, 17 Sep 2022 18:22:36 GMT
Accept-Ranges: bytes
Content-Length: 65317
Content-Range: bytes 14237-79553/79554
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/css.css
200 OK 5.3 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/css.css
IP
Hash 6e76a3b76787ce7e769e3533f327a335
141a83abe9092dfa4c8d275b0ae28cf4638d7d34
0a6832b036495667dab8f4d596b043ecae1f7bfd25b51f5e2cc7ce6523539bb3
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/css.css HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:05 GMT
Server: Apache
Last-Modified: Sat, 04 Jun 2022 02:04:48 GMT
Accept-Ranges: bytes
Content-Length: 5261
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
ocsp.digicert.com/
200 OK 279 B IP
Hash e89f8194617cdd764e607468473f0341
810ed618482a7e19323605930f20d84205cb6c9f
025866e838be169bcbf1d1be9d552c74af1486058bebf3e8777dbb7a79078b05
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5078
Cache-Control: max-age=129660
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 20:25:05 GMT
Etag: "6396d1c7-117"
Expires: Wed, 14 Dec 2022 08:26:05 GMT
Last-Modified: Mon, 12 Dec 2022 07:01:27 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AiYEpSa5IQXqrwy6q2yXyg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ZL8HVDpx7F5UESmv4t1NHflIu1M=
cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js
200 OK 6.5 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js
IP
File type ASCII text, with very long lines (20322)
Hash df9fe6d48e380554eb0ec9687bed3246
207263d754220200c1916edfbda262f62223ecf5
91d57502b7260e6752c2b5f1636d77707929fa9f09da28589691e61816a448f9
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://digitalalertoccu.zapto.org
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:25:05 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 440018
expires: Sat, 02 Dec 2023 20:25:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t4b7N2bKi%2Bd0OGXxAzrHA2rtWz6Bjt6TiSeIp8pweIdE0YjE570ZoDsXTgzVFOL3sjrmU6LXPZ1cxCoZoNbxk7J7fgejHN7QwCb6eMl0BkuYqZdX2jPHABwH8vxxeKqrWgPphgzZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77892ff3efe91c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.3.1.slim.min.js
200 OK 24 kB URL HTTP/2 code.jquery.com/jquery-3.3.1.slim.min.js
IP
File type ASCII text, with very long lines (65247)
Hash 0f2e7d37e730fdbb1d8a1e8638529ecb
c21d16978a858baa75be15cb7e799ff000929429
cc938c08b93e67c94c68995709f52133c62cac78991f42058503b9c3d9e4b0b0
GET /jquery-3.3.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://digitalalertoccu.zapto.org
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:25:05 GMT
content-encoding: gzip
content-length: 24038
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-1111d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1670876705.dop211.sk1.t,1670876705.cds215.sk1.hn,1670876705.cds230.sk1.c
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js
200 OK 4.5 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js
IP
Hash e40e054c5726f042bad463e3774a2777
5c9413b72837a440b327444104830c35ae3b052c
fcc8a86d2e89e8fbe9815d50c23bf205191ab8a6c0bec67358cd975d94283ff8
GET /ajax/libs/jquery.mask/1.14.10/jquery.mask.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:25:05 GMT
content-type: application/javascript; charset=utf-8
content-length: 4517
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-4e98"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4681820
expires: Sat, 02 Dec 2023 20:25:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dqAJ21BqWxYKmlqjdPPeJQc3IMR%2BfCToSZO3VELSqdTjH8qo2Lba9dgN%2F4LuvEvdw9xcMCGBVc%2FkyJIPMSh39if%2FGPZIwae4S065o32hl%2B8%2BF6K7rrNMMQ4LvsNDUKP0%2B8LSvLon"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77892ff3fdb41bfa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.2.1.min.js
200 OK 30 kB URL HTTP/2 code.jquery.com/jquery-3.2.1.min.js
IP
File type ASCII text, with very long lines (32058)
Hash 148f8d3ffd9cc02048c5f4d1cc83c407
9f2b89cfd151be6a29b4d43ad64d164fb8471046
4dc681da48ba2b417e613e8e027ff5322963c3a3697a8ba97973cfefb48def5e
GET /jquery-3.2.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:25:05 GMT
content-encoding: gzip
content-length: 30125
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15283"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1670876705.dop229.sk1.t,1670876705.cds212.sk1.hn,1670876705.cds222.sk1.c
X-Firefox-Spdy: h2
ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js
200 OK 30 kB URL HTTP/2 ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.min.js
IP
File type ASCII text, with very long lines (65451)
Hash a263be51483c81a54aa8c85104a93e55
555a54a73531c553bd2aede6abc25c128b63312e
b2f13ad730928958c09d89e6e32bb6a227c0260d032a39ca464d998a59e57a66
GET /ajax/jQuery/jquery-3.3.1.min.js HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 23878200
cache-control: public,max-age=31536000
content-type: application/javascript
date: Mon, 12 Dec 2022 20:25:05 GMT
etag: "80288516b793d31:0"
last-modified: Mon, 22 Jan 2018 19:27:49 GMT
server: ECAcc (ska/F7A8)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 30394
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash e89f8194617cdd764e607468473f0341
810ed618482a7e19323605930f20d84205cb6c9f
025866e838be169bcbf1d1be9d552c74af1486058bebf3e8777dbb7a79078b05
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5079
Cache-Control: max-age=129660
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 20:25:06 GMT
Etag: "6396d1c7-117"
Expires: Wed, 14 Dec 2022 08:26:06 GMT
Last-Modified: Mon, 12 Dec 2022 07:01:27 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/base.min.css
200 OK 2.2 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/base.min.css
IP
File type ASCII text, with very long lines (2205)
Hash 4865f8669fe9034f06986bd3eaa1916d
a08bd0342480700f5b66d7913d5a3486a7da908f
f555d3efaa4e368224cc19b0b261b00da4183e8a5247d3858e8ce7e2aa764558
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/base.min.css HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:05 GMT
Server: Apache
Last-Modified: Fri, 16 Sep 2022 16:33:00 GMT
Accept-Ranges: bytes
Content-Length: 2247
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/Icons/credit/union/wp-wamp/actions.js
200 OK 1.3 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/Icons/credit/union/wp-wamp/actions.js
IP
File type ASCII text, with CRLF line terminators
Hash aaea43c110ad74cc1496ecf44738c85a
403066147480810cec768d23782126ffec48fe44
61a2b914090cf829f22736d44449728701e193120e2d319760f84d80b4f572e2
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
fortinet Phishing
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/Icons/credit/union/wp-wamp/actions.js HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:05 GMT
Server: Apache
Last-Modified: Fri, 15 Jul 2022 13:39:22 GMT
Accept-Ranges: bytes
Content-Length: 1291
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris-components.shim.mobile.min.css
200 OK 910 B URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris-components.shim.mobile.min.css
IP
File type ASCII text, with very long lines (683)
Hash e4488cc03cafbf5ffdc928f63491f919
d92acb16054f42eb59fab140a4f58e1a3492c2c9
f376504e5abac9c1395180bfdaa54f973d26aac832e36a734545b4cb3f7439d0
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris-components.shim.mobile.min.css HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:06 GMT
Server: Apache
Last-Modified: Fri, 16 Sep 2022 16:33:14 GMT
Accept-Ranges: bytes
Content-Length: 910
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris-foundation.min-1.css
200 OK 51 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris-foundation.min-1.css
IP
File type ASCII text, with very long lines (50964)
Hash 0160c354e11f9e1f2ffcd720f880dc2e
7c3b5681a9483a0f37110476e04375e7e88d8fcc
037e5f8a4d2ef765d97f6c14e087cab4f8f27a1ac2a6a7584793b1a76a08fb8f
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris-foundation.min-1.css HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:06 GMT
Server: Apache
Last-Modified: Sat, 04 Jun 2022 02:04:48 GMT
Accept-Ranges: bytes
Content-Length: 51310
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/font-icons.css
200 OK 120 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/font-icons.css
IP
File type ASCII text, with CRLF line terminators
Size 120 kB (119546 bytes)
Hash 407e6529c64de984c9bc26f81192553b
38e3c8e41d349d8bad1f8e01cf5928037f6bc2d4
be1b47fc7efd8ff3ad1ee0099383c45e0f62fbcddf945c0ac8be50820bd72b4e
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/font-icons.css HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:05 GMT
Server: Apache
Last-Modified: Fri, 16 Sep 2022 16:32:26 GMT
Accept-Ranges: bytes
Content-Length: 119546
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris-foundation.min.css
200 OK 51 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris-foundation.min.css
IP
File type ASCII text, with very long lines (50964)
Hash 0160c354e11f9e1f2ffcd720f880dc2e
7c3b5681a9483a0f37110476e04375e7e88d8fcc
037e5f8a4d2ef765d97f6c14e087cab4f8f27a1ac2a6a7584793b1a76a08fb8f
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris-foundation.min.css HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:05 GMT
Server: Apache
Last-Modified: Fri, 16 Sep 2022 16:33:08 GMT
Accept-Ranges: bytes
Content-Length: 51310
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/isotope.min.css
200 OK 16 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/isotope.min.css
IP
File type ASCII text, with very long lines (5658)
Hash c28ad50f2f18adcd6b53fab2c4136552
485704871ec17f3c82792ddc3199691045bdf008
8cf002a4959c85627cdfeeee3a0a36f084708c22eae47e7160afb74a88d68b62
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/isotope.min.css HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:06 GMT
Server: Apache
Last-Modified: Sat, 17 Sep 2022 18:20:56 GMT
Accept-Ranges: bytes
Content-Length: 16023
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
200 OK 15 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (10672), with CRLF line terminators
Hash 1f38a72d0020d973eecfa92abb5b64a6
fb1e2c1a14f99604aadee406c0eb4deb163c62d5
16d2805a3e1bca5d389dc48c55315b8678d81d94e96d7b43efafa6cda25aad9c
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
openphish Generic/Spear Phishing
fortinet Phishing
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/ HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:05 GMT
Server: Apache
Last-Modified: Sat, 17 Sep 2022 18:22:36 GMT
Accept-Ranges: bytes
Content-Length: 79554
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris.android.min.css
200 OK 98 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris.android.min.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash be81b5e26048fc742fb16310834da4ad
03112d4ed94d9ee41cf5012c1f594fb4f8b5c1c8
65c12121b00f8425f4bd66383649d717e0b381b0336eaf39c732e6d5bb1109e5
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris.android.min.css HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:05 GMT
Server: Apache
Last-Modified: Fri, 16 Sep 2022 16:33:08 GMT
Accept-Ranges: bytes
Content-Length: 98295
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/css-1.css
200 OK 1.7 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/css-1.css
IP
Hash 32e4974617e5d1a5f08f4088e9b5b048
25d459fdcdae5b222e73d2786f88de31d6e5e4a6
f7c56e4d572269e52488b07255ae3d70aa9121b527d5443736217e58fd6a5c4b
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/css-1.css HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:06 GMT
Server: Apache
Last-Modified: Sat, 04 Jun 2022 02:04:48 GMT
Accept-Ranges: bytes
Content-Length: 1735
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/theme.mobile.min.css
200 OK 212 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/theme.mobile.min.css
IP
Size 212 kB (211768 bytes)
Hash 05b52b90bdfd78a7ea7087f9029a8e9f
beebb1470a4b7b32e396f3c6e1fc59d6e44e11cb
2f657bc51feb929bdde2eabbd8350b4ed62cf8e503dc209a84082c0bae348745
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/theme.mobile.min.css HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:05 GMT
Server: Apache
Last-Modified: Sat, 17 Sep 2022 18:21:06 GMT
Accept-Ranges: bytes
Content-Length: 211768
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/jquery-ui.min.css
200 OK 31 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/jquery-ui.min.css
IP
File type ASCII text, with very long lines (29538)
Hash 83669c9a6a9e11c7d63a0c404cc05d5e
8484d35ed76e6cd1533220632a5fc48c43871bcd
e1a457fcc3c6c0d23336df97c1e5594395410bbb67e79719498c53e3551c838f
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/jquery-ui.min.css HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:06 GMT
Server: Apache
Last-Modified: Fri, 16 Sep 2022 16:33:00 GMT
Accept-Ranges: bytes
Content-Length: 31343
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris.shim.mobile.min.css
200 OK 611 B URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris.shim.mobile.min.css
IP
File type ASCII text, with very long lines (557)
Hash 2b495c471e337eac5d280f5519c6fc53
285689d6b41833ced6b63a3f82892d2901d4039b
06dee56fb4e2677948bc2f6ce7e20e9900e3c7431843ae3d9c9d975ff03889a7
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris.shim.mobile.min.css HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:06 GMT
Server: Apache
Last-Modified: Fri, 16 Sep 2022 16:33:02 GMT
Accept-Ranges: bytes
Content-Length: 611
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris-components.min.css
200 OK 380 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris-components.min.css
IP
File type ASCII text, with very long lines (65310)
Size 380 kB (380349 bytes)
Hash f0200e75154d10a0f385a0a17e36d664
6ccc045c0b622fd50ac207a8b5a087f108f8852d
fc1df1daec8db2cdc3621595cac5ce66080a06dfaef20e7e581c0a8d03c202e8
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/iris-components.min.css HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:06 GMT
Server: Apache
Last-Modified: Fri, 16 Sep 2022 16:33:20 GMT
Accept-Ranges: bytes
Content-Length: 380349
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/app-store-badge.svg
200 OK 11 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/app-store-badge.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1356), with CRLF line terminators
Hash 1b65926236d951b2af57201b275f595b
1ce3e7bf2853a59f0fc9ad064e1fd48260da0f38
86c9954e1457d27db013c1f10a96ffaba845e5af7765c4ef9df4ac1549e47d67
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
fortinet Phishing
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/app-store-badge.svg HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:07 GMT
Server: Apache
Last-Modified: Fri, 16 Sep 2022 16:33:38 GMT
Accept-Ranges: bytes
Content-Length: 10850
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/google-play-badge.svg
200 OK 9.3 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/google-play-badge.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 5e01637f08de80e8c27c414687738968
2d4fe2500bb550dc45c048e78aa62356fb4cbc2c
2dcf765854f1fe869b1674016feb1638870c1066f156f8d7dfd47b53d0dc093f
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
fortinet Phishing
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/google-play-badge.svg HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:07 GMT
Server: Apache
Last-Modified: Fri, 16 Sep 2022 16:33:38 GMT
Accept-Ranges: bytes
Content-Length: 9332
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/Icons/credit/union/wp-wamp/loading.gif
200 OK 39 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/Icons/credit/union/wp-wamp/loading.gif
IP
File type GIF image data, version 89a, 200 x 200\012- data
Hash d10ef01e81faa2c2d812bdf670b4e072
77d09a57b2091fd7665dff763a5eab23e0ff907e
5e3d5246b17e19e65385092db07554d8e1c5c4a226a6d7f97824b8e1e8571e34
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/Icons/credit/union/wp-wamp/loading.gif HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:07 GMT
Server: Apache
Last-Modified: Sat, 11 Aug 2018 20:03:52 GMT
Accept-Ranges: bytes
Content-Length: 38636
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/gif
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/images_background-mobile1.png
200 OK 105 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/images_background-mobile1.png
IP
File type PNG image data, 422 x 422, 8-bit/color RGBA, non-interlaced\012- data
Size 105 kB (105119 bytes)
Hash bfbd05618f698b8d1c8032fafdf46e31
94fae3f420dd998fe4dede01b50c111bb05039eb
6d45248cdd2024e629fdfed7c46d681ad6c355e999f0bf9ee2b7e9aa1ae2b1ca
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/images_background-mobile1.png HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/isotope.min.css
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:07 GMT
Server: Apache
Last-Modified: Sat, 17 Sep 2022 18:19:16 GMT
Accept-Ranges: bytes
Content-Length: 105119
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
fortinet Phishing
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/css-1.css
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:07 GMT
Server: Apache
Last-Modified: Sat, 04 Jun 2022 02:04:50 GMT
Accept-Ranges: bytes
Content-Length: 15744
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: font/woff2
stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js
200 OK 30 kB URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (50395)
Hash 446791a0e09243a8d26240ec74437dd4
19ddd810609ee051ff435672206ea41d27098d1e
3a545e2104e09c09566f42bc9408410d6c370e2811aa72cd831c4dba51dbeab3
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://digitalalertoccu.zapto.org
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 12 Dec 2022 20:25:06 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/15/2022 10:39:35
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1054
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 82af7a18454b7b076387962756f711d0
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77892ff42cdb0b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7a3e13e78f90788c56a93f7ffd9be884
bb6e2205661434f2eb8964f59b8f0d950c11ba0d
48f33f6b844a6e9f9087e6ce54394c6af9ded4d02b4d9ba18a9fb711eb180b2c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48F33F6B844A6E9F9087E6CE54394C6AF9DED4D02B4D9BA18A9FB711EB180B2C"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16147
Expires: Tue, 13 Dec 2022 00:54:14 GMT
Date: Mon, 12 Dec 2022 20:25:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7a3e13e78f90788c56a93f7ffd9be884
bb6e2205661434f2eb8964f59b8f0d950c11ba0d
48f33f6b844a6e9f9087e6ce54394c6af9ded4d02b4d9ba18a9fb711eb180b2c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48F33F6B844A6E9F9087E6CE54394C6AF9DED4D02B4D9BA18A9FB711EB180B2C"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16147
Expires: Tue, 13 Dec 2022 00:54:14 GMT
Date: Mon, 12 Dec 2022 20:25:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7a3e13e78f90788c56a93f7ffd9be884
bb6e2205661434f2eb8964f59b8f0d950c11ba0d
48f33f6b844a6e9f9087e6ce54394c6af9ded4d02b4d9ba18a9fb711eb180b2c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48F33F6B844A6E9F9087E6CE54394C6AF9DED4D02B4D9BA18A9FB711EB180B2C"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16147
Expires: Tue, 13 Dec 2022 00:54:14 GMT
Date: Mon, 12 Dec 2022 20:25:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7a3e13e78f90788c56a93f7ffd9be884
bb6e2205661434f2eb8964f59b8f0d950c11ba0d
48f33f6b844a6e9f9087e6ce54394c6af9ded4d02b4d9ba18a9fb711eb180b2c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48F33F6B844A6E9F9087E6CE54394C6AF9DED4D02B4D9BA18A9FB711EB180B2C"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16147
Expires: Tue, 13 Dec 2022 00:54:14 GMT
Date: Mon, 12 Dec 2022 20:25:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7a3e13e78f90788c56a93f7ffd9be884
bb6e2205661434f2eb8964f59b8f0d950c11ba0d
48f33f6b844a6e9f9087e6ce54394c6af9ded4d02b4d9ba18a9fb711eb180b2c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48F33F6B844A6E9F9087E6CE54394C6AF9DED4D02B4D9BA18A9FB711EB180B2C"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16147
Expires: Tue, 13 Dec 2022 00:54:14 GMT
Date: Mon, 12 Dec 2022 20:25:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 38876d760ef06c8471468c474c1e28a7
d43cd03d5eb3e7618b6fb70c935010c2ac92ad32
a0747f29eb6084eef42d3c247594973b02c619c7ec56b6137e24b6d0362557a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4720
x-amzn-requestid: dd990fe1-8447-403e-b276-40889af5baa0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENuF6SoAMF7oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d8a-59b5a8f92ef6111e64e16079;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SBYH2ZqOyZx6tB8u3g3dkimaCUGSWAMQhULpYs4gWrmZ6i3_1Br_zQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:57:39 GMT
etag: "d43cd03d5eb3e7618b6fb70c935010c2ac92ad32"
content-type: image/jpeg
age: 80848
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc582b370-f952-4f63-9937-1de61f295c46.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc582b370-f952-4f63-9937-1de61f295c46.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24d5e5918cf53c569d6674e598228246
241a28d882355e06b0a2428c931f9d72dd5c6c53
2ebf30d1844d23a2b7516b900b1aa4473e5c042b0e0ecb2c39675d4b4bc7910e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc582b370-f952-4f63-9937-1de61f295c46.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5452
x-amzn-requestid: eb6aca44-e834-4123-b191-eb3f007bf7b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c6OCrGM-IAMFnxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393f6dd-71fee2de2dd69c7d1d4d32fe;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 03:02:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2dzTL44JHLjIbSIFDFPwmOcNMq9-lZF4YvsBimPz3YD1c4xQF2tUCA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 03:38:01 GMT
age: 60426
etag: "241a28d882355e06b0a2428c931f9d72dd5c6c53"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9051770b3587c195bea670f8820e8cfe
abf58087f0e345202da088238daea85d177b431b
f687a10c0ae63699a551977e9a4ec5bc7ba606b1925178d7ed4ec6728889bb2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8841
x-amzn-requestid: 09b64f8e-60c0-4cf6-a0dc-15e597bd9d85
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eMWH7MIAMFyow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa4e-3471ee5f5a78b55c424e2c6d;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KkltHSO_YnfExbgR5cg199uOPnKy62zoMPwFfktRCpu03ImoFNMAIw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 22:37:58 GMT
age: 78429
etag: "abf58087f0e345202da088238daea85d177b431b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49a0678c-8bda-434a-a337-63696994d79c.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49a0678c-8bda-434a-a337-63696994d79c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a22fc7807fb3337f0af5e546c7ad366a
0d5969394b370a5c77c53ed58f55e5f8a45da3ab
98b4f4fd27dc036697fb0328083bce6e691b7493428f3a54991087d9d1165d97
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49a0678c-8bda-434a-a337-63696994d79c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5530
x-amzn-requestid: adecbb8c-cec3-46a0-b32c-0026b8421fe5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4d8Fg6IAMF61g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903abf-4bcb385f27cb438c36a2cd5e;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: J2FSKW1AHhnyu2NBJDcqib3iVsOk745-dgnNgmk6T-QKcg-z5He7qw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 09:24:15 GMT
age: 39652
etag: "0d5969394b370a5c77c53ed58f55e5f8a45da3ab"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9f8d3e3c9e5d2ed74c3894b4825fcc2f
6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da
9e44f93e65206ae7095cf9177296f4f528f1c2597cffa4853b7d6dcabf032796
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5619
x-amzn-requestid: df7189d2-5cad-43a2-9511-20c5de53f710
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAEMPFCSIAMF4uA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d81-729683c606fd6abc5bc70534;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: kbfjvh64NjCUE-e-3z7W58vyJMisRwERUV_W99jn3vrErY4bF1SFsg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:58:39 GMT
etag: "6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da"
content-type: image/jpeg
age: 80788
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2020df3404a4b7c3e142af4a1330b848
2fe69b52fe03128e86550bf08474ecac82682384
37a52c158d5cfdf3589e19163cf446c02ce1466f444656080b02da82d2bcefae
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6311
x-amzn-requestid: 46ccaee0-bde8-4be6-9dc8-46e3ae356dc8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c8xUYH10oAMF8Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6394fc1b-2440251f06cb950a57489555;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 21:37:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bgmOsF49y9d_oDWjQxm7toxsydgt9HBKZunUbe-BZfSmdfJ7q0Jo3A==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:52:33 GMT
age: 81154
etag: "2fe69b52fe03128e86550bf08474ecac82682384"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/Alkami.woff2
200 OK 42 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/Alkami.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 41960, version 1.0\012- data
Hash 52cad9764bad2f9d90208c91a7c5e847
6179e764e760b16d8b8ac30b9251ce2311b83dd1
4e2bcd3f2e35e841bece706f0426cc746ac77cfd2148ea365ce05eebd5124a45
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
fortinet Phishing
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/Alkami.woff2 HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/font-icons.css
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:07 GMT
Server: Apache
Last-Modified: Sat, 04 Jun 2022 02:04:50 GMT
Accept-Ranges: bytes
Content-Length: 41960
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: font/woff2
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/android-chrome-192x192.png
200 OK 3.7 kB URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/android-chrome-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Hash db1a711261c13af69fb1918fbbd93c8a
826dcf4c95923b6169ee424cb49ce518c4dfdb43
ed7d88acdf8fdb0cf90ad53b87f885f185c9e4e04bc884c02160475fb482fa02
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/android-chrome-192x192.png HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:07 GMT
Server: Apache
Last-Modified: Sat, 04 Jun 2022 02:04:48 GMT
Accept-Ranges: bytes
Content-Length: 3667
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
assets.orb.alkamitech.com/production/themesets/7f1e1367-078e-4086-a5ec-2da2fa40c883/themes/theme-builder/occu/assets/images/brand-logo-tall.png
200 OK 9.8 kB URL HTTP/2 assets.orb.alkamitech.com/production/themesets/7f1e1367-078e-4086-a5ec-2da2fa40c883/themes/theme-builder/occu/assets/images/brand-logo-tall.png
IP
File type PNG image data, 334 x 194, 8-bit/color RGBA, non-interlaced\012- data
Hash 2f2bbed072ea5a7046943bda28263c15
e62a0495d17e430ade8eeff6d2c24b5f20e0fcfe
f81f41153e652357be3459d5a1380fb92d96ec642ad6badb75c8199c56c8076c
GET /production/themesets/7f1e1367-078e-4086-a5ec-2da2fa40c883/themes/theme-builder/occu/assets/images/brand-logo-tall.png HTTP/1.1
Host: assets.orb.alkamitech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 9805
x-amz-replication-status: COMPLETED
last-modified: Mon, 19 Sep 2022 21:45:40 GMT
x-amz-server-side-encryption: AES256
content-disposition: form-data; name="images/brand-logo-tall.png"; filename="images/brand-logo-tall.png"; filename*=utf-8''images%2Fbrand-logo-tall.png
x-amz-version-id: OsD3qgVXLy64fRbumI4VOY5rjdLmvQDs
accept-ranges: bytes
server: AmazonS3
date: Mon, 12 Dec 2022 20:25:08 GMT
etag: "2f2bbed072ea5a7046943bda28263c15"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LzIwll2nMAMxGfI-ptA3fJNTIqL0x9hj7bDrjptABvRspgGr8K-8YA==
X-Firefox-Spdy: h2
digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/favicon-16x16.png
200 OK 620 B URL HTTP/1.1 digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/favicon-16x16.png
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 027a723b460304011314796b3357ef68
bb12548ae965cf1eff94c8069b99cffefd991b3d
c374505c75780e104d872cdc58c3d3c4dc802ea39bac58b0bc04abf9ee2dcf1d
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
GET /verify/on.myoccu.org%20(1)/on.myoccu.org/App/cloud/etc/cgi/favicon-16x16.png HTTP/1.1
Host: digitalalertoccu.zapto.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digitalalertoccu.zapto.org/verify/on.myoccu.org%20(1)/on.myoccu.org/
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 20:25:07 GMT
Server: Apache
Last-Modified: Sat, 04 Jun 2022 02:04:48 GMT
Accept-Ranges: bytes
Content-Length: 620
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
34.212.176.202
93.184.220.29
104.17.25.14
95.101.11.115