Report - ayubrugs.com/UltraBranch/efs/servlet/efs/login-image-password.php

Report Overview

Submitted URL
ayubrugs.com/UltraBranch/efs/servlet/efs/login-image-password.php
IP
192.185.129.60
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2022-09-16 15:36:57
Access
public
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-17T05:10:36Z	594 B	127 B	52.41.252.32
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-17T05:09:15Z	3.7 kB	83 kB	34.120.237.76
ayubrugs.com	unknown	2016-04-02T17:01:01Z	2023-03-11T19:45:47Z	384 B	3.7 kB	192.185.129.60
ultrabranch3.alaskausa.org	254468	2017-02-06T19:45:00Z	2023-02-20T14:09:17Z	4.2 kB	58 kB	107.162.174.74
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-17T05:09:04Z	758 B	2.7 kB	143.204.55.35
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-17T05:09:02Z	1.6 kB	4.4 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-17T05:10:36Z	401 B	5.8 kB	143.204.55.110
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-17T10:42:19Z	2.3 kB	4.7 kB	93.184.220.29
www.alaskausa.org	258465	2014-07-12T21:45:14Z	2023-03-11T07:04:56Z	749 B	2.8 kB	107.162.171.161
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-17T05:10:35Z	321 B	229 B	34.117.237.239

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-09-13	medium	ayubrugs.com/UltraBranch/efs/servlet/efs/login-image-password.php	Alaska USA Federal Credit Union

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-16	medium	ayubrugs.com/UltraBranch/efs/servlet/efs/login-image-password.php	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	ultrabranch3.alaskausa.org/efs/efs/jslibrary/common_functions.js	8.1 kB	2023-03-07	2023-03-17
Pretty URL ultrabranch3.alaskausa.org/efs/efs/jslibrary/common_functions.js IP 107.162.174.74 ASN #55002 DEFENSE-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:22:13 Last Seen2023-03-17 12:51:59 Times Seen1 Hash fd2b12e2bb379a09e13ca106c986442d 8a8ac9bd569d22426398cc416d001e83a10e531d 990e387806872b7606ecf7211145356f5b6321fe6ff53e4ad3301b0373b1ceaa Loading...

	ayubrugs.com/UltraBranch/efs/servlet/efs/login-image-password.php	492 B	2023-03-07	2023-03-17
Pretty URL ayubrugs.com/UltraBranch/efs/servlet/efs/login-image-password.php IP 192.185.129.60 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:22:13 Last Seen2023-03-17 12:51:59 Times Seen1 Hash 44a7461485da5ece3afc9cbb1a3c4ef9 6a8f296302c8e56c30c3f37a04f23807258b9601 1115945fc37c5d09d4c477902b5135958af20859f613f57d59dbe8d76a3c619b Loading...

HTTP Transactions (37)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

143.204.55.35

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 16 Sep 2022 15:10:50 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: F03Lsh9ZFOujeUdAI2B7ZUAzcIZdxpZDRioClAAcqL1ZAmWWMGNQoQ==
Age: 1556

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b0d651d83075c7a68e3c6a9204226150
294785e3f3a67cdd5f1a530b83a2cbd2c2cc0665
17cbb43fd6662576ba3fe8e06cf44247c903c1313cc419053599c41e286a2442

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17CBB43FD6662576BA3FE8E06CF44247C903C1313CC419053599C41E286A2442"
Last-Modified: Thu, 15 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14370
Expires: Fri, 16 Sep 2022 19:36:16 GMT
Date: Fri, 16 Sep 2022 15:36:46 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain

143.204.55.110

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
143.204.55.110:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 16 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BlAfoakN7O1_yD2xyJdZSnWXpG4VaAZDrOiSKTAzB-HYkDeWH9jOfw==
age: 39691
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 16 Sep 2022 15:36:46 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.35

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 16 Sep 2022 15:03:22 GMT
Cache-Control: max-age=3600
Expires: Fri, 16 Sep 2022 15:21:09 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: uK6K1a9q7piBPlRrLStzeNgPixehSIwm3j0QprdbXvRBA95cmocehw==
Age: 2005

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
3db421016cf0e3ad25f324cf0faf0fac
b15909de1105d4d2fb5be5b3920c454daf022445
914b15f28636e0a5e851540ffb0625ecd09d0546b2f1f7af90b267ceebcf1d5d

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3173
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 15:36:47 GMT
Last-Modified: Fri, 16 Sep 2022 14:43:54 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

52.41.252.32

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.41.252.32:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: akffc19r75iOIx5fQxANHA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: mVtvXoWy/LhN+VcsFnj2WuwQCMc=

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17100
Expires: Fri, 16 Sep 2022 20:21:48 GMT
Date: Fri, 16 Sep 2022 15:36:48 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17100
Expires: Fri, 16 Sep 2022 20:21:48 GMT
Date: Fri, 16 Sep 2022 15:36:48 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17100
Expires: Fri, 16 Sep 2022 20:21:48 GMT
Date: Fri, 16 Sep 2022 15:36:48 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17100
Expires: Fri, 16 Sep 2022 20:21:48 GMT
Date: Fri, 16 Sep 2022 15:36:48 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45619ede-b86e-4373-9398-fec60bb9e862.jpeg

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45619ede-b86e-4373-9398-fec60bb9e862.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12123 bytes)
Hash
f876cdc19dca10c62d83d19303512c7f
9f812c7bc1b42b0cea3e42694e7d1f6738789770
c647aac44ba9eb501eb7def781ca0168b4eb71a716283cc6f4e6782939a396cc

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45619ede-b86e-4373-9398-fec60bb9e862.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12123
x-amzn-requestid: 2beedee9-cf7e-47d6-ac4d-3ca9251aa565
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfSWEFAZoAMFd6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322ca8d-37688e4a23c3234a25becf57;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 06:47:41 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: H2ySDtSQZtsrCA99y1a2_fLQcRI8hvN_nvA9U_V_iCm6c3cq3DigXQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 22:11:59 GMT
age: 62689
etag: "9f812c7bc1b42b0cea3e42694e7d1f6738789770"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee084149-a07d-4141-a484-d9f352209914.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.9 kB (9904 bytes)
Hash
e6d17788c7d2a1a91e68eff48df14bd1
8e1090346d90bc69e7a95384e6a7a01154e31567
1e1eefa02e4c55e73be87a309ad5c2335856125cb678cff6ebc42c5ff73a0e2b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee084149-a07d-4141-a484-d9f352209914.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9904
x-amzn-requestid: a23cb4b3-db6e-48ae-90b1-3ecf6478bf52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YhVDpH_CIAMFl4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63239bb0-15869210609a18587467d1e2;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 21:40:00 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: RbKcO0CPRsex8VWdIVqctamGyJ7D1PHD04ry2wbrcDPDYL0Yy5vPPQ==
via: 1.1 1002c05e647d0804e83147cdd205d14a.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 21:50:35 GMT
etag: "8e1090346d90bc69e7a95384e6a7a01154e31567"
content-type: image/jpeg
age: 63973
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed934f67-48ba-4d22-a8f8-4f5f7a10a9f9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12425 bytes)
Hash
da1bd18c37b83b0ef4641036dc208eec
abb5c719ec9341c6d4146297a2a1eca171df9c81
0085a66912a814c619a1257545d36610c7109ba32f1b097176102d3d3db2c8d0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed934f67-48ba-4d22-a8f8-4f5f7a10a9f9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12425
x-amzn-requestid: 96b5f0d2-1327-4180-9d48-f915630c3de2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YhVDqHyooAMFqyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63239bb0-7d89d2d7024f6a821a62c948;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 21:40:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 1Y5uBMPJvxTDKGnc5Q0lzKZXDv4lwTByGDO8eRIwgauut0yfJz-8Lg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 21:50:35 GMT
age: 63973
etag: "abb5c719ec9341c6d4146297a2a1eca171df9c81"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be0dbac-eae3-494b-bc73-d4df7f6c2f33.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8864 bytes)
Hash
69c9db5022c0c66909867f1e0946f5a8
9825e0fc606dc983280a6cd05803bb07e3435ef6
f2809509eee24ed69e6003ac9263423ea949bcc9205969c6cdd476e89ede9b01

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be0dbac-eae3-494b-bc73-d4df7f6c2f33.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8864
x-amzn-requestid: 6e1a82d1-e35e-4d77-be31-6969a13918da
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YhU_6GiXoAMFaLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63239b98-46ca0525157031324749ee5b;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 21:39:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: sZDehRAgImuoJtVDIS6Mgz2871fOYrT0H7cx0QucG6mDuE1NmrW5Hw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 21:50:59 GMT
age: 63949
etag: "9825e0fc606dc983280a6cd05803bb07e3435ef6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a73e855-9877-4793-b59a-30b8e5a96117.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.4 kB (8435 bytes)
Hash
b7d4ee58e0f26ec6817dbab72aa7db6d
b6e634ef27eba9da38c6472565e0fdca6898e4f0
07db05a6ee70a699164ad55da47bfca58e6639956e256d902cbe0388cd7995c6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a73e855-9877-4793-b59a-30b8e5a96117.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8435
x-amzn-requestid: f6efd924-4f54-41a6-8771-087803b5b8ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YhU0-EJaoAMFvtQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63239b52-37c21ee857fe27d104b70337;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 21:38:26 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rgjwYJ-ZzVF3bv7pl1l8TN8EAoENIcaSAXJU_YhFOSNRCzrCuPuKbQ==
via: 1.1 773ca14e6bd4bf9244988cb69fc9dca8.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 21:44:10 GMT
age: 64358
etag: "b6e634ef27eba9da38c6472565e0fdca6898e4f0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F855bc857-3105-4de6-b3a8-0eb895422ea5.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (13536 bytes)
Hash
512280055633fcce9abc7d11a9816a24
de5c3e010fca76659455a144875a52c25fa72bdd
435eadb36830928b20d4cf8ead62134b75bd0ed3228489d9fdee66450bcbeaed

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F855bc857-3105-4de6-b3a8-0eb895422ea5.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13536
x-amzn-requestid: 5533b257-1558-472b-aeb9-8207a78e1110
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YhVDzFa4IAMF9Rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63239bb1-05d0dfde7a488ed97d2a40d5;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 21:40:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: JAzbRqinDuqQuQoESEsL26c1Y1UTQ5tO1thL3ugE6LPQtNTWGaGTLg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 21:48:32 GMT
age: 64096
etag: "de5c3e010fca76659455a144875a52c25fa72bdd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

ayubrugs.com/UltraBranch/efs/servlet/efs/login-image-password.php

192.185.129.60

200 OK

3.4 kB

URL HTTP/1.1
ayubrugs.com/UltraBranch/efs/servlet/efs/login-image-password.php
IP
192.185.129.60:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (325), with CRLF line terminators
Size
3.4 kB (3405 bytes)
Hash
8e2a04f1f2b33bcf8849a8e5ba163659
b318abad0316c123a437ec20e3bea90156530d03
a6c21acbcbebb11d3ad77b35a4a675e0763a10c3ebf8e245ad2e8165e230dae6

Detections

Analyzer	Verdict	Alert
openphish	Alaska USA Federal Credit Union
fortinet	Phishing

HTTP Headers

GET /UltraBranch/efs/servlet/efs/login-image-password.php HTTP/1.1
Host: ayubrugs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 15:36:47 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3405
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
d8e11cb5d206e771be7a217ecb8bd58b
7adc382ab922d4dae39867d6bdcc5bc12a629b2c
71ae5b66bd59548c2e996a3f5e9446b9e7b6b34697c73590c6bfd50bbf89c7f7

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 15:36:50 GMT
Server: ECS (amb/6B94)
Content-Length: 471

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
d8e11cb5d206e771be7a217ecb8bd58b
7adc382ab922d4dae39867d6bdcc5bc12a629b2c
71ae5b66bd59548c2e996a3f5e9446b9e7b6b34697c73590c6bfd50bbf89c7f7

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=98292
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 15:36:50 GMT
Etag: "63237506-1d7"
Expires: Sat, 17 Sep 2022 18:55:02 GMT
Last-Modified: Thu, 15 Sep 2022 18:55:02 GMT
Server: nginx
Content-Length: 471

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
d8e11cb5d206e771be7a217ecb8bd58b
7adc382ab922d4dae39867d6bdcc5bc12a629b2c
71ae5b66bd59548c2e996a3f5e9446b9e7b6b34697c73590c6bfd50bbf89c7f7

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 15:36:50 GMT
Server: ECS (amb/6B8D)
Content-Length: 471

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
d8e11cb5d206e771be7a217ecb8bd58b
7adc382ab922d4dae39867d6bdcc5bc12a629b2c
71ae5b66bd59548c2e996a3f5e9446b9e7b6b34697c73590c6bfd50bbf89c7f7

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 15:36:50 GMT
Server: ECS (amb/6B97)
Content-Length: 471

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
d8e11cb5d206e771be7a217ecb8bd58b
7adc382ab922d4dae39867d6bdcc5bc12a629b2c
71ae5b66bd59548c2e996a3f5e9446b9e7b6b34697c73590c6bfd50bbf89c7f7

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 15:36:50 GMT
Server: ECS (amb/6B9F)
Content-Length: 471

ultrabranch3.alaskausa.org/efs/efs/jsp/inc/css/ub-main.css?akusa_rev=4661

107.162.174.74

200 OK

7.2 kB

URL HTTP/1.1
ultrabranch3.alaskausa.org/efs/efs/jsp/inc/css/ub-main.css?akusa_rev=4661
IP
107.162.174.74:0
ASN
#55002 DEFENSE-NET

File type
ASCII text, with CRLF line terminators
Size
7.2 kB (7192 bytes)
Hash
19eceda6930592e7f1f8773bdadae951
e79c664e4b2f669b4a5d83cebbc2286b050707c7
e9935ce838caa2ce5acc2a4c2fa73f36e2007884b6266003af9ac3816a7e2c0c

HTTP Headers

GET /efs/efs/jsp/inc/css/ub-main.css?akusa_rev=4661 HTTP/1.1
Host: ultrabranch3.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 15:36:50 GMT
Last-Modified: Thu, 18 Aug 2022 06:31:54 GMT
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Content-Type: text/css
Content-Language: en-US
Via: 1.1 dca1-bit12012
Set-Cookie: TS011951d5=01b296345211da03b297eb8c940a2f637f531c1f4c4843be0d1e0856c58c3794ef3aede51b6cc01ec7aae411bd00848baf82451c7e; Path=/; Domain=.ultrabranch3.alaskausa.org
TS01fdcc5d=013641569ded5199a3ea8e999fb9294bb4ee8b4483607c5753a770529ea90a46023d160dcaad454cef781d55af30976a61776c307b; Path=/; Secure; HTTPOnly
TS012d93e9=013641569dd550b742268c08d2ea63a9bea29914c1607c5753a770529ea90a46023d160dca92607318e16bce0b74bf9e269cf6de99f2e60d71f3c87f038823e587772eed94; path=/; domain=.ultrabranch3.alaskausa.org; HTTPonly; Secure
Content-Encoding: gzip
Transfer-Encoding: chunked

ultrabranch3.alaskausa.org/efs/efs/jslibrary/common_functions.js

107.162.174.74

200 OK

2.3 kB

URL HTTP/1.1
ultrabranch3.alaskausa.org/efs/efs/jslibrary/common_functions.js
IP
107.162.174.74:0
ASN
#55002 DEFENSE-NET

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
2.3 kB (2278 bytes)
Hash
7623ce628549faaf1568510b289fa910
73a7b41ab8e81a8df99c1986d40c47d4f8f4ce64
cd09041e2f58c65d21e6bb6ac507c1848fd107d54faa9be34a0c2301de834d4f

HTTP Headers

GET /efs/efs/jslibrary/common_functions.js HTTP/1.1
Host: ultrabranch3.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 15:36:49 GMT
Last-Modified: Thu, 18 Aug 2022 06:31:54 GMT
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
X-Permitted-Cross-Domain-Policies: none
Age: 58346
Content-Length: 2278
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Content-Type: application/x-javascript
Via: 1.1 dca1-bit12012
Set-Cookie: TS011951d5=01b29634523511f6d57bad03344e02aac88cbde19d2dff7d4582b136ea9a62bd87438b2ce947bfd73f9a8b30cd455dd93e285bb69f; Path=/; Domain=.ultrabranch3.alaskausa.org
TS01fdcc5d=013641569da6fec8479ee5a36e62033b113a45cd845a86ad43875e06e3358bf9d45efab32c44eb59acd3fc8c0396dada09d213bb3d; Path=/; Secure; HTTPOnly
TS012d93e9=013641569d9433adaf59dce4189b05a6999f2c46465a86ad43875e06e3358bf9d45efab32c8fd61693d662d966f8e8528445b1f6d012f30b448f7f2ab7de82b311fb51b5d6; path=/; domain=.ultrabranch3.alaskausa.org; HTTPonly; Secure
Content-Encoding: gzip

ultrabranch3.alaskausa.org/efs/efs/jsp/inc/css/ub-login-new.css?akusa_rev=4661

107.162.174.74

200 OK

3.4 kB

URL HTTP/1.1
ultrabranch3.alaskausa.org/efs/efs/jsp/inc/css/ub-login-new.css?akusa_rev=4661
IP
107.162.174.74:0
ASN
#55002 DEFENSE-NET

File type
ASCII text, with CRLF line terminators
Size
3.4 kB (3363 bytes)
Hash
63c461dcc0caf3dd22dff06f67215aca
cfe213e674f5fd6c18ba2f37d19aefe112137f59
83dbd920a71630f1d328413f49284ae6b171beb2327e7c4c697173ded6012d76

HTTP Headers

GET /efs/efs/jsp/inc/css/ub-login-new.css?akusa_rev=4661 HTTP/1.1
Host: ultrabranch3.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 15:36:50 GMT
Last-Modified: Thu, 18 Aug 2022 06:31:54 GMT
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Content-Type: text/css
Content-Language: en-US
Via: 1.1 dca1-bit12012
Set-Cookie: TS011951d5=01b29634520f89a91a4cd4acd4711a4eae2fed939d30a750c848359df5019f550c90f816b4430adad71af35537f436a7529469e38d; Path=/; Domain=.ultrabranch3.alaskausa.org
TS01fdcc5d=013641569d18c3c0c086d69980d740cc9b5ee78c5a2ba172295198dc38d061466542b2dac94bcc281a18662d08e90b1cbcf417e20b; Path=/; Secure; HTTPOnly
TS012d93e9=013641569d357f03618830fc465bd3ad6a7bc4b8732ba172295198dc38d061466542b2dac93a27b1d905bb18af8fece9bdae0a53891b5a4d9ce7a42ac14ce49642a3f07c10; path=/; domain=.ultrabranch3.alaskausa.org; HTTPonly; Secure
Content-Encoding: gzip
Transfer-Encoding: chunked

ultrabranch3.alaskausa.org/efs/efs/grafx/akusa/security/pacReset.jpg

107.162.174.74

200 OK

2.5 kB

URL HTTP/1.1
ultrabranch3.alaskausa.org/efs/efs/grafx/akusa/security/pacReset.jpg
IP
107.162.174.74:0
ASN
#55002 DEFENSE-NET

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 388x266, components 3\012- data
Size
2.5 kB (2464 bytes)
Hash
53b280f41b8c119f46b24ed2b2db98a8
83b362f4e58f124564679bfc529070b020ff83c6
82e3cfab52c59b63548ca6ccf28262d0f295d81d4670392c277eda5485176378

HTTP Headers

GET /efs/efs/grafx/akusa/security/pacReset.jpg HTTP/1.1
Host: ultrabranch3.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 15:36:49 GMT
Last-Modified: Thu, 18 Aug 2022 06:31:52 GMT
Content-Length: 2464
Strict-Transport-Security: max-age=31536000
X-Permitted-Cross-Domain-Policies: none
Age: 83200
Keep-Alive: timeout=10, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
Via: 1.1 dca1-bit12012
Set-Cookie: TS011951d5=01b296345261b17ad8a8b2bd19e3f3a916a4badc2104b4ca40030f4c4e956250b0cbe23c7458eafa014574138ff95cf0f9e3f8ce9d; Path=/; Domain=.ultrabranch3.alaskausa.org
TS01fdcc5d=013641569d2ee0e63f0b6b274cbac5941e8081656a63bebdbab3f36458b0346e45dc597da665e1dce863532eb7c7999485046d4c39; Path=/; Secure; HTTPOnly
TS012d93e9=013641569d3b2cc8a6d572685974566ff97535f8d163bebdbab3f36458b0346e45dc597da6ebeba9789f18685a2f232650dd845aa564544ee8e4fd9c64838313fe28d000f5; path=/; domain=.ultrabranch3.alaskausa.org; HTTPonly; Secure

ultrabranch3.alaskausa.org/efs/efs/jsp/inc/css/ub-print.css?akusa_rev=4661

107.162.174.74

200 OK

1.9 kB

URL HTTP/1.1
ultrabranch3.alaskausa.org/efs/efs/jsp/inc/css/ub-print.css?akusa_rev=4661
IP
107.162.174.74:0
ASN
#55002 DEFENSE-NET

File type
ASCII text, with CRLF line terminators
Size
1.9 kB (1908 bytes)
Hash
7748722dbd1e80820baaed58b0ee9a1f
3ade3114c3b63668073f37afbfb6acbc7d8b6629
981837b7b5dd6f0c3151cc1924428ffb80c8cf891c54d3e2da8f4e2811b749ee

HTTP Headers

GET /efs/efs/jsp/inc/css/ub-print.css?akusa_rev=4661 HTTP/1.1
Host: ultrabranch3.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 15:36:51 GMT
Last-Modified: Thu, 18 Aug 2022 06:31:54 GMT
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=10, max=99
Connection: Keep-Alive
Content-Type: text/css
Content-Language: en-US
Via: 1.1 dca1-bit12012
Set-Cookie: TS011951d5=01b2963452d64914eb54655682dfd625e5c9dfbedbc3c01076e1c8be8b2ff70db9e037afe2fec1089040bc70892ccac119372b1601; Path=/; Domain=.ultrabranch3.alaskausa.org
TS01fdcc5d=013641569da7e78800fa1a3508b3d667c9dcb8086b168c3af5c73e5cc8549d49ca70a0fec6ea0b6dd2a2ed0c5ca41d516830765582; Path=/; Secure; HTTPOnly
TS012d93e9=013641569df42660cd0117ff8543cab09e788efd94168c3af5c73e5cc8549d49ca70a0fec62e04d82406785c9191e449834655cebb2c69b548eb3f846757ba0c5fe6285697; path=/; domain=.ultrabranch3.alaskausa.org; HTTPonly; Secure
Content-Encoding: gzip
Transfer-Encoding: chunked

ultrabranch3.alaskausa.org/efs/efs/grafx/akusa/header_bg.png?

107.162.174.74

200 OK

8.1 kB

URL HTTP/1.1
ultrabranch3.alaskausa.org/efs/efs/grafx/akusa/header_bg.png?
IP
107.162.174.74:0
ASN
#55002 DEFENSE-NET

File type
PNG image data, 156 x 165, 8-bit/color RGB, non-interlaced\012- data
Size
8.1 kB (8091 bytes)
Hash
bdc8e01e0423c553f945e6d1854050bb
da9abffde18c0c0b5bb6e5d2b78add98a94fded3
e62b1e11ed7136a619aec0a27a878b11a36c9a6616bc22daa0bc12800ed2d21b

HTTP Headers

GET /efs/efs/grafx/akusa/header_bg.png? HTTP/1.1
Host: ultrabranch3.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ultrabranch3.alaskausa.org/efs/efs/jsp/inc/css/ub-login-new.css?akusa_rev=4661
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 15:36:51 GMT
Last-Modified: Thu, 18 Aug 2022 06:23:36 GMT
Content-Length: 8091
Strict-Transport-Security: max-age=31536000
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=10, max=99
Connection: Keep-Alive
Content-Type: text/plain
Content-Language: en-US
Via: 1.1 dca1-bit12012
Set-Cookie: TS011951d5=01b2963452a124741ddf5f24d2bcbca8aaa9a35e07ae1c31bd5a357b7618d15b9b032d0a935f83764b09ba86254f646f983a2ac22d; Path=/; Domain=.ultrabranch3.alaskausa.org
TS01fdcc5d=013641569df4bd932248ba0bb5a93cd4fd1cf0a71d9d6b432d44faebf62b336934bb6b2e9b3906aee1b919cc51d2e3ea92c62345af; Path=/; Secure; HTTPOnly
TS012d93e9=013641569daf8c2c62cd4002d379435f09820516b39d6b432d44faebf62b336934bb6b2e9b0e49374a24d14add73f0fd5fe3bc30d7038e2cc1a119c477d9829b92367bc203; path=/; domain=.ultrabranch3.alaskausa.org; HTTPonly; Secure
Vary: Accept-Encoding
Content-Encoding: gzip

ultrabranch3.alaskausa.org/efs/efs/grafx/akusa/logo-ehl-tri.gif?

107.162.174.74

200 OK

2.4 kB

URL HTTP/1.1
ultrabranch3.alaskausa.org/efs/efs/grafx/akusa/logo-ehl-tri.gif?
IP
107.162.174.74:0
ASN
#55002 DEFENSE-NET

File type
GIF image data, version 89a, 55 x 59\012- data
Size
2.4 kB (2358 bytes)
Hash
2c136121aa9efffe9682256a458b457b
6f1ade815115736ec25eda1e0f014c26fb49feab
e9d50b964802b2bb60004481eb67394bd994ba4c6f8a67e3ded7574ef58fcfc2

HTTP Headers

GET /efs/efs/grafx/akusa/logo-ehl-tri.gif? HTTP/1.1
Host: ultrabranch3.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 15:36:51 GMT
Last-Modified: Thu, 18 Aug 2022 06:23:36 GMT
Content-Length: 2358
Strict-Transport-Security: max-age=31536000
X-Permitted-Cross-Domain-Policies: none
Age: 55318
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Content-Type: image/gif
Via: 1.1 dca1-bit12012
Set-Cookie: TS011951d5=01b2963452cda3458fd050b4a50347bb9301465b81fed9dc64d33350c6cdd7bd54f74c352dccb3d1201ce7a2d2db49dab22debb5d1; Path=/; Domain=.ultrabranch3.alaskausa.org
TS01fdcc5d=013641569dbe46f134c2a1d1976218f903b78778a48a315cfca79306eaf81816ebf53359d94f1ed8dbdf81054e309f5a9b1e48adc9; Path=/; Secure; HTTPOnly
TS012d93e9=013641569d451b2af7d3be5e5f25abe96204a591388a315cfca79306eaf81816ebf53359d919db8ad9e10c178030c5a0e34a41f2fea74513ee5586f096eb45984605b73411; path=/; domain=.ultrabranch3.alaskausa.org; HTTPonly; Secure

ultrabranch3.alaskausa.org/efs/efs/grafx/akusa/logo-ncua.gif?

107.162.174.74

200 OK

4.3 kB

URL HTTP/1.1
ultrabranch3.alaskausa.org/efs/efs/grafx/akusa/logo-ncua.gif?
IP
107.162.174.74:0
ASN
#55002 DEFENSE-NET

File type
GIF image data, version 89a, 146 x 65\012- data
Size
4.3 kB (4343 bytes)
Hash
2ca0ba5ea841459fd986e4a53937d29d
bd506ddc4195c82376d99badb2374cb929bc0bf6
dcfdce79105743aeda2d194642ba6c291664dd193002cf0e761762896af7ac08

HTTP Headers

GET /efs/efs/grafx/akusa/logo-ncua.gif? HTTP/1.1
Host: ultrabranch3.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 15:36:50 GMT
Last-Modified: Thu, 18 Aug 2022 06:31:52 GMT
Content-Length: 4343
Strict-Transport-Security: max-age=31536000
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Content-Type: image/gif
Content-Language: en-US
Via: 1.1 dca1-bit12012
Set-Cookie: TS011951d5=01b2963452da2344c02c068cf4699c58333ab0025b69c03d6175e6f03ac2233626e1573f183c18c536f1b0ed6a8fed11ff820e8b43; Path=/; Domain=.ultrabranch3.alaskausa.org
TS01fdcc5d=013641569d572b1ebc7fda26d7a760b78b8c4181d63819faab6199214180e582bf2b8700d2a36f6a3d0ea09394eb0c7fae2ad86459; Path=/; Secure; HTTPOnly
TS012d93e9=013641569da1fe5ef45aafeda399b58899f7a7c7943819faab6199214180e582bf2b8700d2b7651446a249578389f78e31a7fc7ac64016669e95b4c77575fa00a297fba3c2; path=/; domain=.ultrabranch3.alaskausa.org; HTTPonly; Secure

ultrabranch3.alaskausa.org/efs/efs/grafx/akusa/akusafcu_logo.png

107.162.174.74

200 OK

17 kB

URL HTTP/1.1
ultrabranch3.alaskausa.org/efs/efs/grafx/akusa/akusafcu_logo.png
IP
107.162.174.74:0
ASN
#55002 DEFENSE-NET

File type
PNG image data, 220 x 70, 8-bit/color RGBA, non-interlaced\012- data
Size
17 kB (16729 bytes)
Hash
c90695639e39ca6e81811d02dd4ad2f7
5946e11e69ccc6276719dc03a4613bdd7bdd71d1
0dcab8991b915bcb5678fc1d070537e34e6b856b2ba78306d02cdb5c160443b6

HTTP Headers

GET /efs/efs/grafx/akusa/akusafcu_logo.png HTTP/1.1
Host: ultrabranch3.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 15:36:51 GMT
Last-Modified: Thu, 18 Aug 2022 06:31:52 GMT
Content-Length: 16729
Strict-Transport-Security: max-age=31536000
X-Permitted-Cross-Domain-Policies: none
Age: 1981
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Content-Type: text/plain
Via: 1.1 dca1-bit12012
Set-Cookie: TS011951d5=01b29634524b013e90e0001e2ecba22526ef7ea981f1fc502ec952bfe5c94b8bb2dd1b41d9249b16093db55a8f5c80f512a2df93c9; Path=/; Domain=.ultrabranch3.alaskausa.org
TS01fdcc5d=013641569d82548ca6e2e07d9986c53c4a7d9bc5fbb419ee8eaf87907732c156f6493145e922acb1091883a6b9ebb9a4650c83eb1a; Path=/; Secure; HTTPOnly
TS012d93e9=013641569d0d99a0cac962bf5455327c7e2f6fd84bb419ee8eaf87907732c156f6493145e942a39d17b72df1aa6c592eee9a8325590fd72a36963b0b8caf62938a9056d0b1; path=/; domain=.ultrabranch3.alaskausa.org; HTTPonly; Secure
Vary: Accept-Encoding
Content-Encoding: gzip

ultrabranch3.alaskausa.org/efs/images/bullet-right.png

107.162.174.74

200 OK

154 B

URL HTTP/1.1
ultrabranch3.alaskausa.org/efs/images/bullet-right.png
IP
107.162.174.74:0
ASN
#55002 DEFENSE-NET

File type
PNG image data, 9 x 9, 8-bit/color RGBA, non-interlaced\012- data
Size
154 B (154 bytes)
Hash
b60ffffc18c8ff7582280333e3ed56b9
222e51e1ba4a74742880ef49130362509ce2ad53
70a46f91c5948576ac320802ed148ed967757b8391f9b3e958c2dcbe1f333d14

HTTP Headers

GET /efs/images/bullet-right.png HTTP/1.1
Host: ultrabranch3.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ultrabranch3.alaskausa.org/efs/efs/jsp/inc/css/ub-login-new.css?akusa_rev=4661
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 16 Sep 2022 15:36:50 GMT
Last-Modified: Thu, 18 Aug 2022 06:23:42 GMT
Content-Length: 154
Strict-Transport-Security: max-age=31536000
X-Permitted-Cross-Domain-Policies: none
Age: 83243
Keep-Alive: timeout=10, max=98
Connection: Keep-Alive
Content-Type: text/plain
Via: 1.1 dca1-bit12012
Set-Cookie: TS011951d5=01b2963452591a20ce370c367d3bf09b6f71c5b3ded2c2b1eb42af9d473c213a9623af01a4b4ffe497fd9e240bad1b6301a2e32652; Path=/; Domain=.ultrabranch3.alaskausa.org
TS01fdcc5d=013641569d71960893b949164dd0fcec5dbfc1701453b3e068e4c8aadc996c8ccf6eef4a50c50447a1e4fa63521a75870f94b10330; Path=/; Secure; HTTPOnly
TS012d93e9=013641569dc6c5099cd63499a68def1292990f5d1a53b3e068e4c8aadc996c8ccf6eef4a502c6d93aea864b767da2ed2182df1116960796edd0559c8f55927c3ec578a8ac4; path=/; domain=.ultrabranch3.alaskausa.org; HTTPonly; Secure
Vary: Accept-Encoding

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
a0273c3a6408aac9556a8193c7960ffa
7782e7f0c524f4e2d793733d50d4c145ec307ee9
b7179dae51c5119d90b0f1df67d74ce1109a934b220139b11314b8a4cb4e6165

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 16 Sep 2022 15:36:51 GMT
Server: ECS (amb/6B8E)
Content-Length: 471

www.alaskausa.org/css/nav/pgMainEdge.png

107.162.171.161

200 OK

960 B

URL HTTP/1.1
www.alaskausa.org/css/nav/pgMainEdge.png
IP
107.162.171.161:0
ASN
#55002 DEFENSE-NET

File type
PNG image data, 1 x 3, 8-bit colormap, non-interlaced\012- data
Size
960 B (960 bytes)
Hash
a5ea8f10a3e08ef3bc3acbe1add70acd
3da6cb1b65f0e536b05bb368c1358be49a445341
1fb28d9c14ec42912599df0f34b14c6e6f996084ca13e06bb11dcb4c9459ed34

HTTP Headers

GET /css/nav/pgMainEdge.png HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 08 Sep 2022 17:43:06 GMT
Accept-Ranges: bytes
ETag: "7d5ece73aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Fri, 16 Sep 2022 15:36:51 GMT
Content-Length: 960
Via: 1.1 dca1-bit11010
Vary: Accept-Encoding

www.alaskausa.org/favicon.ico

107.162.171.161

200 OK

1.2 kB

URL HTTP/1.1
www.alaskausa.org/favicon.ico
IP
107.162.171.161:0
ASN
#55002 DEFENSE-NET

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size
1.2 kB (1150 bytes)
Hash
a640140069c78a92f718c9fb63614d72
1418d5de4993b63c2b11a64df62a03ae8ebb8f95
5b8545b9cf60e23bd9c7eacef43e9b85e2843b1d90328b5b6fca9ef851347808

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.alaskausa.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ayubrugs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: image/x-icon
Last-Modified: Thu, 08 Sep 2022 17:45:19 GMT
Accept-Ranges: bytes
ETag: "b3ed42c3aac3d81:0"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Date: Fri, 16 Sep 2022 15:36:51 GMT
Content-Length: 1150
Via: 1.1 dca1-bit11010

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7e55a42-9f36-46db-9415-ab10753c0fb8.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10163 bytes)
Hash
3a4ed510756efe784c4ca84c61c4b5ba
10262867cfb19d3ba8f618e235d1a98531048f34
b5ba0de5ce381579e49e3e3c23244048fc8aac693ce0c977560f28b9a51f6a0b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7e55a42-9f36-46db-9415-ab10753c0fb8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 10163
x-amzn-requestid: 7c849e5d-468e-4f6a-ad44-c7995bfa81bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYvuGFU5oAMF_Og=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63202cc0-5376d2432c79a3146b6c29f4;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 07:09:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: XGVoNQZeoG0AQ6LabPW2Zg7pAQqdl-bGTFAhbNpLlgTWNWx55-wEUQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 21:45:14 GMT
age: 64301
etag: "10262867cfb19d3ba8f618e235d1a98531048f34"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (37)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size