Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
74s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
22/04/2023, 19:19 UTC
General
-
Target
http://go.usa.gov/xU5JC;
Score
1/10
Malware Config
Signatures
-
Modifies Internet Explorer settings 1 TTPs 35 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" http://go.usa.gov/xU5JC;1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1628 CREDAT:17410 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
-
Network
-
DNSgo.usa.govRemote address:8.8.8.8:53Requestgo.usa.govIN AResponsego.usa.govIN CNAMEdl1n1fxlgc4h5.cloudfront.netdl1n1fxlgc4h5.cloudfront.netIN A52.222.139.59dl1n1fxlgc4h5.cloudfront.netIN A52.222.139.25dl1n1fxlgc4h5.cloudfront.netIN A52.222.139.54dl1n1fxlgc4h5.cloudfront.netIN A52.222.139.96 -
DNS97.17.167.52.in-addr.arpaRemote address:8.8.8.8:53Request97.17.167.52.in-addr.arpaIN PTRResponse
-
GEThttp://go.usa.gov/xU5JC;Remote address:52.222.139.59:80RequestGET /xU5JC; HTTP/1.1
Accept: text/html, application/xhtml+xml, image/jxr, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: go.usa.gov
Connection: Keep-Alive
ResponseHTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 22 Apr 2023 19:19:37 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://go.usa.gov/xU5JC;
X-Cache: Redirect from cloudfront
Via: 1.1 dbd13e5e9621f4e45e6a452ed9862bf0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS50-C1
X-Amz-Cf-Id: kEfC76QWkiFx75rQgePIVahj4IaAxB7-yvDTch6ytaPOtczGRclBrg==
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
-
DNS59.139.222.52.in-addr.arpaRemote address:8.8.8.8:53Request59.139.222.52.in-addr.arpaIN PTRResponse59.139.222.52.in-addr.arpaIN PTRserver-52-222-139-59ams50r cloudfrontnet
-
GEThttps://go.usa.gov/xU5JC;Remote address:52.222.139.59:443RequestGET /xU5JC; HTTP/2.0
host: go.usa.gov
accept: text/html, application/xhtml+xml, image/jxr, */*
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 404
content-type: text/html
content-length: 18602
last-modified: Thu, 22 Sep 2022 14:58:01 GMT
x-amz-version-id: sPVWAuieNBeQKwTfkacLCGXjjPQBEXL.
etag: "d726e4cb6c7909d13ae7345ca7cfb461"
x-amz-error-code: NoSuchKey
x-amz-error-message: The specified key does not exist.
x-amz-error-detail-key: xU5JC;
date: Sat, 22 Apr 2023 19:19:36 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: 3mtdHAkjAqx0zNEY3mFXLH0K_sPLWjRqcrmLaty-GOx-LLlYz9ib1Q==
age: 5
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/css/styles.cssRemote address:52.222.139.59:443RequestGET /assets/uswds/css/styles.css HTTP/2.0
host: go.usa.gov
accept: text/css, */*
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: image/svg+xml
content-length: 800
date: Sat, 22 Apr 2023 19:19:38 GMT
last-modified: Sat, 17 Sep 2022 21:05:28 GMT
x-amz-version-id: PQWixc.10dKR4obvtxGt1hBdgduiTpyd
server: AmazonS3
etag: "42b4ac468597239a3d96db04c363277e"
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: X-qlv-4wEYGlBC17rj-UGZjnsKxckEdaKSF3DjEMMV4ZJPJiv2QiUA==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/img/us_flag_small.pngRemote address:52.222.139.59:443RequestGET /assets/uswds/img/us_flag_small.png HTTP/2.0
host: go.usa.gov
accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: image/svg+xml
content-length: 720
date: Sat, 22 Apr 2023 19:19:27 GMT
last-modified: Sat, 17 Sep 2022 21:05:28 GMT
x-amz-version-id: SynnN7QZobkLa_FEhvDO5t6D7rr2HdTu
server: AmazonS3
etag: "73abd86624ca4c09a380e14d5f60e258"
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: oCxYuj5fSPWE7kjtqx7FBTAHddJiFwtQbOApZ5N8BPlw7jqj_CrldA==
age: 15
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/img/icon-dot-gov.svgRemote address:52.222.139.59:443RequestGET /assets/uswds/img/icon-dot-gov.svg HTTP/2.0
host: go.usa.gov
accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: text/css
content-length: 379994
date: Sat, 22 Apr 2023 19:19:27 GMT
last-modified: Sat, 17 Sep 2022 21:05:27 GMT
x-amz-version-id: sY3.6P6RFb1HxMOOPW8q5u8lvCeU2l3O
server: AmazonS3
etag: "fc3d6eacacd88b33e2785fad7bfb2fcd"
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: I_Yl8p-bDzY9-z_7K8wk7YH7teT2xGyh0dwJ7sbDmfEv4VVEz00xUA==
age: 15
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/img/icon-https.svgRemote address:52.222.139.59:443RequestGET /assets/uswds/img/icon-https.svg HTTP/2.0
host: go.usa.gov
accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: image/svg+xml
content-length: 5585
date: Sat, 22 Apr 2023 19:19:27 GMT
last-modified: Sat, 17 Sep 2022 21:05:27 GMT
x-amz-version-id: mDRzuckAQSTgQRsM2Du.X8gCWG6zyZpX
server: AmazonS3
etag: "5ea189626d45a81662c5c5dfd2323f10"
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: IMURzqMSUvcSwI1iLvEtRvWf1GW8FTo3IcRaKCrl8RcBLKXIxzeONQ==
age: 15
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/imgs/clicked_go_url.svgRemote address:52.222.139.59:443RequestGET /assets/imgs/clicked_go_url.svg HTTP/2.0
host: go.usa.gov
accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: image/png
content-length: 176
date: Sat, 22 Apr 2023 19:19:27 GMT
last-modified: Sat, 17 Sep 2022 21:05:28 GMT
x-amz-version-id: qXBS190ttQlxMSdkKoSvQ_PjaytGdzTy
server: AmazonS3
etag: "be327dc2791d8096d69c7737a1d0a2b8"
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: TGUvllFXS8cQH6qccBRtwAQQSJQ90IlSzeNyXrPiks5Wzfhtd0Nysg==
age: 15
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/imgs/created_go_url.svgRemote address:52.222.139.59:443RequestGET /assets/imgs/created_go_url.svg HTTP/2.0
host: go.usa.gov
accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: image/png
content-length: 9255
date: Sat, 22 Apr 2023 19:19:27 GMT
last-modified: Sat, 17 Sep 2022 21:05:27 GMT
x-amz-version-id: tdivltxl21jGeaH0oK51L6viqImymFJj
server: AmazonS3
etag: "b56f34411a4a810459aa701955e6efb7"
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: OJ5haQEnrOLpEnymLzmTvoso-6bKPYqQ7jdZfFSAhQPy4Scov9GONQ==
age: 15
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/imgs/Logo_USAGov.pngRemote address:52.222.139.59:443RequestGET /assets/imgs/Logo_USAGov.png HTTP/2.0
host: go.usa.gov
accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: application/javascript
content-length: 85406
date: Sat, 22 Apr 2023 19:19:27 GMT
last-modified: Sat, 17 Sep 2022 21:05:28 GMT
x-amz-version-id: l0kwD6KC_kubn76OusNQ_s9dw6VV2n4J
server: AmazonS3
etag: "35a222cbcecb6e055cd501539eb2a663"
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: -DI8PofWbsTb46tFMTPazB9hK0e0i-S3Hed3az2XeGpJ7hAYsLMP1A==
age: 15
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/scroll.jsRemote address:52.222.139.59:443RequestGET /scroll.js HTTP/2.0
host: go.usa.gov
accept: application/javascript, */*;q=0.8
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: image/svg+xml
content-length: 2568
date: Sat, 22 Apr 2023 19:19:27 GMT
last-modified: Sat, 17 Sep 2022 21:05:27 GMT
x-amz-version-id: A1gUswFEwafXVOncVdJ9.8aln2kSSBDP
server: AmazonS3
etag: "b4db5a9fa1160dd5a6df8a0a2e2e0e00"
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: WngUhgfZCeAgJIfB8an3gYF1WEFzXdIrkp3z1UoHs3ToPUFiIQ3mjQ==
age: 15
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/js/uswds.min.jsRemote address:52.222.139.59:443RequestGET /assets/uswds/js/uswds.min.js HTTP/2.0
host: go.usa.gov
accept: application/javascript, */*;q=0.8
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: application/javascript
content-length: 1394
date: Sat, 22 Apr 2023 19:19:27 GMT
last-modified: Sat, 17 Sep 2022 23:11:57 GMT
x-amz-version-id: Z.YGZavo4Z6Tn27KykHNUviLglHlXqE4
server: AmazonS3
etag: "830d631ac3bc7ba7d5afef99e489812f"
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: 0Z_QwbfJbJRRn0BWWbW8IuuClkKlLjTRw_c50QixN8BIu5jX9EmV4A==
age: 15
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/fonts/source-sans-pro/sourcesanspro-light-webfont.woffRemote address:52.222.139.59:443RequestGET /assets/uswds/fonts/source-sans-pro/sourcesanspro-light-webfont.woff HTTP/2.0
host: go.usa.gov
accept: */*
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://go.usa.gov
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: application/font-woff
content-length: 25956
date: Sat, 22 Apr 2023 19:19:38 GMT
last-modified: Sat, 17 Sep 2022 21:05:28 GMT
x-amz-version-id: hGUrCvCpo_qJ_QV7bfw8wdAE.Hjxyxtj
etag: "9cf8ece97d8d8b563a906b6257a5d006"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: neFY1-HF4IIRWNKrBAU6zZaGTzhIj4tV7WshJBAKAEqzJeiO7QOcoA==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/fonts/source-sans-pro/sourcesanspro-regular-webfont.woffRemote address:52.222.139.59:443RequestGET /assets/uswds/fonts/source-sans-pro/sourcesanspro-regular-webfont.woff HTTP/2.0
host: go.usa.gov
accept: */*
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://go.usa.gov
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: application/font-woff
content-length: 26040
date: Sat, 22 Apr 2023 19:19:38 GMT
last-modified: Sat, 17 Sep 2022 21:05:28 GMT
x-amz-version-id: rZpleqZAQ1REJTzRa_lbn6RhOQAiJrRX
etag: "738b5fd59f27afa7b332f0d228ddd531"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: 0H0hlnr1UZmnW67RUpqa0kpXfGiWZsRCt4wk70abBB_hepFqeWoH0g==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/fonts/source-sans-pro/sourcesanspro-bold-webfont.woffRemote address:52.222.139.59:443RequestGET /assets/uswds/fonts/source-sans-pro/sourcesanspro-bold-webfont.woff HTTP/2.0
host: go.usa.gov
accept: */*
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://go.usa.gov
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: application/font-woff
content-length: 20256
date: Sat, 22 Apr 2023 19:19:38 GMT
last-modified: Sat, 17 Sep 2022 21:05:28 GMT
x-amz-version-id: 1SM0ZJwxAacLfqpolHl4Wo8e2k8eXP78
etag: "3fa6ebb831989f031e8bf92297a412bb"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: 5W70iApnsMACRHVVwJHQqAIYMpkjo4aCNCJ4JdMAaueaIgbPU_pcag==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/fonts/source-sans-pro/sourcesanspro-lightitalic-webfont.woffRemote address:52.222.139.59:443RequestGET /assets/uswds/fonts/source-sans-pro/sourcesanspro-lightitalic-webfont.woff HTTP/2.0
host: go.usa.gov
accept: */*
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://go.usa.gov
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: application/font-woff
content-length: 20204
date: Sat, 22 Apr 2023 19:19:38 GMT
last-modified: Sat, 17 Sep 2022 21:05:28 GMT
x-amz-version-id: OmHJO0j3NKppqaQFyueEbSSyNZGIeu1x
etag: "12c96d9d41277f807f1197332b75ce45"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: 5yi6gbz7dEWu4biHzKxXADLh6FxDBObkUki_aaBIxbUh3uhNEC7q9w==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/fonts/source-sans-pro/sourcesanspro-italic-webfont.woffRemote address:52.222.139.59:443RequestGET /assets/uswds/fonts/source-sans-pro/sourcesanspro-italic-webfont.woff HTTP/2.0
host: go.usa.gov
accept: */*
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://go.usa.gov
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: application/font-woff
content-length: 26140
date: Sat, 22 Apr 2023 19:19:38 GMT
last-modified: Sat, 17 Sep 2022 21:05:28 GMT
x-amz-version-id: uB1CjAMKEx8x_nflvuBT3lLGXxzo_bYw
etag: "34197df8bd5aaeed8cfa0504a098e9a8"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: MEItWTnmtiI_mqDRF6Qeh10kRwtbYf-MvqzTunrgQ7OsEivpigDq0w==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/fonts/source-sans-pro/sourcesanspro-bolditalic-webfont.woffRemote address:52.222.139.59:443RequestGET /assets/uswds/fonts/source-sans-pro/sourcesanspro-bolditalic-webfont.woff HTTP/2.0
host: go.usa.gov
accept: */*
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://go.usa.gov
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: application/font-woff
content-length: 20164
date: Sat, 22 Apr 2023 19:19:38 GMT
last-modified: Sat, 17 Sep 2022 21:05:28 GMT
x-amz-version-id: H7ctXGhPtd2YeGd64PpRGKvlFLAXQD0I
etag: "60573f53e7e5ceb3a6d0983e118864ab"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: U5efNGxv-wDqvqFJpo-piZhdl9KJIplmKCoPovGo39r3otdHrNeLlw==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/fonts/merriweather/Latin-Merriweather-Light.woffRemote address:52.222.139.59:443RequestGET /assets/uswds/fonts/merriweather/Latin-Merriweather-Light.woff HTTP/2.0
host: go.usa.gov
accept: */*
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://go.usa.gov
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: application/font-woff
content-length: 26988
date: Sat, 22 Apr 2023 19:19:39 GMT
last-modified: Sat, 17 Sep 2022 21:05:27 GMT
x-amz-version-id: f3sOlpzjdw6ceGotSn8JsMaa0Yz18oq8
etag: "ddae281a2be8f2bd6a322793a0c3cd56"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: wkkRHZG61m2MCfHQezk5iZOpOiRNljVDmr8-N4d01ndSqUuZ_eA65Q==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/fonts/merriweather/Latin-Merriweather-Regular.woffRemote address:52.222.139.59:443RequestGET /assets/uswds/fonts/merriweather/Latin-Merriweather-Regular.woff HTTP/2.0
host: go.usa.gov
accept: */*
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://go.usa.gov
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: application/font-woff
content-length: 23808
date: Sat, 22 Apr 2023 19:19:39 GMT
last-modified: Sat, 17 Sep 2022 21:05:27 GMT
x-amz-version-id: pSo4BONTPVypjgZ9EndHKj.wI39xrNgr
etag: "af8e7e14f7cdd26ea1024d2cf618b58e"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: 1VG--6L5i2xHIoLOrsjQ0I9FWF491wOhuFi8cLwUUrTOlqc6mPGPqQ==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/fonts/merriweather/Latin-Merriweather-Bold.woffRemote address:52.222.139.59:443RequestGET /assets/uswds/fonts/merriweather/Latin-Merriweather-Bold.woff HTTP/2.0
host: go.usa.gov
accept: */*
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://go.usa.gov
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: application/font-woff
content-length: 27512
date: Sat, 22 Apr 2023 19:19:39 GMT
last-modified: Sat, 17 Sep 2022 21:05:27 GMT
x-amz-version-id: uZDdSZ0tMQxEV6A7hKbDP_1qWGpcFHB3
etag: "73c28f4ec1aa47641399da34948db75c"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: R-xwpqO2p2-lnuRFh1G6bkwrkc8iCgGsCyBIoa46FNHDDffe1Czbpw==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/fonts/merriweather/Latin-Merriweather-LightItalic.woffRemote address:52.222.139.59:443RequestGET /assets/uswds/fonts/merriweather/Latin-Merriweather-LightItalic.woff HTTP/2.0
host: go.usa.gov
accept: */*
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://go.usa.gov
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: application/font-woff
content-length: 26892
date: Sat, 22 Apr 2023 19:19:39 GMT
last-modified: Sat, 17 Sep 2022 21:05:27 GMT
x-amz-version-id: DiOTh.jMnN91Q6ok.JDZzmsNncIpzpFn
etag: "704b3917b84cea21ae1466ce46c61f69"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: MRg9mMK01UjlAywV7oTa-mQedJSWkpm-eGdBY8XYi9g-ubjqdvfWxA==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/fonts/merriweather/Latin-Merriweather-Italic.woffRemote address:52.222.139.59:443RequestGET /assets/uswds/fonts/merriweather/Latin-Merriweather-Italic.woff HTTP/2.0
host: go.usa.gov
accept: */*
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://go.usa.gov
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: application/font-woff
content-length: 24152
date: Sat, 22 Apr 2023 19:19:39 GMT
last-modified: Sat, 17 Sep 2022 21:05:27 GMT
x-amz-version-id: YF3roLo1bY81f40HVPeKxqxoa9KkvVRC
etag: "b85b8ae5763647fddac32f6843fce5d0"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: QfOmAJW_-ywIjqk5uXgfw8ejuJhOJoemwF2svMpXKSgKG8Tlzx-r_g==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/fonts/merriweather/Latin-Merriweather-BoldItalic.woffRemote address:52.222.139.59:443RequestGET /assets/uswds/fonts/merriweather/Latin-Merriweather-BoldItalic.woff HTTP/2.0
host: go.usa.gov
accept: */*
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
origin: https://go.usa.gov
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: application/font-woff
content-length: 24464
date: Sat, 22 Apr 2023 19:19:39 GMT
last-modified: Sat, 17 Sep 2022 21:05:27 GMT
x-amz-version-id: rgrUCK2leHcDmv3joC2_BL5acRooHY2x
etag: "69debb55ba07cd17f2730f71caf77339"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: SVDLC3B6qv2Elly5yCLRfOPwlJ5rnsU6dA5bDRY-dcYJeU5ndHmS6w==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/img/usa-icons/remove.svgRemote address:52.222.139.59:443RequestGET /assets/uswds/img/usa-icons/remove.svg HTTP/2.0
host: go.usa.gov
accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: image/svg+xml
content-length: 155
date: Sat, 22 Apr 2023 19:19:39 GMT
last-modified: Sat, 17 Sep 2022 21:05:28 GMT
x-amz-version-id: yAnXp4Q48uSSbSHK0doPrp9ZMNWdHvaU
server: AmazonS3
etag: "d788b81e388932f8ba044a4f9364b90e"
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: urURNeIyyihlZkM3du6RpmQxhDCIyHjETVaWZ2YGs2s3CR_d9LJvoQ==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/img/usa-icons/add.svgRemote address:52.222.139.59:443RequestGET /assets/uswds/img/usa-icons/add.svg HTTP/2.0
host: go.usa.gov
accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: image/svg+xml
content-length: 173
date: Sat, 22 Apr 2023 19:19:39 GMT
last-modified: Sat, 17 Sep 2022 21:05:28 GMT
x-amz-version-id: a1fmID7kNXDUeSPITkgcKVPyAFo67U4t
server: AmazonS3
etag: "0e3e08bcb441c2cb39bdfff7f56f06a2"
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: ZF6C0wE-1yDuHcQK5EIRej8PceT00AXslXq9P1vkIakLrg07J8xYIA==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/imgs/Icon_Back_to_Top_Blue.pngRemote address:52.222.139.59:443RequestGET /assets/imgs/Icon_Back_to_Top_Blue.png HTTP/2.0
host: go.usa.gov
accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 404
content-type: text/html
content-length: 18602
last-modified: Thu, 22 Sep 2022 14:58:01 GMT
x-amz-version-id: sPVWAuieNBeQKwTfkacLCGXjjPQBEXL.
etag: "d726e4cb6c7909d13ae7345ca7cfb461"
x-amz-error-code: NoSuchKey
x-amz-error-message: The specified key does not exist.
x-amz-error-detail-key: assets/uswds/img/usa-icons-bg/error--white.svg
date: Sat, 22 Apr 2023 19:19:38 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: kys1upGgW9ZKATbAd1YxnPXRJpX4XPyu6dVVinxCR1LagGJ-59sIrA==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/img/usa-icons/expand_more.svgRemote address:52.222.139.59:443RequestGET /assets/uswds/img/usa-icons/expand_more.svg HTTP/2.0
host: go.usa.gov
accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: image/png
content-length: 2342
date: Sat, 22 Apr 2023 19:19:39 GMT
last-modified: Sat, 17 Sep 2022 21:05:27 GMT
x-amz-version-id: LbJvPfy5YkLeGgNyh6axJmrSAEtXHjkW
server: AmazonS3
etag: "f6180b97c3c7583227398dc61d85ac27"
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: B1mg7SmRRtLcSKAH04FXctkLLPzb2NA9RWkFeliWobljGfJr4oIFNw==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://go.usa.gov/assets/uswds/img/usa-icons-bg/error--white.svgRemote address:52.222.139.59:443RequestGET /assets/uswds/img/usa-icons-bg/error--white.svg HTTP/2.0
host: go.usa.gov
accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: image/svg+xml
content-length: 182
date: Sat, 22 Apr 2023 19:19:39 GMT
last-modified: Sat, 17 Sep 2022 21:05:28 GMT
x-amz-version-id: kA5nr0DEQz8JIvYOtljth0v.CEAxR2sK
etag: "95a46151caf2550da82be2575a6b881c"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 182732bb63f7d4f88e7cac0874b0cfee.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: QYNsA5CbKqtpAaNnQ91nW-8ij3DYZo9HOArIzhfYA0vrN3TIs-Dt-Q==
age: 4
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
DNSdap.digitalgov.govRemote address:8.8.8.8:53Requestdap.digitalgov.govIN AResponsedap.digitalgov.govIN CNAMEd27f3qgc9anoq2.cloudfront.netd27f3qgc9anoq2.cloudfront.netIN A108.156.60.15d27f3qgc9anoq2.cloudfront.netIN A108.156.60.60d27f3qgc9anoq2.cloudfront.netIN A108.156.60.24d27f3qgc9anoq2.cloudfront.netIN A108.156.60.13
-
GEThttps://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js?agency=GSA&subagency=TTS&dclink=trueRemote address:108.156.60.15:443RequestGET /Universal-Federated-Analytics-Min.js?agency=GSA&subagency=TTS&dclink=true HTTP/2.0
host: dap.digitalgov.gov
accept: application/javascript, */*;q=0.8
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
ResponseHTTP/2.0 200
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Tue, 14 May 2019 19:41:29 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: I0hR6H.cnrZ_sfVWlm0ZTBkdCjg4s9Sc
server: AmazonS3
content-encoding: gzip
date: Sat, 22 Apr 2023 04:28:44 GMT
etag: W/"9e1b714f83b726462a83db0033bac6db"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 acc5f68eb88a8e6d59815a0246ec23f0.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P2
x-amz-cf-id: hliLg84xUBU449y4GgG0Af6fSU1NPZC26eSmdmF3MBcXJa9MejF39A==
age: 53473
-
DNS188.155.64.172.in-addr.arpaRemote address:8.8.8.8:53Request188.155.64.172.in-addr.arpaIN PTRResponse
-
DNS14.160.190.20.in-addr.arpaRemote address:8.8.8.8:53Request14.160.190.20.in-addr.arpaIN PTRResponse
-
DNS68.32.18.104.in-addr.arpaRemote address:8.8.8.8:53Request68.32.18.104.in-addr.arpaIN PTRResponse
-
DNS15.60.156.108.in-addr.arpaRemote address:8.8.8.8:53Request15.60.156.108.in-addr.arpaIN PTRResponse15.60.156.108.in-addr.arpaIN PTRserver-108-156-60-15ams1r cloudfrontnet
-
DNSs.ss2.usRemote address:8.8.8.8:53Requests.ss2.usIN AResponses.ss2.usIN A13.227.211.177s.ss2.usIN A13.227.211.118s.ss2.usIN A13.227.211.169s.ss2.usIN A13.227.211.5
-
GEThttp://s.ss2.us/r.crlRemote address:13.227.211.177:80RequestGET /r.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/10.0
Host: s.ss2.us
ResponseHTTP/1.1 200 OK
Content-Type: application/x-pkcs7-crl
Content-Length: 486
Connection: keep-alive
Server: Sucuri/Cloudproxy
X-Sucuri-ID: 15031
Last-Modified: Tue, 29 Nov 2022 21:50:31 GMT
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
X-Sucuri-Cache: HIT
Accept-Ranges: bytes
Date: Sat, 22 Apr 2023 19:19:56 GMT
Cache-Control: public, no-transform, must-revalidate
Expires: Sat, 03 Dec 2022 18:03:09 GMT
ETag: "1e6-5eea2fa10271f"
X-Cache: Error from cloudfront
Via: 1.1 de31699a6e25448909328bb7c6028f6a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS54-C1
X-Amz-Cf-Id: XWW-cSvBTem_N93IAscxRr91HTwTJY9VzAgr7pcDZFbZ_r6eLrvkFw==
-
DNS177.211.227.13.in-addr.arpaRemote address:8.8.8.8:53Request177.211.227.13.in-addr.arpaIN PTRResponse177.211.227.13.in-addr.arpaIN PTRserver-13-227-211-177ams54r cloudfrontnet
-
DNSstats.g.doubleclick.netRemote address:8.8.8.8:53Requeststats.g.doubleclick.netIN AResponsestats.g.doubleclick.netIN A142.250.102.154stats.g.doubleclick.netIN A142.250.102.156stats.g.doubleclick.netIN A142.250.102.157stats.g.doubleclick.netIN A142.250.102.155
-
POSThttps://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-33523145-1&cid=912041346.1682198397&jid=2118041510&gjid=61335930&_gid=1974645221.1682198397&_u=YGBAgQQAAAAAAEAAo~&z=1894833535Remote address:142.250.102.154:443RequestPOST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-33523145-1&cid=912041346.1682198397&jid=2118041510&gjid=61335930&_gid=1974645221.1682198397&_u=YGBAgQQAAAAAAEAAo~&z=1894833535 HTTP/2.0
host: stats.g.doubleclick.net
accept: */*
content-type: text/plain
referer: https://go.usa.gov/xU5JC;
accept-language: en-US
origin: https://go.usa.gov
accept-encoding: gzip, deflate
user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
content-length: 0
cache-control: no-cache
ResponseHTTP/2.0 200
access-control-allow-origin: https://go.usa.gov
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 22 Apr 2023 19:19:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
DNS214.61.156.108.in-addr.arpaRemote address:8.8.8.8:53Request214.61.156.108.in-addr.arpaIN PTRResponse214.61.156.108.in-addr.arpaIN PTRserver-108-156-61-214ams1r cloudfrontnet
-
DNS206.23.217.172.in-addr.arpaRemote address:8.8.8.8:53Request206.23.217.172.in-addr.arpaIN PTRResponse206.23.217.172.in-addr.arpaIN PTRprg03s05-in-f2061e100net206.23.217.172.in-addr.arpaIN PTRams16s37-in-f14�J206.23.217.172.in-addr.arpaIN PTRprg03s05-in-f14�J
-
DNS254.3.248.8.in-addr.arpaRemote address:8.8.8.8:53Request254.3.248.8.in-addr.arpaIN PTRResponse
-
DNS35.36.251.142.in-addr.arpaRemote address:8.8.8.8:53Request35.36.251.142.in-addr.arpaIN PTRResponse35.36.251.142.in-addr.arpaIN PTRams17s12-in-f31e100net
-
DNS154.102.250.142.in-addr.arpaRemote address:8.8.8.8:53Request154.102.250.142.in-addr.arpaIN PTRResponse154.102.250.142.in-addr.arpaIN PTRrb-in-f1541e100net
-
DNS115.61.156.108.in-addr.arpaRemote address:8.8.8.8:53Request115.61.156.108.in-addr.arpaIN PTRResponse115.61.156.108.in-addr.arpaIN PTRserver-108-156-61-115ams1r cloudfrontnet
-
DNS200.232.18.117.in-addr.arpaRemote address:8.8.8.8:53Request200.232.18.117.in-addr.arpaIN PTRResponse
-
DNS157.123.68.40.in-addr.arpaRemote address:8.8.8.8:53Request157.123.68.40.in-addr.arpaIN PTRResponse
-
DNS86.8.109.52.in-addr.arpaRemote address:8.8.8.8:53Request86.8.109.52.in-addr.arpaIN PTRResponse
-
DNS200.197.79.204.in-addr.arpaRemote address:8.8.8.8:53Request200.197.79.204.in-addr.arpaIN PTRResponse200.197.79.204.in-addr.arpaIN PTRa-0001a-msedgenet
-
8.248.1.254:80
-
52.222.139.59:80http://go.usa.gov/xU5JC;http
HTTP Request
GET http://go.usa.gov/xU5JC;HTTP Response
301 -
52.222.139.59:80go.usa.gov
-
52.222.139.59:443https://go.usa.gov/assets/uswds/img/usa-icons-bg/error--white.svgtls, http2
HTTP Request
GET https://go.usa.gov/xU5JC;HTTP Response
404HTTP Request
GET https://go.usa.gov/assets/uswds/css/styles.cssHTTP Request
GET https://go.usa.gov/assets/uswds/img/us_flag_small.pngHTTP Request
GET https://go.usa.gov/assets/uswds/img/icon-dot-gov.svgHTTP Request
GET https://go.usa.gov/assets/uswds/img/icon-https.svgHTTP Request
GET https://go.usa.gov/assets/imgs/clicked_go_url.svgHTTP Request
GET https://go.usa.gov/assets/imgs/created_go_url.svgHTTP Request
GET https://go.usa.gov/assets/imgs/Logo_USAGov.pngHTTP Request
GET https://go.usa.gov/scroll.jsHTTP Request
GET https://go.usa.gov/assets/uswds/js/uswds.min.jsHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://go.usa.gov/assets/uswds/fonts/source-sans-pro/sourcesanspro-light-webfont.woffHTTP Request
GET https://go.usa.gov/assets/uswds/fonts/source-sans-pro/sourcesanspro-regular-webfont.woffHTTP Request
GET https://go.usa.gov/assets/uswds/fonts/source-sans-pro/sourcesanspro-bold-webfont.woffHTTP Request
GET https://go.usa.gov/assets/uswds/fonts/source-sans-pro/sourcesanspro-lightitalic-webfont.woffHTTP Request
GET https://go.usa.gov/assets/uswds/fonts/source-sans-pro/sourcesanspro-italic-webfont.woffHTTP Request
GET https://go.usa.gov/assets/uswds/fonts/source-sans-pro/sourcesanspro-bolditalic-webfont.woffHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://go.usa.gov/assets/uswds/fonts/merriweather/Latin-Merriweather-Light.woffHTTP Request
GET https://go.usa.gov/assets/uswds/fonts/merriweather/Latin-Merriweather-Regular.woffHTTP Request
GET https://go.usa.gov/assets/uswds/fonts/merriweather/Latin-Merriweather-Bold.woffHTTP Request
GET https://go.usa.gov/assets/uswds/fonts/merriweather/Latin-Merriweather-LightItalic.woffHTTP Request
GET https://go.usa.gov/assets/uswds/fonts/merriweather/Latin-Merriweather-Italic.woffHTTP Request
GET https://go.usa.gov/assets/uswds/fonts/merriweather/Latin-Merriweather-BoldItalic.woffHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://go.usa.gov/assets/uswds/img/usa-icons/remove.svgHTTP Request
GET https://go.usa.gov/assets/uswds/img/usa-icons/add.svgHTTP Request
GET https://go.usa.gov/assets/imgs/Icon_Back_to_Top_Blue.pngHTTP Request
GET https://go.usa.gov/assets/uswds/img/usa-icons/expand_more.svgHTTP Request
GET https://go.usa.gov/assets/uswds/img/usa-icons-bg/error--white.svgHTTP Response
200HTTP Response
200HTTP Response
404HTTP Response
200HTTP Response
200 -
93.184.220.29:80
-
108.156.60.15:443https://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js?agency=GSA&subagency=TTS&dclink=truetls, http2
HTTP Request
GET https://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js?agency=GSA&subagency=TTS&dclink=trueHTTP Response
200 -
108.156.60.15:443dap.digitalgov.govtls, http2
-
13.227.211.177:80http://s.ss2.us/r.crlhttp
HTTP Request
GET http://s.ss2.us/r.crlHTTP Response
200 -
142.250.102.154:443stats.g.doubleclick.nettls, http2
-
142.250.102.154:443https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-33523145-1&cid=912041346.1682198397&jid=2118041510&gjid=61335930&_gid=1974645221.1682198397&_u=YGBAgQQAAAAAAEAAo~&z=1894833535tls, http2
HTTP Request
POST https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-33523145-1&cid=912041346.1682198397&jid=2118041510&gjid=61335930&_gid=1974645221.1682198397&_u=YGBAgQQAAAAAAEAAo~&z=1894833535HTTP Response
200 -
104.208.16.90:443
-
209.197.3.8:80
-
173.223.113.164:443
-
173.223.113.131:80
-
204.79.197.203:80
-
8.248.1.254:80
-
204.79.197.200:443ieonline.microsoft.comtls, http2
-
8.8.8.8:53go.usa.govdns
DNS Request
go.usa.gov
DNS Response
52.222.139.5952.222.139.2552.222.139.5452.222.139.96
-
8.8.8.8:5397.17.167.52.in-addr.arpadns
DNS Request
97.17.167.52.in-addr.arpa
-
8.8.8.8:5359.139.222.52.in-addr.arpadns
DNS Request
59.139.222.52.in-addr.arpa
-
8.8.8.8:53dap.digitalgov.govdns
DNS Request
dap.digitalgov.gov
DNS Response
108.156.60.15108.156.60.60108.156.60.24108.156.60.13
-
8.8.8.8:53188.155.64.172.in-addr.arpadns
DNS Request
188.155.64.172.in-addr.arpa
-
8.8.8.8:5314.160.190.20.in-addr.arpadns
DNS Request
14.160.190.20.in-addr.arpa
-
8.8.8.8:5368.32.18.104.in-addr.arpadns
DNS Request
68.32.18.104.in-addr.arpa
-
8.8.8.8:5315.60.156.108.in-addr.arpadns
DNS Request
15.60.156.108.in-addr.arpa
-
8.8.8.8:53s.ss2.usdns
DNS Request
s.ss2.us
DNS Response
13.227.211.17713.227.211.11813.227.211.16913.227.211.5
-
8.8.8.8:53177.211.227.13.in-addr.arpadns
DNS Request
177.211.227.13.in-addr.arpa
-
8.8.8.8:53stats.g.doubleclick.netdns
DNS Request
stats.g.doubleclick.net
DNS Response
142.250.102.154142.250.102.156142.250.102.157142.250.102.155
-
8.8.8.8:53214.61.156.108.in-addr.arpadns
DNS Request
214.61.156.108.in-addr.arpa
-
8.8.8.8:53206.23.217.172.in-addr.arpadns
DNS Request
206.23.217.172.in-addr.arpa
-
8.8.8.8:53254.3.248.8.in-addr.arpadns
DNS Request
254.3.248.8.in-addr.arpa
-
8.8.8.8:5335.36.251.142.in-addr.arpadns
DNS Request
35.36.251.142.in-addr.arpa
-
8.8.8.8:53154.102.250.142.in-addr.arpadns
DNS Request
154.102.250.142.in-addr.arpa
-
8.8.8.8:53115.61.156.108.in-addr.arpadns
DNS Request
115.61.156.108.in-addr.arpa
-
8.8.8.8:53200.232.18.117.in-addr.arpadns
DNS Request
200.232.18.117.in-addr.arpa
-
8.8.8.8:53157.123.68.40.in-addr.arpadns
DNS Request
157.123.68.40.in-addr.arpa
-
8.8.8.8:5386.8.109.52.in-addr.arpadns
DNS Request
86.8.109.52.in-addr.arpa
-
8.8.8.8:53200.197.79.204.in-addr.arpadns
DNS Request
200.197.79.204.in-addr.arpa
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
471B
MD55f4619eefe020437b3246e25127c11d1
SHA15540e47175acabc053f946d8c2e0246d3ea297f1
SHA2566778145d2e3aff3e6e9e65d210cb7958c5fedad8a59f0e8b7aa876abf1b182d5
SHA5124f031e2f2bbd36477ccae8f3dc14df4c735314d4e06fb3e7be16f2c718830cedc1cf775ffd668abe7033f33bce270b9fa6cada4f944264e9e210c5af5cbfbb80
-
Filesize
404B
MD57ad469c10d64c45746194b6b26a197f2
SHA115eb4858b20a711760f5fd26a51472d0595014d5
SHA25600b1b4eaf82e4d1f11d5fbe2f364fd0da9d3a1b04f0e27885478d4aff17e2fe6
SHA512e596331e0d9295f2e240b13995a2e9a578065428eeddde296e52ea2f748dbf9e424d977936deb61c2c765761ad2ad66183c5ea26d063c35d28761cd81aab72b2
-
Filesize
17KB
MD55a34cb996293fde2cb7a4ac89587393a
SHA13c96c993500690d1a77873cd62bc639b3a10653f
SHA256c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
SHA512e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee