Overview

URLeur01.safelinks.protection.outlook.com/?url=email.notify.thinkific.com/c/eJwVjkGKxCAQRU8Tdwm22mVq4aI3c41QljqR2ImTGAb69OPAh794PHjRPcBKo2DWswiOOClSIjvQKL0MJiAwL5YsEM7wnBFpMPLKIW75Zwwx0V3aCB49PE3iNNqPquf0plzE6nRCtCQTWK95BqOksYFZR46JwaAobm2tXoN-Deqrb63cPjV9T1wyb-ne91iuiY93Z0dtef-v1fhAa_uL09G20t6Lws3kJ4qiuSu3uPzG0q241PPoqOVj_wP6rknS&data=05|01|ITHelpdesk@ducab.com|d9da7d9415ed4b47baf708dad8d41e75|e336e1e36dbb452a93ebe753e23c7e55|0|0|638060702797824269|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|3000|||&sdata=XR/rho3uzzEsfZokGu7pDG0W/azr8JAhoNEvujrbB24=&reserved=0
IP 104.47.1.28 (Austria)
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-08 06:57:55 UTC
StatusLoading report..
IDS alerts0
Blocklist alert85
urlquery alerts
3
Suspicious - DynDNS domain
Tags None

Domain Summary (30)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
d26b395fwzu5fz.cloudfront.net (1) 0 No data No data 54.230.245.147 Unknown ranking
www2.clickfunnels.com (1) 0 No data No data 104.16.16.194 Domain (clickfunnels.com) ranked at: 14979
ocsp.pki.goog (14) 175 2017-06-14 17:41:42 UTC 2019-01-23 06:35:32 UTC 142.250.74.131
images.clickfunnels.com (1) 95357 No data No data 104.16.16.194
use.fontawesome.com (2) 942 No data No data 172.64.133.15
img-getpocket.cdn.mozilla.net (6) 1631 No data No data 34.120.237.76
firefox.settings.services.mozilla.com (2) 867 No data No data 35.241.9.150
ocsp.digicert.com (5) 86 2012-05-21 07:02:23 UTC 2015-05-08 15:27:43 UTC 93.184.220.29
bam.nr-data.net (3) 630 No data No data 162.247.241.14
classic.clickfunnels.com (1) 0 No data No data 104.16.16.194 Domain (clickfunnels.com) ranked at: 14979
fonts.googleapis.com (3) 8877 No data No data 172.217.21.170
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
fonts.googleapis.com (3) 8877 No data No data 142.250.74.106
emiratespost.dynv6.net (2) 0 2022-11-29 08:08:40 UTC 2022-12-07 10:35:45 UTC 104.168.214.87 Unknown ranking
maps.googleapis.com (1) 33876 2022-06-02 21:16:52 UTC 2022-08-04 21:16:37 UTC 172.217.21.170
static.cloudflareinsights.com (1) 1294 2020-12-15 12:18:07 UTC 2020-12-15 12:18:07 UTC 104.16.57.101
contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239
eur01.safelinks.protection.outlook.com (1) 51790 No data No data 104.47.0.28
push.services.mozilla.com (1) 2140 2015-08-03 07:36:16 UTC 2015-10-22 06:43:00 UTC 52.39.57.61
w.sharethis.com (2) 19320 2014-12-07 02:47:58 UTC 2014-12-17 19:20:56 UTC 54.230.111.56
www.gstatic.com (1) 0 2015-06-20 09:50:55 UTC 2015-11-29 15:55:55 UTC 142.250.74.99 Domain (gstatic.com) ranked at: 540
email.notify.thinkific.com (1) 0 No data No data 34.86.85.56 Domain (thinkific.com) ranked at: 27441
hpctzpfg.clickfunnels.com (2) 0 No data No data 104.16.16.194 Domain (clickfunnels.com) ranked at: 14979
playfmradio.com (60) 0 2016-01-19 00:20:25 UTC 2022-12-06 06:16:53 UTC 200.58.110.205 Unknown ranking
www.google.com (1) 7 2015-05-10 11:11:19 UTC 2015-11-15 13:56:01 UTC 142.250.74.132
www.youtube.com (17) 90 2013-07-13 08:44:38 UTC 2021-02-01 20:12:13 UTC 216.58.207.206
r3.o.lencr.org (9) 344 No data No data 23.36.77.32
app.clickfunnels.com (7) 34727 2019-06-04 12:34:23 UTC 2022-12-03 13:58:05 UTC 104.16.16.194
js-agent.newrelic.com (3) 378 No data No data 151.101.130.137
fonts.gstatic.com (3) 0 No data No data 216.58.207.227 Domain (gstatic.com) ranked at: 540

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-08 2 playfmradio.com/ Phishing
2022-12-08 2 playfmradio.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ve (...) Phishing
2022-12-08 2 playfmradio.com/wp-content/plugins/qt-swipebox/swipebox/css/swipebox.min.cs (...) Phishing
2022-12-08 2 playfmradio.com/wp-content/plugins/qt-videogalleries/assets/style.css?ver=5.2.17 Phishing
2022-12-08 2 playfmradio.com/wp-content/themes/onair2/fonts/qticons/qticons.css?ver=2.3.1 Phishing
2022-12-08 2 playfmradio.com/wp-content/themes/onair2/components/slick/slick.css?ver=2.3.1 Phishing
2022-12-08 2 playfmradio.com/wp-content/themes/onair2/components/swipebox/src/css/swipeb (...) Phishing
2022-12-08 2 playfmradio.com/wp-content/themes/onair2/components/soundmanager/templates/ (...) Phishing
2022-12-08 2 playfmradio.com/wp-content/themes/onair2/components/soundmanager/templates/ (...) Phishing
2022-12-08 2 playfmradio.com/wp-content/plugins/wordpress-popular-posts/assets/js/wpp.mi (...) Phishing
2022-12-08 2 playfmradio.com/wp-content/plugins/contact-form-7/includes/css/styles.css?v (...) Phishing
2022-12-08 2 playfmradio.com/wp-includes/css/dist/block-library/style.min.css?ver=5.2.17 Phishing
2022-12-08 2 playfmradio.com/wp-content/plugins/qt-places/inc/frontend/assets/styles.css (...) Phishing
2022-12-08 2 playfmradio.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.0.0 Phishing
2022-12-08 2 playfmradio.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.3 Phishing
2022-12-08 2 playfmradio.com/wp-includes/js/masonry.min.js?ver=3.3.2 Phishing
2022-12-08 2 playfmradio.com/wp-content/plugins/qt-ajax-pageload/js/min/qt-ajax-pageload (...) Phishing
2022-12-08 2 playfmradio.com/wp-content/plugins/qt-loveit/js/qt-loveit.js?ver=1.0 Phishing
2022-12-08 2 playfmradio.com/wp-content/plugins/qt-places/inc/frontend/assets/min/script (...) Phishing
2022-12-08 2 playfmradio.com/wp-content/plugins/qt-swipebox/swipebox/js/jquery.swipebox. (...) Phishing
2022-12-08 2 playfmradio.com/wp-content/plugins/qt-videogalleries/assets/jquery.quicksan (...) Phishing
2022-12-08 2 playfmradio.com/wp-content/plugins/qt-videogalleries/assets/jquery-animate- (...) Phishing
2022-12-08 2 playfmradio.com/wp-content/themes/onair2/fonts/dripicons/fonts/dripicons-v2.woff Phishing
2022-12-08 2 playfmradio.com/wp-includes/js/wp-embed.min.js?ver=5.2.17 Phishing
2022-12-08 2 playfmradio.com/wp-content/themes/onair2/fonts/qticons/qticons.woff Phishing
2022-12-08 2 playfmradio.com/wp-content/uploads/wordpress-popular-posts/13649-featured-3 (...) Phishing
2022-12-08 2 playfmradio.com/wp-content/uploads/2022/08/WhatsApp-Image-2022-08-01-at-9.5 (...) Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed
2022-12-08 2 playfmradio.com Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 104.47.1.28
Date UQ / IDS / BL URL IP
2023-03-23 07:45:52 +0000 0 - 1 - 0 eur01.safelinks.protection.outlook.com/?url=r (...) 104.47.1.28
2023-03-15 11:41:51 +0000 0 - 2 - 0 eur01.safelinks.protection.outlook.com/?url=s (...) 104.47.1.28
2023-03-15 11:34:52 +0000 0 - 2 - 0 eur01.safelinks.protection.outlook.com/?url=s (...) 104.47.1.28
2023-02-17 08:00:22 +0000 0 - 0 - 10 eur01.safelinks.protection.outlook.com/?url=h (...) 104.47.1.28
2023-02-16 16:40:31 +0000 0 - 1 - 0 eur01.safelinks.protection.outlook.com/?url=c (...) 104.47.1.28


Last 5 reports on ASN: MICROSOFT-CORP-MSN-AS-BLOCK
Date UQ / IDS / BL URL IP
2023-03-23 23:41:40 +0000 0 - 84 - 0 temu.com/s/H8Oyv5KVSqH54p 20.237.30.240
2023-03-23 23:29:47 +0000 0 - 0 - 1 52.187.119.21/nagiosxi/login.php?redirect=/na (...) 52.187.119.21
2023-03-23 23:20:25 +0000 0 - 1 - 0 alfawassermann.mx/CMSContent/Alfasigma2017/do (...) 51.137.207.207
2023-03-23 22:58:09 +0000 0 - 1 - 0 store.biralmuwayh.org.sa/p/54852?a=aziz 104.211.225.167
2023-03-23 22:02:53 +0000 0 - 3 - 2 imghost.pics/film.php?id=95Q327.exe 52.173.151.229


Last 5 reports on domain: outlook.com
Date UQ / IDS / BL URL IP
2023-03-23 20:25:42 +0000 0 - 1 - 0 can01.safelinks.protection.outlook.com/?url=m (...) 52.102.12.92
2023-03-23 17:43:46 +0000 0 - 0 - 0 nam10.safelinks.protection.outlook.com/?url=h (...) 104.47.55.28
2023-03-23 17:00:05 +0000 0 - 1 - 0 gcc02.safelinks.protection.outlook.com/?url=g (...) 104.47.64.28
2023-03-23 16:44:30 +0000 0 - 0 - 0 nam10.safelinks.protection.outlook.com/?url=h (...) 104.47.55.28
2023-03-23 16:26:52 +0000 0 - 2 - 0 nam12.safelinks.protection.outlook.com/?url=w (...) 104.47.55.156


Last 2 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-09-20 21:43:26 +0000 0 - 0 - 23 adntel.com.bd/ 185.151.48.161
2022-09-06 11:01:50 +0000 0 - 0 - 27 ln-fashion.in/ 217.21.95.16

JavaScript

Executed Scripts (61)

Executed Evals (1)
#1 JavaScript::Eval (size: 20304) - SHA256: 9c1ea695852f01d2fc6027d572b126b740a9c4634540fb0d39ea3656377eef77
function $d(d) {
    return document.getElementById(d)
}
var proc = location.protocol;
if (proc != 'https:') {
    proc = 'http:'
}
var _image_path = proc + '//addthisevent.com/gfx/icon-calendar-t1.png';
var _ate_license = '';
var _ate_mouse = false;
var _ate_css = 'true';
var _ate_callback = '';
var _ate_dropdown = '';
var _ate_lbl_outlook = 'Outlook Calendar';
var _ate_lbl_google = 'Google Calendar';
var _ate_lbl_yahoo = 'Yahoo Calendar';
var _ate_lbl_hotmail = 'Hotmail Calendar';
var _ate_lbl_ical = 'iCal Calendar';
var _ate_lbl_fb_event = 'Facebook Event';
var _ate_show_outlook = true;
var _ate_show_google = true;
var _ate_show_yahoo = true;
var _ate_show_hotmail = true;
var _ate_show_ical = true;
var _ate_show_facebook = true;
var _d_rd = false;
var _ate_btn_found = false;
var _ate_btn_expo = false;
var addthisevent = function() {
    var D = false,
        dropzcx = 1,
        olddrop = '',
        dropmousetim, css1 = false,
        css2 = false;
    return {
        generate: function() {
            try {
                _image_path = _image_path
            } catch (e) {
                _image_path = proc + '//addthisevent.com/gfx/icon-calendar-t1.png'
            }
            try {
                _ate_license = _license
            } catch (e) {}
            try {
                _ate_mouse = _mouse
            } catch (e) {}
            try {
                _ate_css = _css
            } catch (e) {}
            var b = addthisevent.glicense(_ate_license);
            var c = document.getElementsByTagName('*');
            for (var d = 0; d < c.length; d += 1) {
                var f = '',
                    fbevent = false,
                    str = c[d].className,
                    htmx = '';
                if (addthisevent.hasclass(c[d], 'addthisevent')) {
                    var g = c[d].getElementsByTagName('span');
                    for (var m = 0; m < g.length; m += 1) {
                        if (addthisevent.hasclass(g[m], '_url')) {
                            g[m].style.display = 'none'
                        }
                        if (addthisevent.hasclass(g[m], '_start')) {
                            g[m].style.display = 'none';
                            f += '&dstart=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_end')) {
                            g[m].style.display = 'none';
                            f += '&dend=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_zonecode')) {
                            g[m].style.display = 'none';
                            f += '&dzone=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_summary')) {
                            g[m].style.display = 'none';
                            f += '&dsum=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_description')) {
                            g[m].style.display = 'none';
                            f += '&ddesc=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_location')) {
                            g[m].style.display = 'none';
                            f += '&dloca=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_organizer')) {
                            g[m].style.display = 'none';
                            f += '&dorga=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_organizer_email')) {
                            g[m].style.display = 'none';
                            f += '&dorgaem=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_attendees')) {
                            g[m].style.display = 'none';
                            f += '&datte=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_all_day_event')) {
                            g[m].style.display = 'none';
                            f += '&dallday=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_date_format')) {
                            g[m].style.display = 'none';
                            f += '&dateformat=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_alarm_reminder')) {
                            g[m].style.display = 'none';
                            f += '&alarm=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_recurring')) {
                            g[m].style.display = 'none';
                            f += '&drule=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_uid')) {
                            g[m].style.display = 'none';
                            f += '&uid=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_facebook_event')) {
                            if (g[m].innerHTML != '') {
                                g[m].style.display = 'none';
                                var h = g[m].innerHTML.replace(/ /gi, "");
                                f += '&fbevent=' + encodeURIComponent(h);
                                fbevent = true
                            }
                        }
                    }
                    if (b) {
                        f += '&credits=false'
                    }
                    f = f.replace(/'/gi, "�");
                    if (_ate_dropdown != '') {
                        _ate_dropdown = _ate_dropdown + ',';
                        _ate_dropdown = _ate_dropdown.replace(/ /gi, '');
                        var i = _ate_dropdown.split(',');
                        for (var a = 0; a < i.length; a += 1) {
                            if (_ate_show_outlook && i[a] == 'outlook') {
                                htmx += '<span class="ateoutlook" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'outlook\',\'' + f + '\');">' + _ate_lbl_outlook + '</span>'
                            }
                            if (_ate_show_google && i[a] == 'google') {
                                htmx += '<span class="ategoogle" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'google\',\'' + f + '\');">' + _ate_lbl_google + '</span>'
                            }
                            if (_ate_show_yahoo && i[a] == 'yahoo') {
                                htmx += '<span class="ateyahoo" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'yahoo\',\'' + f + '\');">' + _ate_lbl_yahoo + '</span>'
                            }
                            if (_ate_show_hotmail && i[a] == 'hotmail') {
                                htmx += '<span class="atehotmail" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'hotmail\',\'' + f + '\');">' + _ate_lbl_hotmail + '</span>'
                            }
                            if (_ate_show_ical && i[a] == 'ical') {
                                htmx += '<span class="ateical" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'ical\',\'' + f + '\');">' + _ate_lbl_ical + '</span>'
                            }
                            if (fbevent && i[a] == 'facebook') {
                                if (_ate_show_facebook && i[a] == 'facebook') {
                                    htmx += '<span class="atefacebook" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'facebook\',\'' + f + '\');">' + _ate_lbl_fb_event + '</span>'
                                }
                            }
                        }
                    } else {
                        if (_ate_show_outlook) {
                            htmx += '<span class="ateoutlook" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'outlook\',\'' + f + '\');">' + _ate_lbl_outlook + '</span>'
                        }
                        if (_ate_show_google) {
                            htmx += '<span class="ategoogle" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'google\',\'' + f + '\');">' + _ate_lbl_google + '</span>'
                        }
                        if (_ate_show_yahoo) {
                            htmx += '<span class="ateyahoo" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'yahoo\',\'' + f + '\');">' + _ate_lbl_yahoo + '</span>'
                        }
                        if (_ate_show_hotmail) {
                            htmx += '<span class="atehotmail" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'hotmail\',\'' + f + '\');">' + _ate_lbl_hotmail + '</span>'
                        }
                        if (_ate_show_ical) {
                            htmx += '<span class="ateical" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'ical\',\'' + f + '\');">' + _ate_lbl_ical + '</span>'
                        }
                        if (fbevent) {
                            if (_ate_show_facebook) {
                                htmx += '<span data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'facebook\',\'' + f + '\');">' + _ate_lbl_fb_event + '</span>'
                            }
                        }
                    }
                    if (!b) {
                        htmx += '<em class="copyx"><em class="brx"></em><em class="frs" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'home\');">AddThisEvent</em></em>'
                    }
                    c[d].id = 'atedrop' + dropzcx;
                    c[d].className = c[d].className.replace(/addthisevent/gi, '');
                    c[d].className = c[d].className + ' addthisevent-drop';
                    c[d].title = '';
                    var j = c[d].getAttribute('data-direct');
                    if (j) {
                        c[d].setAttribute('data-url', f);
                        c[d].setAttribute('data-ref', dropzcx);
                        c[d].onclick = function() {
                            addthisevent.direct(this);
                            return false
                        }
                    } else {
                        if (_ate_mouse) {
                            c[d].onmouseover = function() {
                                clearTimeout(dropmousetim);
                                addthisevent.show(this, 'auto', 'auto', true)
                            };
                            c[d].onmouseout = function() {
                                dropmousetim = setTimeout("addthisevent.out();", 200)
                            };
                            c[d].onclick = function() {
                                return false
                            }
                        } else {
                            c[d].onclick = function() {
                                addthisevent.show(this, 'auto', 'auto');
                                return false
                            }
                        }
                    }
                    var k = c[d];
                    var l = document.createElement('span');
                    l.id = 'atedrop' + dropzcx + '-drop';
                    l.className = 'addthisevent_dropdown';
                    l.innerHTML = htmx;
                    k.appendChild(l);
                    dropzcx++;
                    _ate_btn_found = true
                }
            }
            if (_ate_css == 'false') {
                addthisevent.trycss()
            } else {
                addthisevent.applycss(b)
            }
            if (_ate_btn_found && !_ate_btn_expo) {
                _ate_btn_expo = true;
                addthisevent.track({
                    typ: 'exposure',
                    cal: ''
                })
            }
        },
        direct: function(f) {
            var a = f.getAttribute('data-url');
            var b = f.getAttribute('data-direct');
            addthisevent.cli(f, b, a)
        },
        cli: function(f, a, b) {
            var c = '',
                ref = location.href,
                nw = true,
                now = new Date();
            if (a == 'outlook') {
                c = proc + '//addthisevent.com/create/?service=OUTLOOK' + b + '&reference=' + ref;
                nw = false
            }
            if (a == 'google') {
                c = proc + '//addthisevent.com/create/?service=GOOGLE' + b + '&reference=' + ref
            }
            if (a == 'yahoo') {
                c = proc + '//addthisevent.com/create/?service=YAHOO' + b + '&reference=' + ref
            }
            if (a == 'hotmail') {
                c = proc + '//addthisevent.com/create/?service=HOTMAIL' + b + '&reference=' + ref
            }
            if (a == 'ical') {
                c = proc + '//addthisevent.com/create/?service=ICAL' + b + '&reference=' + ref;
                nw = false
            }
            if (a == 'facebook') {
                c = proc + '//addthisevent.com/create/?service=FACEBOOK' + b + '&reference=' + ref
            }
            if (a == 'home') {
                c = proc + '//addthisevent.com/'
            }
            if (c != '') {
                if (a != 'home') {
                    var d = f.getAttribute('data-ref');
                    var g = $d('atedrop' + d);
                    if (g) {
                        var h = g.getAttribute('data-track');
                        if (h != null) {
                            h = h.replace(/ate-calendar/gi, a);
                            try {
                                eval(h)
                            } catch (e) {}
                        }
                    }
                }
                if (!$d('atecllink')) {
                    var j = document.createElement("a");
                    j.id = 'atecllink';
                    j.rel = 'external';
                    j.innerHTML = '{addthisevent-ghost-link}';
                    j.style.display = 'none';
                    document.body.appendChild(j)
                }
                var k = $d('atecllink');
                if (nw) {
                    k.target = '_blank'
                } else {
                    k.target = '_self'
                }
                k.href = c;
                addthisevent.eclick('atecllink')
            }
            addthisevent.track({
                typ: 'click',
                cal: a
            });
            if (_ate_callback) {
                for (var i = 0; i < _ate_callback.length; i++) {
                    try {
                        eval(_ate_callback[i])
                    } catch (e) {
                        alert(e.description)
                    }
                }
            }
        },
        applycss: function(a) {
            if (!css2) {
                var b;
                b = '.addthisevent-drop {display:inline-block;position:relative;font-family:arial;color:#333!important;background:#f4f4f4 url(' + _image_path + ') no-repeat 9px 50%;text-decoration:none!important;border:1px solid #d9d9d9;color:#555;font-weight:bold;font-size:14px;text-decoration:none;padding:9px 12px 8px 35px;-moz-border-radius:2px;-webkit-border-radius:2px;-webkit-touch-callout:none;-webkit-user-select:none;-khtml-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;}';
                b += '.addthisevent-drop:hover {border:1px solid #aab9d4;color:#555;font-weight:bold;font-size:14px;text-decoration:none!important;}';
                b += '.addthisevent-drop:active {top:1px;}';
                b += '.addthisevent-selected {background-color:#f7f7f7;}';
                if (a) {
                    b += '.addthisevent_dropdown {width:200px;position:absolute;z-index:99999;padding:0px 0px 0px 0px;background:#fff;text-align:left;display:none;margin-top:-2px;margin-left:-1px;border-top:1px solid #c8c8c8;border-right:1px solid #bebebe;border-bottom:1px solid #a8a8a8;border-left:1px solid #bebebe;-moz-border-radius:2px;-webkit-border-radius:2px;-webkit-box-shadow:1px 3px 6px rgba(0,0,0,0.15);-moz-box-shadow:1px 3px 6px rgba(0,0,0,0.15);box-shadow:1px 3px 6px rgba(0,0,0,0.15);}'
                } else {
                    b += '.addthisevent_dropdown {width:200px;position:absolute;z-index:99999;padding:6px 0px 0px 0px;background:#fff;text-align:left;display:none;margin-top:-2px;margin-left:-1px;border-top:1px solid #c8c8c8;border-right:1px solid #bebebe;border-bottom:1px solid #a8a8a8;border-left:1px solid #bebebe;-moz-border-radius:2px;-webkit-border-radius:2px;-webkit-box-shadow:1px 3px 6px rgba(0,0,0,0.15);-moz-box-shadow:1px 3px 6px rgba(0,0,0,0.15);box-shadow:1px 3px 6px rgba(0,0,0,0.15);}'
                }
                b += '.addthisevent_dropdown span {display:block;cursor:pointer;line-height:110%;background:#fff;text-decoration:none;font-size:12px;color:#6d84b4;padding:8px 10px 9px 15px;}';
                b += '.addthisevent_dropdown span:hover {background:#f4f4f4;color:#6d84b4;text-decoration:none;font-size:12px;}';
                b += '.addthisevent span {display:none!important;}';
                b += '.addthisevent-drop ._url,.addthisevent-drop ._start,.addthisevent-drop ._end,.addthisevent-drop ._zonecode,.addthisevent-drop ._summary,.addthisevent-drop ._description,.addthisevent-drop ._location,.addthisevent-drop ._organizer,.addthisevent-drop ._organizer_email,.addthisevent-drop ._facebook_event,.addthisevent-drop ._all_day_event {display:none!important;}';
                b += '.addthisevent_dropdown .copyx {width:200px;height:21px;display:block;position:relative;cursor:default;}';
                b += '.addthisevent_dropdown .brx {width:180px;height:1px;overflow:hidden;background:#e0e0e0;position:absolute;z-index:100;left:10px;top:9px;}';
                b += '.addthisevent_dropdown .frs {position:absolute;top:5px;cursor:pointer;right:10px;padding-left:10px;font-style:normal;font-weight:normal;text-align:right;z-index:101;line-height:110%;background:#fff;text-decoration:none;font-size:9px;color:#cacaca;}';
                b += '.addthisevent_dropdown .frs:hover {color:#999!important;}';
                var c = document.createElement("style");
                c.type = "text/css";
                c.id = "ate_css";
                if (c.styleSheet) {
                    c.styleSheet.cssText = b
                } else {
                    c.appendChild(document.createTextNode(b))
                }
                document.getElementsByTagName("head")[0].appendChild(c);
                css2 = true
            }
        },
        trycss: function() {
            if (!css1) {
                try {
                    var a = '.addthisevent {visibility:hidden;}';
                    a += '.addthisevent-drop ._url,.addthisevent-drop ._start,.addthisevent-drop ._end,.addthisevent-drop ._zonecode,.addthisevent-drop ._summary,.addthisevent-drop ._description,.addthisevent-drop ._location,.addthisevent-drop ._organizer,.addthisevent-drop ._organizer_email,.addthisevent-drop ._attendees,.addthisevent-drop ._facebook_event,.addthisevent-drop ._all_day_event {display:none!important;}';
                    var b = document.createElement("style");
                    b.type = "text/css";
                    if (b.styleSheet) {
                        b.styleSheet.cssText = a
                    } else {
                        b.appendChild(document.createTextNode(a))
                    }
                    document.getElementsByTagName("head")[0].appendChild(b)
                } catch (e) {}
                css1 = true;
                addthisevent.track({
                    typ: 'jsinit',
                    cal: ''
                })
            }
        },
        removecss: function() {
            try {
                return (hdx = $d('ate_css')) ? hdx.parentNode.removeChild(hdx) : false
            } catch (e) {}
        },
        show: function(f, o, a, b) {
            var c = f.id;
            var d = $d(c);
            var g = $d(c + '-drop');
            if (d && g) {
                if (olddrop != c) {
                    addthisevent.hide(olddrop)
                }
                var h = addthisevent.getstyle(g, 'display');
                try {
                    f.blur()
                } catch (e) {};
                if (h == 'block') {
                    if (b) {} else {
                        addthisevent.hide(c)
                    }
                } else {
                    olddrop = c;
                    d.className = d.className + ' addthisevent-selected';
                    d.style.zIndex = addthisevent.topzindex();
                    g.style.left = '0px';
                    g.style.top = '0px';
                    g.style.display = 'block';
                    setTimeout("addthisevent.tim();", 350);
                    D = false;
                    var i = parseInt(d.offsetHeight);
                    var j = parseInt(d.offsetWidth);
                    var k = parseInt(g.offsetHeight);
                    var l = parseInt(g.offsetWidth);
                    var m = addthisevent.viewport();
                    var n = m.split('/');
                    var p = parseInt(n[0]);
                    var q = parseInt(n[1]);
                    var r = parseInt(n[2]);
                    var s = parseInt(n[3]);
                    var t = addthisevent.elementposition(g);
                    var u = t.split('/');
                    var v = parseInt(u[0]);
                    var w = parseInt(u[1]);
                    var x = w + k;
                    var y = q + s;
                    var z = v + l;
                    var A = p + r;
                    var B = 0,
                        dropy = 0;
                    if (o == 'down' && a == 'left') {
                        B = '0px';
                        dropy = i + 'px'
                    } else if (o == 'up' && a == 'left') {
                        B = '0px';
                        dropy = -k + 'px'
                    } else if (o == 'down' && a == 'right') {
                        B = -(l - j) + 'px';
                        dropy = i + 'px'
                    } else if (o == 'up' && a == 'right') {
                        B = -(l - j) + 'px';
                        dropy = -k + 'px'
                    } else if (o == 'auto' && a == 'left') {
                        B = '0px';
                        if (x > y) {
                            dropy = -k + 'px'
                        } else {
                            dropy = i + 'px'
                        }
                    } else if (o == 'auto' && a == 'right') {
                        B = -(l - j) + 'px';
                        if (x > y) {
                            dropy = -k + 'px'
                        } else {
                            dropy = i + 'px'
                        }
                    } else {
                        if (x > y) {
                            dropy = -k + 'px'
                        } else {
                            dropy = i + 'px'
                        }
                        if (z > A) {
                            B = -(l - j) + 'px'
                        } else {
                            B = '0px'
                        }
                    }
                    g.style.left = B;
                    g.style.top = dropy;
                    var C = 'ontouchstart' in document.documentElement ? 'touchstart' : 'click';
                    if (document.addEventListener) {
                        document.addEventListener(C, function() {
                            if (D) {
                                setTimeout(function() {
                                    addthisevent.force(c)
                                }, 300)
                            }
                        }, false)
                    } else if (document.attachEvent) {
                        document.attachEvent("on" + C, function() {
                            if (D) {
                                setTimeout(function() {
                                    addthisevent.force(c)
                                }, 300)
                            }
                        })
                    } else {
                        document.onclick = function() {
                            addthisevent.force(c)
                        }
                    }
                }
            }
        },
        force: function(f) {
            var a = $d(f);
            var b = $d(f + '-drop');
            if (a && b) {
                if (D && b.style.display == 'block') {
                    setTimeout("addthisevent.hide('" + f + "');", 350)
                }
            }
        },
        out: function() {
            addthisevent.force(olddrop)
        },
        hide: function(f) {
            var a = $d(f);
            var b = $d(f + '-drop');
            if (a && b) {
                a.className = a.className.replace(/addthisevent-selected/gi, '');
                b.style.display = 'none';
                b.style.zIndex = ''
            }
        },
        tim: function() {
            D = true
        },
        topzindex: function() {
            var a = 99999;
            var b = document.getElementsByTagName('*');
            for (var d = 0; d < b.length; d += 1) {
                if (addthisevent.hasclass(b[d], 'addthisevent-drop') || addthisevent.hasclass(b[d], 'addeventstc-drop')) {
                    var c = addthisevent.getstyle(b[d], 'z-index');
                    if (!isNaN(parseFloat(c)) && isFinite(c)) {
                        c = parseInt(c);
                        if (c > a) {
                            a = c
                        }
                    }
                }
            }
            a++;
            return a
        },
        viewport: function() {
            var w = 0,
                h = 0,
                y = 0,
                x = 0;
            if (typeof(window.innerWidth) == 'number') {
                w = window.innerWidth;
                h = window.innerHeight
            } else if (document.documentElement && (document.documentElement.clientWidth || document.documentElement.clientHeight)) {
                w = document.documentElement.clientWidth;
                h = document.documentElement.clientHeight
            } else if (document.body && (document.body.clientWidth || document.body.clientHeight)) {
                w = document.body.clientWidth;
                h = document.body.clientHeight
            }
            if (document.all) {
                x = (document.documentElement.scrollLeft) ? document.documentElement.scrollLeft : document.body.scrollLeft;
                y = (document.documentElement.scrollTop) ? document.documentElement.scrollTop : document.body.scrollTop
            } else {
                x = window.pageXOffset;
                y = window.pageYOffset
            }
            return w + '/' + h + '/' + x + '/' + y
        },
        elementposition: function(a) {
            var x = 0,
                y = 0;
            if (a.offsetParent) {
                x = a.offsetLeft;
                y = a.offsetTop;
                while (a = a.offsetParent) {
                    x += a.offsetLeft;
                    y += a.offsetTop
                }
            }
            return x + '/' + y
        },
        getstyle: function(a, b) {
            var x = a;
            var y;
            if (x.currentStyle) {
                y = x.currentStyle[b]
            } else if (window.getComputedStyle) {
                y = document.defaultView.getComputedStyle(x, null).getPropertyValue(b)
            }
            return y
        },
        glicense: function(f) {
            var b = location.href;
            var c = true;
            var d = f;
            var e = d.length;
            if (e == 20) {
                var a = d.substring(0, 1);
                var z = d.substring(9, 10);
                var m = d.substring(17, 18);
                if (a != 'a') {
                    c = false
                }
                if (z != 'z') {
                    c = false
                }
                if (m != 'm') {
                    c = false
                }
            } else {
                c = false
            }
            if (b.indexOf('addthisevent.com') == -1 && d == 'aao8iuet5zp9iqw5sm9z') {
                c = false
            }
            return c
        },
        refresh: function() {
            var a = document.getElementsByTagName('*');
            for (var d = 0; d < a.length; d += 1) {
                if (addthisevent.hasclass(a[d], 'addthisevent-drop')) {
                    a[d].className = a[d].className.replace(/addthisevent-drop/gi, '');
                    a[d].className = a[d].className.replace(/addthisevent/gi, '');
                    a[d].className = a[d].className + ' addthisevent'
                }
            }
            _ate_btn_expo = false;
            addthisevent.generate()
        },
        callcack: function(f) {
            _ate_callback = f
        },
        setlabel: function(l, t) {
            var x = l.toLowerCase();
            if (x == 'outlook') {
                _ate_lbl_outlook = t
            }
            if (x == 'google') {
                _ate_lbl_google = t
            }
            if (x == 'yahoo') {
                _ate_lbl_yahoo = t
            }
            if (x == 'ical') {
                _ate_lbl_ical = t
            }
            if (x == 'facebookevent') {
                _ate_lbl_fb_event = t
            }
        },
        settings: function(c) {
            if (c.license != undefined) {
                _ate_license = c.license
            }
            if (c.css != undefined) {
                if (c.css) {
                    _ate_css = 'true'
                } else {
                    _ate_css = 'false';
                    addthisevent.removecss()
                }
            }
            if (c.mouse != undefined) {
                _ate_mouse = c.mouse
            }
            if (c.outlook != undefined) {
                if (c.outlook.show != undefined) {
                    _ate_show_outlook = c.outlook.show
                }
            }
            if (c.google != undefined) {
                if (c.google.show != undefined) {
                    _ate_show_google = c.google.show
                }
            }
            if (c.yahoo != undefined) {
                if (c.yahoo.show != undefined) {
                    _ate_show_yahoo = c.yahoo.show
                }
            }
            if (c.hotmail != undefined) {
                if (c.hotmail.show != undefined) {
                    _ate_show_hotmail = c.hotmail.show
                }
            }
            if (c.ical != undefined) {
                if (c.ical.show != undefined) {
                    _ate_show_ical = c.ical.show
                }
            }
            if (c.facebook != undefined) {
                if (c.facebook.show != undefined) {
                    _ate_show_facebook = c.facebook.show
                }
            }
            if (c.outlook != undefined) {
                if (c.outlook.text != undefined) {
                    _ate_lbl_outlook = c.outlook.text
                }
            }
            if (c.google != undefined) {
                if (c.google.text != undefined) {
                    _ate_lbl_google = c.google.text
                }
            }
            if (c.yahoo != undefined) {
                if (c.yahoo.text != undefined) {
                    _ate_lbl_yahoo = c.yahoo.text
                }
            }
            if (c.hotmail != undefined) {
                if (c.hotmail.text != undefined) {
                    _ate_lbl_hotmail = c.hotmail.text
                }
            }
            if (c.ical != undefined) {
                if (c.ical.text != undefined) {
                    _ate_lbl_ical = c.ical.text
                }
            }
            if (c.facebook != undefined) {
                if (c.facebook.text != undefined) {
                    _ate_lbl_fb_event = c.facebook.text
                }
            }
            if (c.dropdown != undefined) {
                if (c.dropdown.order != undefined) {
                    _ate_dropdown = c.dropdown.order
                }
            }
            if (c.callback != undefined) {
                _ate_callback = c.callback
            }
        },
        hasclass: function(e, c) {
            return new RegExp('(\\s|^)' + c + '(\\s|$)').test(e.className)
        },
        htmlencode: function(a) {
            var b = a.replace(/<br\s*[\/]?>/gi, "\n");
            b = b.replace(/<(?:.|\n)*?>/gm, '');
            b = b.replace(/(^\s+|\s+$)/g, '');
            var c = document.createElement("div");
            var d = document.createTextNode(b);
            c.appendChild(d);
            return c.innerHTML
        },
        eclick: function(a) {
            var b = document.getElementById(a);
            if (b.click) {
                b.click()
            } else if (document.createEvent) {
                var c = document.createEvent('MouseEvents');
                c.initEvent('click', true, true);
                b.dispatchEvent(c)
            }
        },
        track: function(a) {
            var b = new Image(1, 1);
            var d = new Date();
            var c = d.getTime();
            var e = encodeURIComponent(window.location.href);
            b.src = proc + '//track.addevent.com/atc/?trktyp=' + a.typ + '&trkcal=' + a.cal + '&guid=' + addthisevent.getguid() + '&url=' + e + '&cache=' + c
        },
        getguid: function() {
            var a = "addevent_track_cookie=",
                coov = '';
            var b = document.cookie.split(';');
            for (var i = 0; i < b.length; i++) {
                var c = b[i];
                while (c.charAt(0) == ' ') {
                    c = c.substring(1, c.length)
                }
                if (c.indexOf(a) == 0) {
                    coov = c.substring(a.length, c.length)
                }
            }
            if (coov == '') {
                var d = (addthisevent.s4() + addthisevent.s4() + "-" + addthisevent.s4() + "-4" + addthisevent.s4().substr(0, 3) + "-" + addthisevent.s4() + "-" + addthisevent.s4() + addthisevent.s4() + addthisevent.s4()).toLowerCase();
                var e = new Date();
                e.setTime(e.getTime() + (365 * 24 * 60 * 60 * 1000));
                var f = "expires=" + e.toUTCString();
                document.cookie = "addevent_track_cookie=" + d + "; " + f;
                coov = d
            }
            return coov
        },
        s4: function() {
            return (((1 + Math.random()) * 0x10000) | 0).toString(16).substring(1)
        }
    }
}();
if (window.addEventListener) {
    window.addEventListener("DOMContentLoaded", function() {
        _d_rd = true;
        addthisevent.trycss();
        addthisevent.generate()
    }, false);
    window.addEventListener("load", function() {
        addthisevent.generate()
    }, false)
} else if (window.attachEvent) {
    window.attachEvent("onreadystatechange", function() {
        _d_rd = true;
        addthisevent.trycss();
        addthisevent.generate()
    });
    window.attachEvent("onload", function() {
        addthisevent.generate()
    })
} else {
    window.onload = function() {
        addthisevent.generate()
    }
}
if (!_d_rd) {
    setTimeout("addthisevent.trycss();addthisevent.generate();", 20)
}

Executed Writes (0)


HTTP Transactions (153)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "89C5C0E2D6890798644174A8E31976AEC03A1B3DEB03812AFBB520E5ED68F522"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6253
Expires: Thu, 08 Dec 2022 08:41:55 GMT
Date: Thu, 08 Dec 2022 06:57:42 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3474
Expires: Thu, 08 Dec 2022 07:55:36 GMT
Date: Thu, 08 Dec 2022 06:57:42 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 06:08:09 GMT
age: 2973
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "593BC437FF8A8233516C62613D50220FCB25B9F967ED5FB384C253F0DB135103"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12108
Expires: Thu, 08 Dec 2022 10:19:30 GMT
Date: Thu, 08 Dec 2022 06:57:42 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: qdXY5Q9xlCB4jCm31xqTOAD9DOcylVjXBxSjUwhFrt88t5J2efrbhUNZJDd/AiCZSJMCHCCdgPA=
x-amz-request-id: 8B7FXHX7KD611TZH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 06:47:49 GMT
age: 593
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 08 Dec 2022 06:57:42 GMT
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 06:07:58 GMT
age: 2985
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /?url=https://email.notify.thinkific.com/c/eJwVjkGKxCAQRU8Tdwm22mVq4aI3c41QljqR2ImTGAb69OPAh794PHjRPcBKo2DWswiOOClSIjvQKL0MJiAwL5YsEM7wnBFpMPLKIW75Zwwx0V3aCB49PE3iNNqPquf0plzE6nRCtCQTWK95BqOksYFZR46JwaAobm2tXoN-Deqrb63cPjV9T1wyb-ne91iuiY93Z0dtef-v1fhAa_uL09G20t6Lws3kJ4qiuSu3uPzG0q241PPoqOVj_wP6rknS&data=05|01|ITHelpdesk@ducab.com|d9da7d9415ed4b47baf708dad8d41e75|e336e1e36dbb452a93ebe753e23c7e55|0|0|638060702797824269|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|3000|||&sdata=XR/rho3uzzEsfZokGu7pDG0W/azr8JAhoNEvujrbB24=&reserved=0 HTTP/1.1 
Host: eur01.safelinks.protection.outlook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         104.47.0.28
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private
Location: https://email.notify.thinkific.com/c/eJwVjkGKxCAQRU8Tdwm22mVq4aI3c41QljqR2ImTGAb69OPAh794PHjRPcBKo2DWswiOOClSIjvQKL0MJiAwL5YsEM7wnBFpMPLKIW75Zwwx0V3aCB49PE3iNNqPquf0plzE6nRCtCQTWK95BqOksYFZR46JwaAobm2tXoN-Deqrb63cPjV9T1wyb-ne91iuiY93Z0dtef-v1fhAa_uL09G20t6Lws3kJ4qiuSu3uPzG0q241PPoqOVj_wP6rknS
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 4.0
X-SL-GetUrlReputation-Verdict: Good
X-Robots-Tag: noindex, nofollow
X-AspNet-Version: 4.0.30319
X-ServerName: HE1EUR01WS053
X-ServerVersion: 15.20.5901.014
X-ServerLat: 747
X-SafeLinks-Tracking-Id: 69374014-a465-4cf8-e872-08dad8e980b3
X-Powered-By: ASP.NET
X-Content-Type-Options: nosniff
X-UA-Compatible: IE=Edge
Date: Thu, 08 Dec 2022 06:57:42 GMT
Connection: close
Content-Length: 410


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (338), with CRLF line terminators
Size:   410
Md5:    e620b253d09ee874bce6a3e8c024bd89
Sha1:   ed9c1f9b10351dfe15d457e73c9cf3d57a726d55
Sha256: 1dd6808f6e388c770b40e4168ffdbd7486db4cc219848b820814ce1af2c1fda1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 925
Cache-Control: max-age=95072
Date: Thu, 08 Dec 2022 06:57:43 GMT
Etag: "639057aa-1d7"
Expires: Fri, 09 Dec 2022 09:22:15 GMT
Last-Modified: Wed, 07 Dec 2022 09:06:50 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7F3C52B19A3111D6317CCDAF1071E9F6A5B7B0ACECBC01667C60A79EE69F3B4A"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10167
Expires: Thu, 08 Dec 2022 09:47:10 GMT
Date: Thu, 08 Dec 2022 06:57:43 GMT
Connection: keep-alive

                                        
                                            GET /c/eJwVjkGKxCAQRU8Tdwm22mVq4aI3c41QljqR2ImTGAb69OPAh794PHjRPcBKo2DWswiOOClSIjvQKL0MJiAwL5YsEM7wnBFpMPLKIW75Zwwx0V3aCB49PE3iNNqPquf0plzE6nRCtCQTWK95BqOksYFZR46JwaAobm2tXoN-Deqrb63cPjV9T1wyb-ne91iuiY93Z0dtef-v1fhAa_uL09G20t6Lws3kJ4qiuSu3uPzG0q241PPoqOVj_wP6rknS HTTP/1.1 
Host: email.notify.thinkific.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         34.86.85.56
HTTP/2 302 Found
content-type: text/html
                                        
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-store
date: Thu, 08 Dec 2022 06:57:43 GMT
location: https://hpctzpfg.clickfunnels.com/optin1670391977703
x-robots-tag: noindex
x-xss-protection: 1; mode=block
content-length: 454
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   454
Md5:    4122850b7b3548f185247c80d08d5cfe
Sha1:   9d46766324f9693af90c8970667c3fedaddd5891
Sha256: 4dc5c0a117f8926bb401563f9577f86b148e4a0d08d33059384112d7a380aae9
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lXees4sO+KBhS/LdD1fEiw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.39.57.61
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: UmxUmTEF8SW7V3kUvTyQrqPgQco=

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6454
Cache-Control: max-age=106708
Date: Thu, 08 Dec 2022 06:57:43 GMT
Etag: "63906f85-116"
Expires: Fri, 09 Dec 2022 12:36:11 GMT
Last-Modified: Wed, 07 Dec 2022 10:48:37 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 275
Cache-Control: max-age=172171
Date: Thu, 08 Dec 2022 06:57:43 GMT
Etag: "6391875f-117"
Expires: Sat, 10 Dec 2022 06:47:14 GMT
Last-Modified: Thu, 08 Dec 2022 06:42:39 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 06:57:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 06:57:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /assets/lander.css HTTP/1.1 
Host: app.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Cookie: __cf_bm=maufTKbfTPIK1FNh6LaHqaIJzSDEiOVQRUGmdecIVpA-1670482663-0-AYhPKzYGPM08x3yW1IYY74WKzacBGLMsNtktknuuoKzzs3X9Yfz7jkCI02A0WggeObA+sW8Z5OfbsFt5RCgxQ9IrBXicmz2N2i61iDr4PxY2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.16.194
HTTP/2 200 OK
content-type: text/css
                                        
date: Thu, 08 Dec 2022 06:57:44 GMT
cf-ray: 77639bc9fa4cfab8-OSL
access-control-allow-origin: *
age: 122
cache-control: public, max-age=1200
etag: W/"637bf173-6a514"
expires: Thu, 08 Dec 2022 07:17:44 GMT
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (53232)
Size:   71601
Md5:    74fb48107870d37dfd574e5f25e2c2e5
Sha1:   dc6a912b1a3660cff10ef4d425b3b47f88e9b0b4
Sha256: 37abbf2187fb7c9ba64517b94f8c7f554252231be5fa60c7ea1736e07d53cf34
                                        
                                            GET /assets/userevents/application.js HTTP/1.1 
Host: app.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Cookie: __cf_bm=maufTKbfTPIK1FNh6LaHqaIJzSDEiOVQRUGmdecIVpA-1670482663-0-AYhPKzYGPM08x3yW1IYY74WKzacBGLMsNtktknuuoKzzs3X9Yfz7jkCI02A0WggeObA+sW8Z5OfbsFt5RCgxQ9IrBXicmz2N2i61iDr4PxY2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.16.194
HTTP/2 200 OK
content-type: application/x-javascript
                                        
date: Thu, 08 Dec 2022 06:57:44 GMT
cf-ray: 77639bca3a65fab8-OSL
access-control-allow-origin: *
age: 520
cache-control: public, max-age=1200
etag: W/"637bf173-147c"
expires: Thu, 08 Dec 2022 07:17:44 GMT
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5244), with no line terminators
Size:   2103
Md5:    124e739c09bd085f90596389281c8f37
Sha1:   0e331223dcb52e0c2fb5b8a2eaf4004f89d97010
Sha256: b1afc12f0d5c9fd54e3acd54bf7385a767211e2ce62ea6538eab26c664c75fd7
                                        
                                            GET /css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 08 Dec 2022 06:57:44 GMT
date: Thu, 08 Dec 2022 06:57:44 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   2921
Md5:    193f3c7dd83b0763911db614f7616d2d
Sha1:   89318bc6102cd00796f820c139ca0d29d6c1b0d8
Sha256: b6bd6b1219a0f9e33d3d0c37be03016fbd7dc3a0aeda935545836109b303ca15
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 95
Cache-Control: max-age=105042
Date: Thu, 08 Dec 2022 06:57:44 GMT
Etag: "639081db-117"
Expires: Fri, 09 Dec 2022 12:08:26 GMT
Last-Modified: Wed, 07 Dec 2022 12:06:51 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /3d/392630953c4119a324492bb1c05778/ClickfunnelsTag.png HTTP/1.1 
Host: images.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Cookie: __cf_bm=maufTKbfTPIK1FNh6LaHqaIJzSDEiOVQRUGmdecIVpA-1670482663-0-AYhPKzYGPM08x3yW1IYY74WKzacBGLMsNtktknuuoKzzs3X9Yfz7jkCI02A0WggeObA+sW8Z5OfbsFt5RCgxQ9IrBXicmz2N2i61iDr4PxY2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.16.194
HTTP/2 200 OK
content-type: image/webp
                                        
date: Thu, 08 Dec 2022 06:57:44 GMT
content-length: 5276
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=9030
content-disposition: inline; filename="ClickfunnelsTag.webp"
etag: "a633777156a5ffeb58c92d3d59fa4e34"
last-modified: Fri, 03 Jan 2020 17:41:49 GMT
vary: Accept
x-amz-id-2: mpfiofoz3/g51l0X59TmfRciwp2R2+klwKzL5vkyJWZPbOjzCzwQzX2/BNhT36HmjMtaLHBKOlM=
x-amz-request-id: 8H4XD9AS9YGT4H71
cf-cache-status: HIT
age: 1514
expires: Sun, 01 Jan 2023 06:57:44 GMT
cache-control: public, max-age=2073600
accept-ranges: bytes
server: cloudflare
cf-ray: 77639bcafab7fab8-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   5276
Md5:    d99a10ef5010513b3d30f7cf51614b5f
Sha1:   d60c1da11f05540f39632c7357c22b76c9ee1ed7
Sha256: 5dfa88a4dc8b6c0b834a62e45daee28a8dc37ed6ae7eb1545e4ed8b6382c0474
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6392
Expires: Thu, 08 Dec 2022 08:44:16 GMT
Date: Thu, 08 Dec 2022 06:57:44 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6392
Expires: Thu, 08 Dec 2022 08:44:16 GMT
Date: Thu, 08 Dec 2022 06:57:44 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6392
Expires: Thu, 08 Dec 2022 08:44:16 GMT
Date: Thu, 08 Dec 2022 06:57:44 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6392
Expires: Thu, 08 Dec 2022 08:44:16 GMT
Date: Thu, 08 Dec 2022 06:57:44 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6392
Expires: Thu, 08 Dec 2022 08:44:16 GMT
Date: Thu, 08 Dec 2022 06:57:44 GMT
Connection: keep-alive

                                        
                                            GET /releases/v5.9.0/css/v4-shims.css HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.64.133.15
HTTP/2 200 OK
content-type: text/css
                                        
date: Thu, 08 Dec 2022 06:57:44 GMT
x-amz-id-2: WpVlr9E4LNAdFsXi6U7ITEvBAF0od/nY8z13ckAJA/I/wFoGHyoSwlXOyhWr8pqbj6dB1MeQp5k=
x-amz-request-id: CN86A7VHSM61Q680
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"e140a7d32f343530f016095df3cc2ae4"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 2140570
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rouo%2Fe%2Bx5Rrfk9a63o09bw%2FAWWZAZ0fcPB%2Bl5dnGSBFnn7cMDLeTmgJGTxgz%2BeDIeF940udG0JFceifrBrYUkRpLVecISGbcDGDxJeMtVZVVDC9SKeWB98dqcsM8drZdy4u9MIB%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77639bcac9d50052-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (26440)
Size:   8752
Md5:    a5a7e146984c5d7b339aca9a939f00fb
Sha1:   35fee527d8d710569a63a4256f2fb22855fccbb7
Sha256: a658e53cf5ba96ad68544ec26eef24c577d4b334c0980a54cc87c9c8fae74150
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2dbe127a-1d23-4c1b-b13e-cd024e5fd5de.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8626
x-amzn-requestid: c5f3e36b-87f1-4938-819c-7b1a6ec6bfeb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4BXHJ0oAMFaKQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106d5-15635f9a10d25d8c1d702bbd;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zQXtGXxwwTmn7gMQQj5wM69mPzAmYXRyfTbYfgUovTGsS0y048GZDg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 21:51:32 GMT
age: 32772
etag: "86cd1428b2fd21ccb9d80c7f6be4d1e6221e97ef"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8626
Md5:    d2d14fc1b5d2e6d6f4751a2fe741b990
Sha1:   86cd1428b2fd21ccb9d80c7f6be4d1e6221e97ef
Sha256: bfe88cb97ccec5af627853d0bbc02f4799c4b8a25a995c8578365cb5a2914d6a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3236488e-3e39-44b6-b864-0f7ede8ee3f5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9376
x-amzn-requestid: bf2f33a6-7f13-4f5b-ba9c-da33282135b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctERHFRSoAMFgYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb406-121af6ba1b7b6a3066ffa103;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:16:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: yTLFIBUWHjudn2h6VKM79RUnXfuUTmQBkYSCFrRuY7_biVW5bEKZfA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 17:39:05 GMT
age: 47919
etag: "e9106fec14ddda290951c61eda64a69ada9a244a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9376
Md5:    3cbac0c7e45d3f33c38dbf3af4de05ba
Sha1:   e9106fec14ddda290951c61eda64a69ada9a244a
Sha256: 98d3785eb167ea6bbba3782ab3cfd8cc9c7715f493265ac6d59494c00d3b002e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d5b6cef-6b79-466f-a8bf-5f3864c9b0e7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11464
x-amzn-requestid: 04d9e95d-563e-4258-934e-add82f95a638
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGysEDmIAMFSIQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851aa-426e37fb562dc25b3449311b;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RspslnJzOcAHAL--VTgFJkFxb1PvLM6OHJmJUsdOKocI5ZPmJSLdoA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 07:16:43 GMT
age: 85261
etag: "05ba0fab4533b9837dd8558ffa5eb168e974d2b3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11464
Md5:    c9f7b9c77a99173619ee85d0cfa8e2f8
Sha1:   05ba0fab4533b9837dd8558ffa5eb168e974d2b3
Sha256: 17184aca15041d2770fe14397fc0ab87e5f8e9f910b557031ba7fbf1349b0b9c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:33:19 GMT
age: 26665
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8659
Md5:    b87d6543345f73653ed4a49b37d7c959
Sha1:   c4f26846b8b72293368ff16915d49297cf12bbb9
Sha256: aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2019d3bc-b4a4-4afc-ad84-3ab33b8036ec.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10861
x-amzn-requestid: ad568a35-9eba-4c6d-a09d-97e518fbf503
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4gIFN4oAMFqrw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6391079a-434ca8281e48538e69e72e05;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:37:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4MrxT27cyrFqR70ofprhh4FbJAfVpKb787jT3TsH0l7BxQOf2tWh6g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 21:51:32 GMT
age: 32772
etag: "2cad45ad8e56699db3457501cf1e488fe85d479a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10861
Md5:    fbdf939d23b987fd36a86b7a1258b10d
Sha1:   2cad45ad8e56699db3457501cf1e488fe85d479a
Sha256: 285a8a3d3ec439f493ca5d586477c3e3ed3b9e5d7a0133da73c426b69e112cb1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 708
Cache-Control: max-age=166146
Date: Thu, 08 Dec 2022 06:57:44 GMT
Etag: "63916e26-116"
Expires: Sat, 10 Dec 2022 05:06:50 GMT
Last-Modified: Thu, 08 Dec 2022 04:55:02 GMT
Server: ECS (amb/6B71)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /keen-tracking-1.0.3.min.js HTTP/1.1 
Host: d26b395fwzu5fz.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.245.147
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 8994
Connection: keep-alive
Date: Sun, 11 Sep 2022 05:10:09 GMT
Last-Modified: Thu, 31 Mar 2016 04:24:33 GMT
ETag: "a6acb97120359c326c8f7775a5514f5d"
Cache-Control: max-age=31536000000, public
Content-Encoding: gzip
Expires: Fri, 31 Mar 2017 04:24:29 GMT
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 97z9mcLeI67tnmfSzYS6piylasOzzJ8bArzhNWbgyY7Rk93RSkg-ew==
Age: 7609656


--- Additional Info ---
Magic:  ASCII text, with very long lines (20564)
Size:   8994
Md5:    a6acb97120359c326c8f7775a5514f5d
Sha1:   db0ba6a113b2bf753933f2b5d3451e55d7184c2d
Sha256: bc1391ed0a7a70a24988c0464202bcf2f8f1a5f4d1465c8d5552471b13b90fba
                                        
                                            GET /552.2d6a2503-1220.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                        
x-amz-id-2: PnZFPtaQ6Oa8SvsR598yLCynwQMleyjLyE8+/6kXxv1ZfRit6gnSEEKUHnQ2vqYi8syHn+Nxcq4=
x-amz-request-id: XM6WHM0J4M8X38WQ
last-modified: Wed, 05 Oct 2022 14:53:43 GMT
etag: "777ac0df4dba632ad1b2955c88dd51ac"
x-amz-version-id: 7EjqUQ3uiXAFqO0VnIOp2ymSTJq3JZwD
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 08 Dec 2022 06:57:45 GMT
via: 1.1 varnish
x-served-by: cache-bma1661-BMA
x-cache: HIT
x-cache-hits: 2351
x-timer: S1670482665.051505,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 5890
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21423)
Size:   5890
Md5:    097ef34c5f5d635a147bca3721bd605b
Sha1:   3b31ef3cfb1d62d9884d631ec2467b9d6b0d46e2
Sha256: 3e05d4e42c1e87b516b525574b20d2570dccc50d1bd1b2956d6421699aa19914
                                        
                                            POST /cdn-cgi/rum? HTTP/1.1 
Host: hpctzpfg.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 8239
Origin: https://hpctzpfg.clickfunnels.com
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/optin1670391977703
Cookie: __cf_bm=maufTKbfTPIK1FNh6LaHqaIJzSDEiOVQRUGmdecIVpA-1670482663-0-AYhPKzYGPM08x3yW1IYY74WKzacBGLMsNtktknuuoKzzs3X9Yfz7jkCI02A0WggeObA+sW8Z5OfbsFt5RCgxQ9IrBXicmz2N2i61iDr4PxY2; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTc0NTI4MzQ=:visited=true; cf:visitor_id=bc5d551a-d470-43e6-8944-a5a3997fccdb; addevent_track_cookie=ae2bb9ae-0477-4a34-991b-68fedfda12d2; cf_survey_participant_57452834=participant_mkm1v
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.16.16.194
HTTP/2 204 No Content
                                        
date: Thu, 08 Dec 2022 06:57:45 GMT
access-control-allow-origin: https://hpctzpfg.clickfunnels.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 77639bd11d48fab8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            GET /releases/v5.9.0/css/all.css HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.64.133.15
HTTP/2 200 OK
content-type: text/css
                                        
date: Thu, 08 Dec 2022 06:57:44 GMT
x-amz-id-2: cIB7RJR8YNkOt3c5odVNIsPWGanLxokh1zS2YvTVv7QSgKdKXNOroM5eyN2MvPjoE855Z9I1sPM=
x-amz-request-id: BCPBKD6BGPB27GGJ
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"dbf9d822cefe851ba6f66e1ad57e8987"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 1014356
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jygeyPPkVjeAou3AD0w6Dg2rtiWwdRqEtvJx%2B3C%2BdhQ8QKb5Is%2FkQ%2BP%2FaaxpRYNQf8msO%2BhTm4wOnJVVuk64VKWLSeRYsXAtbHgAOyJdsUiUkmeYZ1sHXKFo3Xj9KCJ9%2B4vrUV9R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77639bcad9de0052-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (55782)
Size:   15620
Md5:    79db4cca493b001fbdc50bf3730c9aca
Sha1:   2a3323a3b0794772e36b8357cbe3cb73c1478864
Sha256: 914ca3076ae3b4d453c6c126dbeeb1d1c25ea5427a96ce8f53b9b50a9855c666
                                        
                                            GET /userevents/?funnel_id=b3lqOXZrMkk4WWc1UHRwUUhJdHZzQT09LS10dmhqcmducjNsMWszOGNOTC9MQnRRPT0%3D--de13995a426b9df684890d2b782b365a042edf7a&page_id=TUgwUzdFajZVTSszNG56bFNvU1FHdz09LS1mTmg2NllBSENqNG1BbEVGVWJUUWdRPT0%3D--b17ac0f8dcd25078de2cdc20a77d3bcd4a81a89e&funnel_step_id=UXFBbXE0VEhINjVTb3QvNEFxV29DUT09LS1WSjVYbjBFVC9sRVdIdlk0di9kZXF3PT0%3D--f445cc9822ab0d0515e750db952c38bc8c772e31&user_id=MDQ4dFNJU1hobnpMajZ4OHB2OG5xUT09LS1aUXQ1eUFpQktqSm9zeFVqT1UxSXRnPT0%3D--40c20b1310ee39e4bca1a22870b576908d7f0f90&account_id=WWV2cUozOXpDMnluNGVZK3FsRm1Sdz09LS1PZERkQlF0ZDNaQU43SnhFcy9qQnpBPT0%3D--39bfbc8b48fe5984e27eb6652e528fcfdc877cc2&page_code=NTc0NTI4MzQ%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1280&type=Userevents::UniquePageviewsCreatedSummary&nonce=a139c4fc-cc85-4778-8e9f-c53fce3d2991&url=https%3A%2F%2Fhpctzpfg.clickfunnels.com%2Foptin1670391977703 HTTP/1.1 
Host: app.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hpctzpfg.clickfunnels.com
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.16.194
HTTP/2 202 Accepted
content-type: text/html
                                        
date: Thu, 08 Dec 2022 06:57:44 GMT
cf-ray: 77639bcdcbc5fab8-OSL
access-control-allow-origin: *
cache-control: no-cache, no-store
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-request-method: *
pragma: no-cache
status: 202 Accepted
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: miss
x-request-id: 9045d417c2905f8aadab8b5011c484a8
x-runtime: 0.043200
set-cookie: __cf_bm=EGJl9gELw1lHbLsrmHf1LpQRbHannQ7ckDpAx6zaJ4M-1670482664-0-ASysDWucI2auH/PWGiNTCxBbty67ZJlBdUsFXEoK+Ql4OAvbZwv4yvirem8fm253HdGmBu1XscSap3OAA2DImVpjyIhhOzQbS+5BT+PncLnY; path=/; expires=Thu, 08-Dec-22 07:27:44 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   2225
Md5:    98a96a3306b7723c0b8c4bff074cdd9f
Sha1:   e9070da7daa34fa2d8ac2e4ec00e3c499ea37516
Sha256: a6079d50fa4c72b521fd865e67be080b5b21c336a71dbf7a1800a12ad42384f7
                                        
                                            GET /368.2d6a2503-1220.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                        
x-amz-id-2: GUwozRedGseijuU5ypA/WbbnDIf/u5E5/2u5+kb3ugz/wj5jQhWm8oFz9CQSV79o7P1yeeJAp+M=
x-amz-request-id: K9T2FMDPRF0ZCE4Q
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "16b4f3676c3859e1378a2ccdebbad675"
x-amz-version-id: zC.KoTaM7bjdFj.W4KQMilxtjXXSNPks
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 08 Dec 2022 06:57:45 GMT
via: 1.1 varnish
x-served-by: cache-bma1661-BMA
x-cache: HIT
x-cache-hits: 2345
x-timer: S1670482665.352001,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1443
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3382)
Size:   1443
Md5:    fa50a55750d1d0978fca32be5dbc3988
Sha1:   a7f447621d48b3ecf7fc0192b515d506d3d1ad18
Sha256: c621038fb07e536af8a1ec6d260853dfe69055dc2fb526700919c53b3b7e5f20
                                        
                                            GET /775.2d6a2503-1220.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.130.137
HTTP/2 200 OK
content-type: application/javascript
                                        
x-amz-id-2: 7LFMHtjJh1S3I7Y2nadjyW3qD5GSEUAPkhvRiGWUqI2yNIsj2jxS1WztietgESJCTo8b+MSjBS8=
x-amz-request-id: XM6WXR7ZNKJZ7WDR
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "1dfdb74c0491489bf04c6deadb56add2"
x-amz-version-id: y1AQ2bnjUbwuFOuSS5MP1vew1dGw.1iz
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 08 Dec 2022 06:57:45 GMT
via: 1.1 varnish
x-served-by: cache-bma1661-BMA
x-cache: HIT
x-cache-hits: 150
x-timer: S1670482665.352406,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 632
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1169)
Size:   632
Md5:    661520fd0dfebb919d68a69b60ca426f
Sha1:   b85ef80a0e0d95bf4904f9ce4fad56c49ae035be
Sha256: ecd489671c6255fee8370fc1f8f4e99519ef8d4c4c0ab06640b0c021642e1db7
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www2.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Cookie: __cf_bm=maufTKbfTPIK1FNh6LaHqaIJzSDEiOVQRUGmdecIVpA-1670482663-0-AYhPKzYGPM08x3yW1IYY74WKzacBGLMsNtktknuuoKzzs3X9Yfz7jkCI02A0WggeObA+sW8Z5OfbsFt5RCgxQ9IrBXicmz2N2i61iDr4PxY2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.16.194
HTTP/2 200 OK
content-type: image/x-icon
                                        
date: Thu, 08 Dec 2022 06:57:45 GMT
cf-ray: 77639bd04ceafab8-OSL
access-control-allow-origin: *
age: 5758
etag: W/"637bf173-3aee"
last-modified: Mon, 21 Nov 2022 21:45:23 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=tNm7_kAAqCFCdhqmyXz673ikP747nVTt2Fu2IBD5bmY-1670482665-0-AS0HFbLTbmQ3TjlYMeV5ImZk3upIPeV8A8gJhOo8yR1-h8XNhFfFV4Dyrlt4GWaR42n4vctJb6glTNf5P62vv9CDEKbhPszNrONUcGVPefO3"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=tNm7_kAAqCFCdhqmyXz673ikP747nVTt2Fu2IBD5bmY-1670482665-0-AS0HFbLTbmQ3TjlYMeV5ImZk3upIPeV8A8gJhOo8yR1-h8XNhFfFV4Dyrlt4GWaR42n4vctJb6glTNf5P62vv9CDEKbhPszNrONUcGVPefO3; report-to cf-csp-endpoint
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size:   2716
Md5:    fafd2a2ba061fbd6612ed8ccc5e45676
Sha1:   9dae7800606788efba23541fcebcbace2bea935e
Sha256: 3ad1973a9787c43dc0c5c037e1280564940e9cd005ba199d3f70b60eb424769e
                                        
                                            GET /1/NRJS-fc902efb332119fff33?a=367981416&v=1220.PROD&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=3180&ck=0&s=f7ce96f8c1b196d0&ref=https://hpctzpfg.clickfunnels.com/optin1670391977703&ap=448&be=1507&fe=1102&dc=696&perf=%7B%22timing%22:%7B%22of%22:1670482661824,%22n%22:0,%22f%22:1242,%22dn%22:1244,%22dne%22:1273,%22c%22:1274,%22s%22:1276,%22ce%22:1304,%22rq%22:1305,%22rp%22:1482,%22rpe%22:1482,%22dl%22:1491,%22di%22:2182,%22ds%22:2203,%22de%22:2297,%22dc%22:2608,%22l%22:2608,%22le%22:2723%7D,%22navigation%22:%7B%7D%7D&fcp=2195&jsonp=NREUM.setToken HTTP/1.1 
Host: bam.nr-data.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         162.247.241.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 77639bd499f40b51-OSL
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   77
Md5:    f1442f5831dbbe0210da2d7a4180d6b8
Sha1:   2ade23c6c7a001c66f0c0a9a101ec152747b434e
Sha256: c6acf9fb2ecc1b144c51bd0337bbf1c26db3df2f649ac2da5c56db20d93eb3ef
                                        
                                            GET /Ae/emirates/info2022/STATU/dash/SF/Panel/Checkout HTTP/1.1 
Host: emiratespost.dynv6.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         104.168.214.87
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Thu, 08 Dec 2022 06:57:45 GMT
content-length: 162
location: https://emiratespost.dynv6.net/Ae/emirates/info2022/STATU/dash/SF/Panel/Checkout/
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Alerts:
  urlquery:
    - Suspicious - DynDNS domain
                                        
                                            GET /assets/pushcrew.js HTTP/1.1 
Host: app.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Cookie: __cf_bm=maufTKbfTPIK1FNh6LaHqaIJzSDEiOVQRUGmdecIVpA-1670482663-0-AYhPKzYGPM08x3yW1IYY74WKzacBGLMsNtktknuuoKzzs3X9Yfz7jkCI02A0WggeObA+sW8Z5OfbsFt5RCgxQ9IrBXicmz2N2i61iDr4PxY2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         104.16.16.194
HTTP/2 200 OK
content-type: application/x-javascript
                                        
date: Thu, 08 Dec 2022 06:57:44 GMT
cf-ray: 77639bc9fa4bfab8-OSL
access-control-allow-origin: *
age: 39
cache-control: public, max-age=1200
etag: W/"637bf172-27d"
expires: Thu, 08 Dec 2022 07:17:44 GMT
last-modified: Mon, 21 Nov 2022 21:45:22 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (637), with no line terminators
Size:   347
Md5:    0c500871c6a4702c7637750991a447e1
Sha1:   28944a4263072eeca3770d0eda48d56a7c6a06d7
Sha256: ab247c5f3e8445ab74d4e4fcb235a3d989f864be4f52de8d68309115e8bc6864
                                        
                                            POST /jserrors/1/NRJS-fc902efb332119fff33?a=367981416&v=1220.PROD&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=4508&ck=0&s=f7ce96f8c1b196d0&ref=https://hpctzpfg.clickfunnels.com/optin1670391977703 HTTP/1.1 
Host: bam.nr-data.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 145
Origin: https://hpctzpfg.clickfunnels.com
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         162.247.241.14
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 08 Dec 2022 06:57:47 GMT
Content-Length: 24
Connection: keep-alive
CF-Ray: 77639be029df0b51-OSL
Access-Control-Allow-Origin: https://hpctzpfg.clickfunnels.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Vary: Accept-Encoding
Server: cloudflare


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   24
Md5:    bc32ed98d624acb4008f986349a20d26
Sha1:   2d3df8c11d2168ce2c27e0937421d11d85016361
Sha256: 0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
                                        
                                            POST /events/1/NRJS-fc902efb332119fff33?a=367981416&v=1220.PROD&to=dFZWTENWVQ9QExdNRlJLSFlWXEpMRQBfXUYYSU1aXVBKC1AF&rst=4509&ck=0&s=f7ce96f8c1b196d0&ref=https://hpctzpfg.clickfunnels.com/optin1670391977703 HTTP/1.1 
Host: bam.nr-data.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 62
Origin: https://hpctzpfg.clickfunnels.com
Connection: keep-alive
Referer: https://hpctzpfg.clickfunnels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         162.247.241.14
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 08 Dec 2022 06:57:48 GMT
Content-Length: 24
Connection: keep-alive
CF-Ray: 77639be02c42b4fd-OSL
Access-Control-Allow-Origin: https://hpctzpfg.clickfunnels.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Vary: Accept-Encoding
Server: cloudflare


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   24
Md5:    bc32ed98d624acb4008f986349a20d26
Sha1:   2d3df8c11d2168ce2c27e0937421d11d85016361
Sha256: 0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
                                        
                                            GET /button/st_insights.js?publisher=eba0f3ba-f9ab-408c-bc68-c28af5afe749&product=feather HTTP/1.1 
Host: w.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         54.230.111.56
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: CloudFront
Date: Thu, 08 Dec 2022 06:57:48 GMT
Content-Length: 167
Connection: keep-alive
Location: https://w.sharethis.com/button/st_insights.js?publisher=eba0f3ba-f9ab-408c-bc68-c28af5afe749&product=feather
X-Cache: Redirect from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2a2WKbDhOvdNoSTZqQbZLUn_2iMOArj6Y7KS3ngTosG1RAMMBZbzlA==


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   167
Md5:    f5d40b7259645010f9a248858ad14178
Sha1:   b3051d17a6ec8c9e166bf09a62b48261ab86957b
Sha256: 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 06:57:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /button/st_insights.js?publisher=eba0f3ba-f9ab-408c-bc68-c28af5afe749&product=feather HTTP/1.1 
Host: w.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://playfmradio.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.56
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 7903
content-encoding: gzip
server: nginx/1.20.1
x-robots-tag: noindex, nofollow
cache-control: max-age=259200
date: Wed, 07 Dec 2022 16:18:22 GMT
expires: Sat, 10 Dec 2022 16:18:22 GMT
etag: W/"634f185a-6a64"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WWQzN6Lmry6GJpIxPiiAkcDzBzqE0wsLdQIlvMXx3qdMOuH6pf_Bpw==
age: 52766
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (27236), with no line terminators
Size:   7903
Md5:    990365ccdf4eebf164214f992d8ddfbc
Sha1:   b485f83e096515d93dfec5d8dc420d571ef06254
Sha256: 947238672d5912dffc77bde8e413752ecd69e6062c68c09ae20274b55f37ffdd
                                        
                                            GET /maps/api/js?ver=5.2.17 HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playfmradio.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.217.21.170
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
date: Thu, 08 Dec 2022 06:57:48 GMT
expires: Thu, 08 Dec 2022 07:27:48 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 53544
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=12
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2590)
Size:   53544
Md5:    0b5ec08ec277ab800b167cb8014eca34
Sha1:   5124f087f1a76f1230b3fc384c16856c6f73dada
Sha256: ca037feee0111878920789ad17c57de6e50d3dade613de257082ac46ac2cae6f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 06:57:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 06:57:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 08 Dec 2022 06:57:47 GMT
Server: Apache
X-Powered-By: PHP/7.4.25
Link: <http://playfmradio.com/wp-json/>; rel="https://api.w.org/", <http://playfmradio.com/>; rel=shortlink
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 26387
Keep-Alive: timeout=10, max=200


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1870), with CRLF, LF line terminators
Size:   26387
Md5:    58d66d2fbb7485aa05d4217f09406142
Sha1:   fdb4bb97f6ea3ace5273f35dc2a94a338e24c43f
Sha256: 4ed70d342287ef1dbcb328c6cb40708b69b3428c4c41de9a5b338c4ac763eb7d

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /jsapi?ver=5.2.17 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playfmradio.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.132
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                        
location: https://www.gstatic.com/charts/loader.js?ver=5.2.17
x-content-type-options: nosniff
server: sffe
content-length: 248
x-xss-protection: 0
date: Thu, 08 Dec 2022 06:53:19 GMT
expires: Thu, 08 Dec 2022 07:23:19 GMT
cache-control: public, max-age=1800
age: 269
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size:   248
Md5:    a3489472c936d677eb9e469df8a34472
Sha1:   df330f3ec7e7fec9ebc35bca1a0e0b313eb00db1
Sha256: d7c8775d3b3e8a48e273cbcafae52bd993572f76518b952033b6a6a32293592a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 06:57:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.7 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:48 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 30 Nov 2021 00:21:29 GMT
ETag: "41b7-5d1f689e934ce-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2836
Keep-Alive: timeout=10, max=200


--- Additional Info ---
Magic:  ASCII text, with very long lines (16823), with no line terminators
Size:   2836
Md5:    10d5dabc995473322055955c8cdc016a
Sha1:   919778ce81e9570059fa511c1ee69246377b7f29
Sha256: 573fbda2062b26ee19b676717043aad9be95f52cae95d48ed521355f5a300eab

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 06:57:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 06:57:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /charts/loader.js?ver=5.2.17 HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://playfmradio.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.99
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
access-control-allow-credentials: true
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gviz
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gviz"
report-to: {"group":"gviz","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gviz"}]}
content-length: 19937
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 06:46:57 GMT
expires: Thu, 08 Dec 2022 07:46:57 GMT
cache-control: public, max-age=3600
last-modified: Wed, 23 Jun 2021 18:41:30 GMT
age: 651
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2134)
Size:   19937
Md5:    f3341efa0432876b1697ccec98c33b01
Sha1:   55044e79afbe25d119b7b87dc7b5d1b3ec0c607a
Sha256: 6672904faeb4f203e0109279aa99d88f9e8690d2d696d80309ef50a974f88c77
                                        
                                            GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/font-awesome.min.css?ver=5.4.5 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:48 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 02:02:48 GMT
ETag: "78cb-5877972b10b5e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7073
Keep-Alive: timeout=10, max=199
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (30761)
Size:   7073
Md5:    a2b81218886e6bdb0760a05ba780e805
Sha1:   88b93d8dcc24adb742464dd5fdbfd3b854966db4
Sha256: 3263fecc2874b0b4a86fedb5d9fb8b36913c1736be59b62de51c041c501b68cf

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/wordpress-popular-posts/assets/css/wpp.css?ver=5.5.0 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:48 GMT
Server: Apache
Last-Modified: Tue, 30 Nov 2021 00:21:35 GMT
ETag: "688-5d1f68a4356d6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 570
Keep-Alive: timeout=10, max=199
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   570
Md5:    98850c9586be35bb6543abd8becdc5ee
Sha1:   5ef32afcf3f6b50f4813a74bebac2f76fd02d3b0
Sha256: d2252f686e36e0aa1b08f4430b450b32f5c5271858c22073d5178085c90bf6ce

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/qt-swipebox/swipebox/css/swipebox.min.css?ver=5.2.17 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:48 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 27 Apr 2019 02:21:58 GMT
ETag: "10a1-58779b738fea4-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1215
Keep-Alive: timeout=10, max=200


--- Additional Info ---
Magic:  ASCII text, with very long lines (4257), with no line terminators
Size:   1215
Md5:    b3604904b5c83c4af70d945dd7cb1599
Sha1:   df3af4aeca0725ba44dd58c37d4733b20e6cd86a
Sha256: 15ce19df510df91e7277034e484c8e09e5ffedd7f4d4b22141d652b2cb2eb223

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/qt-videogalleries/assets/style.css?ver=5.2.17 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:48 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 27 Apr 2019 02:22:29 GMT
ETag: "d30-58779b91b3d55-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1107
Keep-Alive: timeout=10, max=200


--- Additional Info ---
Magic:  ASCII text
Size:   1107
Md5:    136d1bcd85cf7335b41b6eb4ad8cf2c7
Sha1:   d1e7684ff98a1326ecfb9eef395e6e1d9e99cdd7
Sha256: 88c8ffcdeb4ef4be7936232133a94eaeb5c20ac87eaebe7c5c068a5e81eba02c

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/onair2/fonts/dripicons/webfont.css?ver=2.3.1 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:48 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 27 Apr 2019 04:31:21 GMT
ETag: "2b5b-5877b85f064f6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1953
Keep-Alive: timeout=10, max=200


--- Additional Info ---
Magic:  ASCII text
Size:   1953
Md5:    a74085359e96982b3b2bbcab42b64056
Sha1:   0b04f7b3303e30ba40bda5b16d5e1124e2e2f38e
Sha256: 66e2a5b0264ca9ebfaff63375cc48f03b8b6e4b931128d4a185042990d86e0ca

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/onair2/fonts/qticons/qticons.css?ver=2.3.1 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:48 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 27 Apr 2019 04:31:37 GMT
ETag: "1ebc-5877b86e9cf55-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1594
Keep-Alive: timeout=10, max=200


--- Additional Info ---
Magic:  ASCII text, with very long lines (327)
Size:   1594
Md5:    5823eddbcb9652ac656f1e70aa9abcbc
Sha1:   94fa67116481c904770faa5c0e119e37172adeff
Sha256: 0e4ef420b03fb6ba12dffbd7d4126320a3f5c10c7d5fa53d2eeb41ed0f56fbf8

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 08 Dec 2022 06:57:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/onair2/components/slick/slick.css?ver=2.3.1 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 04:29:44 GMT
ETag: "6c1-5877b802a5951-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 557
Keep-Alive: timeout=10, max=198
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   557
Md5:    d0e230b935d3f17f3b2ae2c38a6a6d8f
Sha1:   b9f29063a70a9599a89bcb497d833fc758ad63ba
Sha256: 0c38f4e97078d023aeb69238adae19262e7054147463bfe180b00fa7d85a0b7c

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/onair2/components/swipebox/src/css/swipebox.min.css?ver=2.3.1 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 04:31:00 GMT
ETag: "10d4-5877b84b42d5a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1221
Keep-Alive: timeout=10, max=198
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (4308), with no line terminators
Size:   1221
Md5:    d83aedf99d3bdc9fde5de1753c320ba1
Sha1:   e5d7c90b4b921e368ffc6d2cbfae2264b5b4f9fa
Sha256: bfed8658f870445ed0f6f46340b6047657f8e5fd249f6b1f07c4dac36bf84e7d

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/onair2/components/countdown/css/jquery.classycountdown.css?ver=2.3.1 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 04:28:57 GMT
ETag: "204-5877b7d5a123c-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 311
Keep-Alive: timeout=10, max=199
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   311
Md5:    9b9c6d8df82669ce83796020788c2c45
Sha1:   3fe814c90c157ad5db096d2018742503638bce87
Sha256: afb30f14ab078e7f78a18bff64a61756de61348b8366f0dd81581710e0fe73b3

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/onair2/components/soundmanager/templates/qtradio-player/css/flashblock.css?ver=2.3.1 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 04:30:31 GMT
ETag: "53f-5877b82fe1eea-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 511
Keep-Alive: timeout=10, max=199
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   511
Md5:    93d06b9b86e7feaa3fefd1eacf77df67
Sha1:   0b16143ad83ac1bbf986d757c2aed6303f710035
Sha256: 9e52ac71205f1704ad789e7d5e919cffc13bec17c600e85af83def55c6c4d194

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/onair2/components/soundmanager/templates/qtradio-player/css/qt-360player-volume.css?ver=2.3.1 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 04:30:32 GMT
ETag: "2190-5877b8307eaae-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2220
Keep-Alive: timeout=10, max=199
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   2220
Md5:    30818be73d550adfeb98e1a75483ad41
Sha1:   51e6743c72ae5959729b7c6ed9b110ff9a6a71d0
Sha256: eb96afd4921eaff4a68ead119e51f53464096d85081bb36a6bcf3fd2207bd534

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/ttg-core/inc/backend/kirki/assets/css/kirki-styles.css HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 02:28:53 GMT
ETag: "0-58779cff1ac94"
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=10, max=197
Connection: Keep-Alive


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Mon, 06 Dec 2021 18:02:12 GMT
ETag: "2748-5d27e0e5ce9ed-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4014
Keep-Alive: timeout=10, max=198
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (9959)
Size:   4014
Md5:    a6c81e2f02bd04160d2de88c4e8f3559
Sha1:   e3f3c91427d785820ca97dabe738f01faf041f36
Sha256: b734d83af5da0eb627e04d3e62ce652b9eb7de19667a1b91da6b93f0ea5d7ffe

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/wordpress-popular-posts/assets/js/wpp.min.js?ver=5.5.0 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Tue, 30 Nov 2021 00:21:35 GMT
ETag: "bc3-5d1f68a435ea6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1375
Keep-Alive: timeout=10, max=198
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (566), with CRLF line terminators
Size:   1375
Md5:    16d47ec5e87fe75cab115fe4e2b90df1
Sha1:   e75774f529c31adeb1c96ce614e5cb58623d52dd
Sha256: c0cda9c2049423330c8ae2fd7e144b558855d50a7ba92c06b967f76cc64f67d2

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/onair2/components/soundmanager/templates/qtradio-player/css/flashblock.css HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/wp-content/themes/onair2/components/soundmanager/templates/qtradio-player/css/qt-360player-volume.css?ver=2.3.1

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 27 Apr 2019 04:30:31 GMT
ETag: "53f-5877b82fe1eea-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 511
Keep-Alive: timeout=10, max=200


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   511
Md5:    93d06b9b86e7feaa3fefd1eacf77df67
Sha1:   0b16143ad83ac1bbf986d757c2aed6303f710035
Sha256: 9e52ac71205f1704ad789e7d5e919cffc13bec17c600e85af83def55c6c4d194

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/onair2/css/qt-main.css?ver=2.3.1 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 04:31:07 GMT
ETag: "274e4-5877b852015d5-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 25880
Keep-Alive: timeout=10, max=199
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (64878)
Size:   25880
Md5:    36e6969fc9465ed203e986c14c9b37a2
Sha1:   d815a1062a2369c4f9b848deb24fddcc806da4df
Sha256: 4b63540c558424d6f94d7941510a1b0a1f71ae198546835f2b14d8ea15e5678a

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Mon, 06 Dec 2021 18:02:13 GMT
ETag: "17a69-5d27e0e68fbbe-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 33776
Keep-Alive: timeout=10, max=198
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (31997)
Size:   33776
Md5:    acf54950dfb2d6981e941d733b377591
Sha1:   340de686aecd9e6246a32c71e7de63ed69229ceb
Sha256: d97f66caea5260bc71609f0da43ac0d937ecc09253910e5dda4c9fe4dbde20fc

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.3 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Tue, 30 Nov 2021 00:20:59 GMT
ETag: "aab-5d1f68826d0f6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 972
Keep-Alive: timeout=10, max=196
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   972
Md5:    8bf268dfcca7cb20719b7ea14373ef4a
Sha1:   58bd839bbf0e8cc082f0a488b538b4ec71bebd2e
Sha256: eece4a14939273c7af07bce8bab3a6cfc2c9de44c0eea82cc886abac13cb3870

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=5.2.17 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Mon, 06 Dec 2021 18:01:14 GMT
ETag: "7257-5d27e0af1ef9e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4788
Keep-Alive: timeout=10, max=197
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (29271), with no line terminators
Size:   4788
Md5:    dd7c1726a47a6a643915b33ff7d58ff1
Sha1:   af1eebb836aa766817ed21c3e35d2a3eb3e1aaba
Sha256: d45cf6975f3b7ec4e2f867d0e6f718b8950a0245132bda965240d0d49c7a2c65

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/qt-ajax-pageload/qt-apl-style.css?ver=5.2.17 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 02:18:59 GMT
ETag: "4e9-58779ac91faf1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 378
Keep-Alive: timeout=10, max=197
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   378
Md5:    a094aa2111f46533bb9a526b4abdd16e
Sha1:   82f4c8f39703c173e2c17c5b03e3d33031f39c50
Sha256: 676dcc9df7ad4a92da6950212b630ee416d7e9f6a382571b440aaed3e298beb7

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/qt-places/inc/frontend/assets/styles.css?ver=5.2.17 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 02:21:26 GMT
ETag: "3d69-58779b54f26ac-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2640
Keep-Alive: timeout=10, max=198
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   2640
Md5:    4be5c2880d9d908b4d335896394a764a
Sha1:   07bcf778219420bb361bcb588151fadcb6c3ce4e
Sha256: e3672b6f352721cfdbe168ebe8cf1a2928a6ddfe929667b1e620995d6fbc14ab

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.4.5 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 27 Apr 2019 00:46:38 GMT
ETag: "70d6e-58778624a4655-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 44917
Keep-Alive: timeout=10, max=200


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   44917
Md5:    29368eed220e9313fb3d3dcdcf9b78ae
Sha1:   936fbea6e2afe5bd013adeed18c3dbccdf1ff441
Sha256: e2bee47830e040ccdb71fedbe019d9487985fac8fb3e1db2d9f2b7118b182fb3

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.0.0 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Mon, 06 Dec 2021 18:02:09 GMT
ETag: "177c1-5d27e0e2b951e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 32867
Keep-Alive: timeout=10, max=197
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (31984), with LF, NEL line terminators
Size:   32867
Md5:    a674b30ef254c3111c2177f689486671
Sha1:   9e34db91ba98ee06705064808190bf71af9c464f
Sha256: 9e912b013a34e67f48036330b85eecef4a1cfcfeca558888aa67ebb58d51768f

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.3 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Tue, 30 Nov 2021 00:21:00 GMT
ETag: "2e56-5d1f688285b7d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3767
Keep-Alive: timeout=10, max=195
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (11862), with no line terminators
Size:   3767
Md5:    b0f435d6d85c051ac88e7f6a9c74e54c
Sha1:   adaceb8d3aebbddaabc3682d15cee190001026c9
Sha256: be851f49d88d7b1b7c276710608c0663600a36d968af0011ae68f7c766213abb

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/imagesloaded.min.js?ver=3.2.0 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Mon, 06 Dec 2021 18:02:10 GMT
ETag: "1fb1-5d27e0e40ceab-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2551
Keep-Alive: timeout=10, max=196
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (7996)
Size:   2551
Md5:    38b694df325f3d381d4d839d33cfb59c
Sha1:   82c4d20653dc93197b17e84a7b1274dac4f49588
Sha256: e220e69ff51b9e853e6206a7d3204c8129e175141f5dd4e93e67a72fefdaa3b5

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/masonry.min.js?ver=3.3.2 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Mon, 06 Dec 2021 18:02:19 GMT
ETag: "7119-5d27e0ecc590a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8524
Keep-Alive: timeout=10, max=196
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (28817)
Size:   8524
Md5:    e76ffbc29190aeddad010bc434d36230
Sha1:   5d0ca611203c41695823f1e05786eea71d7bb424
Sha256: 0c92502affb7302571dbf04db8aea83dace8c130dadfcbeed169f406e4c42f28

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/onair2/js/modernizr-2.8.3-respond-1.4.2.min.js?ver=2.8.3 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:49 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 04:32:54 GMT
ETag: "4e8a-5877b8b7e885f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8179
Keep-Alive: timeout=10, max=197
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (14856)
Size:   8179
Md5:    09a0d517f39c5f8de2f972d0f3d63227
Sha1:   10e81631c072c4fe540d0b8a415e8e6d316d90ce
Sha256: 337f3463f65fc67003b1f7299e81adf61d1cc4bdb556ac474278547c600eca33

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://playfmradio.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Dec 2022 18:52:41 GMT
expires: Tue, 05 Dec 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 216309
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size:   44856
Md5:    565ce506190ad3af920b40baf1794cec
Sha1:   ad3cba5d06100e09449a864d3b5e58403b478b3d
Sha256: 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://playfmradio.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:33:56 GMT
expires: Thu, 07 Dec 2023 19:33:56 GMT
cache-control: public, max-age=31536000
age: 41034
last-modified: Wed, 11 May 2022 19:24:45 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Size:   15920
Md5:    3a44e06eb954b96aa043227f3534189d
Sha1:   23cef6993ddb2b2979e8e7647fc3763694e2ba7d
Sha256: b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
                                        
                                            GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://playfmradio.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 15:42:33 GMT
expires: Wed, 06 Dec 2023 15:42:33 GMT
cache-control: public, max-age=31536000
age: 141317
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Size:   15700
Md5:    3d7f7413fca69bff4d231ebdc50aaab0
Sha1:   cb18e7943b6a8a0e3672d7242197c19a226b92e8
Sha256: 6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
                                        
                                            GET /wp-content/plugins/qt-ajax-pageload/js/min/qt-ajax-pageload-min.js?ver=1.0 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 02:18:51 GMT
ETag: "e54-58779ac14d47d-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1358
Keep-Alive: timeout=10, max=196
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (3668), with no line terminators
Size:   1358
Md5:    2426a321bdd90624104dc0b36f6879c5
Sha1:   3458ccdaff042f196af1c703dc613d93955c008a
Sha256: ff9425ab6e2a906706c338cdcf61a582f6557f4969979994e61795863979b816

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/qt-loveit/js/qt-loveit.js?ver=1.0 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 02:19:40 GMT
ETag: "41a-58779af084b2c-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 473
Keep-Alive: timeout=10, max=194
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   473
Md5:    81ac4563bccf50b9bfe33d6edb7c66fc
Sha1:   793c721b5369912c7065fc4b7fbde5e06d4abd8b
Sha256: b13f4c62fa7588d9ad5e7a89b4462d5a8954d56bdc30f847ff823e104b23e340

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/qt-places/inc/frontend/assets/min/script-min.js?ver=5.2.17 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 02:21:22 GMT
ETag: "43fa-58779b51b93cc-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4398
Keep-Alive: timeout=10, max=195
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (17402), with no line terminators
Size:   4398
Md5:    245760675bb0d496255bd1f8de6d3c76
Sha1:   a9e1032aeb25e5255a128bca646fc0441baacd1a
Sha256: 6cc726d10af8921ba371c64378af93cad8a85ce2e070379144bcebac0809e59a

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/qt-swipebox/swipebox/js/jquery.swipebox.min.js?ver=5.2.17 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 02:22:05 GMT
ETag: "3475-58779b7aacae7-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4163
Keep-Alive: timeout=10, max=195
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (12834)
Size:   4163
Md5:    4e90fb9390a7e6b548bf5d0b8deab729
Sha1:   783c8dce16227b1c1400d97172504b1a6e76ac72
Sha256: df76bd053deac4f3f3e9209aed317a1e5dc029b8c6a3ae8a86770a66cc243e04

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/qt-videogalleries/assets/jquery.quicksand.js?ver=1.0.0 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 02:22:24 GMT
ETag: "4a8f-58779b8c169ad-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4475
Keep-Alive: timeout=10, max=196
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   4475
Md5:    aed79da2a0e599de8500db788ed08ed6
Sha1:   45507fe70cfe38c2064850a676c77510430104b7
Sha256: 3b635aaa8cb682506cf5004f3be67bf4fa621f8e0ae4063010eff3356ca768d9

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/onair2/js/min/qt-main-min.js?ver=2.3.1 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 04:32:49 GMT
ETag: "59f6f-5877b8b2b01f6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=10, max=199
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines (32060), with CRLF, LF line terminators
Size:   99741
Md5:    76c493b9145e75dae9108a1b0f84154d
Sha1:   6be1d2273de14c0d8e4c9bca23beb1e259a723c5
Sha256: 117793059fc57725a2f2b881db3753c40a35a9a90d6d70fd8fe542f5cf487d5a

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/qt-videogalleries/assets/jquery.easing.1.3.js?ver=1.0.0 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 02:22:23 GMT
ETag: "1fa1-58779b8b2e2ff-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1986
Keep-Alive: timeout=10, max=195
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   1986
Md5:    a6759141afcbcf0a161171becbdb51f3
Sha1:   77e91d639ecf18d8bb76e4f40e3d53fe2b11f787
Sha256: 3299718703ddc77d79ca733312395b64bf49932ea9687cf40f48c88af1d78bf8

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/qt-videogalleries/assets/jquery-css-transform.js?ver=1.0.0 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 02:22:21 GMT
ETag: "100e-58779b8a26853-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1436
Keep-Alive: timeout=10, max=194
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1436
Md5:    7d45bf2f16c67ce78416e70330dcfdca
Sha1:   2ca77446447d7f69adcaa2f838e50755156a5465
Sha256: 2205a5ed9b32d63d2829fd5e32ae2f6bf4c492fc74df54262038ecf3e7149bca

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/qt-videogalleries/assets/jquery-animate-css-rotate-scale.js?ver=1.0.0 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 02:22:21 GMT
ETag: "1271-58779b8959723-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1734
Keep-Alive: timeout=10, max=195
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (945)
Size:   1734
Md5:    2d741dec4b36b328f1bed2b4fc717123
Sha1:   a9fea41e722d4b967b9f24c40ee72bc74d00fc7a
Sha256: 56905cef3edc21e3dbfe6984154c1d478a2f84633b4f032dc0f8d1a2223d62a8

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/onair2/fonts/dripicons/fonts/dripicons-v2.woff HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://playfmradio.com/wp-content/themes/onair2/fonts/dripicons/webfont.css?ver=2.3.1

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 27 Apr 2019 04:31:15 GMT
ETag: "6594-5877b859c3695"
Accept-Ranges: bytes
Content-Length: 26004
Keep-Alive: timeout=10, max=200


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 26004, version 1.0\012- data
Size:   26004
Md5:    11fc83ae11617015f2fcde2065fb34d3
Sha1:   1574a666ba4633923d4a0f22cf1daa04455a6079
Sha256: e87a09cef1a17d8c6a5a1b542521889f2f409262589d8d4fb1d9112c9e144bfb

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/qt-videogalleries/assets/vdl-main.js?ver=1.0.0 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 02:22:42 GMT
ETag: "f0b-58779b9da71a0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1428
Keep-Alive: timeout=10, max=198
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1428
Md5:    a7b608c818107aaa739d6486297f4820
Sha1:   738f09accbe93d4a44b0df8c68ed13585b999ac3
Sha256: 84de50dd6f6d5b5cb3e594328d68f9f52becbaf09867ad567dbc2c57e4795b79

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/wp-embed.min.js?ver=5.2.17 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Mon, 06 Dec 2021 18:02:50 GMT
ETag: "56f-5d27e10a97899-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 739
Keep-Alive: timeout=10, max=194
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1391), with no line terminators
Size:   739
Md5:    60d8829560031a011771efa2f39708af
Sha1:   a4689c3b70f773deb896eec78028e0902ef15097
Sha256: a0176bd4cc53bd2e920b0dfd10f56d2a4a3820d671539414ef4b3e2b3e50b9b7

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.4.5 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 01:09:14 GMT
ETag: "4d45-58778b321bd63-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5712
Keep-Alive: timeout=10, max=193
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (19781), with no line terminators
Size:   5712
Md5:    71d4a975deba5e39fd33961e72ca819b
Sha1:   42a59c27b10a93488444d23b36c3907341ff0c52
Sha256: 6740f99dcf4d84c7867b015dd5238c7feeb02ff64dc12619e61f7adeecbc5fb0

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=2.9.7 HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Tue, 30 Nov 2021 00:21:29 GMT
ETag: "6768-5d1f689e963ae-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7371
Keep-Alive: timeout=10, max=194
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (26472), with no line terminators
Size:   7371
Md5:    005047ebd6ae0819529761f6206c1f84
Sha1:   03cbe43b976f88a932367e0f9b8d4ffaa1e5c9cf
Sha256: f756acae9903b0ca4ee95af04f38feedf021f25f2d9203ac4a782030be78e4a8

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/onair2/fonts/qticons/qticons.woff HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://playfmradio.com/wp-content/themes/onair2/fonts/qticons/qticons.css?ver=2.3.1

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Sat, 27 Apr 2019 04:31:41 GMT
ETag: "5dac-5877b871c6c1e"
Accept-Ranges: bytes
Content-Length: 23980
Keep-Alive: timeout=10, max=199
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 23980, version 1.0\012- data
Size:   23980
Md5:    2715b6d31abf2fdac8eab6466d8aa5ba
Sha1:   2c72822f216c334f86125fab7ecb8d107004636c
Sha256: 736c5e5287342c7e28a9a38111d53b38b37e4ad9457622770467c6da5c2018bd

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2019/04/logo-app-170x170.png HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Fri, 27 Dec 2019 17:39:38 GMT
ETag: "1edf-59ab2fa5e3637"
Accept-Ranges: bytes
Content-Length: 7903
Keep-Alive: timeout=10, max=197
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 170 x 170, 8-bit/color RGBA, non-interlaced\012- data
Size:   7903
Md5:    795a5c8f2a0a89f9c31c9cff29a833eb
Sha1:   1f879ba5b8080542b5ab518af6383eb5e905b5a6
Sha256: b8894dc0165e70ca6f1db782b2abefb6f6e197a3044dae09b50b6f90ae2a6295

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2021/04/Recurso-2@2x.png HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Mon, 19 Apr 2021 19:11:00 GMT
ETag: "6826-5c0581712eb53"
Accept-Ranges: bytes
Content-Length: 26662
Keep-Alive: timeout=10, max=193
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 1125 x 562, 8-bit/color RGBA, non-interlaced\012- data
Size:   26662
Md5:    7b8be43bf22ddad969cc7fdedb758cdb
Sha1:   1daea62b188d1551b57e071356e80bfed7f89bb1
Sha256: 8193c81ce7b6134438b2641753afd7efc95c10729289cd2f7d0ea125b1725a3a
                                        
                                            GET /wp-content/uploads/wordpress-popular-posts/10861-featured-30x30.jpg HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Thu, 21 Nov 2019 04:59:27 GMT
ETag: "2c1-597d4296ee9d8"
Accept-Ranges: bytes
Content-Length: 705
Keep-Alive: timeout=10, max=192
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 30x30, components 3\012- data
Size:   705
Md5:    7c77f4cfd16379a63567487f9616465d
Sha1:   fb6aaae1b3555068cc9e4bcf0b0180c75fc66580
Sha256: 96da247abd338b0221ca958c9dc5b805eb1734f67140a5c66c64997c239753f8

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/wordpress-popular-posts/12599-featured-30x30.jpg HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 08 Dec 2022 06:57:50 GMT
Server: Apache
Last-Modified: Fri, 24 Jan 2020 19:40:28 GMT
ETag: "25b-59ce7ee0f01ef"
Accept-Ranges: bytes
Content-Length: 603
Keep-Alive: timeout=10, max=193
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 30x30, components 3\012- data
Size:   603
Md5:    ae60f1eaab8352d0ec2a293dd7b30c14
Sha1:   1c4b06dc424fd286d7d76918ae1b6e1f9bb17108
Sha256: 915bbaafd73ce43fe4647ce3a7f66083d1acc7e31189d51f024b1450b0fc4385

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /embed/0eKmO2U-HyE?html5=1 HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/
Upgrade-Insecure-Requests: 1

search
                                         216.58.207.206
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
                                        
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 08 Dec 2022 06:57:51 GMT
Location: https://www.youtube.com/embed/0eKmO2U-HyE?html5=1
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /embed/Hc_kwCGNhn0?html5=1 HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/
Upgrade-Insecure-Requests: 1

search
                                         216.58.207.206
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
                                        
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 08 Dec 2022 06:57:51 GMT
Location: https://www.youtube.com/embed/Hc_kwCGNhn0?html5=1
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /embed/LBBtSzBSzzo?html5=1 HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/
Upgrade-Insecure-Requests: 1

search
                                         216.58.207.206
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
                                        
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 08 Dec 2022 06:57:51 GMT
Location: https://www.youtube.com/embed/LBBtSzBSzzo?html5=1
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/wordpress-popular-posts/10210-featured-30x30.jpg HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 08 Dec 2022 06:57:51 GMT
Server: Apache
Last-Modified: Tue, 11 Jun 2019 04:53:42 GMT
ETag: "2fb-58b0514be317a"
Accept-Ranges: bytes
Content-Length: 763
Keep-Alive: timeout=10, max=198
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 30x30, components 3\012- data
Size:   763
Md5:    e4887cc14976ddc140617e2969fc47c8
Sha1:   e1b8d0f36f812ac5295fd83a4f95554d65638172
Sha256: 72c22ed365d5957b3edc274c63eb1f02e7a3fdcf56039a6097ffd67aeda24349

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /embed/4VaqA-5aQTM?html5=1 HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/
Upgrade-Insecure-Requests: 1

search
                                         216.58.207.206
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
                                        
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 08 Dec 2022 06:57:51 GMT
Location: https://www.youtube.com/embed/4VaqA-5aQTM?html5=1
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /embed/Th8w0u_bV6w?html5=1 HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/
Upgrade-Insecure-Requests: 1

search
                                         216.58.207.206
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
                                        
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 08 Dec 2022 06:57:51 GMT
Location: https://www.youtube.com/embed/Th8w0u_bV6w?html5=1
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/wordpress-popular-posts/13649-featured-30x30.jpeg HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/

search
                                         200.58.110.205
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 08 Dec 2022 06:57:51 GMT
Server: Apache
Last-Modified: Tue, 17 Nov 2020 01:56:10 GMT
ETag: "2ba-5b443cc7d26ae"
Accept-Ranges: bytes
Content-Length: 698
Keep-Alive: timeout=10, max=196
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 30x30, components 3\012- data
Size:   698
Md5:    d52f2c15f3d64357b1828b1fdbbfc792
Sha1:   ea0265706d14f423c79bad54c5dfa2a43e788627
Sha256: 166f0d383e98cb87dda527de6c1f76c2f3850ec98d540d8acfc68bf1049fe883

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /embed/pbvTRkDSTPQ?html5=1 HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/
Upgrade-Insecure-Requests: 1

search
                                         216.58.207.206
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
                                        
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 08 Dec 2022 06:57:51 GMT
Location: https://www.youtube.com/embed/pbvTRkDSTPQ?html5=1
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /embed/SuU0999Seaw?html5=1 HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playfmradio.com/
Upgrade-Insecure-Requests: 1

search
                                         216.58.207.206
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
                                        
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 08 Dec 2022 06:57:51 GMT
Location: https://www.youtube.com/embed/SuU0999Seaw?html5=1
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/wordpress-popular-posts/596-featured-30x30.jpg HTTP/1.1 
Host: playfmradio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101