Report - ctzacv.com/

Report Overview

Submitted URL
ctzacv.com/
IP
104.16.243.78
ASN
#13335 CLOUDFLARENET
Submitted
2022-12-01 17:28:36
Access
Website Title
Final URL
Tags
None
urlquery detections
Phishing - Citizens Bank

Detections

urlquery
10
Network Intrusion Detection
0
Threat Detection Systems
110

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	35.163.62.5
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	68 kB	34.120.237.76
ctzacv.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	14 kB	237 kB	104.16.244.78
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.3 kB	23.36.76.226
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.0 kB	2.2 kB	93.184.220.29

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank
2022-12-01	medium	ctzacv.com/	RBS Citizens Bank

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-01	medium	ctzacv.com/	Phishing
2022-12-01	medium	ctzacv.com/_next/static/chunks/main-3123a443c688934f.js	Phishing
2022-12-01	medium	ctzacv.com/_next/static/chunks/170-eb8e8532566fbaf1.js	Phishing
2022-12-01	medium	ctzacv.com/_next/static/chunks/237-d83b95ec01fca10d.js	Phishing
2022-12-01	medium	ctzacv.com/_next/static/chunks/pages/_app-3f4ecf471eb01eda.js	Phishing
2022-12-01	medium	ctzacv.com/font/citiolb_icons.ttf	Phishing
2022-12-01	medium	ctzacv.com/fonts/citiolb_icons.woff	Phishing
2022-12-01	medium	ctzacv.com/font/citizen_roman.ttf	Phishing
2022-12-01	medium	ctzacv.com/font/citizen_bold.ttf	Phishing
2022-12-01	medium	ctzacv.com/font/citizen_extrabold.ttf	Phishing
2022-12-01	medium	ctzacv.com/font/citizen_extrabold.woff	Phishing
2022-12-01	medium	ctzacv.com/font/citizen_roman.woff	Phishing
2022-12-01	medium	ctzacv.com/font/citizen_book.woff	Phishing
2022-12-01	medium	ctzacv.com/font/citizen_bold.woff	Phishing
2022-12-01	medium	ctzacv.com/font/citiolb_icons.woff	Phishing
2022-12-01	medium	ctzacv.com/_next/static/aXcBQnkVskEPdZWH5_irS/_ssgManifest.js	Phishing
2022-12-01	medium	ctzacv.com/_next/static/chunks/framework-9b5d6ec4444c80fa.js	Phishing
2022-12-01	medium	ctzacv.com/_next/static/aXcBQnkVskEPdZWH5_irS/_buildManifest.js	Phishing
2022-12-01	medium	ctzacv.com/_next/static/chunks/90-18ebc539c7327ace.js	Phishing
2022-12-01	medium	ctzacv.com/font/citizen_book.ttf	Phishing
2022-12-01	medium	ctzacv.com/login	Phishing
2022-12-01	medium	ctzacv.com/_next/static/chunks/pages/login-0b726c5c515e143e.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	ctzacv.com/_next/static/aXcBQnkVskEPdZWH5_irS/_buildManifest.js	2.4 kB	2023-03-11	2023-03-13
Pretty URL ctzacv.com/_next/static/aXcBQnkVskEPdZWH5_irS/_buildManifest.js IP 104.16.244.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:37:54 Last Seen2023-03-13 08:46:25 Times Seen1 Hash 63913f3fff4c3d867eca6c92228ebb34 28bd004142604f06bf3ddf0f8be86bbcf7cbb060 aad5e5cb62da7263f460f5a0a629405552b0052ddc1ad1629a3b880f253a3d63 Loading...

	ctzacv.com/_next/static/chunks/main-3123a443c688934f.js	105 kB	2023-03-07	2024-04-20
Pretty URL ctzacv.com/_next/static/chunks/main-3123a443c688934f.js IP 104.16.244.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:53:51 Last Seen2024-04-20 07:19:07 Times Seen65 Hash 5c8fa4faef8700c12dd2c8fe8b29ee96 6882f5b250869c46d913875d48ae03c2b9be449d 0eed4542b90a01be928023ec3dc7abed45c63ffc8067a496863ecef579d4af9f Loading...

	ctzacv.com/_next/static/chunks/pages/login-0b726c5c515e143e.js	13 kB	2023-03-09	2023-03-13
Pretty URL ctzacv.com/_next/static/chunks/pages/login-0b726c5c515e143e.js IP 104.16.244.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 05:20:48 Last Seen2023-03-13 19:24:35 Times Seen1 Hash 95dbdfa8c837d32030f573c966cfb418 4f12b49b08f17d1caf3b385be2079d3b508369f3 8599904e11db2d57f5f1ce30a5d135e316777bd281e453fc731f364b3eb8a4d3 Loading...

	ctzacv.com/_next/static/chunks/170-eb8e8532566fbaf1.js	19 kB	2023-03-08	2024-04-20
Pretty URL ctzacv.com/_next/static/chunks/170-eb8e8532566fbaf1.js IP 104.16.244.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 13:27:00 Last Seen2024-04-20 07:19:07 Times Seen10 Hash a9ee7221834165db19e90fcca0f715f9 110468c4004bc8f0067689e83b090afcef044fc3 0cd7c773bc65874492c5dc26d281e1498a33672f8ed1eb38e3dc5c7ac6b4e727 Loading...

	ctzacv.com/_next/static/chunks/webpack-bb469f829a664d48.js	2.2 kB	2023-03-07	2024-04-20
Pretty URL ctzacv.com/_next/static/chunks/webpack-bb469f829a664d48.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:36:05 Last Seen2024-04-20 07:19:07 Times Seen40 Hash 09985188723a77d0dc96533b3177fb30 120be09a92353d98363349d3a6459a296e2bf760 5dfe185409ff8cc0e73ea870cbefbcdac38297bbfa69c545686e536f7c51fa64 Loading...

	ctzacv.com/_next/static/aXcBQnkVskEPdZWH5_irS/_ssgManifest.js	76 B	2023-03-07	2024-04-20
Pretty URL ctzacv.com/_next/static/aXcBQnkVskEPdZWH5_irS/_ssgManifest.js IP 104.16.244.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:19:07 Last Seen2024-04-20 07:19:07 Times Seen777 Hash 5352cb582146311d1540f6075d1f265e cbe5dad683f4f887122db6f6d343aa8ba41dee8b e182e3257a3b5564f7bfb9fb1c6a1e13f8f7c9a3fa0dd6e39ccf473ef8d4f960 Loading...

	ctzacv.com/_next/static/chunks/237-d83b95ec01fca10d.js	46 kB	2023-03-08	2024-04-20
Pretty URL ctzacv.com/_next/static/chunks/237-d83b95ec01fca10d.js IP 104.16.244.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 13:27:00 Last Seen2024-04-20 07:19:07 Times Seen10 Hash 1a8f6842ee616061966e572da1292de7 2543ba6b558add4c40537eabfd0fb3a873cb7638 1fe2ee7ad8adc143238b46680910506a433e98e7f3817f1f15e702fac365ac54 Loading...

	ctzacv.com/_next/static/chunks/framework-9b5d6ec4444c80fa.js	142 kB	2023-03-07	2024-04-20
Pretty URL ctzacv.com/_next/static/chunks/framework-9b5d6ec4444c80fa.js IP 104.16.244.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:19:07 Last Seen2024-04-20 07:19:07 Times Seen89 Hash 4f45f9a036208ef5b00302eaa0de99d4 6271883ba52614a6412d4146f7b905cd75807c55 1aee3a5f0c4b6735edff60d58f20a936ce11e5d4a36a5a76390aeda043ae4048 Loading...

	ctzacv.com/_next/static/chunks/90-18ebc539c7327ace.js	402 kB	2023-03-11	2023-03-13
Pretty URL ctzacv.com/_next/static/chunks/90-18ebc539c7327ace.js IP 104.16.244.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:46:43 Last Seen2023-03-13 19:24:35 Times Seen1 Hash 291e248fc86e917931ec77b1b9e13905 f99d35061fdee0d7dceb80eeb9d85e0552d5a2de acfebfbc7a7702f2f0eb1eff0ba6b3e8bc3fec6f608d8e554959c0b163d963e9 Loading...

	ctzacv.com/_next/static/chunks/pages/_app-3f4ecf471eb01eda.js	1.2 kB	2023-03-07	2023-03-26
Pretty URL ctzacv.com/_next/static/chunks/pages/_app-3f4ecf471eb01eda.js IP 104.16.244.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:22:32 Last Seen2023-03-26 14:12:06 Times Seen3 Hash 4c8c4a0ea4fdb8d8745eabe6a129974c cda230209b01a664ceb4d9de0df93a53c04c057e 329fdb8907113cd62b44c8fad9f76f2b90857a4e281526ad9a669cbd79ab0180 Loading...

HTTP Transactions (53)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8855
Expires: Thu, 01 Dec 2022 19:56:01 GMT
Date: Thu, 01 Dec 2022 17:28:26 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1584
Cache-Control: max-age=149350
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 17:28:26 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 10:57:36 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 17:19:46 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 520
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4984
Expires: Thu, 01 Dec 2022 18:51:30 GMT
Date: Thu, 01 Dec 2022 17:28:26 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: sWFCHFuLFEA0+H853UpY5/MFf+ldGTIm7v1v2EHPIr6z9zu35Pb29tX8ZENTEQbWYOPdiADqpIA=
x-amz-request-id: C7NGJ02V66HTY6GH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 16:46:20 GMT
age: 2526
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 17:28:26 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
a408754117dacac05356d705cab38061
a06c52cdd5c022d62252562e40a2e66db27a9f95
f6bf5bdcda29108f76f9c5ee4cfa3c0ad770df81dd5aa138a07dccfb5c724375

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=131934
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 17:28:26 GMT
Etag: "63884498-116"
Expires: Sat, 03 Dec 2022 06:07:20 GMT
Last-Modified: Thu, 01 Dec 2022 06:07:20 GMT
Server: nginx
Content-Length: 278

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 17:11:15 GMT
cache-control: public,max-age=3600
age: 1031
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1584
Cache-Control: max-age=144287
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 17:28:26 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 09:33:13 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

35.163.62.5

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.163.62.5:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UstRUxiS+cdB6phKPOfOgw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Vl2UctZ9NmJsRENJ7iJH1lGo7Xc=

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9134
Expires: Thu, 01 Dec 2022 20:00:42 GMT
Date: Thu, 01 Dec 2022 17:28:28 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9134
Expires: Thu, 01 Dec 2022 20:00:42 GMT
Date: Thu, 01 Dec 2022 17:28:28 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9134
Expires: Thu, 01 Dec 2022 20:00:42 GMT
Date: Thu, 01 Dec 2022 17:28:28 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9134
Expires: Thu, 01 Dec 2022 20:00:42 GMT
Date: Thu, 01 Dec 2022 17:28:28 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (12898 bytes)
Hash
820cf89fcab8380adff42982c9fb11ed
84241ddddbbfd7de30118307fb1a62800d0a4cb3
0d051495f06ac84de934283b40cbfee7a042d32153a73486dd7c017430e882d8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12898
x-amzn-requestid: 9b594c3c-6b8c-4589-8fcb-b3d7518b46f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cQZBNFxToAMF_9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63833ba1-767f510d72eef86d0cc892df;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 10:27:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kZfRQsF_Fo2UtTqK0ByOPeQK-IzTQO9JtTmxIMlapmsd93SJk_4VYw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:47:30 GMT
age: 70858
etag: "84241ddddbbfd7de30118307fb1a62800d0a4cb3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.8 kB (4762 bytes)
Hash
d2dd5a4bcfd47db8f38544bf39ce3031
fa2217bae05b7beca2e12597eaad835298276b82
3266004f5e73af5359b71622eea31f1e28abb4bbc443b5f9e481b5a8b2e9249e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4762
x-amzn-requestid: 52b09ca3-705b-4c86-9f56-172637553f87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7TVG58oAMFQTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830c15-4577a47243ad190672f8ac89;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Y0-NAp2LMMG5TjQQ9ENHwDyKXLObKTYqzPPOWvZhs7Y9WJIC6LoblQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 05:45:16 GMT
age: 42192
etag: "fa2217bae05b7beca2e12597eaad835298276b82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.5 kB (9459 bytes)
Hash
e1e6b6ba4f82221b41c3d9129008c76d
2f9532d698b4c28df23e18bbb66399ec776d5b9f
218c6f41a16e6087c611d4db5784a7cc1d027084d0bf2bd6dc3843ee5dfd560f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9459
x-amzn-requestid: c08f55b2-7ac6-4dec-b53c-fd3f4533f9c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpBiGoHIAMFR2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bba3-69c2c2d05e55fd745caf1dce;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:09:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w_Mb-0pBwp-pUyU2bdJ8MhrGHkk6VQgJmcGV9MfHwj_yGUMIYZkyrg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 17:08:13 GMT
age: 1215
etag: "2f9532d698b4c28df23e18bbb66399ec776d5b9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8740 bytes)
Hash
26d6dffbf400da4803a2e76e2a8ef2f8
2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8
04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8740
x-amzn-requestid: c6c3e3dc-c9a2-4fda-a83b-cdd6ae81166b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7uyE9CoAMF6Xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830cc4-2c8940405044071a082ee678;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qykE_oaoqqPTgqGnfUo74mH29IOS97b5sZb_3VmB9yW7KUiJ1a7dnA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 18:58:06 GMT
age: 81022
etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

16 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
16 kB (16038 bytes)
Hash
ffd12f9c423ffc627d9e3b3145944fe4
5cf9a7a784952e1bb0cbe499104f1774b1269d08
a25f1b752d9af599aefd73073c105853130f1759905269de3d582d2eb35fe167

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 16038
x-amzn-requestid: 925134ee-dd35-45ed-8da7-d60c9c484993
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbz80EHboAMFtmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cd1e-48de287757e82632291365ee;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:37:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: I8qQQUMSVzFmXqjWM1n_F1XEE-ZQcpEF81OwJgf9i3Q5M8XiFAa8Zg==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:52:00 GMT
age: 70588
etag: "5cf9a7a784952e1bb0cbe499104f1774b1269d08"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.7 kB (9674 bytes)
Hash
5508d05a290b663fd89ead9b58f2efd8
53650399f9a986ba54addd668b4557109d12003b
65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ym_L3s5E6MLy6BxqNkVxok6L6hA4c-ilSsEqt42j2IbiXYPb4c6-VQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:52:57 GMT
age: 70531
etag: "53650399f9a986ba54addd668b4557109d12003b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

ctzacv.com/images/CTZ_Green-01.png

104.16.244.78

200 OK

5.3 kB

URL HTTP/2
ctzacv.com/images/CTZ_Green-01.png
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 406 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size
5.3 kB (5277 bytes)
Hash
beb4d1c9f430bb08a4ed54df069e8f0c
39950ddd690d1cbe2d08610da5c11c854450523f
bf99a3203217c802888087df8a2c84b92e087829e7e24d38581a57cee763923b

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Citizens Bank
openphish	RBS Citizens Bank

HTTP Headers

GET /images/CTZ_Green-01.png HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: image/png
content-length: 5277
cache-control: public, max-age=0
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"149d-49773873e8"
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772d8a17df241bfe-OSL
X-Firefox-Spdy: h2

ctzacv.com/images/footer-follow-youtube.png

104.16.244.78

200 OK

3.3 kB

URL HTTP/2
ctzacv.com/images/footer-follow-youtube.png
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 25 x 21, 8-bit/color RGBA, non-interlaced\012- data
Size
3.3 kB (3278 bytes)
Hash
09c8c4f0f417a049b8ab6acdd2581717
2c9dbf84a80167a9c7b41e5955969dd4d1d75c6f
9af5181113e5d0eacfc3d9c0b3ad627dc3ad50708755fbe45ab18e0cad4f3b36

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Citizens Bank
openphish	RBS Citizens Bank

HTTP Headers

GET /images/footer-follow-youtube.png HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: image/png
content-length: 3278
cache-control: public, max-age=0
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"cce-49773873e8"
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772d8a17df321bfe-OSL
X-Firefox-Spdy: h2

ctzacv.com/

104.16.244.78

307 Temporary Redirect

1.9 kB

URL HTTP/2
ctzacv.com/
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.9 kB (1894 bytes)
Hash
14974ec43561f7ecf6416dfb788e6650
7b7ce86c5246ba8bd11be24c646f3b7a4b9e889b
44e18e8720ebb17a0f60204bcfff2e3ef526ab9f01d2682a342b7d858ae7be51

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 307 Temporary Redirect
date: Thu, 01 Dec 2022 17:28:27 GMT
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
location: /login
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 307
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 772d8a0cab8c1bfe-OSL
X-Firefox-Spdy: h2

ctzacv.com/_next/static/chunks/main-3123a443c688934f.js

104.16.244.78

200 OK

33 kB

URL HTTP/2
ctzacv.com/_next/static/chunks/main-3123a443c688934f.js
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65536), with no line terminators
Size
33 kB (32586 bytes)
Hash
0b8f46507128d3f1db87faaa68c25c91
50b934007b6a32cdaaf5a150319fdd693ff0d97b
e4df3ee2e95c335461657e21ce614feb4823b11285330dfea2a2f528780fb67c

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /_next/static/chunks/main-3123a443c688934f.js HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"199f6-49773873e8"
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: HIT
age: 10003
server: cloudflare
cf-ray: 772d8a173e8a1bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/images/fdicFooter.gif

104.16.244.78

200 OK

2.2 kB

URL HTTP/2
ctzacv.com/images/fdicFooter.gif
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 56 x 24\012- data
Size
2.2 kB (2245 bytes)
Hash
a0742f4f717eac3a1e61f53cbbec74f2
f85639ee91bccd2bddaf043b80c892ae6b700d49
dddb031e5144ce20d909dbf4829d637738efa477bf5ab4eab67b1990ef0efb2d

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Citizens Bank
openphish	RBS Citizens Bank

HTTP Headers

GET /images/fdicFooter.gif HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: image/gif
content-length: 2245
cache-control: public, max-age=0
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"8c5-49773873e8"
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772d8a17df341bfe-OSL
X-Firefox-Spdy: h2

ctzacv.com/_next/static/chunks/170-eb8e8532566fbaf1.js

104.16.244.78

200 OK

11 kB

URL HTTP/2
ctzacv.com/_next/static/chunks/170-eb8e8532566fbaf1.js
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (19133), with no line terminators
Size
11 kB (11014 bytes)
Hash
1b09de9ea7f9bd35dfafb63d5664fedf
a2ea0ddd994aa4efa45bfd4f5afe52b4e740b7f1
d8520f9da3f1f6530f9300eeec32835f70c512f11349e79ccc8521c738dd0965

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /_next/static/chunks/170-eb8e8532566fbaf1.js HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"4abd-49773873e8"
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: HIT
age: 10003
server: cloudflare
cf-ray: 772d8a173e911bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/images/elh.gif

104.16.244.78

200 OK

1.4 kB

URL HTTP/2
ctzacv.com/images/elh.gif
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 31 x 24\012- data
Size
1.4 kB (1433 bytes)
Hash
f79e78d673f51194d9b9021cbc72b5b3
79a917fad527cef8d96af24d142653f2f49109b3
56c43c6f5c8209acd47f355810bca2f9b0fc86c4bbdf1361d60fb2d2e2e66f8c

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Citizens Bank
openphish	RBS Citizens Bank

HTTP Headers

GET /images/elh.gif HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: image/gif
content-length: 1433
cache-control: public, max-age=0
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"599-49773873e8"
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772d8a17df331bfe-OSL
X-Firefox-Spdy: h2

ctzacv.com/_next/static/chunks/237-d83b95ec01fca10d.js

104.16.244.78

200 OK

19 kB

URL HTTP/2
ctzacv.com/_next/static/chunks/237-d83b95ec01fca10d.js
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (24535)
Size
19 kB (18804 bytes)
Hash
9e65b4f268eafbe665ea3a72605692ad
c03776541b33e0363c9ddc2e1bc9515e361f12db
d86aea8319dfa3900b8f34b1a7396a1040dcc9511abcf7a29d63b9eb6a41b7c1

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /_next/static/chunks/237-d83b95ec01fca10d.js HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"b444-49773873e8"
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: HIT
age: 10003
server: cloudflare
cf-ray: 772d8a173e8f1bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/_next/static/chunks/pages/_app-3f4ecf471eb01eda.js

104.16.244.78

200 OK

1.0 kB

URL HTTP/2
ctzacv.com/_next/static/chunks/pages/_app-3f4ecf471eb01eda.js
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (1228), with no line terminators
Size
1.0 kB (1008 bytes)
Hash
199bbb87947c45745394140e7e2cb732
1161742baea9d5e8fedfcc18de94f9be6b48883a
912a5d39d7650b9414f20dace3c4d8b39e22dedb38140babe95730d43912cbf3

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /_next/static/chunks/pages/_app-3f4ecf471eb01eda.js HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"4cc-49773873e8"
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: HIT
age: 10003
server: cloudflare
cf-ray: 772d8a173e8e1bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/images/arrow-down-blue.png

104.16.244.78

200 OK

1.1 kB

URL HTTP/2
ctzacv.com/images/arrow-down-blue.png
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 28 x 11, 8-bit/color RGBA, non-interlaced\012- data
Size
1.1 kB (1054 bytes)
Hash
dc25c0429ceba4038c36551d05760dd7
a79832f9ae49997cd90701d48a02bd06bf29a7d0
56a8532b2a60ca2ae39c213f7e1e65e47834af927e6365444457f22ed12ed79c

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Citizens Bank
openphish	RBS Citizens Bank

HTTP Headers

GET /images/arrow-down-blue.png HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: image/png
content-length: 1054
cache-control: public, max-age=0
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"41e-49773873e8"
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772d8a181f7a1bfe-OSL
X-Firefox-Spdy: h2

ctzacv.com/images/arrow-button-white.png

104.16.244.78

200 OK

1.0 kB

URL HTTP/2
ctzacv.com/images/arrow-button-white.png
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 18 x 12, 8-bit/color RGBA, non-interlaced\012- data
Size
1.0 kB (1017 bytes)
Hash
e7b1dd2b4db648b74fc5b873e7196a87
2f053c0827091b3929ea889dd2dc5c923dcb450a
ff327ec2a6dbd3fc76ceecf59e472d5d2f43c94dce851ced740abe5f75bb832e

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Citizens Bank
openphish	RBS Citizens Bank

HTTP Headers

GET /images/arrow-button-white.png HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: image/png
content-length: 1017
cache-control: public, max-age=0
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"3f9-49773873e8"
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772d8a181f751bfe-OSL
X-Firefox-Spdy: h2

ctzacv.com/images/flows-tooltip.png

104.16.244.78

200 OK

364 B

URL HTTP/2
ctzacv.com/images/flows-tooltip.png
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Size
364 B (364 bytes)
Hash
35a7359b239ddca8639017dfc4b71b4a
dfdd659f24502fbe7dd79c9564e1e528233fdcad
dfc042f7ff75f3c2f916bcfbff48c82834bab07b698a2c564906ca073f8286b2

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Citizens Bank
openphish	RBS Citizens Bank

HTTP Headers

GET /images/flows-tooltip.png HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: image/png
content-length: 364
cache-control: public, max-age=0
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"16c-49773873e8"
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772d8a181f741bfe-OSL
X-Firefox-Spdy: h2

ctzacv.com/images/icon-secure.png

104.16.244.78

200 OK

292 B

URL HTTP/2
ctzacv.com/images/icon-secure.png
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 16 x 20, 8-bit/color RGBA, non-interlaced\012- data
Size
292 B (292 bytes)
Hash
18ffa7c3d8f40b5da7df780d91930e20
524ca8ffaadbd033fd0504fe580d47315690afa1
c8d87d770112e188f7b1482e9a416ffc441a9a6e08e2fc38a886fa2986efdb46

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Citizens Bank
openphish	RBS Citizens Bank

HTTP Headers

GET /images/icon-secure.png HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: image/png
content-length: 292
cache-control: public, max-age=0
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"124-49773873e8"
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772d8a181f701bfe-OSL
X-Firefox-Spdy: h2

ctzacv.com/font/citiolb_icons.ttf

104.16.244.78

404 Not Found

30 kB

URL HTTP/2
ctzacv.com/font/citiolb_icons.ttf
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1428)
Size
30 kB (30274 bytes)
Hash
99b89b3e086232fdabdec77cbc91a49d
3f8e22284fa4ae085a3f8bbccee7fe89e31cbf04
2207dedab550eced99e65ab22216245aa9d126f9dbaeb4f1d935c6f172eba74c

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /font/citiolb_icons.ttf HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
date: Thu, 01 Dec 2022 17:28:29 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
cache-control: private
x-do-orig-status: 404
cf-cache-status: MISS
server: cloudflare
cf-ray: 772d8a1c9bf41bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/fonts/citiolb_icons.woff

104.16.244.78

200 OK

18 kB

URL HTTP/2
ctzacv.com/fonts/citiolb_icons.woff
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format, TrueType, length 18524, version 0.0\012- data
Size
18 kB (18524 bytes)
Hash
022cb73ac43269074f73e97b9cca4f2d
85f96bbe6d675a4892fbb483cde78c6eb9419d78
b23d0629822256b320de68cece2a79525216c20a0b040d4ee0ee6dd216b98115

Detections

Analyzer	Verdict	Alert
urlquery		Phishing - Citizens Bank
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /fonts/citiolb_icons.woff HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:30 GMT
content-type: font/woff
content-length: 18524
cache-control: public, max-age=0
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"485c-49773873e8"
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772d8a1f4ec31bfe-OSL
X-Firefox-Spdy: h2

ctzacv.com/font/citizen_roman.ttf

104.16.244.78

404 Not Found

29 kB

URL HTTP/2
ctzacv.com/font/citizen_roman.ttf
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1428)
Size
29 kB (28822 bytes)
Hash
54e17bd3c64bd888b3cb5b74cdd4d764
27663ded7516e0dbebb4200868d05256e5b09cfe
f5708071d64ab4b67261c1a412b0c27683ac4150d9c881d36d76534a3b25ac93

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /font/citizen_roman.ttf HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
date: Thu, 01 Dec 2022 17:28:29 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
cache-control: private
x-do-orig-status: 404
cf-cache-status: MISS
server: cloudflare
cf-ray: 772d8a1cac031bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/font/citizen_bold.ttf

104.16.244.78

404 Not Found

33 kB

URL HTTP/2
ctzacv.com/font/citizen_bold.ttf
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1428)
Size
33 kB (32834 bytes)
Hash
0400934cb78eb277b3f420fbf1980ae4
b8b629a1979fbba643359841382a6b73af0c87d9
674e0ab0a1c874ea0bb33ba8181971fdee3728ba55b5d9dbdbcedabbcfc63890

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /font/citizen_bold.ttf HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
date: Thu, 01 Dec 2022 17:28:29 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
cache-control: private
x-do-orig-status: 404
cf-cache-status: MISS
server: cloudflare
cf-ray: 772d8a1ccc291bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/font/citizen_extrabold.ttf

104.16.244.78

404 Not Found

33 kB

URL HTTP/2
ctzacv.com/font/citizen_extrabold.ttf
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1428)
Size
33 kB (32938 bytes)
Hash
674efce31a6347f351ffbaf7d94a12ab
7020fa0cddc72848e6de4eb08d4c322c990fa74a
4d9d84f1e261b7d046c32f910a233f12f51d9b398321faf998584582f8f949b4

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /font/citizen_extrabold.ttf HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
date: Thu, 01 Dec 2022 17:28:29 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
cache-control: private
x-do-orig-status: 404
cf-cache-status: MISS
server: cloudflare
cf-ray: 772d8a1c9bf71bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/_next/static/css/40454bbab671217b.css

104.16.244.78

200 OK

0 B

URL HTTP/2
ctzacv.com/_next/static/css/40454bbab671217b.css
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank

HTTP Headers

GET /_next/static/css/40454bbab671217b.css HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"1ba7-49773873e8"
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: HIT
age: 10003
server: cloudflare
cf-ray: 772d8a172e801bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/font/citizen_extrabold.woff

104.16.244.78

404 Not Found

0 B

URL HTTP/2
ctzacv.com/font/citizen_extrabold.woff
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /font/citizen_extrabold.woff HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
cache-control: private
x-do-orig-status: 404
cf-cache-status: MISS
server: cloudflare
cf-ray: 772d8a183f8f1bfe-OSL
X-Firefox-Spdy: h2

ctzacv.com/font/citizen_roman.woff

104.16.244.78

404 Not Found

0 B

URL HTTP/2
ctzacv.com/font/citizen_roman.woff
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /font/citizen_roman.woff HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
cache-control: private
x-do-orig-status: 404
cf-cache-status: MISS
server: cloudflare
cf-ray: 772d8a182f821bfe-OSL
X-Firefox-Spdy: h2

ctzacv.com/font/citizen_book.woff

104.16.244.78

404 Not Found

0 B

URL HTTP/2
ctzacv.com/font/citizen_book.woff
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /font/citizen_book.woff HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
cache-control: private
x-do-orig-status: 404
cf-cache-status: MISS
server: cloudflare
cf-ray: 772d8a182f871bfe-OSL
X-Firefox-Spdy: h2

ctzacv.com/font/citizen_bold.woff

104.16.244.78

404 Not Found

0 B

URL HTTP/2
ctzacv.com/font/citizen_bold.woff
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /font/citizen_bold.woff HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
cache-control: private
x-do-orig-status: 404
cf-cache-status: MISS
server: cloudflare
cf-ray: 772d8a186fb71bfe-OSL
X-Firefox-Spdy: h2

ctzacv.com/font/citiolb_icons.woff

104.16.244.78

404 Not Found

0 B

URL HTTP/2
ctzacv.com/font/citiolb_icons.woff
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /font/citiolb_icons.woff HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
cache-control: private
x-do-orig-status: 404
cf-cache-status: MISS
server: cloudflare
cf-ray: 772d8a183f921bfe-OSL
X-Firefox-Spdy: h2

ctzacv.com/_next/static/aXcBQnkVskEPdZWH5_irS/_ssgManifest.js

104.16.244.78

200 OK

0 B

URL HTTP/2
ctzacv.com/_next/static/aXcBQnkVskEPdZWH5_irS/_ssgManifest.js
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /_next/static/aXcBQnkVskEPdZWH5_irS/_ssgManifest.js HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"4c-49773873e8"
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: HIT
age: 10003
server: cloudflare
cf-ray: 772d8a173e991bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/_next/static/chunks/framework-9b5d6ec4444c80fa.js

104.16.244.78

200 OK

0 B

URL HTTP/2
ctzacv.com/_next/static/chunks/framework-9b5d6ec4444c80fa.js
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /_next/static/chunks/framework-9b5d6ec4444c80fa.js HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"228c5-49773873e8"
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: HIT
age: 10003
server: cloudflare
cf-ray: 772d8a172e891bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/_next/static/aXcBQnkVskEPdZWH5_irS/_buildManifest.js

104.16.244.78

200 OK

0 B

URL HTTP/2
ctzacv.com/_next/static/aXcBQnkVskEPdZWH5_irS/_buildManifest.js
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /_next/static/aXcBQnkVskEPdZWH5_irS/_buildManifest.js HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"92e-49773873e8"
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: HIT
age: 10003
server: cloudflare
cf-ray: 772d8a173e981bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/_next/static/chunks/90-18ebc539c7327ace.js

104.16.244.78

200 OK

0 B

URL HTTP/2
ctzacv.com/_next/static/chunks/90-18ebc539c7327ace.js
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /_next/static/chunks/90-18ebc539c7327ace.js HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"620c9-49773873e8"
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: HIT
age: 10003
server: cloudflare
cf-ray: 772d8a173e941bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/favicon.ico

104.16.244.78

200 OK

0 B

URL HTTP/2
ctzacv.com/favicon.ico
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:30 GMT
content-type: image/x-icon
cache-control: public, max-age=0
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"654b-49773873e8"
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: MISS
server: cloudflare
cf-ray: 772d8a246bc71bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/font/citizen_book.ttf

104.16.244.78

404 Not Found

0 B

URL HTTP/2
ctzacv.com/font/citizen_book.ttf
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /font/citizen_book.ttf HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
date: Thu, 01 Dec 2022 17:28:29 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
cache-control: private
x-do-orig-status: 404
cf-cache-status: MISS
server: cloudflare
cf-ray: 772d8a1cac051bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/login

104.16.244.78

200 OK

0 B

URL HTTP/2
ctzacv.com/login
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /login HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:27 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
cache-control: private
x-do-orig-status: 200
cf-cache-status: MISS
server: cloudflare
cf-ray: 772d8a1118101bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/efs/efs/grafx/arrow-right-orange.png

104.16.244.78

404 Not Found

0 B

URL HTTP/2
ctzacv.com/efs/efs/grafx/arrow-right-orange.png
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank

HTTP Headers

GET /efs/efs/grafx/arrow-right-orange.png HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
cache-control: private
x-do-orig-status: 404
cf-cache-status: MISS
server: cloudflare
cf-ray: 772d8a182f7e1bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

ctzacv.com/_next/static/chunks/pages/login-0b726c5c515e143e.js

104.16.244.78

200 OK

0 B

URL HTTP/2
ctzacv.com/_next/static/chunks/pages/login-0b726c5c515e143e.js
IP
104.16.244.78:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
openphish	RBS Citizens Bank
fortinet	Phishing

HTTP Headers

GET /_next/static/chunks/pages/login-0b726c5c515e143e.js HTTP/1.1
Host: ctzacv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ctzacv.com/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Dec 2022 17:28:28 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 01 Jan 1980 00:00:01 GMT
etag: W/"3213-49773873e8"
vary: Accept-Encoding
x-do-app-origin: c52c9d7d-a8b3-4b8c-a867-05a17ea84f6f
x-do-orig-status: 200
cf-cache-status: HIT
age: 10003
server: cloudflare
cf-ray: 772d8a173e961bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations