Overview

URLdigifloat.com/snon.mca/login.jsp.php?session_id=tWNQ7gRgFyWxVrZiYKCknqneXbOrwZISXZaUCWN2SYsg8kK1zhKMjW4DiPZvTulgsin3ThDzrtDJH89u
IP 192.254.232.235 (United States)
ASN#46606 UNIFIEDLAYER-AS-1
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-05 22:02:26 UTC
StatusLoading report..
IDS alerts0
Blocklist alert3
urlquery alerts No alerts detected
Tags None

Domain Summary (8)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5843 34.160.144.191
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 52.38.198.114
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 51570 34.120.237.76
digifloat.com (18) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 7296 402524 192.254.232.235
r3.o.lencr.org (5) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1690 4430 23.36.76.226
ocsp.digicert.com (2) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 682 1592 93.184.220.29
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2374 34.102.187.140

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-05 medium digifloat.com/snon.mca/login.jsp.php?session_id=tWNQ7gRgFyWxVrZiYKCknqneXbO (...) Phishing
2022-12-05 medium digifloat.com/snon.mca/media/backbase.js Phishing
2022-12-05 medium digifloat.com/snon.mca/media/main-all-base.js Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 192.254.232.235
Date UQ / IDS / BL URL IP
2023-01-21 18:35:04 UTC 0 - 0 - 4 www.digifloat.com/pnnc.naic/signin.php 192.254.232.235
2022-12-25 07:04:26 UTC 0 - 2 - 3 digifloat.com/snon.mca/login.jsp.php?session_ (...) 192.254.232.235
2022-12-25 04:14:36 UTC 0 - 2 - 3 digifloat.com/snon.mca/login.jsp.php?session_ (...) 192.254.232.235
2022-12-25 02:29:49 UTC 0 - 2 - 3 digifloat.com/snon.mca/login.jsp.php?session_ (...) 192.254.232.235
2022-12-24 07:10:47 UTC 0 - 2 - 3 digifloat.com/snon.mca/login.jsp.php?session_ (...) 192.254.232.235


Last 5 reports on ASN: UNIFIEDLAYER-AS-1
Date UQ / IDS / BL URL IP
2023-06-01 06:09:05 UTC 0 - 0 - 8 organicandclean.net/ 69.49.244.168
2023-06-01 05:55:50 UTC 0 - 0 - 1 69.195.124.74/~buildawo/pressiva/wp-admin/css (...) 69.195.124.74
2023-06-01 05:55:48 UTC 0 - 0 - 1 69.195.124.74/~buildawo/pressiva/wp-admin/css (...) 69.195.124.74
2023-06-01 05:49:07 UTC 3 - 0 - 4 intertecqatar.com/css/js/arrapp/tkelevator.co (...) 192.254.232.91
2023-06-01 05:45:10 UTC 0 - 1 - 0 sanaskaintimates.com/~roo/htttp.www.paypal.co (...) 192.185.36.108


Last 5 reports on domain: digifloat.com
Date UQ / IDS / BL URL IP
2023-01-21 18:35:04 UTC 0 - 0 - 4 www.digifloat.com/pnnc.naic/signin.php 192.254.232.235
2022-12-25 07:04:26 UTC 0 - 2 - 3 digifloat.com/snon.mca/login.jsp.php?session_ (...) 192.254.232.235
2022-12-25 04:14:36 UTC 0 - 2 - 3 digifloat.com/snon.mca/login.jsp.php?session_ (...) 192.254.232.235
2022-12-25 02:29:49 UTC 0 - 2 - 3 digifloat.com/snon.mca/login.jsp.php?session_ (...) 192.254.232.235
2022-12-24 07:10:47 UTC 0 - 2 - 3 digifloat.com/snon.mca/login.jsp.php?session_ (...) 192.254.232.235


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-15 05:23:25 UTC 0 - 3 - 4 www.cs-uno.com/mt4i/b5/amci.pnc/login.jsp.php 219.127.212.162
2023-02-26 17:54:32 UTC 0 - 3 - 20 cs-uno.com/mt4i/b5/amci.pnc/login.jsp.php?ses (...) 219.127.212.162
2023-02-26 06:23:35 UTC 0 - 1 - 24 cs-uno.com/mt4i/b5/amci.pnc/nssb.php 219.127.212.162
2023-02-25 14:35:50 UTC 0 - 1 - 23 cs-uno.com/mt4i/b5/amci.pnc/nssb.php 219.127.212.162
2023-02-14 09:41:41 UTC 0 - 2 - 4 mysaiansh.com/inse.nhsn/ncce.cen.php 167.86.68.248

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 17) - SHA256: 6b87e83ec82f280818990a940008cc15261380c58483ab40986a1be5a38fd7a5
2022 - 12 - 5 22: 2: 16


HTTP Transactions (36)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4749
Expires: Mon, 05 Dec 2022 23:21:24 GMT
Date: Mon, 05 Dec 2022 22:02:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 617
Cache-Control: max-age=131961
Date: Mon, 05 Dec 2022 22:02:15 GMT
Etag: "638dc877-1d7"
Expires: Wed, 07 Dec 2022 10:41:36 GMT
Last-Modified: Mon, 05 Dec 2022 10:31:19 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 05 Dec 2022 21:18:31 GMT
cache-control: public,max-age=3600
age: 2624
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8295
Expires: Tue, 06 Dec 2022 00:20:30 GMT
Date: Mon, 05 Dec 2022 22:02:15 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: Gf6HaM715qA9UHR3SDiYCRqe210EKRdv6MqB3oWqN+N8/B3TKgB7PRXJQayQnmlJq257iis18R0=
x-amz-request-id: MMA9B2N0EZ8XXGVE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 05 Dec 2022 21:46:50 GMT
age: 925
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 05 Dec 2022 22:02:15 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 05 Dec 2022 21:11:19 GMT
cache-control: public,max-age=3600
age: 3056
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 602
Cache-Control: max-age=126878
Date: Mon, 05 Dec 2022 22:02:16 GMT
Etag: "638db4ac-1d7"
Expires: Wed, 07 Dec 2022 09:16:54 GMT
Last-Modified: Mon, 05 Dec 2022 09:06:52 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: joX2BJw6bkq+fCmsQqSSqA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             52.38.198.114
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KOSyJi+XRYJqwjtN2r7pJ45EQhM=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4616
Expires: Mon, 05 Dec 2022 23:19:13 GMT
Date: Mon, 05 Dec 2022 22:02:17 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4616
Expires: Mon, 05 Dec 2022 23:19:13 GMT
Date: Mon, 05 Dec 2022 22:02:17 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4616
Expires: Mon, 05 Dec 2022 23:19:13 GMT
Date: Mon, 05 Dec 2022 22:02:17 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10396
x-amzn-requestid: b879fd2e-b6cf-4373-b780-2d97481c45f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cioNbH5KoAMFUsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a8722-6add7f8e225878473b20c015;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 23:15:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ir97GJKaFoW6BNXCcmMqp0JSUd5JhCACyUvLh5G-0BWCDVJsqs7XhQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 22:03:01 GMT
age: 86356
etag: "2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10396
Md5:    24c69d7ef356b352956d6dcbc9f5df1d
Sha1:   2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9
Sha256: 94d068620c34652cb2d24ca8b3cf962febe9606e6d3a33d937fc9d99f176edef
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3af2e495-85ff-410f-8418-e683c7f84bcd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7728
x-amzn-requestid: 9f37e7a6-1f00-4a81-9b14-962fd0b6cdf4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMEJxoAMFchQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-4a4cce217327b44525ea1e98;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PGz98Kv7xrcdfvzwMFbA9V206DdlXitB-Xk8dllnaLlk1QMhZZEs9Q==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 22:03:04 GMT
age: 86353
etag: "9f80bb7ca6f699d88eaec2248dec508c589fe994"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7728
Md5:    027480c06cd67621f373c6765dafee4d
Sha1:   9f80bb7ca6f699d88eaec2248dec508c589fe994
Sha256: f69a0d6bd6e79d8fa7f2f15df11237c0a8b04d45af3cd5870eeef86d18f553bf
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa99f7bcf-386e-4655-b6f0-99abdf67f097.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8469
x-amzn-requestid: c17eff92-da62-4f0f-9e75-2741012ec43a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_sqFSjoAMFQ6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d131d-61d61d2f0bb01ecb21b809ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: i6QasBBRK9APW19sH0DdOipvUJA3gWj0CAMTzt7ejRCOk_V2psz-Xw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:45:47 GMT
age: 990
etag: "ff254a1df087d2c157d88a6ef04e395dc49efe5e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8469
Md5:    2f60a6490f38a772dcd50a1132e98e1b
Sha1:   ff254a1df087d2c157d88a6ef04e395dc49efe5e
Sha256: 653e40becd103cd76cc2f194a87e933e8c548d346f87520fefca3b16430fc4ab
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8315
x-amzn-requestid: aa72885c-526c-4100-92bd-79a57fc1f8e5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUIZGwYoAMF9oA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6702-6f95d0a22aabb116475015f7;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 08MfpNdMldGUIdGmOoEM5aMfKKIyp_e8UFWc_kpWHlNqwXypqIyDoQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:52:50 GMT
age: 567
etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8315
Md5:    db1701b7b9d161a0c935bb6e10b17893
Sha1:   22a8c4bd58c729c1abcf794466e8f3231dfb034b
Sha256: b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5681
x-amzn-requestid: 0850cc40-af60-4f51-8dfa-5e12f42c5d28
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUP-E_koAMFvmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6732-6370b1cb77478c6c73003536;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:48:34 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: moVR9xHj5QojDqE3Vc7-ggjAbhzvdunEX7nmPRuzLPLfN3J46mzloQ==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:52:43 GMT
age: 574
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5681
Md5:    43309032a892c486f9985ef520df696e
Sha1:   36f4682ca6a33ff80ee02129c77e6f27e996ede0
Sha256: 24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:44:01 GMT
age: 1096
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4666
Md5:    c01fe1cccdb3b672bbade6d98217ffe9
Sha1:   a9a529dc9894827f6243a1bf57f81caa4fe88fc2
Sha256: c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
                                        
                                            GET /snon.mca/login.jsp.php?session_id=tWNQ7gRgFyWxVrZiYKCknqneXbOrwZISXZaUCWN2SYsg8kK1zhKMjW4DiPZvTulgsin3ThDzrtDJH89u HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Date: Mon, 05 Dec 2022 22:02:15 GMT
Server: Apache
Content-Encoding: gzip
Vary: Accept-Encoding
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (722), with CRLF line terminators
Size:   5510
Md5:    bed59c21e7a9cb5e5db29734b8bc932f
Sha1:   37b3c8743a59cdcee2403ac48fca74a8dfdf1fb9
Sha256: c61fe465d288e6c9a136bc026d2dabd53398e939b0a145678dfe697083037305

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /snon.mca/media/login.css HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/login.jsp.php?session_id=tWNQ7gRgFyWxVrZiYKCknqneXbOrwZISXZaUCWN2SYsg8kK1zhKMjW4DiPZvTulgsin3ThDzrtDJH89u

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Mon, 05 Dec 2022 22:02:18 GMT
Server: Apache
Last-Modified: Sat, 28 Sep 2019 00:19:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1294
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (4062), with no line terminators
Size:   1294
Md5:    7f3012b8376cba16aafa49747a010d8a
Sha1:   015bb82860dde05bfa74359cc6dc392eac92231d
Sha256: ccb8552c5727256d9017ec57b07b26ac55012256a2dd3e894bdfe2e1b2488c70
                                        
                                            GET /snon.mca/media/main.css HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/login.jsp.php?session_id=tWNQ7gRgFyWxVrZiYKCknqneXbOrwZISXZaUCWN2SYsg8kK1zhKMjW4DiPZvTulgsin3ThDzrtDJH89u

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Mon, 05 Dec 2022 22:02:18 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 20 Mar 2020 22:20:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   32049
Md5:    5ee96f6c64169a3b4283ce42d1eac879
Sha1:   38c7bcd19e2fc4a4af9e5e931fe9b8377e6f0f47
Sha256: ab69e0ff335a619bc6b47adb74b75d9367602fbd8d0f1e97b3a79e03420d7ce3
                                        
                                            GET /snon.mca/media/jcaptcha.css HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/login.jsp.php?session_id=tWNQ7gRgFyWxVrZiYKCknqneXbOrwZISXZaUCWN2SYsg8kK1zhKMjW4DiPZvTulgsin3ThDzrtDJH89u

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Mon, 05 Dec 2022 22:02:18 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 26 Sep 2019 15:22:08 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 524
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  ASCII text, with very long lines (1479), with no line terminators
Size:   524
Md5:    b953b4563675dddeb9469444592f873f
Sha1:   e72913a64d8ef6656cb43b0ff29ff0bb8442e684
Sha256: 2ea5d474ad52eebdc6061389dcaf5bad5025c7fe27cb6bfdb181c822bd240947
                                        
                                            GET /snon.mca/media/backbase.js HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/login.jsp.php?session_id=tWNQ7gRgFyWxVrZiYKCknqneXbOrwZISXZaUCWN2SYsg8kK1zhKMjW4DiPZvTulgsin3ThDzrtDJH89u

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Mon, 05 Dec 2022 22:02:18 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 26 Sep 2019 15:22:08 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (65536), with no line terminators
Size:   92701
Md5:    7a3694b9d9f65d40031fe17062dd25d9
Sha1:   df3154d350c8961cf59a7d85f0a7497c66a0129c
Sha256: 518030203591b3304830c483a08aa47e1e651eabcc911942b7ec6c97835c0fd5

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /snon.mca/media/main-all-base.js HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/login.jsp.php?session_id=tWNQ7gRgFyWxVrZiYKCknqneXbOrwZISXZaUCWN2SYsg8kK1zhKMjW4DiPZvTulgsin3ThDzrtDJH89u

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Mon, 05 Dec 2022 22:02:18 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 30 Sep 2019 20:10:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   162681
Md5:    ae9fba237a68ec21e8ce90306f1a1950
Sha1:   7e1005cf7fa831d47afdac44ff1d81e302e3ea11
Sha256: 1c8aa005fc8f662e6fa01b3f4fb01bb010406eea7ecee2d1032a7cabd0c2a419

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /snon.mca/media/locale_en.gif HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/login.jsp.php?session_id=tWNQ7gRgFyWxVrZiYKCknqneXbOrwZISXZaUCWN2SYsg8kK1zhKMjW4DiPZvTulgsin3ThDzrtDJH89u

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Date: Mon, 05 Dec 2022 22:02:19 GMT
Server: Apache
Last-Modified: Thu, 26 Sep 2019 15:22:08 GMT
Accept-Ranges: bytes
Content-Length: 70
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 14 x 14\012- data
Size:   70
Md5:    f93c9052c9244e395d965f30d21c66da
Sha1:   2ef0d6208255d8059d0f15e664640bb66570f741
Sha256: 3c243a2d63452b7a8392cdf93e637ec423b3241149831b2082283063d1e34413
                                        
                                            GET /snon.mca/media/campaigne_1_ENG.png HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/login.jsp.php?session_id=tWNQ7gRgFyWxVrZiYKCknqneXbOrwZISXZaUCWN2SYsg8kK1zhKMjW4DiPZvTulgsin3ThDzrtDJH89u

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 05 Dec 2022 22:02:19 GMT
Server: Apache
Last-Modified: Thu, 26 Sep 2019 15:22:08 GMT
Accept-Ranges: bytes
Content-Length: 46532
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 296 x 212, 8-bit/color RGBA, non-interlaced\012- data
Size:   46532
Md5:    b775b77d2d29313be09e5e746f6cd1f6
Sha1:   cb286faea1400306bc7efbe88119659adf837e0f
Sha256: cb45d428c00e88ea0e73eca797ebb0222173c4bb22a86935a4d94137695a42ef
                                        
                                            GET /snon.mca/media/ajax-loader-2.gif HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/login.jsp.php?session_id=tWNQ7gRgFyWxVrZiYKCknqneXbOrwZISXZaUCWN2SYsg8kK1zhKMjW4DiPZvTulgsin3ThDzrtDJH89u

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Date: Mon, 05 Dec 2022 22:02:19 GMT
Server: Apache
Last-Modified: Thu, 26 Sep 2019 15:22:08 GMT
Accept-Ranges: bytes
Content-Length: 3208
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 32 x 32\012- data
Size:   3208
Md5:    f085e3360c7206e8ccc623bb5a285d96
Sha1:   06f9b2eed4f23a7471b567690b1b8d59223909a6
Sha256: b6b693de4c17c014dad29abe5294359606104283674d45ee8348e9dc731ff540
                                        
                                            GET /snon.mca/media/logo-red.png HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/login.jsp.php?session_id=tWNQ7gRgFyWxVrZiYKCknqneXbOrwZISXZaUCWN2SYsg8kK1zhKMjW4DiPZvTulgsin3ThDzrtDJH89u

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 05 Dec 2022 22:02:19 GMT
Server: Apache
Last-Modified: Thu, 26 Sep 2019 15:22:08 GMT
Accept-Ranges: bytes
Content-Length: 2079
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 44 x 44, 8-bit colormap, non-interlaced\012- data
Size:   2079
Md5:    e4e141701cb25f97660b49d191eb2963
Sha1:   6fb16bfeab3664b454128d99eef54e3861bd3912
Sha256: 86c3ec119fc6352ca80ccc5b6e2e8fa76c924adecaf33de65da1b892e7b1aa3e
                                        
                                            GET /snon.mca/media/sprite-corners-rounded.png HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/media/main.css

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 05 Dec 2022 22:02:19 GMT
Server: Apache
Last-Modified: Sun, 29 Sep 2019 15:35:12 GMT
Accept-Ranges: bytes
Content-Length: 246
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 16 x 20, 8-bit colormap, non-interlaced\012- data
Size:   246
Md5:    13cefa14429d6c083df4c04dffb80f15
Sha1:   f7bbde539bd645f4a43bfaa3628e1937f2ca3b87
Sha256: 6a1423dcdc9a531df9d5dfc5a1ea720eec868eda0a56e1580a0c71c69e79b8fe
                                        
                                            GET /snon.mca/media/icon-questionmark-grey_2019.png HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/login.jsp.php?session_id=tWNQ7gRgFyWxVrZiYKCknqneXbOrwZISXZaUCWN2SYsg8kK1zhKMjW4DiPZvTulgsin3ThDzrtDJH89u

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 05 Dec 2022 22:02:19 GMT
Server: Apache
Last-Modified: Sat, 28 Sep 2019 00:19:30 GMT
Accept-Ranges: bytes
Content-Length: 362
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 19 x 18, 8-bit/color RGBA, non-interlaced\012- data
Size:   362
Md5:    0ee5a2df1e19db0f33573dd1cad378f9
Sha1:   7c81f65c8ec075a03b10104d297ce18bcf13785c
Sha256: 79fb86c959989a8d2c920e6e4550c396fcee47ec4deda2549b237aca12dd981d
                                        
                                            GET /snon.mca/media/keypad-bg.gif HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/media/main.css

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Date: Mon, 05 Dec 2022 22:02:19 GMT
Server: Apache
Last-Modified: Sat, 28 Sep 2019 00:13:46 GMT
Accept-Ranges: bytes
Content-Length: 439
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 84 x 128\012- data
Size:   439
Md5:    4b3e105c2c0a87a3d4c46ead1f2640a2
Sha1:   5ed49317561375c49ecdb9fc525c445f9737b0f6
Sha256: 31d4c1cd3bf18363ff7643f87a54fecd70376fed89cd5805ced2e323127fa334
                                        
                                            GET /snon.mca/media/key-button.gif HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/media/main.css

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Date: Mon, 05 Dec 2022 22:02:19 GMT
Server: Apache
Last-Modified: Sat, 28 Sep 2019 00:14:00 GMT
Accept-Ranges: bytes
Content-Length: 379
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 40 x 20\012- data
Size:   379
Md5:    4119e04ec2eff69239a3663b4a0075c5
Sha1:   3be4575fe849aaef8f1d21e0819907a795d18342
Sha256: d3dbb7567bec3fa266960ee53ee72d534e1834e481ff502a0901fcb32af7ff23
                                        
                                            GET /snon.mca/media/keypad-backspace.png HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/media/main.css

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 05 Dec 2022 22:02:19 GMT
Server: Apache
Last-Modified: Sun, 29 Sep 2019 15:34:04 GMT
Accept-Ranges: bytes
Content-Length: 209
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 9 x 8, 8-bit/color RGBA, non-interlaced\012- data
Size:   209
Md5:    bbc723952114cf1dda41c231860a61ce
Sha1:   447058c6f08098bc5dcf41e6654f254e0ace3444
Sha256: 1723fd2bd8c98417e8739ab2853cb92dfb0e50113a7a9726d2cceb69d00eea05
                                        
                                            GET /snon.mca/media/sprite-icons-bar-status_2019.png HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/media/login.css

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 05 Dec 2022 22:02:19 GMT
Server: Apache
Last-Modified: Sat, 28 Sep 2019 00:14:30 GMT
Accept-Ranges: bytes
Content-Length: 643
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 12 x 120, 8-bit/color RGBA, non-interlaced\012- data
Size:   643
Md5:    48a49b834f2f316618c58cd48404b711
Sha1:   0f2654bb5490b18db7504789cae08ffaea881843
Sha256: 620195c7ce8c374b49f3438ad4b3edc1aa33c7ee839d13436f202fc38a55acbb
                                        
                                            GET /snon.mca/media/AOB_1Million_Eng.png HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/login.jsp.php?session_id=tWNQ7gRgFyWxVrZiYKCknqneXbOrwZISXZaUCWN2SYsg8kK1zhKMjW4DiPZvTulgsin3ThDzrtDJH89u

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 05 Dec 2022 22:02:19 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 10 Nov 2022 15:05:10 GMT
Accept-Ranges: bytes
Content-Length: 45517
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  PNG image data, 296 x 212, 8-bit/color RGB, non-interlaced\012- data
Size:   45517
Md5:    cc3f5ce59e432095fb2fee45ea9d40e1
Sha1:   4e4f0ba0397e4e70b975a4dedce5a5900379c321
Sha256: 96d3248a53eb08b35389e45e35ba8891b04f4ea9d7a70c05c96fc9b8fe303633
                                        
                                            GET /snon.mca/media/favicon.ico HTTP/1.1 
Host: digifloat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://digifloat.com/snon.mca/login.jsp.php?session_id=tWNQ7gRgFyWxVrZiYKCknqneXbOrwZISXZaUCWN2SYsg8kK1zhKMjW4DiPZvTulgsin3ThDzrtDJH89u

                                        
                                             192.254.232.235
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                            
Date: Mon, 05 Dec 2022 22:02:20 GMT
Server: Apache
Last-Modified: Sat, 28 Sep 2019 16:07:58 GMT
Accept-Ranges: bytes
Content-Length: 3262
Cache-Control: max-age=604800
Expires: Mon, 12 Dec 2022 22:02:20 GMT
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 32x32, 24 bits/pixel\012- data
Size:   3262
Md5:    830fd617ff8b5b8a8ac6713cd0c1d02f
Sha1:   0357369c0516e195cfa22b1eb2372831557b9c82
Sha256: 88a44fa39621aa19944ef9e13e88853f445d772b5f49fe0758738e06c8fa20da