Report - jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk

Report Overview

Visited public
2025-01-09 23:06:27
Tags
Submit Tags
URL
jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk
Finishing URL
jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk
IP / ASN
45.60.243.243
#19551 INCAPSULA
Title
jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
jpm.njcourts.gov	unknown	unknown	2019-02-04	2025-01-09	9.7 kB	26 kB	45.60.243.243
fonts.gstatic.com	unknown	2008-02-11	2014-04-02	2025-01-08	2.1 kB	197 kB	142.250.178.35
fonts.googleapis.com	8877	2005-01-25	2012-05-23	2025-01-08	462 B	11 kB	142.250.74.10

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-01-09 23:06:02	high	45.60.243.243	Client IP	ETPRO EXPLOIT_KIT Possible Evil Redirect Leading to EK Dec 04 2016

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	jpm.njcourts.gov/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3	ScriptElement	80 kB	2025-01-09	2025-01-09
Pretty URL jpm.njcourts.gov/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3 IP 45.60.243.243 ASN #19551 INCAPSULA Introduced by scriptElement Embedded in HTML false Observations First Seen2025-01-09 23:06 Last Seen2025-01-09 23:06 Times Seen1 Hash e308c2614c805e2c6b945324f9132ad4 818517aef472733b7666e6542e47409c305253d7 8f8cda2fd2cba9c9b02fe500c42e9f6e3f31587ffe662e15b2dad994c7821186 Loading...

HTTP Transactions (11)

URL IP Response Size

GET jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk

45.60.243.243

403 Forbidden

844 B

URL User Request GET HTTP/1.1
jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk
IP
45.60.243.243:80
ASN
#19551 INCAPSULA

File type
HTML document, ASCII text, with very long lines (844), with no line terminators
Size
844 B (844 bytes)
Hash
49e31e9208fabb86d4a65d8238aa7340
8552ffd82a473b22603c3cde986f9a60dea5daf8
cefad36b763006f4306b4be81db33d2c81dfb2a3306233a47bdb6dad7966af28

HTTP Headers

GET /externalusers/ajax.exe?m5phqznk HTTP/1.1
Host: jpm.njcourts.gov
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
content-type: text/html
cache-control: no-cache
content-length: 844
x-iinfo: 14-20896122-0 0NNN RT(1736463961729 32) q(0 -1 -1 0) r(0 -1) B16 U18
set-cookie: visid_incap_2548102=bDnHRqGtT4SFM12nnb1zpVlWgGcAAAAAQUIPAAAAAAAI7KP2UCGrRFz3zXQBaJyp; expires=Fri, 09 Jan 2026 22:33:31 GMT; HttpOnly; path=/; Domain=.njcourts.gov
incap_ses_275_2548102=Cu6cWgsEeBSzIE04Rf/QA1lWgGcAAAAALWOPKEX5rxmOm8NB6exN7w==; path=/; Domain=.njcourts.gov
X-Firefox-Spdy: h2

GET jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk

45.60.243.243

403 Forbidden

841 B

URL User Request GET HTTP/1.1
jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk
IP
45.60.243.243:80
ASN
#19551 INCAPSULA

File type
HTML document, ASCII text, with very long lines (841), with no line terminators
Size
841 B (841 bytes)
Hash
606597f6dcb9532e78dd6cd5b0ffad2f
0a008c79712a10de10a4ed8ebeb686f6609ddf9f
82b2cc55b7ac0d6fdd225a6c625ce3f86f2a3f9bd5294f62d356a89baeb7e218

HTTP Headers

GET /externalusers/ajax.exe?m5phqznk HTTP/1.1
Host: jpm.njcourts.gov
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: visid_incap_2548102=bDnHRqGtT4SFM12nnb1zpVlWgGcAAAAAQUIPAAAAAAAI7KP2UCGrRFz3zXQBaJyp; incap_ses_275_2548102=Cu6cWgsEeBSzIE04Rf/QA1lWgGcAAAAALWOPKEX5rxmOm8NB6exN7w==
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Content-Type: text/html
Cache-Control: no-cache
Connection: close
Content-Length: 841
X-Iinfo: 12-10773567-0 0NNN RT(1736463961949 0) q(0 -1 -1 -1) r(0 -1) B16 U18

GET jpm.njcourts.gov/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3

45.60.243.243

200 OK

19 kB

URL GET HTTP/1.1
jpm.njcourts.gov/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3
IP
45.60.243.243:80
ASN
#19551 INCAPSULA

Requested by
http://jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk

File type
ASCII text, with very long lines (65536), with no line terminators
Size
19 kB (18858 bytes)
Hash
e308c2614c805e2c6b945324f9132ad4
818517aef472733b7666e6542e47409c305253d7
8f8cda2fd2cba9c9b02fe500c42e9f6e3f31587ffe662e15b2dad994c7821186

Detections

NIDS	Severity	Alert
suricata	high	ETPRO EXPLOIT_KIT Possible Evil Redirect Leading to EK Dec 04 2016

HTTP Headers

GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3 HTTP/1.1
Host: jpm.njcourts.gov
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk
Cookie: visid_incap_2548102=bDnHRqGtT4SFM12nnb1zpVlWgGcAAAAAQUIPAAAAAAAI7KP2UCGrRFz3zXQBaJyp; incap_ses_275_2548102=Cu6cWgsEeBSzIE04Rf/QA1lWgGcAAAAALWOPKEX5rxmOm8NB6exN7w==
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: application/javascript
Content-Encoding: gzip
X-Robots-Tag: noindex
Content-Length: 18858

GET jpm.njcourts.gov/_Incapsula_Resource?SWKMTFSR=1&e=0.3499289736183696

45.60.243.243

200 OK

1 B

URL GET HTTP/1.1
jpm.njcourts.gov/_Incapsula_Resource?SWKMTFSR=1&e=0.3499289736183696
IP
45.60.243.243:80
ASN
#19551 INCAPSULA

Requested by
http://jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

HTTP Headers

GET /_Incapsula_Resource?SWKMTFSR=1&e=0.3499289736183696 HTTP/1.1
Host: jpm.njcourts.gov
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk
Cookie: visid_incap_2548102=bDnHRqGtT4SFM12nnb1zpVlWgGcAAAAAQUIPAAAAAAAI7KP2UCGrRFz3zXQBaJyp; incap_ses_275_2548102=Cu6cWgsEeBSzIE04Rf/QA1lWgGcAAAAALWOPKEX5rxmOm8NB6exN7w==; ___utmvc=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
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: text/plain
X-Robots-Tag: noindex
Content-Length: 1
Set-Cookie: ___utmvc=a; Max-Age=0; path=/; expires=Sun, 05 Jan 2025 22:22:19 GMT

GET jpm.njcourts.gov/favicon.ico

45.60.243.243

403 Forbidden

729 B

URL GET HTTP/1.1
jpm.njcourts.gov/favicon.ico
IP
45.60.243.243:80
ASN
#19551 INCAPSULA

Requested by
http://jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk

File type
HTML document, ASCII text, with very long lines (729), with no line terminators
Size
729 B (729 bytes)
Hash
36cf17f6d3ffd467d4805f206c9ee275
592149d0d5fb42b7c0bcf117193a82d3f6439bf7
9e39355964ef4ce855c8e869b37d16db8ca7de573fcc8076e52d360a1ee5f033

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: jpm.njcourts.gov
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk
Cookie: visid_incap_2548102=bDnHRqGtT4SFM12nnb1zpVlWgGcAAAAAQUIPAAAAAAAI7KP2UCGrRFz3zXQBaJyp; incap_ses_275_2548102=Cu6cWgsEeBSzIE04Rf/QA1lWgGcAAAAALWOPKEX5rxmOm8NB6exN7w==
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Content-Type: text/html
Cache-Control: no-cache
Connection: close
Content-Length: 729
X-Iinfo: 1-1355316-0 0NNN RT(1736463962371 10) q(0 -1 -1 -1) r(0 -1) B16 U18

GET jpm.njcourts.gov/_Incapsula_Resource?CWUDNSAI=1&xinfo=12-10773567-0%200NNN%20RT%281736463961949%200%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29%20B16%20U18&incident_id=275000250032005299-53109169008608844&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET

45.60.243.243

200 OK

3.9 kB

URL GET HTTP/1.1
jpm.njcourts.gov/_Incapsula_Resource?CWUDNSAI=1&xinfo=12-10773567-0%200NNN%20RT%281736463961949%200%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29%20B16%20U18&incident_id=275000250032005299-53109169008608844&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET
IP
45.60.243.243:80
ASN
#19551 INCAPSULA

Requested by
http://jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk

File type
HTML document, ASCII text, with very long lines (4074), with CRLF line terminators
Size
3.9 kB (3904 bytes)
Hash
3ba005977086b2ae0365fc247d59b7a2
e6a114bb061b36d96260464dbe5c5e00cf4151d4
1b5b66717683515f3246c5f4dcd68dc3115ece22f173ecaee4ef91595970dc80

HTTP Headers

GET /_Incapsula_Resource?CWUDNSAI=1&xinfo=12-10773567-0%200NNN%20RT%281736463961949%200%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29%20B16%20U18&incident_id=275000250032005299-53109169008608844&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET HTTP/1.1
Host: jpm.njcourts.gov
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://jpm.njcourts.gov/externalusers/ajax.exe?m5phqznk
Cookie: visid_incap_2548102=bDnHRqGtT4SFM12nnb1zpVlWgGcAAAAAQUIPAAAAAAAI7KP2UCGrRFz3zXQBaJyp; incap_ses_275_2548102=Cu6cWgsEeBSzIE04Rf/QA1lWgGcAAAAALWOPKEX5rxmOm8NB6exN7w==; ___utmvc=NJY8gRAsbebPPWB+OIIPxo2rBElO1x5dTL2AM3RsbteGbfImG7XtrTFqPAPMMCogbz14H9xXSxKsyszDF+mi6OKRrWbwlZSr940a3J9FEttllqyEfdHaQrZFc4At0QJpxydcIj6/7WaW4zdLv7YDMkkDPWrFGHWCLeVQI8mPvutT3IbMBJaxyODJG6DFBeGEbY2T2jlJePbwVDwQEvJR+O1T1Mnht00qf/lnfdGNadqJixy2h4FkuzrI+mblWYhR7fiVr0GZNV6zIRxYwzXASs2wjgwBGQzoCg8QHJh6XDBb+rkqaIOSf0eRlF65s83p5tLam4rQCg2bMJlkfSGXwvz/yomn1wm4Htw3lYm5REw/M/NhAOkxyhMj5D3tXflcvEQuLV9ja+yqs9EWbEIvfjohwtamm5tRV1UOuS8eUZ9S5HQBv7zvxV3sLLXQM3eShfmnNp/x9LbZReiNNQ9szps/tmxTA0Kbr2UZfjXbMYlMkjJlqJk5KAxNJXWvtP2vuGPOxb+9YGnIQU2SXmh0gd+S23C+QrTG/wimuhESLjSXJfE1GO//SSs0+fcH2ZUnxx+ZikR6qfY8Rsc+ZyHZDVaUrPqRaQv+65FJmhb50yd7YU3hKAOwZ6nXHYOwyHVhBfifzDsV5Xv684qzdB4YunZVw9LwEOg9j6JSeRB6cGLKsQIhxrtMPfqxThZnC0vlC2aXqzp6P2R/Vn8aA/c6QyIOg/cu7ArELIud1OEdfsszB6juAYkedSBP8XQyMFb7nBZREaIOOMgQKc7HAFahg68C8EU+Bn7MCIaaYZPQ08rNFF7qGo161DzZCRso3NjxghnuRXMXHzLR2ZviZB2UWGRVpWhfI8Go0D7AALYAQ0W/gm+MZhsNNo8QMw8YB+mS5hxxhYmrqQ5H8iQmSofoThvJCGZGhdgIScYhcyf9mEaJe8hQp8SPzXdGsz0u/y5bxYmUnuzl7NTZ1AlKnCuXejRvXUWhCowGHP3e8kYcytFlHd9o+BbOU7O2DzAHz6fc+U2mOUS5vwGA4T0xvRZoypXBH7GKBua1tHDpcFGzXm/S2cOUm3/kM7w2Ne9x86wH7GXuxyhoYn1ryQ/2hBCAxJ5pNazB6G4gihLGOpAY4nER275zrg4XlwZz2zmWpmHzp/D2EHhbMFQFKnq4uLH7XDunNeYxyVk3fm0shKm+XzYoCl65KzRWOpHBgaanzlNmmCgeaYhww3GlMMf7FrxpBy85LsEaTel10zpC5SsSeefK3r+q6eG5CsJ+2gZkUiX04Xjl79NbvT8+sJTgUp6SPu4wGnWELvdDPetLbMxvz48BIKIgdtlPYndDP8ulnXbE8lrE5hXRz/9ewKpFLdM7YpbScc2rEnV2vBYZDbaFwm2BRc4MVXwcIWOQeSC6tO4b4CipOtykpaoBa9170egCg8g7uyergSxcr3yTdMV8STHrnxedVRCXxmtJJRiPPTr2XtJ8RmWvma0aA91rRynQm61HjRJfS9IwLNjO1gsAGpznK/E7joM9I0kuUQbSjLmxKroesv3kSE9nxYuPYWbXtykB5fEgf5sj780hV+K52eAREKJAdjK0sBY59y6T4xSUh+rzPU+pd0PwgXIn0WJbLMY4q+RbIGfbzJdYL6e3fbFXzWW/R3a1Toy2ROLkkDAlsGzBhallJyL84gJzQD0iHLL/zg1AMBCKiPEWTZOSxC26jHyuvVSNGH0lGOUrJGL3GmCI0X3WSFa3wFbtq/Y7fZ2aysd/GOOJkd8OwjW8lU2tpDyQgjxqFRUqcuQIMnvfovgrSTUBJoh4tHW1UusqMfU/av8BKSDkZDWIjhihShBH8BxQo4jsGjKG7Eplu3VtOHd7URHALO2hXcavZwtg65ZAq8u3EEvQnXXdNXTJaWt6wH7HpIKLvqd873Uume9na49UNvtAl5GvXXSltRYZDAL28LZfY1mRsDwSEOPpUesClAdPjVxB1L4hoJHVo5sx7Ru9TpyEWHB2qdA2PjAn2JINHhGYi3oC51h2BefqUbYszPdlPV1A7OyXMHhsuHsBu346WHJeoLAWrKyWrbg3UPtOaJaCcUWl9OLeVXWTUxn4SU8lAelFQbf8yaSQRMjOjczuSFLgkY25MvWxTvk9xt0og4+JItOIoVuN6N1WcUgzKyOA1Us/fTLezqDlQsaO3TU0/fXoWiazTEO2BcqXRXHkzFbb8nMp+5ddGGeSs1jItKDzpCbIKSwQWCfigh10UkVt7hs+0mVeuC6+QDBhrMe3v49CqgDDfeCVso0OlNvRw7i7ywYsTtnkOVmJd7Se2/RXCIKD9tF2VpfjHFjuCUvm4vOhCDnmg4vlEBO3IR7VAZOROqEvvNOC4Ak879Ud5SnwApywXIb32Co/DE6s5waUZTFb4sK6dBiqmOpxLjPG8/+lv96VnxhOD8Gho+pyi7AdBhwlydjJvbDdZ+VXVkVUDjfoGwpGxXXyPB/yPZ9GXlGYXja0gPQ7DWtk0LqwiwaXpgevXiDtZLuquB1FCLPRu8wsHQfRc+sc8o3uCvAgWxrjUi7Tq1cMza1OGjqaqA77sIU0kllwcggIp6Fdu7j1rpIu2CRpLpbturO1lisg6bT6QSndf1OaioJ6fNtgZpVOg7r0X7vxBWeaQ2udrfeu83IFjLQlNLc6Q4x1Vm6l4XiY/G1gI+Cvh0Z8Ya4ge6lqHKoCRMQ8kwByy2NrsZOzIk4dJLOYbdNYAuW76LmjRPQxibtmUVSEGS8V5I9erlCG4+As6MPSzT85pAF5P6GhvdgtN2yZ1PbnpTJmD3LSsZHJEIK3TIk14sjSI6Zf29Z9LVHxoHUElcxPzgVFksZbMgo1srbB6NZJtSf3OAmYUP2iLOfweqZxDh8N0ZhZAYl+RVi1/BcsZGlnZXN0PTE5NzM3NixzPTgzOGY5Yjg0OThhMmEyODY2Yzg2YWFhZDdlODI2YTlmYWI2ZTk2YTI4NmE1N2I2NWFiYWM3YTlmODU5YjY4N2I4NDhhNmI4NTk1YTA3NDcw
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: text/html
Content-Encoding: gzip
X-Robots-Tag: noindex
Content-Length: 3904

GET fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2

142.250.178.35

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2
IP
142.250.178.35:443
ASN
#15169 GOOGLE

Requested by
http://jpm.njcourts.gov/_Incapsula_Resource?CWUDNSAI=1&xinfo=12-10773567-0%200NNN%20RT%281736463961949%200%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29%20B16%20U18&incident_id=275000250032005299-53109169008608844&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF
ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48444, version 1.0
Size
48 kB (48444 bytes)
Hash
8e433c0592f77beb6dc527d7b90be120
d7402416753ae1bb4cbd4b10d33a0c10517838bd
f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af

HTTP Headers

GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://jpm.njcourts.gov
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48444
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 Jan 2025 17:59:02 GMT
expires: Fri, 09 Jan 2026 17:59:02 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Jul 2024 22:51:01 GMT
content-type: font/woff2
age: 18421
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2

142.250.178.35

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2
IP
142.250.178.35:443
ASN
#15169 GOOGLE

Requested by
http://jpm.njcourts.gov/_Incapsula_Resource?CWUDNSAI=1&xinfo=12-10773567-0%200NNN%20RT%281736463961949%200%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29%20B16%20U18&incident_id=275000250032005299-53109169008608844&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF
ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48444, version 1.0
Size
48 kB (48444 bytes)
Hash
8e433c0592f77beb6dc527d7b90be120
d7402416753ae1bb4cbd4b10d33a0c10517838bd
f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af

HTTP Headers

GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://jpm.njcourts.gov
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48444
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 Jan 2025 17:59:02 GMT
expires: Fri, 09 Jan 2026 17:59:02 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Jul 2024 22:51:01 GMT
content-type: font/woff2
age: 18421
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2

142.250.178.35

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2
IP
142.250.178.35:443
ASN
#15169 GOOGLE

Requested by
http://jpm.njcourts.gov/_Incapsula_Resource?CWUDNSAI=1&xinfo=12-10773567-0%200NNN%20RT%281736463961949%200%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29%20B16%20U18&incident_id=275000250032005299-53109169008608844&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF
ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48444, version 1.0
Size
48 kB (48444 bytes)
Hash
8e433c0592f77beb6dc527d7b90be120
d7402416753ae1bb4cbd4b10d33a0c10517838bd
f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af

HTTP Headers

GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://jpm.njcourts.gov
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48444
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 Jan 2025 17:59:02 GMT
expires: Fri, 09 Jan 2026 17:59:02 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Jul 2024 22:51:01 GMT
content-type: font/woff2
age: 18421
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2

142.250.178.35

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2
IP
142.250.178.35:443
ASN
#15169 GOOGLE

Requested by
http://jpm.njcourts.gov/_Incapsula_Resource?CWUDNSAI=1&xinfo=12-10773567-0%200NNN%20RT%281736463961949%200%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29%20B16%20U18&incident_id=275000250032005299-53109169008608844&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF
ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48444, version 1.0
Size
48 kB (48444 bytes)
Hash
8e433c0592f77beb6dc527d7b90be120
d7402416753ae1bb4cbd4b10d33a0c10517838bd
f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af

HTTP Headers

GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://jpm.njcourts.gov
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48444
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 Jan 2025 17:59:02 GMT
expires: Fri, 09 Jan 2026 17:59:02 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Jul 2024 22:51:01 GMT
content-type: font/woff2
age: 18421
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700&display=swap

142.250.74.10

200 OK

9.9 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700&display=swap
IP
142.250.74.10:443
ASN
#15169 GOOGLE

Requested by
http://jpm.njcourts.gov/_Incapsula_Resource?CWUDNSAI=1&xinfo=12-10773567-0%200NNN%20RT%281736463961949%200%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29%20B16%20U18&incident_id=275000250032005299-53109169008608844&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint30:E5:7E:29:A5:A1:81:DB:C8:A8:49:80:67:40:12:AB:30:C0:34:8D
ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT

File type
ASCII text, with very long lines (10136), with no line terminators
Size
9.9 kB (9884 bytes)
Hash
84adb598f0c2d68ba51b241ffc6774cc
900de88529bf02fb69d24b0fc949252dfa9d3443
3dbfea29d8899beb259e377c5d60be1307f96916b463a3398ccd0436697e81a1

HTTP Headers

GET /css2?family=Inter:wght@300;400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://jpm.njcourts.gov/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 09 Jan 2025 23:06:02 GMT
date: Thu, 09 Jan 2025 23:06:02 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by